Blockchain-based Account Management Method and Computer-readable Storage Medium

Abstract

The present invention provides a blockchain-based account management method and computer-readable storage medium. The method comprises: obtaining a first chain password provided by a pre-established trusted account; comparing the first chain password with the trusted account's preset password; upon a match, obtaining a second chain password provided by the trusted account; and creating an anonymous account associated with the trusted account based on the second chain password. With the present invention, anonymous accounts avoid the risk of real-name authentication information leakage and, by relying on the traceability of trusted accounts, meet relevant regulatory requirements. Thus, blockchain accounts can simultaneously meet both regulatory and privacy requirements, resolving the conflict between technological development and regulation.

Description

Technical Field

[0001] The present invention relates to information technology, and in particular to a blockchain-based account management method and a computer-readable storage medium. Background Art

[0002] As a new generation of information technology, blockchain is a novel application model for computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanisms, and encryption algorithms. It boasts characteristics such as unforgeability, full traceability, traceability, openness, transparency, and collective maintenance. Based on these characteristics, blockchain technology holds enormous promise for application and has become a key breakthrough for independent innovation in my country's core technologies.

[0003] Because blockchains leave traces throughout their operations, blockchain accounts cannot be deleted. All transactions performed on blockchain accounts are recorded on the blockchain. Account-related operations on the blockchain include account creation, key generation, converting public keys to account addresses, signing, and verifying signatures.

[0004] Different blockchains may have different account registration and management methods, but registration is generally anonymous, which is inconsistent with national internet information regulation policies. If all blockchains were required to be generated with real names, this would lead to the leakage of user privacy data in the chain's records.

[0005] Therefore, the existing blockchain account management method has a contradiction between privacy protection and real-name supervision, and the existing technology lacks corresponding solutions. Summary of the Invention

[0006] An object of the present invention is to provide a blockchain-based account management method and computer-readable storage medium that resolves the contradiction between privacy protection and real-name supervision.

[0007] A further object of the present invention is to ensure that blockchain accounts cannot be deleted or forged.

[0008] According to one aspect of the present invention, a blockchain-based account management method is provided, comprising:

[0009] Obtain the first chain password provided by a pre-established trusted account;

[0010] Compare the FirstChain password with the preset password of the trusted account;

[0011] After the comparison is consistent, obtain the second chain password provided by the trusted account;

[0012] Create an anonymous account associated with the trusted account based on the second chain password.

[0013] Optionally, after the step of creating an anonymous account associated with the trusted account according to the second chain password, the method further includes:

[0014] Provide the public key address of the anonymous account and store the private key of the anonymous account in escrow.

[0015] Optionally, the steps of escrow storing the private key of the anonymous account include:

[0016] Generate a private key encryption character based on the second chain password and the private key of the anonymous account;

[0017] The private key encryption characters are stored in the database, and the database is physically isolated from the Internet.

[0018] Optionally, the step of generating a private key encrypted character according to the second chain password and the private key of the anonymous account includes:

[0019] Calculate the hash value of the second chain password;

[0020] Symmetrically encrypt the hash value of the second chain password and the private key of the anonymous account to obtain a first string and a second string;

[0021] Use part of the characters in the first string to replace part of the characters in the second string to obtain the private key encrypted characters.

[0022] Optionally, the step of escrow storing the private key of the anonymous account further includes:

[0023] Generate mnemonics based on the private key of the anonymous account;

[0024] Store mnemonics in a database.

[0025] Optionally, the step of generating a mnemonic phrase based on the private key of the anonymous account further includes:

[0026] Encode the private key of the anonymous account;

[0027] Use the BIP document to convert the encoded private key into the corresponding mnemonic in the vocabulary.

[0028] Optionally, the process of establishing a trusted account includes:

[0029] Obtain the real-name information of the account manager and verify the real-name information;

[0030] After verification, obtain the chain creation password provided by the account administrator;

[0031] Create a trusted account, use the chain creation password as the preset password of the trusted account, and store the private key of the trusted account in escrow.

[0032] Optionally, the steps of escrow storing the private key of the trusted account include:

[0033] Generate a private key encrypted character based on a preset password and the private key of a trusted account, and store the private key encrypted character in a database physically isolated from the Internet; and / or

[0034] Generate mnemonics based on the private key of a trusted account and store them in a database that is physically isolated from the Internet.

[0035] Optionally, the step of comparing the first chain password with the preset password of the trusted account includes:

[0036] Calculate the hash value of the first chain password and obtain the hash value of the preset password of the trusted account;

[0037] By comparing the hash value of the first chain password and the hash value of the preset password, it is determined whether the first chain password is consistent with the preset password.

[0038] In particular, according to another aspect of the present invention, a computer-readable storage medium is provided, on which a machine executable program is stored. When the machine executable program is executed by a processor, any blockchain-based account management method is implemented.

[0039] In the blockchain-based account management method and computer-readable storage medium of the present invention, a trusted account provides a first-chain password. If the first-chain password matches the preset password of the trusted account, that is, if the password provided by the trusted account is confirmed to be correct, the trusted account provides a second-chain password, and an anonymous account associated with the trusted account is created. An anonymous account is established within a trusted account that has already undergone real-name authentication. While anonymous accounts avoid the issue of real-name authentication information leakage, they also rely on the traceability of trusted accounts to comply with relevant regulatory requirements. Thus, blockchain accounts can simultaneously meet both regulatory and privacy protection requirements, resolving the conflict between technological development and regulation.

[0040] Furthermore, the blockchain-based account management method and computer-readable storage medium of the present invention maintain the characteristics of the blockchain itself because the data of trusted accounts is stored on the chain and cannot be deleted or falsified.

[0041] Furthermore, the blockchain-based account management method and computer-readable storage medium of the present invention solve the drawbacks of traditional account applications and improve the user experience of blockchain applications.

[0042] Based on the following detailed description of specific embodiments of the present invention in conjunction with the accompanying drawings, those skilled in the art will become more aware of the above and other objects, advantages and features of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Hereinafter, some specific embodiments of the present invention will be described in detail in an exemplary and non-limiting manner with reference to the accompanying drawings. The same reference numerals in the accompanying drawings indicate the same or similar components or parts. It should be understood by those skilled in the art that these drawings are not necessarily drawn to scale. In the accompanying drawings:

[0044] Figure 1 is a schematic diagram of a blockchain-based account management method according to one embodiment of the present invention;

[0045] Figure 2 1 is a flow chart of creating a trusted account in a blockchain-based account management method according to an embodiment of the present invention;

[0046] Figure 3 is a flowchart of creating an anonymous account in a blockchain-based account management method according to an embodiment of the present invention; and

[0047] Figure 4 is a schematic block diagram of a machine-readable storage medium according to an embodiment of the present invention. DETAILED DESCRIPTION

[0048] Figure 1 FIG1 is a schematic diagram of a blockchain-based account management method according to one embodiment of the present invention. The blockchain-based account management method may generally include the following steps:

[0049] Step S102: Obtain a first chain password provided by a pre-established trusted account; when a user uses the services provided by the blockchain, he must create and maintain multiple accounts, that is, the blockchain service provides services for accounts.

[0050] The trusted account in the blockchain-based account management method of this embodiment is an account that has undergone real-name authentication. Its establishment process may include: obtaining the account administrator's real-name information and verifying it; after verification, obtaining a chain creation password provided by the account administrator; creating a trusted account, using the chain creation password as the trusted account's pre-set password, and storing the trusted account's private key in escrow. The specific real-name information can be set according to regulatory requirements, for example, the account creator's identity information. The real-name information verification process involves comparing the real-name information with the account creator's pre-stored trusted information with the regulatory authorities. For example, the account administrator can provide identity information, and verification can be achieved through facial recognition or other biometric information.

[0051] The creation chain password provided during the trusted account creation process serves as the trusted account's preset password. It is used to verify the password entered when subsequently logging into the trusted account or performing account management. The preset password and private key of the trusted account are managed in a custodial manner to prevent information leakage.

[0052] Step S104: Compare the first chain password with the preset password of the trusted account.

[0053] An optional comparison method is to compare the first chain password and the preset password character by character in plain text. If they are completely consistent, the comparison is consistent.

[0054] Another optional comparison method is to pre-calculate a hash value of the preset password. The process of comparing the first chain password with the preset password of the trusted account may include: calculating the hash value of the first chain password and obtaining the hash value of the preset password of the trusted account; and determining whether the first chain password and the preset password are consistent by comparing the hash value of the first chain password and the hash value of the preset password. If the hash value of the first chain password and the hash value of the preset password are completely consistent, then the first chain password is determined to be consistent with the preset password.

[0055] The above-mentioned method of using hash values for comparison is more efficient on the one hand, and can also avoid password leakage caused by using plain text on the other hand.

[0056] Step S106: After the comparison is consistent, obtain the second chain password provided by the trusted account; the second chain password is generally set to be different from the first chain password.

[0057] Step S108: Create an anonymous account associated with the trusted account based on the second chain password. The anonymous account is managed and used using the second chain password.

[0058] The blockchain-based account management method of this embodiment creates an anonymous account associated with the trusted account upon confirming the correct password provided by the trusted account. The anonymous account is established within the trusted account that has already been authenticated. While anonymous accounts prevent the leakage of real-name authentication information, they also meet regulatory requirements by leveraging the traceability of trusted accounts. Thus, blockchain accounts can simultaneously meet regulatory and privacy requirements, resolving the conflict between technological development and regulation.

[0059] After the step of creating an anonymous account associated with the trusted account according to the second chain password in step S108, the public key address of the anonymous account can also be provided, and the private key of the anonymous account is escrow stored.

[0060] One method of the above-mentioned escrow storage is: generating private key encryption characters based on the second chain password and the private key of the anonymous account; storing the private key encryption characters in a database, and the database is physically isolated from the Internet. Since the database is physically isolated from the Internet, the theft of relevant information of the private key through the network is avoided. The step of generating private key encryption characters based on the second chain password and the private key of the anonymous account may include: calculating the hash value of the second chain password; symmetrically encrypting the hash value of the second chain password and the private key of the anonymous account respectively to obtain a first character string and a second character string; using part of the characters of the first character string to replace part of the characters of the second character string to obtain private key encryption characters. After the above-mentioned private key encryption characters are integrated with the second chain password, even if the symmetrical encryption key and the private key encryption characters are stolen, they cannot be restored to the private key of the anonymous account, thereby further enhancing privacy.

[0061] Another method of escrow storage is to generate a mnemonic based on the private key of an anonymous account and store the mnemonic in a database. Because private keys are large in bytes and difficult to remember, mnemonics are provided to assist in managing account information. In the prior art, mnemonics are derived from random numbers, which are then converted and calculated into twelve or twenty-four words for conversion into addresses on the blockchain ledger. In this embodiment, the mnemonic is derived from the private key of an anonymous account. The mnemonic generation process can be as follows: using the BIP protocol (e.g., BIP39) to convert the private key into words in a vocabulary using a specific encoding, i.e., 12-24 mnemonics, which can be in English or Chinese.

[0062] For example, the steps of generating a mnemonic based on the private key of an anonymous account may include: encoding the private key of the anonymous account; and converting the encoded private key into a corresponding mnemonic in a vocabulary using a BIP document. The encoding method for the private key of the anonymous account may be to use a hash algorithm, for example, converting the private key of the anonymous account into a 256-bit hash character using a 256-bit hash algorithm, then converting the character into a binary code value, and using a preset mapping relationship to convert the code value into the corresponding mnemonic.

[0063] The database storing the private key encrypted characters or mnemonics can use a SQL (Structured Query Language) database and can be stored in a server or computer isolated from the network. When data transmission is required, the data can be transferred through a secure mobile storage device.

[0064] After a trusted account is established, the private key of the trusted account is also stored in escrow. The escrow storage method is similar to the escrow storage method for the private key of the anonymous account mentioned above.

[0065] That is, the first method of the step of escrow storage of the private key of the trusted account is: generating a private key encrypted character according to a preset password and the private key of the trusted account, and storing the private key encrypted character in a database physically isolated from the Internet.

[0066] A second method for escrow storage of the private key of a trusted account involves generating a mnemonic phrase based on the private key of the trusted account and storing the mnemonic phrase in a database physically isolated from the internet. The mnemonic phrase generation process can also involve utilizing a BIP protocol (e.g., BIP39) to convert the private key into a specific encoding using a word database, i.e., a 12-24-word mnemonic phrase, which can be in English or Chinese.

[0067] Figure 2 The following is a flowchart of creating a trusted account in a blockchain-based account management method according to an embodiment of the present invention. The process of creating a trusted account may include:

[0068] Step S202: Acquire the real-name information of the account manager.

[0069] Step S204: Authenticate the real-name information and determine if the authentication is successful. If so, the account creation process ends. The specific real-name information can be set based on regulatory requirements, such as the account creator's identity information. Verification of the real-name information involves comparing the real-name information with trusted information pre-stored by the account creator with regulatory authorities. For example, the account administrator can provide identity information, which can be verified through facial recognition or other biometric information.

[0070] Step S206: If the real-name information authentication is successful, the two chain creation passwords provided by the account administrator are obtained. The chain creation password is used as the preset password of the trusted account after the trusted account, and is used to compare and verify with the input password when logging into the trusted account or performing account management.

[0071] Step S208: Determine whether the two chain creation passwords are consistent.

[0072] In step S210, if the two provided chain creation passwords are inconsistent, a prompt is given indicating that the password is incorrect and a new password is provided, thereby preventing the chain creation password from being mis-entered due to an input error.

[0073] Step S212: If the chain creation passwords provided twice are consistent, a trusted account is created.

[0074] Step S214: The chain password and private key are stored in escrow.

[0075] Step S216: Obtain a trusted account address.

[0076] Step S218: Generate and associate a unified account identifier.

[0077] Figure 3 This is a flowchart of creating an anonymous account in a blockchain-based account management method according to an embodiment of the present invention. The process of creating an anonymous account may include:

[0078] Step S302: The trusted account provides a first chain password.

[0079] Step S304: Calculate the hash value of the first chain password.

[0080] Step S306: Determine whether the hash value of the first chain password is consistent with the hash value of the preset password.

[0081] Step S308: If the hash value of the first chain password is inconsistent with the hash value of the preset password, it is determined that the chain password is incorrect and a warning is prompted.

[0082] Step S310: If the hash value of the first chain password is consistent with the hash value of the preset password, obtain two second chain passwords provided by the trusted account.

[0083] Step S312: Determine whether the two second chain passwords are consistent.

[0084] Step S314: If the second chain passwords provided twice are inconsistent, a prompt is displayed indicating that the password is incorrect and a new password is provided;

[0085] Step S316: If the second chain passwords provided twice are the same, an anonymous email account is created;

[0086] Step S318: The chain password and private key are stored in escrow.

[0087] Step S320: Generate and associate a unified account identifier.

[0088] Step S322: Provide the public key address and account unified identifier.

[0089] An anonymous account is created by a trusted account. When creating an anonymous account, the trusted account needs to provide the chain password / mnemonic of the anonymous account.

[0090] The first method of private key escrow involves symmetrically encrypting the chain password hash and the private key (e.g., using DES encryption), yielding two strings: a first string and a second string. The first string is the result of symmetrical encryption of the private key, while the second string is the result of symmetrical encryption of the chain password hash. The last five characters of the second string are used to replace the last five characters of the first string, forming the new private key encryption string. The private key encryption string can be stored in a SQL database isolated from the internet, or in a file directory on a server not connected to the internet.

[0091] The second method of private key escrow involves using the BIP protocol to convert the private key into a specific word from a vocabulary, typically 12-24 mnemonics in English or Chinese. These mnemonics are then stored in a SQL database isolated from the internet, or in a file directory on a server not connected to the internet.

[0092] In the blockchain account management method and computer-readable storage medium of this embodiment, a trusted account provides a first-chain password. If the first-chain password matches the preset password of the trusted account, i.e., if the password provided by the trusted account is confirmed to be correct, the trusted account is obtained to provide a second-chain password, and an anonymous account associated with the trusted account is created. An anonymous account is established within a trusted account that has already been authenticated. While anonymous accounts avoid the risk of real-name authentication information leakage, they also meet relevant regulatory requirements by leveraging the traceability of trusted accounts. Thus, blockchain accounts can simultaneously meet both regulatory and privacy requirements, resolving the conflict between technological development and regulation. Because trusted account data is stored on-chain, it cannot be deleted or falsified, preserving the inherent characteristics of the blockchain. The blockchain account management method of this embodiment addresses the drawbacks of traditional account applications and improves the user experience of blockchain applications.

[0093] Figure 4 2 is a schematic block diagram of a machine-readable storage medium 20 according to an embodiment of the present invention. The machine-readable storage medium 20 stores a machine-executable program 210, which, when executed by a processor, implements any of the above-mentioned blockchain-based account management methods.

[0094] The technical solution of the present invention, or the portion that contributes to the prior art, or the portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes instructions for causing a computer device (such as a personal computer, server, or network device) to execute all or part of the steps of the method described in each embodiment of the present invention. The aforementioned readable storage medium 20 includes various media capable of storing program code, such as a USB flash drive, a mobile hard drive, ROM, RAM, a magnetic disk, or an optical disk.

[0095] In addition, it should be noted that, in the apparatus and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. Moreover, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order, and some steps can be performed in parallel or independently of each other. For those of ordinary skill in the art, it will be understood that all or any steps or components of the method and apparatus of the present invention can be implemented in any computing device (including processors, storage media, etc.) or a network of computing devices in hardware, firmware, software or a combination thereof, which can be achieved by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

[0096] Therefore, the purpose of the present invention can also be achieved by running a program or a group of programs on any computing device. The computing device can be a well-known general-purpose device. Therefore, the purpose of the present invention can also be achieved simply by providing a program product containing program code that implements the method or device. That is to say, such a program product also constitutes the present invention, and the storage medium storing such a program product also constitutes the present invention. Obviously, the storage medium can be any well-known storage medium or any storage medium developed in the future. It should also be pointed out that in the device and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. In addition, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but do not necessarily need to be performed in chronological order. Certain steps can be performed in parallel or independently of each other.

[0097] Computing devices equipped with the above-mentioned readable storage medium 20 can be interconnected via a network, and can use any suitable interface or protocol (such as Internet Small Computer System Interface, etc.) to transmit data. The network can be a cellular network, a radio network, a wide area network (WAN), a local area network (LAN), or the Internet, etc., so that other computing devices can be connected through various networks.

[0098] A computing device can be, for example, a server, a desktop computer, a laptop computer, a tablet computer, or a smartphone. In some examples, a computing device can be a cloud computing node. A computing device can be described in the general context of computer system executable instructions (such as program modules) executed by a computer system. Generally, program modules can include routines, programs, object programs, components, logic, data structures, etc. that perform specific tasks or implement specific abstract data types. A computing device can be implemented in a distributed cloud computing environment where remote processing devices linked via a communication network perform tasks. In a distributed cloud computing environment, program modules can be located on local or remote computing system storage media, including storage devices.

[0099] The technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present invention.

[0100] In addition, it should be noted that, in the apparatus and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. Moreover, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order, and some steps can be performed in parallel or independently of each other. For those of ordinary skill in the art, it will be understood that all or any steps or components of the method and apparatus of the present invention can be implemented in any computing device (including processors, storage media, etc.) or a network of computing devices in hardware, firmware, software or a combination thereof, which can be achieved by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

[0101] Therefore, the purpose of the present invention can also be achieved by running a program or a group of programs on any computing device. The computing device can be a well-known general-purpose device. Therefore, the purpose of the present invention can also be achieved simply by providing a program product containing program code that implements the method or device. That is to say, such a program product also constitutes the present invention, and the storage medium storing such a program product also constitutes the present invention. Obviously, the storage medium can be any well-known storage medium or any storage medium developed in the future. It should also be pointed out that in the device and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. In addition, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but do not necessarily need to be performed in chronological order. Certain steps can be performed in parallel or independently of each other.

[0102] At this point, those skilled in the art will recognize that, although a number of exemplary embodiments of the present invention have been shown and described in detail herein, many other variations or modifications consistent with the principles of the present invention may be directly determined or derived from the disclosure of the present invention without departing from the spirit and scope of the present invention. Therefore, the scope of the present invention should be understood and deemed to cover all such other variations or modifications.

Claims

1. A blockchain-based account management method, comprising: Obtain the first chain password provided by a pre-established trusted account; Comparing the first chain password with the preset password of the trusted account; After the comparison is consistent, obtain the second chain password provided by the trusted account; Create an anonymous account associated with the trusted account according to the second chain password; After the step of creating an anonymous account associated with the trusted account according to the second chain password, the method further includes: providing a public key address of the anonymous account and escrow storing a private key of the anonymous account; The step of escrow storing the private key of the anonymous account includes: generating a private key encrypted character according to the second chain password and the private key of the anonymous account; storing the private key encrypted character in a database, and the database is physically isolated from the Internet; The step of generating the private key encrypted character based on the second chain password and the private key of the anonymous account includes: calculating the hash value of the second chain password; symmetrically encrypting the hash value of the second chain password and the private key of the anonymous account respectively to obtain a first character string and a second character string; using part of the characters of the first character string to replace part of the characters of the second character string to obtain the private key encrypted character.

2. The blockchain-based account management method according to claim 1, wherein: The step of escrow storing the private key of the anonymous account further includes: Generate a mnemonic phrase based on the private key of the anonymous account; The mnemonic phrase is stored in the database.

3. The blockchain-based account management method according to claim 2, wherein: The step of generating a mnemonic word according to the private key of the anonymous account further includes: Encoding the private key of the anonymous account; Use the BIP document to convert the encoded private key into the corresponding mnemonic in the vocabulary.

4. The blockchain-based account management method according to claim 1, wherein: The process of establishing the trusted account includes: Obtaining the real-name information of the account administrator and verifying the real-name information; After verification, obtain the chain creation password provided by the account manager; The trusted account is created, and the creation chain password is used as the preset password of the trusted account, and the private key of the trusted account is stored in escrow.

5. The blockchain-based account management method according to claim 4, wherein: The step of escrow storing the private key of the trusted account includes: generating the private key-encrypted characters according to the preset password and the private key of the trusted account, and storing the private key-encrypted characters in a database physically isolated from the Internet; and / or A mnemonic is generated based on the private key of the trusted account; and the mnemonic is stored in a database that is physically isolated from the Internet.

6. The blockchain-based account management method according to claim 1, wherein: The step of comparing the first chain password with the preset password of the trusted account includes: Calculate the hash value of the first chain password and obtain the hash value of the preset password of the trusted account; By comparing the hash value of the first chain password and the hash value of the preset password, it is determined whether the first chain password is consistent with the preset password.

7. A computer-readable storage medium having a machine-executable program stored thereon, wherein when the machine-executable program is executed by a processor, the blockchain-based account management method according to any one of claims 1 to 6 is implemented.

Images