A blockchain, business management method and device

Abstract

The present application provides a blockchain, a business management method and a device to improve the utilization rate of block information and improve search efficiency. The blockchain includes: a real-name identity information block and a business processing information block, the real-name identity information block is extended horizontally, the business processing information block is extended vertically, and the business processing information blocks are respectively connected to the corresponding real-name identity information blocks; the real-name identity information block stores visible unique digital identity authentication information and encrypted invisible identity information, and the digital identity authentication information is determined based on the identity information; the business processing information block stores visible operator attribute information and encrypted invisible business processing information. The data blocks in the system are divided into two types: real-name identity information blocks and business processing information blocks, which have horizontal and vertical bidirectional extensibility, can improve the low utilization rate of block information and improve data search efficiency.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology, and in particular to a blockchain, a business management method and a device. Background Art

[0002] Blockchain technology is a new application technology collection of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. By building a blockchain network, each node in the network is allowed to obtain a complete copy of the database, and maintain the update of the blockchain-based database based on the consensus mechanism. At the same time, the huge block data set contains the entire history of each transaction. With the rapid development of blockchain applications, the scale of data will become larger and larger. The data integration of blockchains in different business scenarios further expands the scale and richness of data.

[0003] Telecom data has become a "fat piece of meat" for criminals to snoop on due to its large amount of information and strong correlation, which has bred the soil for crime. Information leakage is the premise for the telecommunications network to be "precisely defrauded". Criminals have formed a complete ecological chain for information collection, trading, mining, and leakage. It is particularly important to cut off the source of information collection. The use of blockchain's smart contracts and cryptographic consensus can ensure that telecommunications data cannot be tampered with and shared securely, and can achieve secure storage of telecommunications network data, avoiding the risk of theft and theft using user biometrics.

[0004] Based on the traditional blockchain registration business, the traditional blockchain structure can only be expanded horizontally, and the block information utilization rate is not high; when searching, it is necessary to compare one by one, which is inefficient. Summary of the invention

[0005] The present application provides a blockchain, a business management method and a device to improve the utilization rate of block information and improve search efficiency.

[0006] To achieve the above-mentioned purpose, the embodiment of the present application discloses a blockchain, including: a real-name identity information block and a business handling information block, wherein the real-name identity information block is extended horizontally, and the business handling information block is extended vertically, and the business handling information blocks are respectively connected to the corresponding real-name identity information blocks;

[0007] The real-name identity information block stores visible unique digital identity authentication information and encrypted invisible identity information, wherein the digital identity authentication information is determined based on the identity information;

[0008] The business handling information block stores visible operator attribute information and encrypted invisible business handling information.

[0009] The present application embodiment discloses a service management method, including:

[0010] The first operator node generates a first temporary identity information block based on the user's identity information and the real-name identity information smart contract; encrypts the first temporary identity information block to obtain encrypted information; and sends the encrypted information to the first MIIT node;

[0011] The first MIIT node receives the encrypted information from the first operator node; decrypts the encrypted ciphertext to obtain the first temporary identity information block; obtains the identity information in the first temporary identity information block based on the real-name identity information smart contract; generates digital identity authentication information based on the identity information, and generates a second temporary identity information block based on the digital identity authentication information and the real-name identity information smart contract; encrypts the second temporary identity information block to obtain an encrypted ciphertext, and the first MIIT node broadcasts the encrypted ciphertext to other MIIT nodes;

[0012] After other MIIT nodes successfully decrypt the encrypted ciphertext and authenticate the second temporary identity information block based on the consensus mechanism, the real-name identity information block is horizontally expanded in the blockchain. The real-name identity information block includes the digital identity authentication information corresponding to the identity information and the second temporary identity information block after the digital signature.

[0013] In one example, encrypting the first temporary identity information block to obtain encrypted information includes:

[0014] Digitally sign the first temporary identity information block using the private key of the first operator node, and encrypt the digitally signed first temporary identity information block using the public key of the first MIIT node to obtain encrypted information;

[0015] Decrypting the encrypted ciphertext to obtain the first temporary identity information block includes:

[0016] The encrypted information is decrypted using the private key of the first MIIT to obtain a digitally signed first temporary identity information block; the digitally signed first temporary identity information block is decrypted using the public key of the first operator node to obtain the first temporary identity information block.

[0017] In one example, encrypting the second temporary identity information block to obtain an encrypted ciphertext includes:

[0018] After encrypting the second temporary identity information block using the public key of the first operator node, digitally signing the encrypted second temporary identity information block again using the private key of the first MIIT node; and using the digitally signed second temporary identity information block as the encrypted ciphertext;

[0019] Other MIIT nodes successfully decrypt the encrypted ciphertext, including:

[0020] The digitally signed second temporary identity information block is verified based on the first MIIT node public key.

[0021] The present application embodiment discloses a service management method, including:

[0022] The first operator node processes a service for the user based on the user's digital identity authentication information and obtains service processing information; generates a first temporary service processing block based on the service processing information and the service processing smart contract; digitally signs the first temporary service processing block using the private key of the first operator node; and broadcasts the digitally signed first temporary service processing block to other operator nodes;

[0023] After other operator nodes verify the first temporary business processing block after digital signature based on the public key of the first operator node and authenticate the first temporary business processing block after digital signature based on the consensus mechanism, the business processing information block is vertically expanded under the real-name identity information block corresponding to the digital identity authentication information in the blockchain, and the business processing information block includes the attribute information of the first operator and the first temporary business processing block after digital signature.

[0024] The present application embodiment discloses a service management method, including:

[0025] The first operator node generates a first temporary business handling block based on the operation and business handling smart contract that needs to be performed by the second operator node, and the first operator node and the second operator node belong to different operators; the first temporary business handling block is digitally signed with the private key of the first operator node and sent to the second operator node;

[0026] After receiving the first temporary business processing block with digital signature, the second operator node uses the public key of the first operator node to decrypt the first temporary business processing block with digital signature to obtain the first temporary business processing block; based on the business processing smart contract, obtain the operation in the first temporary business processing block that needs to be performed by the second operator node; after the second operator node completes the operation, generate a second temporary business processing block based on the first operation record and the business processing smart contract; encrypt the second temporary business processing block using the public key of the first operator node, and then send the encrypted second temporary business processing block to the first operator node;

[0027] After receiving the encrypted second temporary business processing block, the first operator node uses the private key of the first operator node to decrypt the encrypted second temporary business processing block to obtain the second temporary business processing block; based on the business processing smart contract, the first operator node obtains the first operation record in the second temporary business processing block; based on the business processing smart contract, the first operator node combines the second operation record of its own business processing and the first operation record to generate a third temporary business processing block; the private key of the first operator node is used to digitally sign the third temporary business processing block, and then the digitally signed third temporary business processing block is broadcasted to other operator nodes;

[0028] After other operator nodes verify the digitally signed third temporary business processing block based on the public key of the first operator node and authenticate the digitally signed third temporary business processing block based on the consensus mechanism, the business processing information block is vertically expanded under the real-name identity information block corresponding to the digital identity authentication information in the blockchain, and the business processing information block includes the attribute information of the first operator, the attribute information of the second operator and the digitally signed third temporary business processing block.

[0029] In one example, the consensus mechanism includes:

[0030] All consensus nodes are divided into MIIT nodes and operator nodes. The MIIT nodes are used to authenticate the real-name identity information block; the operator nodes are used to authenticate the business handling information block;

[0031] During the block authentication process, the reputation of some randomly selected consensus nodes is temporarily increased;

[0032] After the block authentication is successful, the reputation of some randomly selected consensus nodes will be restored to their original values.

[0033] In one example, the partial consensus nodes are 1% to 10% of the consensus nodes; and the credibility is increased by 1 to 2 times.

[0034] An embodiment of the present application discloses a service management device, including: a functional module for implementing any of the service management methods described above.

[0035] The embodiment of the present application discloses a service management device, including a processor and a memory;

[0036] The memory is used to store computer programs or instructions;

[0037] The processor is used to execute part or all of the computer programs or instructions in the memory, and when the part or all of the computer programs or instructions are executed, it is used to implement the business management method as described in any one of the above items.

[0038] An embodiment of the present application discloses a computer-readable storage medium for storing a computer program, wherein the computer program includes instructions for implementing the service management method as described in any one of the above items.

[0039] An embodiment of the present application discloses a computer program product, which includes: a computer program code, which, when executed on a computer, enables the computer to execute and implement any of the above-described business management methods.

[0040] This application optimizes the traditional blockchain structure. The data blocks in the system are divided into real-name identity information blocks and business processing information blocks. It has horizontal and vertical bidirectional scalability, which can improve the low utilization rate of block information and improve data search efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0042] Figure 1 A schematic diagram of a blockchain chain structure provided for this application;

[0043] Figure 2 A schematic diagram of the system node cluster distribution provided for this application;

[0044] Figure 3 A schematic diagram of the generation process of an identity information block and a business handling information block of the group provided for this application;

[0045] Figure 4 A schematic diagram of the process of generating a cross-group business handling information block provided for this application;

[0046] Figure 5 A structural diagram of a business management device provided for this application;

[0047] Figure 6 A structural diagram of a business management device provided for this application. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0049] Embodiment 1:

[0050] The present application provides a novel blockchain chain structure, the blockchain chain structure comprising: a horizontal information block and a vertical information block, the vertical information blocks are respectively connected to the corresponding horizontal information blocks, the horizontal information blocks can be extended horizontally, and the vertical information blocks can be extended vertically;

[0051] The block header of the horizontal information block stores the hash value of the previous block, the hash value of the current block body and the timestamp, and the block body of the horizontal information block stores visible unique authentication information and encrypted invisible smart contracts;

[0052] The block header of the vertical information block stores the hash value of the previous block, the hash value of the current block body and the timestamp; the block body of the vertical information block stores visible attribute information and encrypted invisible smart contracts.

[0053] According to the different information contents stored in the data block, it can be divided into a real-name identity information block and a business handling information block. The real-name identity information block extends horizontally, and the business handling information block extends vertically. The business handling information blocks are respectively connected to the corresponding real-name identity information blocks;

[0054] The real-name identity information block stores visible unique digital identity authentication information and encrypted invisible identity information, wherein the digital identity authentication information is determined based on the identity information; the business processing information block stores visible operator attribute information and encrypted invisible business processing information.

[0055] like Figure 1 As shown, the horizontal information block of the blockchain chain structure is the real-name identity information block, and the vertical information block is the business processing information block.

[0056] The block header of the real-name identity information block stores the hash value (PreHash) of the previous block, the hash value (Hash) of the current block body, and the timestamp (TimeStamp), etc.; the block body of the real-name identity information block stores visible unique digital identity authentication information and an encrypted invisible real-name identity information smart contract; the digital identity authentication information is generated based on the user's real-name identity information.

[0057] The block header of the business processing information block stores the hash value (PreHash) of the previous block, the hash value (Hash) of the current block body, and the timestamp (TimeStamp), etc.; the block body of the business processing information block stores visible group attribute information and encrypted invisible business processing smart contracts.

[0058] The group attribute information is used to indicate which operator group manages the service. The group attribute information may be, for example, China Telecom (CT), China Mobile (CM), China Unicom (CU), China Broadcasting Corporation (CBN), etc. The group attribute information may also be referred to as operator attribute information.

[0059] The real-name identity information block horizontally expands the user's real-name information, and the business handling information block vertically expands the business handling information of a certain user (real-name user) registered with real name in various operators. The blockchain displays the user's digital identity authentication information, not the user's real-name identity information, which can protect the user's privacy. Multiple operators share the user's real-name information on the blockchain, and multiple operators do not share the business handling information block. Operator A can see the block of operator B's business handling information block and the group attribute information in the block, but cannot know the specific business handling information in the block.

[0060] The blockchain structure of this application is jointly maintained by multiple operators and supervised by the Ministry of Industry and Information Technology.

[0061] The traditional blockchain structure can only be expanded horizontally, adding blocks at the end of the blockchain, and the utilization rate of block information is not high; when searching, it is necessary to compare one by one, which is inefficient. This application optimizes the traditional blockchain structure. The data blocks in the system are divided into two types: real-name identity information blocks and business processing information blocks. It has horizontal and vertical bidirectional scalability, which can improve the low utilization rate of block information and improve data search efficiency.

[0062] Embodiment 2:

[0063] The traditional PBFT consensus mechanism does not divide the roles of consensus nodes within the system, and the reputation is consistent, which is too complex, resulting in a large number of nodes in the network and is not practical. This application proposes a consensus method, which is an improved PBFT consensus method based on role division and random reputation increase, including the following contents:

[0064] 1) All consensus nodes have a pair of public and private keys to implement digital signatures. All consensus nodes are divided into two categories according to their roles: management nodes (such as MIIT nodes) and business nodes (such as major operators’ business processing nodes (referred to as operator nodes)). The management nodes are used to authenticate horizontal information blocks (such as real-name identity information blocks); the business nodes are used to authenticate vertical information blocks (business processing information blocks);

[0065] 2) During the block authentication process, the reputation of some randomly selected consensus nodes is temporarily increased;

[0066] 3) After the block authentication is successful, the reputation of some randomly selected consensus nodes will be restored to the original value.

[0067] For example, when temporarily increasing the credibility of some consensus nodes, 1% to 10% of the consensus nodes are randomly selected, and their credibility is increased by 1 to 2 times.

[0068] On the one hand, the consensus mechanism randomly increases the temporary credibility of some consensus nodes, reduces the number of nodes participating in the consensus, and increases the consensus rate. At the same time, due to its randomness and temporary nature, the security of its consensus mechanism can still be guaranteed. On the other hand, the role division mechanism for consensus nodes in the system can alleviate the drawbacks of the traditional PBFT algorithm that is too complex to be practical due to the large number of nodes in the network, and further ensure the security of customer identity.

[0069] The consensus nodes in the system form a fully distributed structure. In this system, all consensus nodes are divided into two categories according to their roles: MIIT nodes (composed of the operator alliance and MIIT) and business processing nodes of major operators. Figure 2 As shown in the figure, s1~s5 are MIIT nodes, and n1~n10 are operator business processing nodes. Nodes with different roles have different permissions. MIIT nodes are used to authenticate and generate real-name identity information blocks, and major operator business processing nodes are used to authenticate and generate business processing information blocks.

[0070] Take the example of randomly selecting 10% of the consensus nodes and doubling their credibility:

[0071] For example, when a new real-name identity information block needs to be added to the system, there are 3,000 existing MIIT nodes in the system that can participate in authentication. According to the original PBFT consensus mechanism, more than 2 / 3 (i.e. 2,000) of the MIIT nodes must pass the authentication before the real-name identity information block can be successfully added (the total score is 3,000 points, with one point for each MIIT node that passes the authentication, and success if the score exceeds 2,000 points).

[0072] Now, the reputation of 10% of the MIIT nodes is temporarily increased by 100%. The reputation of 10% of the MIIT nodes that passed the authentication originally can get one point, and now the reputation is doubled to 2 points. Then, these 10% (i.e., 300) MIIT nodes can get 600 points after passing the authentication of a real-name identity information block, which means that more than 1,400 MIIT nodes need to pass the authentication, and only more than 1,700 MIIT nodes need to pass the authentication in total to successfully add the real-name identity information block to the system.

[0073] This method successfully reduces the number of nodes participating in the consensus and improves the efficiency of the system consensus. In addition, the consensus nodes that temporarily increase their credibility are random and temporary, which ensures the security of the consensus mechanism. The algorithm is used to randomly select these nodes to temporarily increase their credibility. After the block authentication is successful, the credibility is restored to the original value. The next authentication block will reselect a certain proportion of consensus nodes to increase their credibility. The principle of authentication to generate business handling information blocks is the same as above, and the credibility of some operators' business handling nodes can be randomly increased temporarily.

[0074] Embodiment 3:

[0075] The existing telecommunications real-name registration services are maintained and operated separately by multiple operators, and are unable to share user real-name information. The process is relatively complicated when opening and transferring mobile phone accounts; installing, moving and transferring fixed-line phones (including broadband); and handling cross-network services between operators (such as number portability).

[0076] This application introduces a real-name registration business management method based on the blockchain chain structure introduced above. This method can be used for telecommunications real-name registration services, such as: mobile phone account opening and transfer; fixed-line telephone (including broadband) installation, relocation and transfer; cross-network services between operators (such as number portability) and other services.

[0077] Next, we will introduce it from three aspects:

[0078] The first aspect is the method of generating the identity information block.

[0079] The first operator node generates a first temporary identity information block based on the user's identity information and the real-name identity information smart contract; encrypts the first temporary identity information block to obtain encrypted information; and sends the encrypted information to the first MIIT node;

[0080] The first MIIT node receives the encrypted information from the first operator node; decrypts the encrypted ciphertext to obtain the first temporary identity information block; obtains the identity information in the first temporary identity information block based on the real-name identity information smart contract; generates digital identity authentication information based on the identity information, and generates a second temporary identity information block based on the digital identity authentication information and the real-name identity information smart contract; encrypts the second temporary identity information block to obtain an encrypted ciphertext, and the first MIIT node broadcasts the encrypted ciphertext to other MIIT nodes;

[0081] After other MIIT nodes successfully decrypt the encrypted ciphertext and authenticate the second temporary identity information block based on the consensus mechanism, the real-name identity information block is horizontally expanded in the blockchain. The real-name identity information block includes the digital identity authentication information corresponding to the identity information and the second temporary identity information block after the digital signature.

[0082] In one example, encrypting the first temporary identity information block to obtain encrypted information includes: digitally signing the first temporary identity information block using a private key of a first operator node, and encrypting the digitally signed first temporary identity information block using a public key of a first MIIT node to obtain encrypted information;

[0083] Decrypting the encrypted ciphertext to obtain the first temporary identity information block includes: using the private key of the first Ministry of Industry and Information Technology to decrypt the encrypted information to obtain the first temporary identity information block after digital signature; using the public key of the first operator node to decrypt the first temporary identity information block after digital signature to obtain the first temporary identity information block.

[0084] In one example, encrypting the second temporary identity information block to obtain an encrypted ciphertext includes: encrypting the second temporary identity information block using the public key of the first operator node, and then digitally signing the encrypted second temporary identity information block again using the private key of the first MIIT node; and using the digitally signed second temporary identity information block as the encrypted ciphertext;

[0085] The other MIIT nodes successfully decrypt the encrypted ciphertext, including: verifying the digitally signed second temporary identity information block based on the first MIIT node public key.

[0086] like Figure 3As shown, when a user goes to a certain operator to handle real-name registration, the first operator node queries whether there is a real-name identity information block of the user in the system based on the user's identity information. For example, digital identity authentication information is generated based on the user's identity information, and the system is queried based on the digital identity authentication information to see whether there is a real-name identity information block of the user. The user's identity information, such as an ID number, may also optionally include one or more of name, gender, age, etc.

[0087] If there is no real-name identity information block of the user, the first operator node starts the real-name identity information smart contract in the system, generates a first temporary identity information block based on the real-name identity information smart contract, and encrypts the first temporary identity information block using the private key of the first operator node (the private key encrypts data for the purpose of digital signature), encrypts the first temporary identity information block after digital signature using the public key of the first MIIT node, and sends the encrypted information to the first MIIT node. The first MIIT node is, for example, the nearest MIIT node (with the least number of hops) or any MIIT node.

[0088] The first MIIT node receives the encrypted information, decrypts the encrypted information using the private key of the first MIIT node, and obtains the first temporary identity information block after digital signature; then decrypts it again using the public key of the first operator node that sends the first temporary identity information block, and obtains the identity information in the first temporary identity information block based on the real-name identity information smart contract. The first MIIT node verifies the identity information, for example, determines whether the identity information appears in the system for the first time, and generates digital identity authentication information based on the identity information when the verification passes (for example, the identity information appears in the system for the first time), and generates a second temporary identity information block based on the digital identity authentication information and the real-name identity information smart contract; after encrypting the second temporary identity information block with the public key of the first operator node, the encrypted second temporary identity information block is digitally signed again using the private key of the first MIIT node; and the digitally signed second temporary identity information block is broadcast to other MIIT nodes in the system.

[0089] Other MIIT nodes obtain the summary information of the second temporary identity information block and determine whether the summary information is consistent with the digital signature of the sender (i.e., the first MIIT node). If they are consistent, it is confirmed that the second temporary identity information block has not been tampered with. The system uses a consensus mechanism to authenticate and generate the digitally signed second temporary identity information block. After the authentication is passed, the real-name identity information block will be horizontally expanded. The real-name identity information block includes the digital identity authentication information corresponding to the identity information and the digitally signed second temporary identity information block. This realizes the addition of the user's real-name identity information.

[0090] The consensus mechanism can be an existing consensus mechanism or the improved PBFT consensus mechanism based on role division and random reputation increase as described above.

[0091] After the above operation, the user's real-name identity information is added, or the first operator node finds the user's real-name identity information block in the system at the beginning, then the user can be asked whether the business he needs to handle only involves the business of this group, or whether it needs to involve cross-group business of other groups (such as number portability, etc.).

[0092] The second aspect is the method of generating the business processing blocks of the Group.

[0093] like Figure 3 As shown, when a user goes to a certain operator to handle real-name registration, the first operator node queries whether there is a real-name identity information block of the user in the system based on the user's identity information. For example, digital identity authentication information is generated based on the user's identity information, and the system is queried based on the digital identity authentication information to see whether there is a real-name identity information block of the user. The user's identity information, such as an ID number, may also optionally include one or more of name, gender, age, etc.

[0094] If there is a real-name identity information block for the user, the first operator node will process the service for the user based on the user's digital identity authentication information. After the service is successfully processed, the service processing information will be generated into a first temporary service processing block based on the service processing smart contract, and the first temporary service processing block will be digitally signed using the private key of the first operator node, and then the first temporary service processing block with the digital signature will be broadcast to other operator nodes in the system.

[0095] Other operator nodes obtain the summary information of the first temporary business handling block based on the public key of the first operator node, and determine whether the summary information is consistent with the digital signature of the sender (i.e., the first operator node). If they are consistent, it is confirmed that the first temporary business handling block has not been tampered with. The system uses a consensus mechanism to authenticate and generate the first temporary business handling block. After the authentication is passed, the business handling information block is vertically expanded under the real-name identity information block corresponding to the digital identity authentication information. The business handling information block includes the attribute information of the first operator and the first temporary business handling block after the digital signature. Thereby, the business handling information is added.

[0096] The consensus mechanism can be an existing consensus mechanism or the improved PBFT consensus mechanism based on role division and random reputation increase as described above.

[0097] Thirdly, the method of generating cross-group business processing blocks;

[0098] like Figure 4 As shown, when a user applies to operator A for cross-group services between operator A and operator B, the first operator A node queries whether there is a real-name identity information block in the system based on the user's identity information. For example, digital identity authentication information is generated based on the user's identity information, and the system is queried based on the digital identity authentication information to see whether there is a real-name identity information block for the user. The user's identity information, such as an ID number, may also optionally include one or more of name, gender, age, etc.

[0099] If there is a record of the user's real-name identity information, the first A operator node will start a cross-group business processing process for the user based on the user's digital identity authentication information.

[0100] First, the operations that need to be performed by the B operator during the service processing are recorded, a first temporary service processing block is generated based on the service processing smart contract, and the first temporary service processing block is encrypted with the public key of the second B operator node and sent to the second B operator node. The second B operator node is, for example, the nearest (with the least number of hops) B operator node or any B operator node.

[0101] When the second B operator node receives the encrypted first temporary business processing block, it decrypts it with the private key of the second B operator node to obtain the first temporary business processing block; based on the business processing smart contract, the operations that need to be performed by the B operator in the first temporary business processing block are obtained. After the second B operator node confirms that the business can be processed normally, it processes the operations based on the operations that need to be performed by the B operator. After the processing is completed, the operation record will be generated into a second temporary business processing block based on the business processing smart contract, and the second temporary business processing block will be encrypted with the public key of the first A operator node that sent the business processing requirement, and then the encrypted second temporary business processing block will be sent to the first A operator node.

[0102] After receiving the encrypted second temporary business handling block, the first A operator node decrypts it with the private key of the first A operator node, and uses the business handling smart contract to obtain the first operation record of the information that the second B operator node has completed the relevant operation, and then handles the A operator related business for it. After the business handling is successful, based on the business handling smart contract, the second operation record of its own business handling and the first operation record are combined to generate a third temporary business handling block. The third temporary business handling block is digitally signed with the private key of the first A operator node, and then the digitally signed third temporary business handling block is broadcast to other operator nodes in the system.

[0103] Other operator nodes obtain the summary information of the third temporary business handling block according to the public key of the first A operator node, and determine whether the obtained summary information is consistent with the digital signature of the sender. If they are consistent, it is determined that the third temporary business handling block has not been tampered with. The system uses a consensus mechanism to authenticate and generate the third temporary business handling block. If the authentication is passed, the business handling information block is vertically expanded under the real-name identity information block corresponding to the digital identity authentication information. The business handling information block includes the attribute information of the A operator and the attribute information of the B operator and the third temporary business handling block after the digital signature. Thus, the business handling information is added.

[0104] The consensus mechanism can be an existing consensus mechanism or the improved PBFT consensus mechanism based on role division and random reputation increase as described above.

[0105] By storing telecom real-name user identity information and providing users with digital identity authentication information, multiple operators use digital identity authentication information to handle telecom real-name registration services for users. This blockchain technology can help ensure that this information is trustworthy and secure, so that operators can provide their customers with seamless, cost-effective services; at the same time, it can reduce the legal costs and brand damage related to data leakage, improve the management efficiency and cost of customer identity information and real-name registration services of each operator, and facilitate the handling of cross-network services between operators, such as number portability, etc., to promote the healthy development of the telecommunications industry.

[0106] The above embodiments are only for illustrating the technical concept and features of the present invention, and their purpose is to enable people familiar with the technology to understand the content of the present invention and implement it accordingly, and they cannot be used to limit the protection scope of the present invention. Any equivalent transformation or modification made according to the spirit of the present invention should be included in the protection scope of the present invention.

[0107] The above describes the method of the embodiment of the present application, and the following describes the device in the embodiment of the present application. The method and the device are based on the same technical concept. Since the principles of the method and the device to solve the problem are similar, the implementation of the device and the method can refer to each other, and the repeated parts will not be repeated.

[0108] The embodiment of the present application can divide the functional modules of the device according to the above method example. For example, each function can be divided into each functional module, or two or more functions can be integrated into one module. These modules can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of modules in the embodiment of the present application is schematic and is only a logical function division. There may be other division methods in the specific implementation.

[0109] like Figure 5As shown, the embodiment of the present application discloses a service management device, including: a processing module 501 and a transceiver module 502;

[0110] When the service management device is applied to the first operator node:

[0111] The processing module 501 is used to generate a first temporary identity information block based on the user's identity information and the real-name identity information smart contract; encrypt the first temporary identity information block to obtain encrypted information; the transceiver module 502 is used to send the encrypted information to the first MIIT node;

[0112] When the service management device is applied to the first MIIT node:

[0113] The transceiver module 502 is used to receive encrypted information from the first operator node; the processing module 501 is used to decrypt the encrypted ciphertext to obtain the first temporary identity information block; based on the real-name identity information smart contract, obtain the identity information in the first temporary identity information block; generate digital identity authentication information based on the identity information, and generate a second temporary identity information block based on the digital identity authentication information and the real-name identity information smart contract; encrypt the second temporary identity information block to obtain encrypted ciphertext; the transceiver module 502 is also used to broadcast the encrypted ciphertext to other MIIT nodes;

[0114] When the service management device is applied to other MIIT nodes:

[0115] The transceiver module 502 is used to receive encrypted ciphertext; the processing module 501 is used to horizontally expand the real-name identity information block in the blockchain after successfully decrypting the encrypted ciphertext and authenticating the second temporary identity information block based on the consensus mechanism. The real-name identity information block includes the digital identity authentication information corresponding to the identity information and the second temporary identity information block after digital signature.

[0116] When the processing module 501 is used to encrypt the first temporary identity information block to obtain encrypted information, it is specifically used to: digitally sign the first temporary identity information block using the private key of the first operator node, and encrypt the digitally signed first temporary identity information block using the public key of the first MIIT node to obtain encrypted information;

[0117] When the processing module 501 is used to decrypt the encrypted ciphertext to obtain the first temporary identity information block, it is specifically used to: use the private key of the first Ministry of Industry and Information Technology to decrypt the encrypted information to obtain the first temporary identity information block after digital signature; use the public key of the first operator node to decrypt the first temporary identity information block after digital signature to obtain the first temporary identity information block.

[0118] When the processing module 501 is used to encrypt the second temporary identity information block to obtain the encrypted ciphertext, it is specifically used to: after encrypting the second temporary identity information block using the public key of the first operator node, digitally sign the encrypted second temporary identity information block again using the private key of the first MIIT node; and use the digitally signed second temporary identity information block as the encrypted ciphertext;

[0119] When the processing module 501 is used to successfully decrypt the encrypted ciphertext, it is specifically used to: verify the digitally signed second temporary identity information block based on the first MIIT node public key.

[0120] In another embodiment, when the service management device is applied to the first operator node:

[0121] The processing module 501 is used to process a service for the user based on the user's digital identity authentication information to obtain service processing information; generate a first temporary service processing block based on the service processing information and the service processing smart contract; digitally sign the first temporary service processing block using the private key of the first operator node; the transceiver module is used to broadcast the digitally signed first temporary service processing block to other operator nodes;

[0122] When the service management device is applied to other operator nodes:

[0123] The transceiver module 502 is used to receive the first temporary business processing block after digital signature; the processing module 501 is used to verify the first temporary business processing block after digital signature based on the public key of the first operator node, and after the first temporary business processing block after digital signature is authenticated based on the consensus mechanism, vertically expand the business processing information block under the real-name identity information block corresponding to the digital identity authentication information in the blockchain, the business processing information block includes the attribute information of the first operator and the first temporary business processing block after digital signature.

[0124] In another embodiment, when the service management device is applied to the first operator node:

[0125] The processing module 501 is used to generate a first temporary business handling block based on the operation and business handling smart contract that needs to be performed by the second operator node, and the first operator node and the second operator node belong to different operators; after the first temporary business handling block is digitally signed with the private key of the first operator node, it is sent to the second operator node based on the transceiver module 502;

[0126] When the service management device is applied to the second operator node:

[0127] The transceiver module 502 is used to receive the first temporary business handling block with a digital signature; the processing module 501 is used to decrypt the first temporary business handling block with a digital signature using the public key of the first operator node to obtain the first temporary business handling block; based on the business handling smart contract, the operation in the first temporary business handling block that needs to be performed by the second operator node is obtained; after the second operator node completes the operation, a second temporary business handling block is generated based on the first operation record and the business handling smart contract; the second temporary business handling block is encrypted using the public key of the first operator node, and the transceiver module 502 is also used to send the encrypted second temporary business handling block to the first operator node;

[0128] When the service management device is applied to the first operator node:

[0129] The transceiver module 502 is used to receive the encrypted second temporary business handling block; the processing module 501 is used to decrypt the encrypted second temporary business handling block using the private key of the first operator node to obtain the second temporary business handling block; based on the business handling smart contract, the first operation record in the second temporary business handling block is obtained; based on the business handling smart contract, the first operator node generates a third temporary business handling block by combining the second operation record of its own business handling and the first operation record; the third temporary business handling block is digitally signed using the private key of the first operator node; the transceiver module 502 is also used to broadcast the digitally signed third temporary business handling block to other operator nodes;

[0130] When the service management device is applied to other operator nodes:

[0131] The transceiver module 502 is used to receive a third temporary business processing block that has been digitally signed; the processing module 501 is used to verify the third temporary business processing block that has been digitally signed based on the public key of the first operator node, and after the third temporary business processing block that has been digitally signed has been authenticated based on a consensus mechanism, vertically expand the business processing information block under the real-name identity information block corresponding to the digital identity authentication information in the blockchain, the business processing information block includes the attribute information of the first operator, the attribute information of the second operator and the third temporary business processing block that has been digitally signed.

[0132] The processing module 501 is also used to divide all consensus nodes into MIIT nodes and operator nodes, wherein the MIIT nodes are used to authenticate the real-name identity information block; the operator nodes are used to authenticate the business handling information block; during the block authentication process, the credibility of some randomly selected consensus nodes is temporarily increased; after the block authentication is successful, the credibility of some randomly selected consensus nodes is restored to the original value.

[0133] In one example, the partial consensus nodes are 1% to 10% of the consensus nodes; and the credibility is increased by 1 to 2 times.

[0134] like Figure 6 As shown, the embodiment of the present application discloses a service management device, including a processor 601, a memory 602 and a transceiver 603;

[0135] The memory 602 is used to store computer programs or instructions;

[0136] The processor 601 is used to execute part or all of the computer programs or instructions in the memory, and when the part or all of the computer programs or instructions are executed, it is used to implement the network access method as described in any one of the above items. For example, the actions performed by the above processing module 501 can be performed by the processor 601, and the actions performed by the above transceiver module 502 can be performed by the transceiver 603.

[0137] An embodiment of the present application discloses a computer-readable storage medium for storing a computer program, wherein the computer program includes instructions for implementing the service management method as described in any one of the above items.

[0138] An embodiment of the present application discloses a computer program product, which includes: a computer program code, which, when executed on a computer, enables the computer to execute and implement any of the above-described business management methods.

[0139] An embodiment of the present application discloses a business management system, including a MIIT node and an operator node for executing any of the business management methods described above.

[0140] In addition, the processor mentioned in the embodiments of the present application may be a central processing unit (CPU), a baseband processor, the baseband processor and the CPU may be integrated together or separated, or may be a network processor (NP) or a combination of a CPU and a NP. The processor may further include a hardware chip or other general-purpose processor. The above-mentioned hardware chip may be an application-specific integrated circuit (ASIC), a programmable logic device (PLD) or a combination thereof. The above-mentioned PLD may be a complex programmable logic device (CPLD), a field-programmable gate array (FPGA), a generic array logic (GAL) and other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. or any combination thereof. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0141] The memory mentioned in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct memory bus random access memory (DR RAM). It should be noted that the memory described in this application is intended to include, but is not limited to, these and any other suitable types of memory.

[0142] The transceiver mentioned in the embodiments of the present application may include a separate transmitter and / or a separate receiver, or the transmitter and the receiver may be integrated into one. The transceiver may operate under the instruction of the corresponding processor. Optionally, the transmitter may correspond to a transmitter in a physical device, and the receiver may correspond to a receiver in a physical device.

[0143] Those of ordinary skill in the art will appreciate that the various method steps and units described in the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the steps and components of each embodiment have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Those of ordinary skill in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0144] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or it can be an electrical, mechanical or other form of connection.

[0145] The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of the present application.

[0146] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0147] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program code.

[0148] The term "and / or" in this application describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B may represent three situations: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. The multiple involved in this application refers to two or more. In addition, it should be understood that in the description of this application, words such as "first" and "second" are only used for the purpose of distinguishing the description, and cannot be understood as indicating or implying relative importance, nor can they be understood as indicating or implying an order.

[0149] Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0150] Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present application without departing from the spirit and scope of the embodiments of the present application. Thus, if these modifications and variations of the embodiments of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A business management method, characterized in that: include: The first operator node generates a first temporary identity information block based on the user's identity information and the real-name identity information smart contract; Encrypting the first temporary identity information block to obtain encrypted information; and sending the encrypted information to the first MIIT node; The first MIIT node receives the encrypted information from the first operator node; Decrypting the encrypted information to obtain the first temporary identity information block; Based on the real-name identity information smart contract, obtain the identity information in the first temporary identity information block; Generate digital identity authentication information based on the identity information, and generate a second temporary identity information block based on the digital identity authentication information and the real-name identity information smart contract; Encrypting the second temporary identity information block to obtain encrypted ciphertext, and the first MIIT node broadcasting the encrypted ciphertext to other MIIT nodes; After other MIIT nodes successfully decrypt the encrypted ciphertext and authenticate the second temporary identity information block based on the consensus mechanism, the real-name identity information block is horizontally expanded in the blockchain, and the real-name identity information block includes the digital identity authentication information corresponding to the identity information and the second temporary identity information block after digital signature; The first operator node processes a service for the user based on the user's digital identity authentication information and obtains service processing information; generates a first temporary service processing block based on the service processing information and the service processing smart contract; digitally signs the first temporary service processing block using the private key of the first operator node; and broadcasts the digitally signed first temporary service processing block to other operator nodes; After other operator nodes verify the first temporary business processing block after digital signature based on the public key of the first operator node and authenticate the first temporary business processing block after digital signature based on the consensus mechanism, the business processing information block is vertically expanded under the real-name identity information block corresponding to the digital identity authentication information in the blockchain, and the business processing information block includes the attribute information of the first operator and the first temporary business processing block after digital signature.

2. A business management method, characterized in that: include: The first operator node generates a first temporary identity information block based on the user's identity information and the real-name identity information smart contract; Encrypting the first temporary identity information block to obtain encrypted information; and sending the encrypted information to the first MIIT node; The first MIIT node receives the encrypted information from the first operator node; Decrypting the encrypted information to obtain the first temporary identity information block; Based on the real-name identity information smart contract, obtain the identity information in the first temporary identity information block; Generate digital identity authentication information based on the identity information, and generate a second temporary identity information block based on the digital identity authentication information and the real-name identity information smart contract; Encrypting the second temporary identity information block to obtain encrypted ciphertext, and the first MIIT node broadcasting the encrypted ciphertext to other MIIT nodes; After other MIIT nodes successfully decrypt the encrypted ciphertext and authenticate the second temporary identity information block based on the consensus mechanism, the real-name identity information block is horizontally expanded in the blockchain, and the real-name identity information block includes the digital identity authentication information corresponding to the identity information and the second temporary identity information block after digital signature; The first operator node generates a first temporary business handling block based on the operation and business handling smart contract that needs to be performed by the second operator node, and the first operator node and the second operator node belong to different operators; the first temporary business handling block is digitally signed with the private key of the first operator node and sent to the second operator node; After receiving the digitally signed first temporary business processing block, the second operator node uses the public key of the first operator node to decrypt the digitally signed first temporary business processing block to obtain the first temporary business processing block; based on the business processing smart contract, obtain the operations in the first temporary business processing block that need to be performed by the second operator node; After the second operator node completes the operation, a second temporary business processing block is generated based on the first operation record and the business processing smart contract; the second temporary business processing block is encrypted using the public key of the first operator node, and then the encrypted second temporary business processing block is sent to the first operator node; After receiving the encrypted second temporary business processing block, the first operator node uses the private key of the first operator node to decrypt the encrypted second temporary business processing block to obtain the second temporary business processing block; based on the business processing smart contract, obtain the first operation record in the second temporary business processing block; The first operator node generates a third temporary business processing block based on the business processing smart contract by combining the second operation record of its own business processing and the first operation record; digitally signs the third temporary business processing block using the private key of the first operator node, and then broadcasts the digitally signed third temporary business processing block to other operator nodes; After other operator nodes verify the digitally signed third temporary business processing block based on the public key of the first operator node and authenticate the digitally signed third temporary business processing block based on the consensus mechanism, the business processing information block is vertically expanded under the real-name identity information block corresponding to the digital identity authentication information in the blockchain. The business processing information block includes the attribute information of the first operator, the attribute information of the second operator and the digitally signed third temporary business processing block.

3. The method according to claim 1 or 2, characterized in that Encrypting the first temporary identity information block to obtain encrypted information includes: Digitally sign the first temporary identity information block using the private key of the first operator node, and encrypt the digitally signed first temporary identity information block using the public key of the first MIIT node to obtain encrypted information; Decrypting the encrypted ciphertext to obtain the first temporary identity information block includes: The encrypted information is decrypted using the private key of the first MIIT to obtain a digitally signed first temporary identity information block; the digitally signed first temporary identity information block is decrypted using the public key of the first operator node to obtain the first temporary identity information block.

4. The method according to claim 1 or 2, characterized in that: The second temporary identity information block is encrypted to obtain an encrypted ciphertext, including: After encrypting the second temporary identity information block using the public key of the first operator node, digitally signing the encrypted second temporary identity information block again using the private key of the first MIIT node; and using the digitally signed second temporary identity information block as the encrypted ciphertext; Other MIIT nodes successfully decrypt the encrypted ciphertext, including: The digitally signed second temporary identity information block is verified based on the first MIIT node public key.

5. The method according to claim 1 or 2, characterized in that: The consensus mechanism includes: All consensus nodes are divided into MIIT nodes and operator nodes. The MIIT nodes are used to authenticate the real-name identity information block; the operator nodes are used to authenticate the business handling information block; During the block authentication process, the reputation of some randomly selected consensus nodes is temporarily increased; After the block authentication is successful, the reputation of some randomly selected consensus nodes will be restored to their original values.

6. The method according to claim 5, characterized in that The partial consensus nodes mentioned above are 1%~10% of the consensus nodes; their credibility is increased by 1~2 times.

7. A service management device, characterized in that: include: A functional module for implementing the method according to any one of claims 1 to 6.

8. A service management device, characterized in that: including a processor and a memory; The memory is used to store computer programs or instructions; The processor is used to execute part or all of the computer programs or instructions in the memory, and when the part or all of the computer programs or instructions are executed, it is used to implement the method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: Used to store a computer program, wherein the computer program includes instructions for implementing the method according to any one of claims 1 to 6.

10. A computer program product, characterized in that The computer program product comprises: a computer program code, and when the computer program code is run on a computer, the computer is enabled to execute the method according to any one of claims 1 to 6.

Images