Identity information management method, system, device and medium based on identification resolution

Abstract

The present disclosure provides an identity information management method, system, terminal device and computer-readable storage medium based on identity resolution, wherein the method includes: generating an identity authentication code based on the first identity information of a first user; encrypting the identity authentication code to obtain the encrypted identity authentication code and key information; and sending the encrypted identity authentication code and the key information to the first user, so that the first user can obtain the decrypted identity authentication code based on the encrypted identity authentication code and the key information, and the first identity information of the first user obtained based on the decrypted identity authentication code. The embodiment of the present disclosure uses the identity resolution technology to generate the identity authentication code and key information for the user, effectively ensuring the security of the user's identity information, so as to at least solve the problems of user identity information security and information authenticity in the user identity authentication process.

Description

Technical Field

[0001] The present disclosure relates to the field of communication technology, and in particular to an identity information management method based on identity resolution, an identity information management system based on identity resolution, a terminal device, and a computer-readable storage medium. Background Art

[0002] With the continuous development of communication technology, the leakage of personal identity information is becoming more and more serious in the Internet era. Once the user's identity information is leaked, it may be stolen or resold for profit by lawbreakers, causing damage to property and reputation. At present, the user's identity authentication method is mainly through verifying the user's ID card. When the user's ID card is lost or reported lost, some users can easily use the user's ID card to steal his or her identity information, resulting in illegal behavior and generating bad records for non-persons, causing the person to be unable to trace his or her illegal behavior and unable to maintain his or her legal responsibilities. Summary of the invention

[0003] The present disclosure provides an identity information management method, system, terminal device and computer-readable storage medium based on identification resolution, so as to at least solve the problems of user identity information security and information authenticity in the process of user identity authentication.

[0004] According to one aspect of an embodiment of the present disclosure, there is provided an identity information management method based on identity resolution, including:

[0005] generating an identity authentication code based on the first identity information of the first user;

[0006] Encrypting the identity authentication code to obtain an encrypted identity authentication code and key information; and,

[0007] The encrypted identity authentication code and the key information are sent to the first user, so that the first user can obtain the decrypted identity authentication code based on the encrypted identity authentication code and the key information, and the first identity information of the first user obtained based on the decrypted identity authentication code.

[0008] In one implementation, before generating the identity authentication code based on the first identity information of the first user, the method further includes:

[0009] Determining whether an identity authentication request of the first user is received;

[0010] If an identity authentication request from a first user is received, determining whether the second identity information of the first user exists in the blockchain;

[0011] If the second identity information of the first user exists, obtaining the second identity information of the first user from the blockchain; and obtaining the first identity information of the first user from the public platform;

[0012] The generating an identity authentication code based on the first identity information of the first user includes:

[0013] An identity authentication code is generated based on the first identity information of the first user and the second identity information of the first user.

[0014] In one embodiment, after determining whether the first identity information of the first user exists in the blockchain, the method further includes:

[0015] If the second identity information of the first user does not exist, obtaining the third identity information of the first user;

[0016] authenticating the third identity information of the first user; and, if the authentication is successful, obtaining the third identity information of the first user, and storing the third identity information of the first user in the blockchain;

[0017] The generating an identity authentication code based on the first identity information of the first user includes:

[0018] An identity authentication code is generated based on the first identity information of the first user and the third identity information of the first user.

[0019] In one embodiment, storing the third identity information in a blockchain includes:

[0020] The third identity information of the first user is packaged into a block and stored in the blockchain; and a block identifier for the block is generated.

[0021] In one implementation, the identity authentication code includes an identity authentication prefix and an identity authentication suffix, and the identity authentication prefix includes the block identifier.

[0022] In one embodiment, after sending the encrypted identity authentication code and the key information to the first user, the method further includes:

[0023] Determining whether an identity information query request of a second user is received;

[0024] If an identity information query request of the second user is received, determining whether the identity information query request carries the encrypted identity authentication code and the key information;

[0025] If the encrypted identity authentication code and the key information are carried, decrypting the encrypted identity authentication code based on the key information to obtain a decrypted identity authentication code; and,

[0026] performing identity resolution on the identity authentication code to obtain first identity information of the first user; and

[0027] The first identity information of the first user is returned to the second user.

[0028] According to another aspect of an embodiment of the present disclosure, an identity information management system based on identity resolution is provided, including:

[0029] A generating module configured to generate an identity authentication code based on the first identity information of the first user;

[0030] an encryption module, configured to encrypt the identity authentication code to obtain the encrypted identity authentication code and key information; and

[0031] a sending module configured to send the encrypted authentication code and the key information to the first user, so that the first user can obtain the decrypted authentication code based on the encrypted authentication code and the key information, as well as the first identity information of the first user obtained based on the decrypted authentication code.

[0032] In one embodiment, the system further comprises:

[0033] A first determination module, configured to determine whether an identity authentication request of a first user is received before the generation module generates the identity authentication code;

[0034] A second judgment module, which is configured to judge whether the second identity information of the first user exists in the blockchain when the first judgment module judges that an identity authentication request of the first user is received;

[0035] an acquisition module, configured to acquire the second identity information of the first user from the blockchain when the second determination module determines that the second identity information of the first user exists; and acquire the first identity information of the first user from the public platform;

[0036] The generating module is specifically configured to generate an identity authentication code based on the first identity information of the first user and the second identity information of the first user.

[0037] According to another aspect of an embodiment of the present disclosure, a terminal device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor runs the computer program stored in the memory, the processor executes the identity information management method based on identity resolution.

[0038] According to another aspect of an embodiment of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the processor executes the identity information management method based on identity resolution.

[0039] The technical solution provided by the embodiments of the present disclosure may have the following beneficial effects:

[0040] The identity information management method based on identification resolution provided by the embodiment of the present disclosure generates an identity authentication code based on the first identity information of the first user; encrypts the identity authentication code to obtain the encrypted identity authentication code and key information; and sends the encrypted identity authentication code and the key information to the first user. The embodiment of the present disclosure utilizes the identification resolution technology to generate a user identity authentication code and encrypts it and returns it to the user, and then completes the authentication based on the identity authentication code and the key to obtain the user identity information, effectively ensuring the security of the user identity information, so as to at least solve the problems of user identity information security and information authenticity in the process of user identity authentication.

[0041] Other features and advantages of the present disclosure will be described in the following description, and partly become apparent from the description, or be understood by practicing the present disclosure. The purpose and other advantages of the present disclosure can be realized and obtained by the structures particularly pointed out in the description, claims and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The accompanying drawings are used to provide further understanding of the technical solution of the present disclosure and constitute a part of the specification. Together with the embodiments of the present disclosure, they are used to explain the technical solution of the present disclosure and do not constitute a limitation on the technical solution of the present disclosure.

[0043] Figure 1 A flowchart of an identity information management method based on identity resolution provided in the first embodiment of the present disclosure;

[0044] Figure 2 A flowchart of an identity information management method based on identity resolution provided in the second embodiment of the present disclosure;

[0045] Figure 3 A flowchart of an identity information management method based on identity resolution provided in Embodiment 3 of the present disclosure;

[0046] Figure 4 for Figure 3 Schematic diagram of the process of step S303;

[0047] Figure 5 A flowchart of an identity information management method based on identity resolution provided in Embodiment 4 of the present disclosure;

[0048] Figure 6 A flowchart of an identity information management method based on identity resolution provided in Embodiment 5 of the present disclosure;

[0049] Figure 7 One of the structural diagrams of an identity information management system based on identity resolution provided by an embodiment of the present disclosure;

[0050] Figure 8 A second structural diagram of an identity information management system based on identity resolution provided by an embodiment of the present disclosure;

[0051] Fig. 9 A schematic diagram of identity authentication coding in an embodiment of the present disclosure;

[0052] Fig.10 A schematic diagram of the structure of a terminal device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0053] To make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the specific implementation of the present disclosure is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the present disclosure, and is not used to limit the present disclosure.

[0054] It should be noted that the terms "first", "second", etc. in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence; and, in the absence of conflict, the embodiments in the present disclosure and the features in the embodiments can be arbitrarily combined with each other.

[0055] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure. The singular forms of "a", "said" and "the" used in the embodiments of the present disclosure and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings.

[0056] In the subsequent description, the suffixes such as "module", "component" or "unit" used to represent elements are only used to facilitate the description of the present disclosure, and have no specific meanings. Therefore, "module", "component" or "unit" can be used in a mixed manner.

[0057] To solve the above problems, the disclosed embodiments utilize identification resolution technology and blockchain technology to uniquely identify user identity authentication information, utilize the identification resolution system to achieve unified identification coding, and realize automatic association of user information to facilitate information traceability, while utilizing the tamper-proof, open and transparent mechanism characteristics of blockchain to ensure the authenticity of product data.

[0058] Blockchain is a distributed ledger (database) technology that connects data blocks in an orderly manner and uses cryptography to ensure that they cannot be tampered with or forged. In layman's terms, blockchain technology can make all data information in the system open, transparent, tamper-proof, unforgeable, and traceable without the need for third-party endorsement. As an underlying protocol or technical solution, blockchain can effectively solve the trust problem and realize the free transfer of value. It has broad prospects in the fields of digital currency, financial asset transaction settlement, digital government affairs, and evidence storage and anti-counterfeiting data services.

[0059] Please refer to Figure 1 , Figure 1 A flowchart of an identity information management method based on identity resolution provided in the first embodiment of the present disclosure is applied to an identity authentication platform. The method includes steps S101-S103.

[0060] In step S101, an identity authentication code is generated based on first identity information of a first user.

[0061] In this embodiment, the identity resolution technology is used to generate an identity authentication code for the user that uniquely identifies the user, and the industrial Internet of Things identity resolution system can be used to achieve the unification of the identity code.

[0062] It should be noted that, in this embodiment, the first identity information is distinguished from the basic identity information of the user, and the second identity information of this embodiment is the basic identity information of the user, wherein the basic identity information is such as the user's ID card information, social security account information, etc., and the first identity information is the user's specific information, such as the user's personal real estate information, student information, and violation records, etc., and the identity authentication code is generated using this information. When the user needs to use this information, the identity authentication code is parsed using the identification resolution technology to obtain the corresponding detailed information. Those skilled in the art can adaptively set the classification of the first identity information according to actual applications, and this embodiment does not specifically limit this.

[0063] Among them, the industrial Internet identification resolution system is an important part of the industrial Internet network system and a nerve hub supporting the interconnection of the industrial Internet. Its role is similar to the domain name resolution system (DNS) in the Internet field. The industrial Internet identification resolution secondary node is an important part of the industrial Internet identification resolution system. It connects to the national top-level identification resolution node upward and to the enterprise identification node and application system downward, providing identification registration services, identification resolution services, identification data services, operation monitoring and other functions. It is an important link in promoting the construction of the identification resolution system, application development and industrial ecology.

[0064] In some embodiments, an identity authentication code can be generated for the user who initiates the identity authentication request, and the basic identity information of the requesting user can be first authenticated in combination with blockchain technology, and then an identity authentication code can be generated for it. For details, please refer to the embodiments described below.

[0065] In step S102, the identity authentication code is encrypted to obtain the encrypted identity authentication code and key information.

[0066] In this embodiment, the identity authentication code can be encrypted in the form of a key pair to obtain a decryption key, wherein the key information is the decryption key that can decrypt the identity authentication code. In some embodiments, a hash value generated by the user ID number (hereinafter the second identity information) and the user block code (hereinafter the block identifier) ​​can also be used as the key.

[0067] In the prior art, the detailed user information of the user is directly obtained by using the ID card information, which makes it easy for non-users to obtain the user information, thus causing some illegal behaviors. This embodiment generates an identity authentication code and encrypts the identity authentication code to ensure the non-disclosure of the user's detailed information. Only when the user provides the identity authentication code and the corresponding key information, the identity authentication code is parsed and the parsing result is sent to the user. There is no need to worry about information leakage caused by the leakage of the user's ID card information or the loss of the ID card, and the security of the user's identity authentication process and information security are achieved.

[0068] To further ensure the security and authenticity of the identity authentication code, this embodiment uploads the encrypted identity authentication code and key information to the blockchain at the same time to perform user identity supervision and protection functions, and uses the synchronization and tamper-proof characteristics of the blockchain to ensure the security and authenticity of the data. The identity authentication code and key information can also be sent to the top node of the National Citizen Identity Information System for information synchronization.

[0069] In step S103, the encrypted identity authentication code and the key information are sent to the first user, so that the first user can obtain the decrypted identity authentication code based on the encrypted identity authentication code and the key information, as well as the first identity information of the first user obtained based on the decrypted identity authentication code.

[0070] Specifically, the encrypted identity authentication code and key information can be sent to the user via text messages, phone calls, application APPs, etc. When the user uses a third-party platform, application APP or other organization to query, authenticate, or call the user's first identity information, it is necessary to perform user identity authentication (i.e., verify the authenticity of the key and identity authentication code) on the identity authentication platform.

[0071] In some embodiments, if a third-party platform, application APP or other organization other than the user needs to query, authenticate, or call the user's first identity information, the identity authentication platform not only needs to perform user identity authentication, but also sends the identity authentication process to the user. After the user verifies and passes, the identity authentication platform will then feedback the authentication results to the third-party platform, application APP and other organizations.

[0072] Please refer to Figure 2 , Figure 2 A flow chart of an identity information management method based on identification resolution is provided for the second embodiment of the present disclosure. Based on the previous embodiment, before generating an identity authentication code for a user, this embodiment first receives an identity authentication request from the user and performs authentication on the basic identity information to improve, specifically, before generating an identity authentication code based on the first identity information of the first user (i.e., step S101), step S101 is further divided into step S101a.

[0073] In step S201, it is determined whether an identity authentication request of the first user is received. If the identity authentication request of the first user is received, step S202 is executed, otherwise the process ends.

[0074] In this embodiment, when a user has an identity (authentication) authentication requirement, the user sends an identity authentication request to the identity authentication platform. When the identity authentication platform receives the user's identity authentication request, it executes subsequent steps such as generating an identity authentication code.

[0075] In step S202, it is determined whether the second identity information of the first user exists in the blockchain. If the second identity information of the first user exists, step S103 is executed.

[0076] In this embodiment, the basic identity information of the user (i.e., the second identity information, such as name, place of origin, address and other ID card information) is stored in combination with blockchain technology to ensure the authenticity of the basic identity information of the user. To determine whether the second identity information of the first user exists in the blockchain, the user can submit his name or other identification information, and the identity authentication platform can determine whether the second identity information of the user exists in the blockchain based on the name and other identification information. The second identity information of the user stored in the blockchain is authenticated.

[0077] In step S203, the second identity information of the first user is obtained from the blockchain; and the first identity information of the first user is obtained from the public platform.

[0078] In this embodiment, the public platform may include the National Social Insurance Public Service Platform, the Credit and Tax Payment Platform, the China Higher Education Student Information and Career Center, the supervision platform, the real estate transaction platform (such as the Beijing Housing and Urban-Rural Development Platform), etc., and obtain the user's social security code, student information, violation record, personal real estate and other user information from these public platforms.

[0079] In step S101a, an identity authentication code is generated based on the first identity information of the first user and the second identity information of the first user.

[0080] In this embodiment, the user's identity authentication code includes not only the user information but also the basic information of the authenticated identity.

[0081] Please refer to Figure 3 , Figure 3 A flow chart of an identity information management method based on identification resolution is provided for the third embodiment of the present disclosure. Different from the previous embodiment, this embodiment takes into account the situation that the second identity information of the first user is not stored in the blockchain, completes the authentication of the user and uploads the authenticated user identity information to the blockchain. Specifically, after determining whether the first identity information of the first user exists in the blockchain (step S202), it also includes steps S301-S303, and further divides step S101 into step S101b.

[0082] In step S301, if the second identity information of the first user does not exist, the third identity information of the first user is obtained.

[0083] It should be noted that, in this embodiment, the first identity information and the third identity information may be the same information or different information, wherein "first" and "second" are only used to distinguish similar objects, that is, one is already stored in the blockchain, and the other needs to be authenticated before being stored in the blockchain, rather than distinguishing the difference in their information. It can be understood that each user has only one correct basic identity information.

[0084] In step S302, the third identity information of the first user is authenticated; and if the authentication is successful, the third identity information of the first user is obtained;

[0085] In step S303, the third identity information of the first user is stored in the blockchain.

[0086] Specifically, the user applies for the identity authentication and authorization encryption function (i.e., identity authentication request) from the identity authentication platform, and fills in the basic user identity information (i.e., third-party identity information) on the identity authentication platform, such as name, ID number, native place address, education, social security account number, etc. The identity authentication platform verifies the authenticity of the user's identity in the citizen identity information system, verifies the information including name, ID number, native place address, etc., and feeds back to the identity authentication platform. If the review is passed, it is determined that the authentication is passed, and the third-party identity information of the user is obtained and stored in the blockchain, so that subsequent users can call their basic identity information. If the review is not passed, a prompt message indicating that the review has not passed can be returned to the user.

[0087] In step S101b, an identity authentication code is generated based on the first identity information of the first user and the third identity information of the first user.

[0088] Furthermore, in order to realize the storage and distinction of the basic identity information of multiple users, this embodiment stores the basic identity information of users in the blockchain by packaging blocks and generating specific block identifiers, such as Figure 4 As shown, the storing of the third identity information in the blockchain (step S303) includes:

[0089] In step S303a, the third identity information of the first user is packaged into a block and stored in the blockchain; and,

[0090] In step S303b, a block identifier for the block is generated.

[0091] Specifically, after receiving the third-party identity information, the blockchain will upload the third-party identity information to the blockchain, and the blockchain platform will establish a block peer node for each user identity information, such as Figure 4 As shown, the block header can contain version number, root hash value, previous block hash value, user ID number, user block code, timestamp, random number, etc.; the user ID number + user block code (i.e. block identifier) ​​is used as the unique block identifier for query; the block body mainly contains user information, including name, native place, education, social security account number and other information. At the same time, the blockchain platform will feed back the above block information to the identity authentication platform.

[0092] Furthermore, in order to facilitate information query by the user, the present embodiment adds a block identifier to the identity authentication code. Specifically, the identity authentication code includes an identity authentication prefix and an identity authentication suffix, and the identity authentication prefix includes the block identifier.

[0093] Please refer to Figure 5 , Figure 5 A flowchart of an identity information management method based on identity resolution is provided for the fourth embodiment of the present disclosure. Different from the above embodiment, this embodiment illustrates a specific process of querying the identity information of a user. Specifically, after sending the encrypted identity authentication code and the key information to the first user (step S103), it also includes:

[0094] In step S501, it is determined whether a request for querying the identity information of a second user is received. If the request for querying the identity information of the second user is received, step S502 is executed, otherwise the process ends.

[0095] It should be noted that the second user may be the first user or any other user.

[0096] In step S502, it is determined whether the identity information query request carries the encrypted identity authentication code and the key information. If the encrypted identity authentication code and the key information are carried, step S503 is executed.

[0097] Specifically, if the identity authentication code carried in the identity information query request is wrong, or the identity authentication code and key information do not match, it is determined that the encrypted identity authentication code and key information are not carried.

[0098] In step S503, the encrypted identity authentication code is decrypted based on the key information to obtain a decrypted identity authentication code; and,

[0099] In step S504, the identity authentication code is analyzed to obtain the first identity information of the first user; and

[0100] In step S505, the first identity information of the first user is returned to the second user.

[0101] In some embodiments, to further ensure the security of information query, this embodiment can also send a confirmation message to the first user after performing identity resolution on the identity authentication code, and return the resolved identity information to the second user after the first user verifies it.

[0102] Please refer to Figure 6 , Figure 6A flowchart of an identity information management method based on identity resolution provided in Embodiment 5 of the present disclosure includes the following steps:

[0103] Step S601: The user applies for an identity authentication and authorization encryption function (identity authentication request) from the identity authentication platform, and fills in the user's personal information (second identity information) on the identity authentication platform, including name, ID number, native place address, education background, social security account number, etc.

[0104] Step S602: The identity authentication platform verifies the authenticity of the user's identity in the citizen identity information system, and verifies information including name, ID number, place of origin, and address;

[0105] Step S603: The citizen identity information system conducts identity verification on the user who provided feedback from the identity authentication platform and provides feedback on the verification result;

[0106] Step S604: The identity authentication platform obtains the result of the user identity review. If the review is passed, the user information (second identity information) that has passed the review is sent to the blockchain platform to upload the user identity information to the blockchain; if the review is not passed, feedback is given to the user that the identity review has failed;

[0107] Step S605, the blockchain platform uploads the user information fed back by the identity authentication platform to the blockchain. The blockchain platform establishes a block peer node for each user identity information. The block header contains the version number, root hash value, previous block hash value, user ID number, user block code, timestamp, random number, etc.; the user ID number + user block code is used as the unique block identifier for query; the block body mainly contains user information, including name, place of origin, education, social security account number, etc., and the established user blockchain account information is fed back to the identity authentication platform;

[0108] Step S606: The identity authentication platform obtains the user's social security code, last student status, violation record, personal real estate and other information from public platforms such as the National Social Insurance Public Service Platform, the Credit and Tax Payment Platform, the China Higher Education Student Information and Career Center, the supervision platform, and the real estate transaction platform (such as the Beijing Housing and Urban-Rural Construction Platform);

[0109] Step S607: Public platforms such as the National Social Insurance Public Service Platform, the Credit and Tax Payment Platform, China Higher Education Student Information and Career Center, the Supervision Platform, and the Real Estate Trading Platform (e.g., Beijing Housing and Urban-Rural Construction Platform) provide the identity authentication platform with information such as the user's social security code, last student status, violation record, and personal real estate.

[0110] Step S608: The identity authentication platform obtains user information, generates a new identity authentication code based on the identity information and the block identifier, and encrypts the identity authentication code to obtain the encrypted identity authentication code and key information.

[0111] Combination Figure 8 As shown, the identity authentication platform 80 includes an identity basic information module 81, an encoding module 82, an identity information authentication module 83 and an encryption module 84.

[0112] The basic identity information module 81 is used to store basic user information, including name, ID number, place of origin, education background, social security account number, as well as obtain user social security code, last student status, violation record, personal real estate and other information from public platforms such as the National Social Insurance Public Service Platform, Credit Tax Platform, China Higher Education Student Information and Career Center, supervision platform, and real estate transaction platform (such as the Beijing Housing and Urban-Rural Construction Platform).

[0113] Coding module 82: used to generate a new identity authentication code based on identity information and block identifier. The user authentication identification code consists of an identification prefix and an identification suffix, and the prefix and suffix are separated by " / ". In this embodiment, the identification prefix consists of the country code, the user ID number, and the user block code (i.e., the block identifier), and the identification suffix consists of the social security number, the last student status code, the violation record code, the property code, and the extended data code. Fig. 9 shown.

[0114] The identity authentication prefix is ​​composed as shown in the following table: (The length of the remarks can be adjusted according to the actual situation)

[0115]

[0116]

[0117] The composition of the identity authentication suffix is ​​shown in the following table: (The length of the remarks can be adjusted according to the actual situation)

[0118]

[0119] Identity information authentication module 83: used to verify user identity authentication when a third-party platform, application APP or other institution or organization inquires, authenticates, calls, etc. user identity information.

[0120] Encryption module 84: used to encrypt the identity authentication code, wherein the key information can be a hash value generated by the user's ID number and the user's block code.

[0121] Step S609: The identity authentication platform feeds back the generated identity authentication code and key to the blockchain platform;

[0122] Step S610: The blockchain platform authenticates the user's identity, saves the generated identity authentication code and key into the block body, and feeds back the storage result to the identity authentication platform;

[0123] Step S611, the identity authentication platform feeds back the generated identity authentication code and key to public platforms such as the National Social Insurance Public Service Platform, the Credit Tax Platform, the China Higher Education Student Information and Career Center, the supervision platform, and the real estate transaction platform;

[0124] Step S612: Public platforms such as the National Social Insurance Public Service Platform, the Credit Taxation Platform, the China Higher Education Student Information and Career Center, the Supervision Platform, and the Real Estate Trading Platform save and synchronize the user's identity authentication code and key information, and feed back the storage result to the identity authentication platform;

[0125] Step S613: The identity authentication platform sends the generated identity authentication code and key to the user, and the user obtains the information through SMS, phone calls, APP information, etc.

[0126] Step S614: When a third-party platform, application APP or other institution or organization queries, authenticates, calls, etc. user identity information, it is necessary to perform user identity authentication on the identity authentication platform;

[0127] Step S615: The identity authentication platform sends an identity authentication operation to the user;

[0128] Step S616: If the user passes the verification, a verification pass message is sent, allowing the identity authentication platform to feedback the result to the third-party platform, application APP or other organization; if the verification fails, the information cannot be sent;

[0129] Step S617: The identity authentication platform feeds back the authentication result to the third-party platform, application APP or other organization.

[0130] Based on the same technical concept, the embodiment of the present disclosure also provides an identity information management system based on identification resolution, such as Figure 7 As shown, it includes a generating module 71, an encrypting module 72 and a sending module 73, wherein:

[0131] The generating module 71 (corresponding to the encoding module 82) is configured to generate an identity authentication code based on the first identity information of the first user;

[0132] The encryption module 72 (corresponding to the encryption module 84) is configured to encrypt the identity authentication code to obtain the encrypted identity authentication code and key information; and

[0133] The sending module 73 is configured to send the encrypted identity authentication code and the key information to the first user, so that the first user can obtain the decrypted identity authentication code based on the encrypted identity authentication code and the key information, as well as the first identity information of the first user obtained based on the decrypted identity authentication code.

[0134] In one embodiment, the system further comprises:

[0135] A first determination module, configured to determine whether an identity authentication request of a first user is received before the generation module generates the identity authentication code;

[0136] A second judgment module, which is configured to judge whether the second identity information of the first user exists in the blockchain when the first judgment module judges that an identity authentication request of the first user is received;

[0137] an acquisition module, configured to acquire the second identity information of the first user from the blockchain when the second determination module determines that the second identity information of the first user exists; and acquire the first identity information of the first user from the public platform;

[0138] The generating module 71 is specifically configured to generate an identity authentication code based on the first identity information of the first user and the second identity information of the first user.

[0139] It can be understood that the first judgment module, the second judgment module and the acquisition module of this embodiment correspond to Figure 8 The basic identity information module and the identity information authentication module.

[0140] In one embodiment, the acquisition module is further configured to acquire the third identity information of the first user when the first determination module determines that the second identity information of the first user does not exist;

[0141] The system further includes: an authentication module configured to authenticate the third identity information of the first user; and an acquisition storage module configured to acquire the third identity information of the first user when the authentication is passed, and store the third identity information of the first user in the blockchain;

[0142] The generating module 71 is specifically configured to generate an identity authentication code based on the first identity information of the first user and the third identity information of the first user.

[0143] In one embodiment, the storage module is specifically configured to package the third identity information of the first user into a block and store it in the blockchain; and generate a block identifier for the block.

[0144] In one implementation, the identity authentication code includes an identity authentication prefix and an identity authentication suffix, and the identity authentication prefix includes the block identifier.

[0145] In one embodiment, after sending the encrypted identity authentication code and the key information to the first user, the method further includes:

[0146] A third judgment module, which is configured to judge whether an identity information query request of a second user is received after the sending module 73 sends the identity authentication code and the key information to the first user;

[0147] A fourth judgment module, which is configured to judge whether the encrypted identity authentication code and the key information are carried in the identity information query request when the third judgment module determines that the identity information query request of the second user is received;

[0148] a decryption module, configured to decrypt the encrypted identity authentication code based on the key information to obtain a decrypted identity authentication code when the fourth judgment module determines that the encrypted identity authentication code and the key information are carried; and

[0149] a parsing module, configured to perform identity parsing on the identity authentication code to obtain first identity information of the first user; and

[0150] A returning module is configured to return the first identity information of the first user to the second user.

[0151] For ease of understanding, Figure 8 As shown, the identity information management system based on identification resolution provided in this embodiment includes a public platform 10, an identity authentication platform 80, a blockchain platform 20 and a third party, wherein:

[0152] Public platform 10 includes the supervision platform, the State Taxation Bureau, the personnel file platform, the hospital information platform, the national social insurance public service platform, the China Higher Education Student Information and Career Center (education platform), the housing provident fund platform, the real estate transaction platform and other platforms;

[0153] The identity authentication platform 80 includes an identity information module 81, an encoding module 82, an identity information authentication module 83 and an encryption module 84;

[0154] The blockchain platform 20 includes a data management module 21 and a block identification management module 22, wherein the data management module 21 is used to store information such as identity authentication codes and keys, and the block identification management module 22 is used to store block identifications.

[0155] In this embodiment, the user applies to the identity authentication platform for the identity authentication encryption function; the identity authentication platform conducts identity verification on the user through basic information such as the user's ID card. After the identity verification is passed, the identity authentication platform generates a new identity authentication code and encrypted information based on the identity identifier and blockchain identifier, and sends it to the blockchain identification node platform for user identity supervision and protection functions, and then sends it to the top node of the National Citizen Identity Information System for information synchronization. When a third-party platform, application APP or other agency or organization inquires, authenticates, calls, etc. user identity information, it is necessary to conduct user identity authentication and authentication to the identity authentication platform. The disclosed embodiment encodes user identity authentication information through identity resolution and blockchain technology to uniquely identify user identity authentication information, uses the identity resolution system to achieve unified identity coding, automatically associates user information to facilitate information traceability, and uses the characteristics of the blockchain's unalterable, open and transparent mechanism to ensure the authenticity of product data and improve economic benefits.

[0156] Based on the same technical concept, the embodiment of the present disclosure also provides a terminal device, such as Fig.10 As shown, the terminal device includes a memory 101 and a processor 102, wherein the memory 101 stores a computer program, and when the processor 102 runs the computer program stored in the memory 101, the processor executes the identity information management method based on identity resolution.

[0157] Based on the same technical concept, an embodiment of the present disclosure also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the processor executes the identity information management method based on identity resolution.

[0158] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those of ordinary skill in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0159] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present disclosure, rather than to limit them. Although the present disclosure has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present disclosure.

Claims

1. An identity information management method based on identity resolution, characterized in that: Applied to an identity authentication platform, the method comprises: Using industrial Internet identity resolution technology, an identity authentication code is generated based on the first identity information of the first user, where the first identity information is specific information of the first user, including personal real estate information, social security code, student status information, and criminal record of the first user; Encrypting the identity authentication code to obtain an encrypted identity authentication code and key information; and, Sending the encrypted identity authentication code and the key information to the first user, so that the first user can obtain the decrypted identity authentication code based on the encrypted identity authentication code and the key information, and the first identity information of the first user obtained based on the decrypted identity authentication code; Before generating the identity authentication code based on the first identity information of the first user, the method further includes: Determining whether an identity authentication request of the first user is received; If an identity authentication request from the first user is received, it is determined whether the second identity information of the first user exists in the blockchain, where the second identity information is the basic identity information of the user, including name, place of origin, address and ID number, and the second identity information of the user stored in the blockchain has been authenticated; If the second identity information of the first user exists, obtaining the second identity information of the first user from the blockchain; and obtaining the first identity information of the first user from the public platform; The generating an identity authentication code based on the first identity information of the first user includes: An identity authentication code is generated based on the first identity information of the first user and the second identity information of the first user.

2. The method according to claim 1, characterized in that After determining whether the second identity information of the first user exists in the blockchain, the method further includes: If the second identity information of the first user does not exist, obtaining the third identity information of the first user; authenticating the third identity information of the first user; and, if the authentication is successful, obtaining the third identity information of the first user, and storing the third identity information of the first user in the blockchain; The generating an identity authentication code based on the first identity information of the first user includes: An identity authentication code is generated based on the first identity information of the first user and the third identity information of the first user.

3. The method according to claim 2, characterized in that Storing the third identity information in the blockchain includes: The third identity information of the first user is packaged into a block and stored in the blockchain; and a block identifier for the block is generated.

4. The method according to claim 3, characterized in that The identity authentication code includes an identity authentication prefix and an identity authentication suffix, and the identity authentication prefix includes the block identifier.

5. The method according to claim 1, characterized in that After sending the encrypted identity authentication code and the key information to the first user, the method further includes: Determining whether an identity information query request of a second user is received; If an identity information query request of the second user is received, determining whether the identity information query request carries the encrypted identity authentication code and the key information; If the encrypted identity authentication code and the key information are carried, decrypting the encrypted identity authentication code based on the key information to obtain a decrypted identity authentication code; and, performing identity resolution on the identity authentication code to obtain first identity information of the first user; and The first identity information of the first user is returned to the second user.

6. An identity information management system based on identification resolution, characterized in that: Applied to an identity authentication platform, the system comprises: A generation module, which is configured to generate an identity authentication code based on first identity information of a first user by using industrial Internet identity resolution technology, where the first identity information is specific information of the first user, including personal real estate information, social security code, student status information, and criminal record of the first user; an encryption module, configured to encrypt the identity authentication code to obtain the encrypted identity authentication code and key information; and a sending module, configured to send the encrypted identity authentication code and the key information to the first user, so that the first user can obtain the decrypted identity authentication code based on the encrypted identity authentication code and the key information, and the first identity information of the first user obtained based on the decrypted identity authentication code; Also includes: A first determination module, configured to determine whether an identity authentication request of a first user is received before the generation module generates the identity authentication code; A second judgment module is configured to judge whether the second identity information of the first user exists in the blockchain when the first judgment module judges that the identity authentication request of the first user is received, wherein the second identity information is the basic identity information of the user, including name, place of origin, address and ID number, and the second identity information of the user stored in the blockchain is authenticated; an acquisition module, configured to acquire the second identity information of the first user from the blockchain when the second determination module determines that the second identity information of the first user exists; and acquire the first identity information of the first user from the public platform; The generating module is specifically configured to generate an identity authentication code based on the first identity information of the first user and the second identity information of the first user.

7. A terminal device, characterized in that: The method comprises a memory and a processor, wherein a computer program is stored in the memory, and when the processor runs the computer program stored in the memory, the processor executes the identity information management method based on identity resolution according to any one of claims 1 to 5.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the processor executes the identity information management method based on identity resolution according to any one of claims 1 to 5.

Images