Blockchain-based Identity Recovery Method, Device, Medium, and Electronic Device

Abstract

Embodiments of the present disclosure relate to a method and apparatus for identity recovery based on blockchain, a storage medium, and an electronic device, and relate to the field of network security technology. The method includes: receiving a recovery request sent by a lost object for recovering a digital avatar; in response to the recovery request, generating multiple hash values for multiple application scenarios based on the biological signals of the responding object; respectively comparing the multiple hash values with the original hash values of the lost object stored in the blocks of the blockchain to obtain a comparison result; and determining an identity recovery result of the lost object based on the comparison result. The present disclosure can improve the security of identity recovery based on blockchain.

Description

Background Art

[0002] The digital avatar of a user in the real world in the virtual world is an important object in the metaverse. With the sharp increase in the number and types of objects entering the virtual world, it is very important to model and analyze the identity identification of physical objects to achieve the perception and mapping of physical objects in the metaverse.

[0003] In related technologies, the identity recognition of digital avatars is mainly based on keys. However, there are various security problems such as loss and theft of keys, resulting in poor security and low reliability in using keys for identity recognition of digital avatars.

[0004] It should be noted that the information invented in the above background art section is only used to strengthen the understanding of the background of the present disclosure, and thus may include information that does not constitute the prior art known to those of ordinary skill in the art. Summary of the Invention

[0005] The purpose of the present disclosure is to provide a blockchain-based identity recovery method, a blockchain-based identity recovery device, a computer-readable storage medium, and an electronic device, so as to at least to some extent overcome the problem of low security when recovering the identity of a digital avatar caused by the limitations and defects of related technologies.

[0006] According to one aspect of the present disclosure, there is provided a blockchain-based identity recovery method, including: receiving a recovery request for recovering a digital avatar sent by a lost object; in response to the recovery request, generating multiple hash values for multiple application scenarios according to the biological signals of the respondent object; respectively comparing the multiple hash values with the original hash values of the lost object stored in the blocks of the blockchain to obtain a comparison result; and determining the identity recovery result of the lost object based on the comparison result.

[0007] In an exemplary embodiment of the present disclosure, the generating multiple hash values for multiple application scenarios according to the biological signals of the respondent object includes: collecting multiple biological signals of the respondent object in multiple application scenarios in the virtual world; obtaining encrypted values corresponding to the multiple biological signals, and performing a hash function operation on the encrypted values to generate the hash values for each application scenario.

[0008] In an exemplary embodiment of the present disclosure, the obtaining encrypted values corresponding to the multiple biological signals includes: performing section mapping on the multiple biological signals to obtain a mapped value, and encrypting the mapped value to obtain the encrypted value.

[0009] In an exemplary embodiment of the present disclosure, performing a hash function operation on the encrypted values to generate the hash values for each application scenario includes: compressing the encrypted values into a fixed length to determine the hash values for each application scenario.

[0010] In an exemplary embodiment of the present disclosure, determining the identity recovery result of the lost object based on the comparison result includes: determining the identity recovery result based on the comparison result according to the loss type.

[0011] In an exemplary embodiment of the present disclosure, the loss type is the first type, and the response objects are the recovered object and the candidate holding object; determining the identity recovery result based on the comparison result according to the loss type includes: if the number of times the comparison result of the recovered object is the preset result is greater than the number of times the comparison result of the candidate holding object is the preset result, determining that the identity recovery result is successful recovery; if the number of times the comparison result of the recovered object is the preset result is less than the number of times the comparison result of the candidate holding object is the preset result, determining that the identity recovery result is identity failure.

[0012] In an exemplary embodiment of the present disclosure, the loss type is the second type, and the response object is the recovered object; determining the identity recovery result based on the comparison result according to the loss type includes: if the comparison result of the recovered object is the preset result and the preset result meets the recovery condition, determining that the identity recovery result is successful recovery.

[0013] According to one aspect of the present disclosure, there is provided an identity recovery device based on a blockchain, including: a request acquisition module that receives a recovery request sent by a lost object for recovering a digital avatar; a hash value determination module that, in response to the recovery request, generates multiple hash values for multiple application scenarios according to the biological signals of the response objects; a comparison module that respectively compares the multiple hash values with the original hash values of the lost object stored in the blocks of the blockchain to obtain a comparison result; and a result determination module that determines the identity recovery result of the lost object based on the comparison result.

[0014] According to one aspect of the present disclosure, there is provided a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the identity recovery method based on a blockchain described in any one of the above is implemented.

[0015] According to one aspect of the present disclosure, there is provided an electronic device, including: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the identity recovery method based on a blockchain described in any one of the above by executing the executable instructions.

[0016] In the identity recovery method based on blockchain, identity recovery device based on blockchain, computer-readable storage medium, and electronic device provided in the embodiments of the present disclosure, on the one hand, biometric signals strongly related to the lost object are converted into hash values and stored in the blocks of the blockchain, improving the accuracy and security of data storage. On the other hand, the response data represented by the hash value is generated from the biometric signals of the user individual represented by the responder, without relying on external data, avoiding security issues caused by external data leakage. Moreover, the hash value can only be calculated by the real user represented by the responder and cannot be calculated in reverse, preventing impersonation of the real user and enhancing security. On the further hand, hash values are generated from the biometric signals of the user in multiple application scenarios, and identity recovery is performed by comparing the hash values in multiple application scenarios with the original hash value, avoiding security issues and inaccuracies caused by leakage and replay of single data, and improving security and accuracy.

[0017] It should be understood that the above general description and subsequent detailed description are only exemplary and explanatory, and cannot limit the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The accompanying drawings herein are incorporated into the specification and constitute a part of this specification, showing embodiments consistent with the present disclosure and, together with the specification, used to explain the principles of the present disclosure. Obviously, the drawings in the following description are only some embodiments of the present disclosure, and those of ordinary skill in the art can obtain other drawings without creative efforts based on these drawings.

[0019] Figure 1 Schematically showing a flowchart of an identity recovery method based on blockchain according to an embodiment of the present disclosure.

[0020] Figure 2 Schematically showing a flowchart of generating a hash value according to an embodiment of the present disclosure.

[0021] Figure 3 Schematically showing a diagram of determining the hash value of the responder according to an embodiment of the present disclosure.

[0022] Figure 4 Schematically showing a specific flowchart of determining the identity recovery result according to an embodiment of the present disclosure.

[0023] Figure 5 Schematically showing a diagram of the overall process of identity recovery according to an embodiment of the present disclosure.

[0024] Figure 6 Schematically showing a diagram of the interaction process of performing identity recovery according to an embodiment of the present disclosure.

[0025] Figure 7A block diagram of the identity recovery device based on blockchain according to an embodiment of the present disclosure is schematically shown.

[0026] Figure 8 A block diagram of an electronic device according to an embodiment of the present disclosure is schematically shown. Detailed implementation manners

[0027] Example embodiments will now be described more fully with reference to the accompanying drawings. However, the example embodiments can be implemented in various forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be more complete and comprehensive, and will fully convey the concept of the example embodiments to those skilled in the art. The features, structures, or characteristics described may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to give a thorough understanding of the embodiments of the present disclosure. However, those skilled in the art will realize that the technical solutions of the present disclosure can be practiced without one or more of the specific details, or other methods, components, devices, steps, etc. may be adopted. In other cases, well-known technical solutions are not shown or described in detail to avoid obscuring various aspects of the present disclosure.

[0028] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and thus their repeated description will be omitted. Some of the block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0029] In the metaverse, the private key is an important basis for identity recognition. However, the private key may be lost or stolen for various reasons. For the digital avatars of real-world humans in the virtual world, the current ways to recover the identity can include, for example, using user identity information, mnemonic phrases, face recognition, fingerprints, etc. The above recovery methods have security flaws and do not match decentralization. For example, the unique identity identifier of the user on the application platform can be obtained, the hash value of the identity identifier can be calculated, and the user's digital identity, hash value, newly disclosed key, and the type of the application platform are sent to the contract. The contract judges the identifier, and thus the relationship between the application platform and the newly disclosed key is stored in the contract. Among them, the user needs to have several self-social media accounts, which have limitations in use; the recovery depends on the self-social media name and the user's identity identifier in the self-social media, and these data may change or be stolen, resulting in low security of the recovery; the user generates the recovery contract by himself / herself, and the rationality and security of the contract lack unified guarantee.

[0030] In order to solve the problems in the related art, in the embodiments of the present disclosure, a blockchain-based identity recovery method is provided, which can be used for real-world users to recover the identity of their digital avatars in the virtual world, and is applicable to the scenario of re-identifying and recovering the identity after the identity key of the digital avatar is lost. Refer to Figure 1 As shown in

[0031] Step S110: Receive a recovery request sent by a lost object for recovering the digital avatar;

[0032] Step S120: Respond to the recovery request and generate multiple hash values for multiple application scenarios according to the biological signals of the responder;

[0033] Step S130: Compare the multiple hash values with the original hash values of the lost object stored in the blocks of the blockchain respectively to obtain a comparison result;

[0034] Step S140: Determine the identity recovery result of the lost object based on the comparison result.

[0035] In the embodiments of the present disclosure, on the one hand, the biological signals strongly related to the lost object are converted into hash values and stored in the blocks of the blockchain, which improves the accuracy and security of data storage. The response data represented by the hash value is generated by the user individual of the responder, without relying on external data, avoiding security problems caused by external data leakage, and the hash value can only be calculated by the real user represented by the responder and cannot be calculated reversely, avoiding impersonating real users. On the other hand, hash values are generated through the biological signals of users in multiple application scenarios, and identity recovery is performed based on the hash values of multiple application scenarios, avoiding security problems caused by leakage and replay of single data, and avoiding inaccuracies caused by single data, improving security and accuracy. On the other hand, it avoids generality and improves generality, and also improves rationality and the reliability of identity recovery.

[0036] Next, refer to Figure 1 As shown in

[0037] In step S110, receive a recovery request sent by a lost object for recovering the digital avatar.

[0038] In the embodiments of the present disclosure, a lost object refers to a real user whose identity key of the digital avatar in the virtual world is lost. The lost object can be a person without a key. The lost object can send a retrieval request for retrieving the digital avatar. The digital avatar refers to the virtual image of the lost object in the virtual world, and there can be a mapping relationship between the digital avatar and the lost object in the real world. For each user, there can be a digital avatar in the virtual world mapped to each user. The retrieval request can be various types of request data for representing the identity key of the digital avatar to be retrieved, as long as it can represent the information of the identity key of the digital avatar to be retrieved. For example, the retrieval request can include, but is not limited to, the user identifier to be retrieved, etc., and can also include other information, etc.

[0039] In step S120, in response to the retrieval request, multiple hash values for multiple application scenarios are generated according to the biological signals of the response object.

[0040] In the embodiments of the present disclosure, the response object can be a real object that makes a reply or response in response to the retrieval request. The response object can be the lost object itself, or other users other than the lost object itself. Since the lost type can be generated for various reasons, for example, the user forgets and loses it by himself or is stolen by other users, based on this, the lost type can be the first type and the second type. The first type can be used to represent the loss caused by others' behavior, such as account theft; the second type can be used to represent the loss caused by one's own behavior, such as other loss situations other than account theft.

[0041] Due to different lost types, the response objects corresponding to the lost types are also different. In some embodiments, when the lost type is the first type, the response object can include the retrieved object and the candidate holding object; when the lost type is the second type, the response object can include the retrieved object itself, and there is no candidate holding object. Among them, the retrieved object refers to the lost object, and the candidate holding object refers to other users other than the lost object itself, such as hacker users, etc.

[0042] The biological signal can be a biological sign for representing user characteristics, and the biological signal can be a signal strongly related to the user. Strongly related means a biological signal with a relatively high correlation with user characteristics, which can be used to describe the characteristics of the user itself or the user portrait. Strongly related biological signals include, for example, but are not limited to, iris signals, facial signals, fingerprint signals, etc.

[0043] In some embodiments, multiple types of biological signals of the user corresponding to the digital avatar can be collected. For example, the biological signal can be represented as S1 - Sn. Among them, S1 and Sn respectively represent a biological signal, and multiple types of biological signals can be different.

[0044] The multiple application scenarios can be a part of the application scenarios selected from all the application scenarios, for example, they can be m application scenarios. The multiple application scenarios can be similar scenarios or scenarios that have occurred before, and no specific limitation is made here. The biological signals of the multiple application scenarios can be the same or different, which is specifically determined according to actual requirements, and no specific limitation is made here.

[0045] The hash value refers to the value obtained by converting the biological signal. For each application scenario, a hash value can be generated, so the hash value can correspond to the application scenario one by one. For different users, the hash values of the same application scenario can be the same or different. For the same user, the hash values of different application scenarios can be the same or different, and no specific limitation is made here.

[0046] On this basis, multiple hash values of multiple application scenarios can be generated according to the biological signal of the respondent. For the digital twin of each user, the hash value of each application scenario can be generated according to its biological signal.

[0047] The process of generating the hash value of the digital twin in each application scenario according to the biological signal can include the following steps: performing section mapping on the biological signal to obtain a mapped value; encrypting the mapped value to obtain an encrypted value and performing a hash function operation to obtain a hash value.

[0048] Figure 2 schematically shows the flowchart of generating the hash value, refer to Figure 2 as shown in, mainly includes the following steps:

[0049] In step S201, the digital twin authenticates its identity in the virtual world through a key.

[0050] In step S202, the virtual world collects various biological signals S1 - Sn of the user in each application scenario; since there is a mapping relationship between the user and the digital twin, it can be considered that various biological signals of the user corresponding to the digital twin are collected.

[0051] In step S203, perform section mapping on the collected various biological signals to obtain the mapped values X1 - Xn corresponding to each biological signal.

[0052] In this step, the mapped value can be a section value, which can be used to represent a section. For example, when the sampled value of biological signal 1 is 3, it can be section-mapped so that it is within the section 1-5 represented by the mapped value. When the sampled value of biological signal 2 is 8, it can be section-mapped to the section 6-10 represented by the mapped value. The mapped value obtained by mapping each biological signal can be determined according to actual needs, and the mapped values obtained by mapping each biological signal can be the same or different. By section-mapping the biological signal to the mapped value, the accuracy of the biological signal can be controlled by using section mapping. As long as the sampled value of the biological signal falls into each divided section, accurate mapping can be achieved.

[0053] In step S204, the mapped values X1-Xn are encrypted to obtain encrypted values.

[0054] In this step, an encryption method can be used to encrypt the mapped value obtained by section mapping to convert the mapped value into an encrypted value. The encryption method can include but is not limited to asymmetric encryption, symmetric encryption, or any other type of encryption method.

[0055] In step S205, a hash function operation is performed on the encrypted value to obtain a hash value.

[0056] In this step, the hash function can also be called a hashing function. The hash function can compress a message or data into a digest, making the data volume smaller and fixing the data format. This function shuffles and mixes the data to recreate a data called a hash value. This transformation is a compression mapping, that is, the space of the hash value is usually much smaller than the space of the input value. Different inputs may hash to the same output, and it is impossible to uniquely determine the input value from the hash value. Based on this, the hash function can be a hashing function or MD5. The hash value of any length of encrypted value can be deduced to a fixed-length hash value through the hash function. Specifically, the encrypted value can be compressed into a fixed length to determine the hash value of the encrypted value in each application scenario. The fixed length can be, for example, 128 or 256, etc., which is specifically determined according to actual needs. Moreover, the process of obtaining the hash value through the hash function can only be deduced unidirectionally by the real user and cannot be deduced in reverse, that is, the encrypted value cannot be determined by reverse deduction based on the hash value. Therefore, it can avoid impersonating real users and improve security.

[0057] In step S206, the hash value is stored in a block of the blockchain.

[0058] In this step, the blockchain can be a chain composed of multiple blocks. Each block stores certain information, and they are connected into a chain according to the chronological order of their generation. This chain is stored in all servers. As long as one server in the entire system can work, the entire blockchain is secure. These servers are called nodes in the blockchain system, and they provide storage space and computing power support for the entire blockchain system. If you want to modify the information in the blockchain, you must obtain the consent of more than half of the nodes and modify the information in all nodes, and these nodes are usually in the hands of different entities. Compared with traditional networks, the data in the blockchain is difficult to tamper with and can achieve decentralization. Based on this, the blockchain can be a database. The data recorded in all blocks of the blockchain is not unique, and different blocks are distributed blocks. Therefore, the blockchain can ensure the security of data through decentralization and distributed storage.

[0059] On this basis, the biological signals of each user in the application scenario can be mapped into sections and encrypted, and then the hash value obtained by converting the encrypted value to a fixed length can be stored in the block of the blockchain. Among them, the block in the blockchain makes the hash value decentralized and tamper-proof, improving the security of the hash value.

[0060] It should be noted that for all users, their biological signals can be processed through the methods of step S201 to step S206 to obtain hash values and stored in the blocks of the blockchain, and the hash values of each user can be stored in different blocks, thereby improving the security of the data.

[0061] In the process of identity recovery, for the responder, multiple hash values of multiple application scenarios can be generated according to the biological signals of the responder, where the application scenarios correspond to the hash values one by one. Figure 3 schematically shows a flowchart for determining the hash value of the responder. Refer to Figure 3 As shown in, it mainly includes the following steps:

[0062] In step S310, multiple biological signals of the responder are collected in multiple application scenarios in the virtual world.

[0063] In this step, the responder can be determined according to the loss type. For example, if the response type is the first type, the responder includes the recovery object and the candidate holding object; if the response type is the second type, the responder includes the recovery object, that is, only the recovery object will generate a response, and the candidate holding object will not generate a response. Among them, the candidate holding object can be at least one, which is not limited here.

[0064] The biological signal can be any type of biometric feature strongly related to the respondent object, such as iris signal, facial signal, fingerprint signal, and so on. For different application scenarios, the types of biological signals collected can be the same. For example, the iris signal, facial signal, and fingerprint signal of the retrieved object can be collected, or the iris signal, facial signal, and fingerprint signal of the candidate holder object can be collected, and so on. The types of biological signals collected from different respondent objects can be the same, but the specific values can be different.

[0065] In step S320, obtain the encrypted values corresponding to multiple biological signals, and perform a hash function operation on the encrypted values to generate the hash values for each application scenario.

[0066] In this step, after obtaining the biological signals of the respondent object, multiple biological signals can be subjected to section mapping to obtain mapping values representing sections so that the biological signals are within the sections corresponding to the mapping values, and the mapping values are encrypted to obtain the encrypted values. Exemplarily, each biological signal can be mapped to a section to obtain a mapping value representing the section; further, the mapping value can be encrypted in any type to obtain the encrypted value, and the encrypted value is compressed into a fixed length through a hash function to determine the hash value for each application scenario.

[0067] In the embodiments of the present disclosure, by selecting multiple application scenarios, for example, selecting m application scenarios in the virtual world as the multiple application scenarios, and sending the same operation task to all respondent objects, so that all respondent objects respond under the same operation task. Based on this, each respondent object can generate m hash values.

[0068] In the above manner, it is possible to avoid the influence on the result when there is a deviation in identity recognition based on a single sampling value in one application scenario, improving the robustness and reliability. Moreover, the hash value can only be generated by the real user represented by the respondent object and cannot be generated in reverse, which can improve security.

[0069] In step S130, respectively compare the multiple hash values with the original hash values of the lost object stored in the block of the blockchain to obtain a comparison result.

[0070] In the embodiments of the present disclosure, for each hash value of each respondent object, it can be compared with the original hash value of the lost object stored in the block of the blockchain to obtain a comparison result. The original hash value refers to the hash value stored in the block generated based on the biological signal of the lost object. For each respondent object, the comparison result can be that the hash value of the respondent object is the same as the original hash value of the lost object, or the hash value of the respondent object is different from the original hash value of the lost object. Exemplarily, the approximation degree between the hash value of the respondent object and the original hash value of the lost object stored in the block can be calculated. When the approximation degree is greater than a preset value, the comparison result can be considered the same; when the approximation degree is less than the preset value, the comparison result can be considered different. The preset value can be, for example, 0.5 or other values, which are specifically defined according to actual requirements.

[0071] In step S140, based on the comparison result, determine the identity recovery result of the lost object.

[0072] In the embodiments of the present disclosure, after comparing the hash value of each application scenario of the respondent object with the original hash value of the lost object, the identity recovery result can be determined based on the comparison result according to the lost type. Among them, if the lost type is different, the method of determining the identity recovery result based on the comparison result is different.

[0073] Exemplarily, the identity recovery result can be determined by combining the preset result in the comparison result. Among them, the same hash value of the respondent object and the original hash value of the lost object can be used as the preset result. Figure 4 The flowchart of determining the identity recovery result is schematically shown in Figure 4 As shown in

[0074] In step S410, determine whether the lost type is the first type. If so, go to step S420; if not, go to step S450.

[0075] In step S420, determine whether the number of times the comparison result of the retrieved object is the preset result is greater than the number of times the comparison result of the candidate holder object is the preset result. If so, go to step S430; if not, go to step S440;

[0076] In step S430, determine that the identity recovery result is successful recovery.

[0077] In step S440, determine that the identity recovery result is failed recovery.

[0078] In step S450, determine whether the comparison result of the retrieved object is the preset result and whether the preset result meets the recovery condition. If so, go to step S430; if not, go to step S440.

[0079] In an embodiment of the present disclosure, if the loss type is the first type, such as account theft loss, the comparison result of the object to be retrieved and the comparison result of the candidate holder object can be obtained respectively. Further, if the comparison result is a preset result, the preset result may be that the hash value is the same as the original hash value, for example, the hash value of the object to be retrieved is the same as the original hash value or the hash value of the candidate holder object is the same as the original hash value. Further, the comparison result of the object to be retrieved can be compared with the comparison result of the candidate holder object to determine the identity retrieval result. Specifically, it is judged whether the number of times the comparison result of the object to be retrieved is the preset result is greater than the number of times the comparison result of the candidate holder object is the preset result. If the number of times the comparison result of the object to be retrieved is the preset result is greater than the number of times the comparison result of the candidate holder object is the preset result, the identity retrieval result can be determined as successful retrieval. If the number of times the comparison result of the object to be retrieved is the preset result is less than the number of times the comparison result of the candidate holder object is the preset result, the identity retrieval result can be determined as failed retrieval.

[0080] Figure 5 A flowchart of identity retrieval is schematically shown in Figure 5 As shown in, it mainly includes the following steps:

[0081] In step S510, the lost object initiates a retrieval request for retrieving the digital avatar. The lost object can be a person without a key.

[0082] In step S520, the virtual world system selects m scenarios and sends the same challenge requirements to the object to be retrieved and the candidate holder object.

[0083] Among them, the candidate holder object refers to a possible key holder. By selecting m application scenarios, the influence of the deviation of a single sampled value obtained by sampling in one application scenario on the result can be avoided, and the accuracy of the result is improved.

[0084] In step S530, the responder makes a response. That is, if the loss type of the key is the lost state represented by the first type, the retriever and the possible key holder act as responders to make a response; if the key is in the lost state represented by the second type, only the retriever acts as the responder to make a response.

[0085] In step S540, hash values of the response object in each application scenario are generated. Among them, the hash values can be generated according to the steps in steps S202 to S205. Specifically, the biological signals of each response object can be obtained, and each biological signal is mapped to a corresponding mapped value in a section to map it to the section represented by the mapped value. The mapped value is encrypted to obtain an encrypted value, and the encrypted value is subjected to a hash function operation to compress the encrypted value corresponding to the biological signal into a hash value of a fixed length, so as to convert the biological signal into a hash value. Based on this, for m application scenarios, m hash values can be obtained.

[0086] In step S550, the m hash values generated by the retrieval object and the candidate holding object are respectively compared with the original hash value of the lost object stored in the block of the blockchain to obtain a comparison result.

[0087] In step S560, the comparison result of the retrieval object is compared with the comparison result of the candidate holding object to determine the identity retrieval result.

[0088] Exemplarily, the identity retrieval result can be retrieval success or retrieval failure, which is specifically determined according to the loss type and the comparison result. In a certain time period, the original system compares the comparison results obtained by respectively comparing the m hash values of the retrieval object and the candidate holding object with the original hash value of the lost object stored in the block of the blockchain. If the number of times the hash value of the retrieval object is the same as the original hash value of the lost object in the m application scenarios is greater than the number of times the hash value of the candidate holding object is the same as the original hash value in the m application scenarios, it can be determined that the identity retrieval result is retrieval success. After the identity retrieval is successful, the system sends a new key. On the contrary, if the number of times the hash value of the retrieval object is the same as the original hash value is less than the number of times the hash value of the candidate holding object is the same as the original hash value in the m application scenarios, the identity retrieval result is retrieval failure.

[0089] If the loss type is the second type, for example, other loss situations except account theft. At this time, there is no candidate holding object. Therefore, when the comparison result of the retrieval object is a preset result, the identity retrieval result can be determined by whether the preset result meets the retrieval condition. The retrieval condition can be that the number of times the comparison result is the preset result is greater than the number threshold, and the number threshold can be set according to actual needs, such as 1 time or 2 times, etc. When the comparison result is that the hash value is the same as the original hash value and the number of times is greater than the number threshold, that is, the number of times the comparison result is the preset result is greater than or equal to the number threshold, it is determined that the identity retrieval result is retrieval success. If the number of times the comparison result is the preset result is less than the number threshold, it is considered that the identity retrieval result is retrieval failure.

[0090] Figure 4 andFigure 5 In the technical solution, since there are hash values corresponding to multiple application scenarios, the hash value of the respondent object in each application scenario can be compared with the original hash value of the lost object in the same application scenario, and the identity recovery result can be determined according to the number of times the comparison result is the preset result. By comparing multiple times and using the total victory method to determine the identity recovery result, it is possible to avoid the deviation and randomness caused by directly determining the identity recovery result through a single comparison, and improve the accuracy of the identity recovery result. In addition, considering the deviation of the sampling value of each biological signal, section mapping is used to convert the biological signal into mapped data, so that the biological signal does not require an exact value, as long as the sampling value falls into each divided section, which improves the accuracy.

[0091] Figure 6 The figure schematically shows a scenario diagram for identity recovery. Refer to Figure 6 As shown in, which includes a lost object 601, a blockchain 602, a recovered object 603, and a candidate holder object 604. The blockchain may include multiple blocks. The main interaction process for the lost object to recover its identity may include:

[0092] The lost object 601 stores the hash value of its digital twin in the block of the blockchain as the original hash value. The lost object 601 initiates a recovery request. According to the type of loss, the recovered object 603 and the candidate holder object 604 are selected as respondent objects. The recovered object 603 and the candidate holder object 604 respectively generate their hash values in multiple application scenarios; the hash values are compared with the original hash value of the lost object stored in the block of the blockchain, and the comparison results are obtained respectively. According to the number of times the comparison result is that the hash value is the same as the original hash value, it is determined whether the identity recovery is successful. If there is only a recovered object and no candidate holder object, it can be determined whether the recovery is successful or failed according to whether the number of times the comparison result of the recovered object is that the hash value is the same as the original hash value is greater than the threshold number of times.

[0093] For example, there are 6 application scenarios. The hash values 1, 2, 3, and 4 of the retrieved object 603 are all the same as the corresponding original hash values. Therefore, it can be considered that the number of times the comparison result is the preset result is 4 times. The hash values 1, 2, and 3 of the candidate holding object 604 are all the same as the corresponding original hash values. Therefore, it can be considered that the number of times the comparison result is the preset result is 3 times. At this time, since the number of times the comparison result of the retrieved object 603 has the same hash value as the original hash value is greater than the number of times the comparison result of the candidate holding object 604 has the same hash value as the original hash value, it can be considered that the identity retrieval result is successful. Otherwise, if the hash values 1, 2, 3, 4, and 6 of the candidate holding object 604 are all the same as the corresponding original hash values, it can be considered that the number of times the comparison result is the preset result is 5 times. At this time, it is considered that the identity retrieval result is a failure.

[0094] The technical solution in the embodiments of the present disclosure is used for retrieving the digital avatar of a real-world human in a virtual world and re-identifying and retrieving the identity after the identity key of the digital avatar is lost. Utilizing the characteristics of the blockchain, it adopts the method of converting the biometric signals strongly related to the user into hash values and storing them in the block as reference data, improving the accuracy and security of the reference data. The response data represented by the hash value is generated by user individuals such as the responder object and does not require external data, avoiding security problems caused by external data leakage. The response data calculates the hash value unidirectionally by the real user through the hash function and cannot be calculated in reverse, avoiding impersonating real users. The biometric signals in multiple application scenarios are selected to generate the hash values for each application scenario, and the identity retrieval is judged according to the hash values of each scenario, avoiding the problem of poor security caused by the leakage and replay of single data and improving security. And since the identity retrieval result can be judged jointly according to the hash values of multiple application scenarios, it avoids the inaccurate problem that may exist when judging only according to single data and improves the accuracy of identity recognition.

[0095] The present disclosure also provides an identity retrieval device based on the blockchain. Refer to Figure 7 As shown, the blockchain-based identity retrieval method 700 mainly includes the following modules:

[0096] The request acquisition module 701 receives the retrieval request sent by the lost object for retrieving the digital avatar;

[0097] The hash value determination module 702 is used to respond to the retrieval request and generate multiple hash values for multiple application scenarios according to the biometric signals of the responder object;

[0098] The comparison module 703 is used to respectively compare the multiple hash values with the original hash values of the lost object stored in the block of the blockchain to obtain the comparison result;

[0099] A result determination module 704, configured to determine an identity recovery result of the lost object based on the comparison result.

[0100] In an exemplary embodiment of the present disclosure, generating multiple hash values for multiple application scenarios according to the biological signals of the respondent object includes: collecting multiple biological signals of the respondent object in multiple application scenarios in the virtual world; obtaining encryption values corresponding to the multiple biological signals, and performing a hash function operation on the encryption values to generate the hash values for each application scenario.

[0101] In an exemplary embodiment of the present disclosure, obtaining the encryption values corresponding to the multiple biological signals includes: performing segment mapping on the multiple biological signals to obtain mapped numerical values, and encrypting the mapped numerical values to obtain the encryption values.

[0102] In an exemplary embodiment of the present disclosure, performing a hash function operation on the encryption values to generate the hash values for each application scenario includes: compressing the encryption values into a fixed length to determine the hash values for each application scenario.

[0103] In an exemplary embodiment of the present disclosure, determining the identity recovery result of the lost object based on the comparison result includes: determining the identity recovery result based on the comparison result according to the loss type.

[0104] In an exemplary embodiment of the present disclosure, the loss type is the first type, and the respondent object is the object to be recovered and the candidate holder object; determining the identity recovery result based on the comparison result according to the loss type includes: if the number of times the comparison result of the object to be recovered is the preset result is greater than the number of times the comparison result of the candidate holder object is the preset result, determining that the identity recovery result is successful recovery; if the number of times the comparison result of the object to be recovered is the preset result is less than the number of times the comparison result of the candidate holder object is the preset result, determining that the identity recovery result is identity failure.

[0105] In an exemplary embodiment of the present disclosure, the loss type is the second type, and the respondent object is the object to be recovered; determining the identity recovery result based on the comparison result according to the loss type includes: if the comparison result of the object to be recovered is the preset result and the preset result meets the recovery condition, determining that the identity recovery result is successful recovery.

[0106] It should be noted that the specific details of each module in the above identity recovery device based on blockchain have been described in detail in the corresponding identity recovery method based on blockchain, so they will not be repeated here.

[0107] It should be noted that although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more of the above-described modules or units can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0108] In addition, although the steps of the methods in the present disclosure are described in a specific order in the drawings, this does not require or imply that these steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step for execution, and / or one step may be decomposed into multiple steps for execution, etc.

[0109] In an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above method is also provided.

[0110] Those skilled in the art can understand that various aspects of the present disclosure can be implemented as a system, a method, or a program product. Therefore, various aspects of the present disclosure can be specifically implemented in the following forms, namely: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or an implementation combining hardware and software aspects, which can be collectively referred to as "circuitry", "module", or "system" here.

[0111] The following refers to Figure 8 to describe the electronic device 800 according to this embodiment of the present disclosure. Figure 8 The electronic device 800 shown is merely an example and should not impose any limitations on the functions and usage scope of the embodiments of the present disclosure.

[0112] As Figure 8 shown, the electronic device 800 is presented in the form of a general-purpose computing device. The components of the electronic device 800 may include, but are not limited to: at least one of the above-mentioned processing units 810, at least one of the above-mentioned storage units 820, a bus 830 connecting different system components (including the storage unit 820 and the processing unit 810), and a display unit 840.

[0113] Among them, the storage unit stores program code, and the program code can be executed by the processing unit 810, so that the processing unit 810 executes the steps according to various exemplary embodiments of the present disclosure described in the above "Exemplary Method" section of this specification. For example, the processing unit 810 can execute the steps as Figure 1 shown in.

[0114] The storage unit 820 may include a readable medium in the form of a volatile storage unit, such as a random access memory (RAM) 8201 and / or a cache storage unit 8202, and may further include a read-only memory (ROM) 8203.

[0115] The storage unit 820 may also include a program / utility 8204 having a set (at least one) of program modules 8205. Such program modules 8205 include, but are not limited to: an operating system, one or more application programs, other program modules, and program data. Each or some combination of these examples may include an implementation of a network environment.

[0116] The bus 830 may represent one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus structures.

[0117] The electronic device 800 may also communicate with one or more external devices 900 (such as a keyboard, a pointing device, a Bluetooth device, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 800, and / or may communicate with any device that enables the electronic device 800 to communicate with one or more other computing devices (such as a router, a modem, etc.). Such communication may be through an input / output (I / O) interface 850. Further, the electronic device 800 may communicate with one or more networks (such as a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) through a network adapter 860. As shown in the figure, the network adapter 860 communicates with other modules of the electronic device 800 through the bus 830. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 800, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.

[0118] Through the description of the above embodiments, those skilled in the art can easily understand that the example embodiments described herein can be implemented by software, or can be implemented by a combination of software and necessary hardware. Therefore, the technical solutions according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or an electronic device, etc.) to execute the method according to the embodiments of the present disclosure.

[0119] In an exemplary embodiment of the present disclosure, there is also provided a computer-readable storage medium, on which a program product capable of implementing the above methods of this specification is stored. In some possible implementation manners, various aspects of the present disclosure can also be implemented in the form of a program product, which includes program code. When the program product runs on a terminal device, the program code is used to cause the terminal device to execute the steps according to various exemplary embodiments of the present disclosure described in the above "Exemplary Method" section of this specification.

[0120] The program product for implementing the above method according to an embodiment of the present disclosure may be a portable compact disc read-only memory (CD-ROM) and includes program code, and may run on a terminal device, such as a personal computer. However, the program product of the present disclosure is not limited thereto. In this document, the readable storage medium may be any tangible medium that contains or stores a program, and the program can be used by or in combination with an instruction execution system, apparatus, or device.

[0121] The program product may adopt any combination of one or more readable media. The readable media may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples (non-exhaustive list) of the readable storage medium include: an electrical connection having one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0122] The computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries the readable program code. Such a propagated data signal may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The readable signal medium may also be any readable medium other than the readable storage medium, and the readable medium can send, propagate, or transmit a program for use by or in combination with an instruction execution system, apparatus, or device.

[0123] The program code contained on the readable medium can be transmitted by any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the above.

[0124] Program code for performing the operations of the present disclosure may be written in any combination of one or more programming languages, including object-oriented programming languages such as Java, C++, etc., and also including conventional procedural programming languages such as the "C" language or similar programming languages. The program code may execute entirely on the user's computing device, partly on the user's device, as a stand-alone software package, partly on the user's computing device and partly on a remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user's computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., through the Internet using an Internet service provider).

[0125] In addition, the above-mentioned drawings are only schematic illustrations of the processes included in the method according to the exemplary embodiments of the present disclosure, rather than for limiting purposes. It is easy to understand that the processes shown in the above-mentioned drawings do not indicate or limit the chronological order of these processes. Additionally, it is also easy to understand that these processes may be executed synchronously or asynchronously, for example, in multiple modules.

[0126] Other embodiments of the present disclosure will be readily apparent to those skilled in the art after considering the specification and practicing the invention herein. This application is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include known common knowledge or conventional technical means in the art that are not invented by the present disclosure. The specification and embodiments are to be considered exemplary only, and the true scope and spirit of the present disclosure are pointed out by the claims.

Claims

1. A blockchain-based identity recovery method, characterized in that, including: Receiving a retrieval request sent by a lost object for retrieving a digital avatar; Responding to the retrieval request, obtaining the biological signals of the respondent object, performing section mapping on multiple biological signals to obtain mapping values, encrypting the mapping values to obtain encrypted values corresponding to the biological signals, and compressing the encrypted values into a fixed length to generate multiple hash values for multiple application scenarios; Respectively comparing the multiple hash values with the original hash values of the lost object stored in the blocks of the blockchain to obtain a comparison result; Based on the comparison result, determining the identity retrieval result of the lost object.

2. The method for identity retrieval based on blockchain according to claim 1, wherein The method further includes: Collecting multiple biological signals of the respondent object in multiple application scenarios in the virtual world.

3. The method for retrieving identity based on blockchain according to claim 1, wherein The determining the identity retrieval result of the lost object based on the comparison result includes: Based on the comparison result, determining the identity retrieval result according to the loss type.

4. The method for identity retrieval based on blockchain according to claim 3, wherein The loss type is the first type, and the respondent object is the retrieved object and the candidate holding object; The determining the identity retrieval result based on the comparison result according to the loss type includes: If the number of times the comparison result of the retrieved object is the preset result is greater than the number of times the comparison result of the candidate holding object is the preset result, determining that the identity retrieval result is successful retrieval; If the number of times the comparison result of the retrieved object is the preset result is less than the number of times the comparison result of the candidate holding object is the preset result, determining that the identity retrieval result is identity failure.

5. The identity retrieval method based on blockchain according to claim 3, wherein The loss type is the second type, and the respondent object is the retrieved object; The determining the identity retrieval result based on the comparison result according to the loss type includes: If the comparison result of the retrieved object is the preset result and the preset result meets the retrieval conditions, determining that the identity retrieval result is successful retrieval.

6. An identity recovery device based on blockchain, characterized in that, including: A request acquisition module, which receives a retrieval request sent by a lost object for retrieving a digital avatar; A hash value determination module, which is used to respond to the retrieval request, obtain the biological signals of the respondent object, perform section mapping on multiple biological signals to obtain mapping values, encrypt the mapping values to obtain encrypted values corresponding to the biological signals, and compress the encrypted values into a fixed length to generate multiple hash values for multiple application scenarios; A comparison module, which is used to respectively compare the multiple hash values with the original hash values of the lost object stored in the blocks of the blockchain to obtain a comparison result; A result determination module, which is used to determine the identity retrieval result of the lost object based on the comparison result.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the blockchain-based identity retrieval method according to any one of claims 1-5.

8. An electronic device, characterized in that, including: A processor; and A memory for storing executable instructions of the processor; wherein, the processor is configured to execute the blockchain-based identity retrieval method according to any one of claims 1 to 5 by executing the executable instructions.

Images