An information processing method and device

Abstract

The application provides an information processing method and device, and relates to the technical field of blockchains. The method comprises the following steps: acquiring transaction information in a digital ledger of a consortium chain system, wherein the transaction information comprises at least one of system parameters of a public cryptographic ID-PKC system based on an identifier and user identifier revocation information; and performing target processing on a state database corresponding to the consortium chain system according to the transaction information. The scheme of the application can achieve flexible management of the system parameters of the ID-PKC system and the user identifier revocation information, does not depend on a PKI, and realizes cross-domain secure communication.

Description

Technical Field

[0001] This invention relates to the field of blockchain technology, and in particular to an information processing method and apparatus. Background Technology

[0002] In identity-based public key cryptography (ID-PKC) systems, public keys are not transmitted using certificates. Instead, user identifiers, such as name, IP address, email address, and mobile phone number, are used as public keys. The private key is calculated by the Key Generate Center (KGC) based on the system master key and the user identifier. This system eliminates reliance on certificates and certificate management systems, such as Public Key Infrastructure (PKI), significantly simplifying the complexity of managing cryptographic systems. However, some schemes establish a secure Transport Layer Security (TLS) channel between the user and the KGC to transmit ID-PKC system parameters and identifier revocation information. Establishing a TLS channel requires certificates, meaning the ID-PKC system's boot process actually depends on PKI, contradicting the original design intent of ID-PKC. Summary of the Invention

[0003] The purpose of this invention is to provide an information processing method and apparatus to solve the problem of how to transmit ID-PKC system parameters and user identification revocation information without relying on PKI.

[0004] To achieve the above objectives, embodiments of the present invention provide an information processing method applied to a first key generation center (KGC) in a consortium blockchain system, the method comprising:

[0005] Obtain transaction information from the digital ledger of the consortium blockchain system, wherein the transaction information includes at least one of the identifier-based public cryptography ID-PKC system parameters and user identifier revocation information;

[0006] Based on the transaction information, target processing is performed on the state database corresponding to the consortium blockchain system;

[0007] The target processing includes at least one of the following:

[0008] Transaction information writing and processing;

[0009] Transaction information deletion processing;

[0010] Transaction information update processing.

[0011] Optionally, the information processing method further includes, before obtaining the transaction information from the digital ledger of the consortium blockchain system:

[0012] The transaction information is written into the digital ledger of the consortium blockchain system.

[0013] Optionally, in the information processing method, the step of writing the transaction information into the digital ledger of the consortium blockchain system includes:

[0014] After the transaction information is verified by at least one consortium blockchain node in the consortium blockchain system, the transaction information is written into the digital ledger of the consortium blockchain system.

[0015] Optionally, in the information processing method, the ID-PKC system parameters include:

[0016] The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating.

[0017] The name of the domain where the first KGC resides;

[0018] The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system.

[0019] Optionally, in the information processing method, the step of performing target processing on the state database corresponding to the consortium blockchain system based on transaction information includes:

[0020] Based on the name of the domain where the first KGC is located, the first target processing corresponding to the first processing parameter is executed in the corresponding domain of the state database.

[0021] Optionally, the information processing method further includes:

[0022] Obtain first target keyword information, wherein the first target keyword information is sent by the user terminal in the consortium blockchain system;

[0023] Based on the first target keyword information, query the target ID-PKC system parameters in the status database;

[0024] The first target keyword information includes: a first blockchain name and a first target field. The first target field includes a field indicating the name of the domain where KGC is located, a field indicating the name of PPS, or a set of ID-PKC system parameters used in the domain where KGC is located.

[0025] Optionally, in the information processing method, the user identifier revocation information includes:

[0026] The second processing parameter corresponding to the user identifier revocation information includes writing or deleting.

[0027] The name of the domain where the first KGC resides;

[0028] The revocation information includes at least one of a first field, a second field, and a third field, wherein the first field is used to indicate whether the revoked user ID needs to be anonymous, the second field is used to indicate the revoked user ID, and the third field is used to indicate the reason for the revocation of the user ID.

[0029] Optionally, in the information processing method, the step of performing target processing on the state database corresponding to the consortium blockchain system based on transaction information includes:

[0030] Based on the name of the domain where the first KGC is located, the second target processing corresponding to the second processing parameter is executed in the corresponding domain of the state database.

[0031] Optionally, in the information processing method, the ID-PKC system parameters further include: a hash algorithm for anonymizing the user identifier revocation information; then, performing the second target processing corresponding to the second processing parameter in the corresponding field of the state database includes:

[0032] After performing a hash operation on the user ID revocation information according to the hash algorithm, the hash value of the user ID revocation information after the hash operation is written into the corresponding field of the status database.

[0033] Optionally, the information processing method further includes:

[0034] Obtain second target keyword information, which is sent by the user terminal in the consortium blockchain system;

[0035] Based on the second target keyword information, query the target user identifier revocation information in the status database;

[0036] The second target keyword information includes: the user identifier to be queried, the second blockchain name, and the second target field. The second target field includes a field indicating the name of the domain where KGC is located, a field indicating the IMS name, or a set of user identifier revocation lists used in the domain where KGC is located.

[0037] Optionally, in the information processing method, the step of querying the target user identifier revocation information in the status database based on the second target keyword information includes:

[0038] The user identifier to be queried is hashed according to the hash algorithm indicated in the ID-PKC system parameters to obtain the hash value of the user identifier to be queried after hashing.

[0039] Based on the second target keyword information, query the state database for the hash value of the user identifier to be queried after hash operation.

[0040] This invention also provides an information processing apparatus, comprising:

[0041] The first acquisition module is used to acquire transaction information from the digital ledger of the consortium blockchain system. The transaction information includes at least one of the public cryptography ID-PKC system parameters based on the identifier and user identifier revocation information.

[0042] The first processing module is used to perform target processing on the state database corresponding to the consortium blockchain system based on transaction information;

[0043] The target processing includes at least one of the following:

[0044] Transaction information writing and processing;

[0045] Transaction information deletion processing;

[0046] Transaction information update processing.

[0047] Optionally, the information processing apparatus further includes:

[0048] The write module is used to write the transaction information into the digital ledger of the consortium blockchain system.

[0049] Optionally, in the information processing apparatus, the writing module is specifically used for:

[0050] After the transaction information is verified by at least one consortium blockchain node in the consortium blockchain system, the transaction information is written into the digital ledger of the consortium blockchain system.

[0051] Optionally, in the information processing apparatus, the ID-PKC system parameters include:

[0052] The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating.

[0053] The name of the domain where the first KGC resides;

[0054] The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system.

[0055] Optionally, in the information processing apparatus, the first processing module includes:

[0056] The first processing unit is configured to perform the first target processing corresponding to the first processing parameter in the corresponding domain of the state database according to the name of the domain where the first KGC is located.

[0057] Optionally, the information processing apparatus further includes:

[0058] The second acquisition module is used to acquire first target keyword information, wherein the first target keyword information is sent by the user terminal in the consortium blockchain system;

[0059] The first query module is used to query the target ID-PKC system parameters in the status database based on the first target keyword information;

[0060] The first target keyword information includes: a first blockchain name and a first target field. The first target field includes a field indicating the name of the domain where KGC is located, a field indicating the name of PPS, or a set of ID-PKC system parameters used in the domain where KGC is located.

[0061] Optionally, in the information processing device, the user identifier revocation information includes:

[0062] The second processing parameter corresponding to the user identifier revocation information includes writing or deleting.

[0063] The name of the domain where the first KGC resides;

[0064] The revocation information includes at least one of a first field, a second field, and a third field, wherein the first field is used to indicate whether the revoked user ID needs to be anonymous, the second field is used to indicate the revoked user ID, and the third field is used to indicate the reason for the revocation of the user ID.

[0065] Optionally, in the information processing apparatus, the first processing module includes:

[0066] The second processing unit is configured to perform the second target processing corresponding to the second processing parameter in the corresponding domain of the state database according to the name of the domain where the first KGC is located.

[0067] Optionally, in the information processing apparatus, the ID-PKC system parameters further include: a hash algorithm for anonymizing the user identifier revocation information; then the second processing unit is specifically used for:

[0068] After performing a hash operation on the user ID revocation information according to the hash algorithm, the hash value of the user ID revocation information after the hash operation is written into the corresponding field of the status database.

[0069] Optionally, the information processing apparatus further includes:

[0070] The third acquisition module is used to acquire the second target keyword information, which is sent by the user terminal in the consortium blockchain system.

[0071] The second query module is used to query the target user identifier revocation information in the status database based on the second target keyword information;

[0072] The second target keyword information includes: the user identifier to be queried, the second blockchain name, and the second target field. The second target field includes a field indicating the name of the domain where KGC is located, a field indicating the IMS name, or a set of user identifier revocation lists used in the domain where KGC is located.

[0073] Optionally, in the information processing apparatus, the second query module is specifically used for:

[0074] The user identifier to be queried is hashed according to the hash algorithm indicated in the ID-PKC system parameters to obtain the hash value of the user identifier to be queried after hashing.

[0075] Based on the second target keyword information, query the state database for the hash value of the user identifier to be queried after hash operation.

[0076] This invention also provides an electronic device, including: a transceiver and a processor:

[0077] The transceiver is used to acquire transaction information from the digital ledger of the consortium blockchain system. The transaction information includes at least one of the identifier-based public cryptography ID-PKC system parameters and user identifier revocation information.

[0078] The processor is used to perform target processing on the state database corresponding to the consortium blockchain system based on transaction information;

[0079] The target processing includes at least one of the following:

[0080] Transaction information writing and processing;

[0081] Transaction information deletion processing;

[0082] Transaction information update processing.

[0083] Optionally, in the electronic device, the processor is further configured to:

[0084] The transaction information is written into the digital ledger of the consortium blockchain system.

[0085] Optionally, in the electronic device, the processor is further configured to:

[0086] After the transaction information is verified by at least one consortium blockchain node in the consortium blockchain system, the transaction information is written into the digital ledger of the consortium blockchain system.

[0087] Optionally, in the electronic device, the ID-PKC system parameters include:

[0088] The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating.

[0089] The name of the domain where the first KGC resides;

[0090] The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system.

[0091] Optionally, in the electronic device, the processor is further configured to:

[0092] Based on the name of the domain where the first KGC is located, the first target processing corresponding to the first processing parameter is executed in the corresponding domain of the state database.

[0093] Optionally, in the electronic device, the processor is further configured to:

[0094] Obtain first target keyword information, wherein the first target keyword information is sent by the user terminal in the consortium blockchain system;

[0095] Based on the first target keyword information, query the target ID-PKC system parameters in the status database;

[0096] The first target keyword information includes: a first blockchain name and a first target field. The first target field includes a field indicating the name of the domain where KGC is located, a field indicating the name of PPS, or a set of ID-PKC system parameters used in the domain where KGC is located.

[0097] Optionally, in the electronic device, the user identifier revocation information includes:

[0098] The second processing parameter corresponding to the user identifier revocation information includes writing or deleting.

[0099] The name of the domain where the first KGC resides;

[0100] The revocation information includes at least one of a first field, a second field, and a third field, wherein the first field is used to indicate whether the revoked user ID needs to be anonymous, the second field is used to indicate the revoked user ID, and the third field is used to indicate the reason for the revocation of the user ID.

[0101] Optionally, in the electronic device, the processor is further configured to:

[0102] Based on the name of the domain where the first KGC is located, the second target processing corresponding to the second processing parameter is executed in the corresponding domain of the state database.

[0103] Optionally, in the electronic device, wherein the ID-PKC system parameters further include: a hash algorithm for anonymizing the user identifier revocation information; then the processor is further configured to:

[0104] After performing a hash operation on the user ID revocation information according to the hash algorithm, the hash value of the user ID revocation information after the hash operation is written into the corresponding field of the status database.

[0105] Optionally, in the electronic device, the processor is further configured to:

[0106] Obtain second target keyword information, which is sent by the user terminal in the consortium blockchain system;

[0107] Based on the second target keyword information, query the target user identifier revocation information in the status database;

[0108] The second target keyword information includes: the user identifier to be queried, the second blockchain name, and the second target field. The second target field includes a field indicating the name of the domain where KGC is located, a field indicating the IMS name, or a set of user identifier revocation lists used in the domain where KGC is located.

[0109] Optionally, in the electronic device, the processor is further configured to:

[0110] The user identifier to be queried is hashed according to the hash algorithm indicated in the ID-PKC system parameters to obtain the hash value of the user identifier to be queried after hashing.

[0111] Based on the second target keyword information, query the state database for the hash value of the user identifier to be queried after hash operation.

[0112] This invention also provides an information processing apparatus, comprising: a transceiver, a processor, a memory, and a program or instructions stored in the memory and executable on the processor; the processor, when executing the program or instructions, implements the steps of any of the above information processing methods.

[0113] This invention also provides a readable storage medium storing a program or instructions thereon, which, when executed by a processor, implement the steps of the information processing method described in any of the preceding claims.

[0114] The beneficial effects of the above-described technical solution of the present invention are as follows:

[0115] In this embodiment of the invention, transaction information from the digital ledger of a consortium blockchain system is obtained. This transaction information includes at least one of identifier-based public cryptography (KGC) system parameters and user identifier revocation information. Based on the transaction information, target processing is performed on the state database corresponding to the consortium blockchain system, such as writing the transaction information into the state database. Since the consortium blockchain system contains multiple KGCs, the state database contains transaction information corresponding to multiple KGCs. Therefore, user terminals can query transaction information from different KGC domains through the state database, making the query of ID-PKC system parameters and user identifier revocation information no longer dependent on PKI, thus achieving secure cross-domain communication. Attached Figure Description

[0116] Figure 1 This is a schematic diagram of the architecture of a consortium blockchain system according to an embodiment of the present invention;

[0117] Figure 2 This is a flowchart illustrating the information processing method according to an embodiment of the present invention;

[0118] Figure 3 This is a schematic diagram of the modules of the information processing device according to an embodiment of the present invention;

[0119] Figure 4 This is one of the structural block diagrams of the electronic device according to an embodiment of the present invention;

[0120] Figure 5 This is a second structural block diagram of the electronic device according to an embodiment of the present invention. Detailed Implementation

[0121] To make the technical problems, technical solutions and advantages of the present invention clearer, a detailed description will be given below in conjunction with the accompanying drawings and specific embodiments.

[0122] It should be understood that the phrase "one embodiment" or "an embodiment" throughout the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of the invention. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification do not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments.

[0123] In various embodiments of the present invention, it should be understood that the sequence number of each process described below does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0124] In addition, the terms "system" and "network" are often used interchangeably in this article.

[0125] In the embodiments provided in this application, it should be understood that "B corresponding to A" means that B is associated with A, and B can be determined based on A. However, it should also be understood that determining B based on A does not mean determining B solely based on A; B can also be determined based on A and / or other information.

[0126] To enable those skilled in the art to better understand the embodiments of the present invention, the following description is provided first.

[0127] (1) Identifier-based key system.

[0128] Public-key cryptography is the foundation of secure communication. This is due to its ability to provide basic security primitives, including confidentiality, authenticity, and non-repudiation. Traditional public-key cryptography relies on PKI to guarantee the authenticity of public keys. A user's public key and identity are encrypted and bound using digital signatures, which constitute the main components of a user certificate. Therefore, traditional public-key cryptography is also called PKI-based public-key cryptography (PKI-PKC). The PKI (Certificate Authority, which is a key component in PKI) is responsible for certificate management, namely certificate creation, certificate distribution, and certificate revocation. Although this system has been widely used, it has some drawbacks: (1) certificates need to be exchanged in secure applications; (2) the validity of certificates needs to be verified when they are used; and (3) the issuance and management of certificates are very complex.

[0129] To address these issues in traditional PKI-PKC systems, Identity-Based Cryptograph (IBC), also known as Identity-Based Public KeyCryptography (ID-PKC), was proposed. Its main advantage is that it eliminates the need for certificates to transmit public keys. Instead, it uses user identifiers such as name, IP address, email address, and mobile phone number as the public key, while the private key is calculated by the Key Generate Center (KGC) based on the system master key and the user identifiers. This type of system no longer relies on certificates and certificate management systems like PKI, thus significantly simplifying the complexity of managing cryptographic systems.

[0130] KGC typically consists of the following three parts:

[0131] Private Key Generator (PKG):

[0132] The PKG generates a user's private key based on the master password and user identity securely stored in the ID-PKC system. This private key is distributed to users through a secure channel, providing confidentiality and integrity protection. Therefore, only users with associated identities know the private key.

[0133] Public Key Server (PPS):

[0134] PPS provides users with public parameters of the ID-PKC system and policy information describing PKG operations. Because the integrity of these public parameters and policy information is crucial for the proper functioning of the ID-PKC system, the communication channel between the user and PPS must be trusted. However, the communication channel between the user and PPS does not necessarily need to be confidential, as the public parameters and policy information are publicly available to anyone.

[0135] Identity Management Server (IMS):

[0136] IMS manages user identifiers, including ensuring the uniqueness of user identifiers within the management domain, maintaining the status of identifiers (valid, revoked), and publishing identifier revocation information. The communication channel between the user and IMS should be trusted. However, the communication channel between the user and IMS does not necessarily need to be confidential, as identifier revocation information is public information that anyone can access.

[0137] (2) Management of identification key system parameter release and identification revocation.

[0138] The public parameters of the ID-PKC system do not need to be transmitted encrypted, but they must not be altered during transmission, as the integrity of the public parameters is crucial for the correct use of the ID-PKC system. Initializing the ID-PKC system within a domain is relatively easier than across domains. Users within a domain can securely obtain their private keys and the public parameters of the ID-PKC system (e.g., offline). Related schemes use TLS to ensure the security of the transmission of user private keys and public parameters for the ID-PKC system.

[0139] In ID-PKC systems, identifier revocation is required to prevent the continued use of invalid or vulnerable identities or credentials, such as those affected by service interruption or private key leakage. When an identifier is revoked, its status should be set to revoked. Revoked identifiers constitute an Identifier Revocation List (IRL), and its transmission to users requires a reliable channel. In relevant schemes, a TLS secure channel is established between the user and the KGC to transmit identifier revocation information.

[0140] (3) Consortium blockchain system (Hyperledger Fabric).

[0141] A consortium blockchain is a blockchain jointly managed by several organizations. Within a consortium blockchain, multiple pre-selected nodes are designated as ledger nodes. The generation of each block is determined by all pre-selected nodes using a consensus mechanism. Other access nodes can read on-chain information but do not interfere with the ledger process. Consortium blockchains use distributed ledger and distributed consensus technologies to ensure data immutability. The modified distributed database.

[0142] Hyperledger is an open-source collaborative project aimed at improving cross-industry blockchain technology. Hyperledger Fabric is a typical consortium blockchain system that has been applied in multiple industries, including finance, banking, IoT, supply chain, and manufacturing. The basic architecture of Hyperledger Fabric is as follows: Figure 1 As shown, in Hyperledger Fabric, the ledger nodes, also known as endorsement nodes, endorse transactions and, through a consensus mechanism, write the transactions (including valid and invalid transactions) into the digital ledger. Finally, they operate on the state database based on valid transactions. Operations on the state data include writing, updating, and deleting.

[0143] The Hyperledger Fabric transaction process includes: Step 1: The client creates a transaction and sends it to many endorsing nodes. Each endorsing node executes the transaction against its own state database, calculating the transaction's read and write sets (denoted as E). The read set consists of the accessed keys and their version numbers, while the write set consists of the keys to be updated with their new values. Step 2: If there are no errors during transaction execution, the endorsing nodes send the endorsements back to the client. Step 3: Once the client has collected enough endorsements, it submits the transaction with endorsements to the ordering nodes. Step 4: After the received transactions are included in a block, the ordering nodes respond to the client. Step 5: When the user determines that a timeout has expired or the user-defined block size limit has been reached, the ordered transactions are created into a block. Once a block is created (denoted as O), the ordering nodes broadcast it to all nodes. Step 6: Each node verifies all transactions on the block and then commits it to the ledger and state database (denoted as V). Finally, one of the nodes sends a transaction commit message to the client.

[0144] After receiving the block from the sorting node (or another node) via the Gossip protocol, the node checks the block's syntax and then sends it out through channels for various operations. In step 1, each transaction in the block undergoes syntax validation. Then, the vscc (validation system chaincode) runs on each transaction, validating the endorsements and evaluating the endorsement policy of the relevant chaincode. If it does not comply with its endorsement policy, the transaction is marked as invalid.

[0145] In step 2, a Multi-Version Concurrency Control (MVCC) check is performed. This check ensures there are no read-write conflicts between valid transactions. In other words, it avoids double-spending. The read set for each transaction is recalculated by accessing the state database and compared to the read set from the endorsement phase. If these read sets differ, it means that another transaction (in this block or an earlier block) has modified the same key value, and therefore that transaction is marked as invalid. For LevelDB, the state database read operation is integrated with the MVCC operation. However, for CouchDB, all keys for all transactions are read in a batch operation before starting the MVCC operation. In the final step 3, the block is committed. First, the entire block and its valid / invalid flags for each transaction are written to the ledger. Then, the write set of valid transactions is committed to the state database. Finally, the history database is updated to track transactions that have modified key values ​​and data blocks.

[0146] This invention provides an information processing method applied to the first key generation center (KGC) in a consortium blockchain system, such as... Figure 2 As shown, the method includes:

[0147] Step 201: Obtain transaction information from the digital ledger of the consortium blockchain system. The transaction information includes at least one of the following: identifier-based public cryptography ID-PKC system parameters and user identifier revocation information.

[0148] In embodiments of the present invention, such as Figure 1 As shown, n KGCs and user terminals constitute the consortium blockchain system, for example, a Hyperledger Fabric consortium blockchain system, where n≥1. In this consortium blockchain system, the KGCs act as endorsement nodes for Hyperledger Fabric, endorsing transactions. Each KGC includes a PKG, PPS, and IMS. The ID-PKC system parameters are obtained through PPS, and the user identifier revocation information is obtained through IMS. Each KGC corresponds to a KGC domain.

[0149] It should be noted that upon obtaining the user ID revocation information, KCG will publish the user ID revocation information on the blockchain in real time, thereby achieving real-time management of the user ID revocation information.

[0150] Step 202: Based on the transaction information, perform target processing on the state database corresponding to the consortium blockchain system.

[0151] The target processing includes at least one of the following:

[0152] Transaction information writing and processing;

[0153] Transaction information deletion processing;

[0154] Transaction information update processing.

[0155] In this embodiment of the invention, transaction information from the digital ledger of a consortium blockchain system is obtained. This transaction information includes at least one of identifier-based public cryptography (KGC) system parameters and user identifier revocation information. Based on the transaction information, target processing is performed on the state database corresponding to the consortium blockchain system, such as writing the transaction information into the state database. Since the consortium blockchain system contains multiple KGCs, the state database contains transaction information corresponding to multiple KGCs. Therefore, user terminals can query transaction information from different KGC domains through the state database, making the query of ID-PKC system parameters and user identifier revocation information no longer dependent on PKI, thus achieving secure cross-domain communication.

[0156] Optionally, the information processing method further includes, before obtaining the transaction information from the digital ledger of the consortium blockchain system:

[0157] The transaction information is written into the digital ledger of the consortium blockchain system.

[0158] In this embodiment of the invention, each PPS writes its ID-PKC system parameters within its domain to the digital ledger; and each IMS writes user ID revocation information within its domain to the digital ledger.

[0159] Optionally, in the information processing method, the step of writing the transaction information into the digital ledger of the consortium blockchain system includes:

[0160] After the transaction information is verified by at least one consortium blockchain node in the consortium blockchain system, the transaction information is written into the digital ledger of the consortium blockchain system.

[0161] In this embodiment of the invention, at least one consortium blockchain node verifies the transaction information according to the consensus process (i.e., the consensus mechanism described above), and after passing the verification, writes the transaction information into the digital ledger of the consortium blockchain system.

[0162] For example, after the consensus process of the consortium blockchain system, the PPS in the first KGC writes the ID-PKC system parameters into the digital ledger, and after the IMS in the first KGC writes the user identifier revocation information into the digital ledger, the consensus process of the consortium blockchain system is also followed by the revocation of the user identifier.

[0163] Optionally, in the information processing method, the ID-PKC system parameters include:

[0164] The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating.

[0165] The name of the domain where the first KGC resides;

[0166] The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system.

[0167] In this embodiment of the invention, according to the ASN.1 (Abstract Syntax Notation One) method, the ID-PKC system parameters can be described as follows:

[0168]

[0169]

[0170] Here, "version" indicates the version number of the ID-PKC system parameter.

[0171] The action, which is an execution instruction, includes the following options to perform different target processing on the state database corresponding to the consortium blockchain system:

[0172] If the create value is selected, the ID-PKC system parameter writing process is performed on the state database;

[0173] If the replace value is selected, the ID-PKC system parameter update process is performed on the state database, that is, the existing ID-PKC system parameters are replaced;

[0174] If the delete value is selected, the ID-PKC system parameter deletion process is performed on the state database.

[0175] domainName indicates the name of the domain where the first KGC is located. Specifically, this name can be defined according to URI (Uniform Resource Identifier) ​​or URL (Uniform Resource Locator) for KGC addressing, or it can be defined by a user-defined method.

[0176] domainSerial is an integer representing the set of ID-PKC system parameters that can be uniquely used on domainName.

[0177] ppsName indicates the name of the PPS in the first KGC. Specifically, the name can be defined by URI or URL for PPS addressing, or it can be defined by user-defined method.

[0178] The validity field defines the lifespan of the ID-PKC system parameters, specifically including the following:

[0179]

[0180]

[0181] `ibcPublicParameters` represents a structure that includes public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system. The specific structure definition is as follows:

[0182]

[0183] Here, id-pkcAlgorithm indicates the ID-PKC algorithm supported by a consortium blockchain system.

[0184] publicParameterData indicates the structure of the DER-encoded data, which contains the actual cryptographic parameters, and its specific structure depends on the algorithm.

[0185] The id-pkcIdentityType field is used to define the type of identity used within a domain. The way this field is used depends on the application.

[0186] blockchainName indicates that the ID-PKC system parameters are published on the blockchain; this field is used to indicate the name of the blockchain.

[0187] hashAlgorithm specifies the hash algorithm used to hide the user identifier, which is used to anonymize the user identifier in the user identifier revocation information, and is specifically defined as follows:

[0188]

[0189] id-pkcParamStatus is used to indicate the status of the ID-PKC system parameter, and its specific definition is as follows:

[0190]

[0191]

[0192] The value "normal" indicates that the ID-PKC system parameters are valid and should be trusted; this is the default value.

[0193] The expired value indicates that the ID-PKC system parameters have expired and should no longer be considered valid.

[0194] The revoke value indicates that the ID-PKC system parameter has been revoked and should no longer be considered valid.

[0195] The `revokeReason` component (if it exists) should contain a revocation reason. It should exist when the state component specifies revocation; otherwise, it should be absent. Specifically, the following revocation reasons are defined:

[0196]

[0197] The unspecified option can be used to revoke the ID-PKC system parameters for reasons other than a specific code.

[0198] masterkeyCompromise is used to revoke the ID-PKC system parameters in case of a leak of the ID-PKC system's master private key.

[0199] The `weakAlgorithm` method is used to revoke the parameters of an ID-PKC system that uses a weak cryptographic algorithm.

[0200] id-pkcParamExtensions represents a set of extensions that can be used to define additional parameters that a specific implementation may require. The specific structure is defined as follows:

[0201]

[0202] Optionally, in the information processing method, the step of performing target processing on the state database corresponding to the consortium blockchain system based on transaction information includes:

[0203] Based on the name of the domain where the first KGC is located, the first target processing corresponding to the first processing parameter is executed in the corresponding domain of the state database.

[0204] In this embodiment of the invention, the name of the domain where the first KGC is located is first determined according to the ID-PKC system parameters in the transaction information, thereby determining the corresponding domain of the state database and the domain with that name, and then the first target processing is performed in the corresponding domain according to the first processing parameters;

[0205] Here, the first target processing includes at least one of the following:

[0206] The ID-PKC system parameter writing process;

[0207] The ID-PKC system parameter deletion process;

[0208] The ID-PKC system parameter update process.

[0209] Specifically, in the case of performing the ID-PKC system parameter write process:

[0210] In the first KGC, the PPS generates an ID-PKC system parameter. The Action in this ID-PKC system parameter is set to create, meaning that after the first processing parameter is set to write, at least one ledger node of the PPS in the first KGC on the Hyperledger Fabric consortium blockchain system, together with the PPS of other domains (i.e., other KGCs) on the ledger nodes of the Hyperledger Fabric consortium blockchain system, uses the consensus mechanism to write the ID-PKC system parameter of the PPS in the first KGC into the digital ledger of the Hyperledger Fabric consortium blockchain system, and writes the successful transaction ID-PKC system parameter into the corresponding state database.

[0211] Furthermore, when performing the ID-PKC system parameter deletion process, for example, in the case where the Hyperledger Fabric consortium blockchain system uses a weak encryption algorithm:

[0212] In the first KGC, a PPS generates an ID-PKC system parameter. The Version, domainName, domainSerial, and ppsName in this ID-PKC system parameter are consistent with the ID-PKC system parameters already written to the digital ledger of the Hyperledger Fabric consortium blockchain system. The Action is set to delete, i.e., the first processing parameter is set to delete. If the value of id-pkcParamStatus is revoked, revokeReason needs to be filled in. Then, at least one ledger node of the PPS in the first KGC on the Hyperledger Fabric consortium blockchain system uses the consensus mechanism with the ledger nodes of PPS in other domains (i.e., KGCs of other domains) on the Hyperledger Fabric consortium blockchain system to write the ID-PKC system parameter of the PPS in the first KGC into the digital ledger of the Hyperledger Fabric consortium blockchain system. Based on delete, the ID-PKC system parameters with the same Version, domainName, domainSerial, and ppsName in the state database are deleted.

[0213] Furthermore, in the case of performing the ID-PKC system parameter update process, i.e., when the cryptography of the Hyperledger Fabric consortium blockchain system changes:

[0214] In the first KGC, a new ID-PKC system parameter is generated using PPS. The Version, domainName, domainSerial, and ppsName in this ID-PKC system parameter are consistent with the ID-PKC system parameters already written to the digital ledger of the Hyperledger Fabric consortium blockchain system. The Action is then set to the replace value, meaning the first processing parameter is set to the updated value.

[0215] At least one ledger node in the first KGC of the PPS on the Hyperledger Fabric consortium blockchain system uses a consensus mechanism with the ledger nodes of the other domains (i.e., KGCs of other domains) on the same Hyperledger Fabric consortium blockchain system to write the ID-PKC system parameters of the PPS in the first KGC into the digital ledger of the Hyperledger Fabric consortium blockchain system, and updates the ID-PKC system parameters in the state database that include the same Version, domainName, domainSerial, and ppsName according to the replace statement.

[0216] Optionally, the information processing method further includes:

[0217] Obtain first target keyword information, wherein the first target keyword information is sent by the user terminal in the consortium blockchain system;

[0218] Based on the first target keyword information, query the target identifier-based public password ID-PKC system parameters in the status database;

[0219] The first target keyword information includes: a first blockchain name and a first target field. The first target field includes a field indicating the name of the domain where KGC is located (domainName), a field indicating the name of PPS (ppsName), or a set of ID-PKC system parameters used in the domain where KGC is located (domainSerial).

[0220] In this embodiment of the invention, when the user terminal wants to obtain the target ID-PKC system parameters, the system obtains the first target keyword information sent by the user terminal and performs a query in the status database based on the first target keyword information. If no result is found, the query is terminated and an error message is returned to the user terminal, for example, the target ID-PKC system parameters do not exist; if a result is found, the target ID-PKC system parameters are returned to the user terminal.

[0221] Optionally, in the information processing method, the user identifier revocation information includes:

[0222] The second processing parameter corresponding to the user identifier revocation information includes writing or deleting.

[0223] The name of the domain where the first KGC resides;

[0224] The revocation information includes at least one of a first field, a second field, and a third field, wherein the first field is used to indicate whether the revoked user identifier needs to be anonymous, the second field is used to indicate the revoked user identifier, and the third field is used to indicate the reason for the revocation of the user identifier.

[0225] In this embodiment of the invention, according to the ASN.1 method, the user ID revocation information can be described as follows: ID revocation can be described as follows:

[0226]

[0227] Here, "version" indicates the version number of the user identification revocation information.

[0228] The issuer is used to distinguish the issuer of the user identification revocation information.

[0229] The action, which is an execution instruction, includes the following options for performing different target processing on the state database corresponding to the consortium blockchain system:

[0230] If the "create" value is selected, the user identifier revocation information will be written to the status database.

[0231] If the delete value is selected, the user identifier revocation information deletion process is performed on the status database.

[0232] domainName indicates the name of the domain where the first KGC is located. Specifically, this name can be defined by URI or URL for KGC addressing, or it can be defined by user-defined method.

[0233] domainSerial is an integer representing a unique set of user identification revocation information that can be used on domainName.

[0234] imsName indicates the name of the IMS in the first KGC. It can be a name defined by URI or URL for IMS addressing, or it can be a name defined by the user in their own way.

[0235] blockchainName indicates the name of the blockchain on which the user identification revocation information is published.

[0236] The `revokedIdentity` property is used to indicate the user's identity revocation information and specifically includes the following fields:

[0237] The fields anonymimity, identity, revokeReason, revocationDate, and irlEntryExtensions are described below:

[0238] Anonymity is used to indicate whether the user ID being revoked needs to be anonymous, as described below:

[0239]

[0240] The identity is used to indicate the user's ID that has been revoked, as described below:

[0241]

[0242] If the anonymimity field is set to YES, then the ID-PKCIdentityInfo field corresponds to the hash value of the user identification revocation information; otherwise, the ID-PKCIdentityInfo field corresponds to the user identification revocation information itself.

[0243] The `revokeReason` parameter is used to indicate the reason for the user ID revocation, as described below:

[0244]

[0245] Optionally, in the information processing method, the step of performing target processing on the state database corresponding to the consortium blockchain system based on transaction information includes:

[0246] Based on the name of the domain where the first KGC is located, the second target processing corresponding to the second processing parameter is executed in the corresponding domain of the state database.

[0247] In this embodiment of the invention, the name of the domain where the first KGC is located is first determined based on the user identifier revocation information in the transaction information, thereby determining the corresponding domain of the status database corresponding to the domain with that name, and then the second target processing is performed in the corresponding domain according to the second processing parameters;

[0248] Here, the second target processing includes:

[0249] The process of writing or deleting user ID revocation information.

[0250] Specifically, in the case of performing the user identifier revocation information writing process:

[0251] In the first KGC, the IMS generates a user ID revocation information. The Action in the user ID revocation information is set to create, that is, the second processing parameter is set to write. Then, at least one ledger node in the first KGC on the Hyperledger Fabric consortium blockchain system uses the consensus mechanism with the ledger nodes of the IMS in other domains (i.e., KGCs in other domains) on the Hyperledger Fabric consortium blockchain system to write the user ID revocation information of the IMS in the first KGC into the digital ledger of the Hyperledger Fabric consortium blockchain system, and writes the transaction successful I user ID revocation information into the corresponding state database.

[0252] Furthermore, in the case of performing the user ID revocation information deletion process:

[0253] In the first KGC, the IMS generates a user ID revocation information. The Version, domainName, domainSerial, and imsName in this user ID revocation information are consistent with the user ID revocation information already written to the digital ledger of the Hyperledger Fabric consortium blockchain system. The Action is set to delete, i.e., the second processing parameter is set to delete. Then, at least one ledger node in the first KGC's IMS on the Hyperledger Fabric consortium blockchain system uses a consensus mechanism with the ledger nodes of other domains (i.e., KGCs of other domains) on the Hyperledger Fabric consortium blockchain system to write the user ID revocation information of the first KGC's IMS into the digital ledger of the Hyperledger Fabric consortium blockchain system. Based on the delete, the user ID revocation information with the same Version, domainName, domainSerial, and imsName in the state database is deleted.

[0254] Optionally, in the information processing method, the ID-PKC system parameters further include: a hash algorithm for anonymizing the user identifier revocation information; then, performing the second target processing corresponding to the second processing parameter in the corresponding field of the state database includes:

[0255] After performing a hash operation on the user ID revocation information according to the hash algorithm, the hash value of the user ID revocation information after the hash operation is written into the corresponding field of the status database.

[0256] In this embodiment of the invention, when the ID-PKC system parameters further include a hashAlgorithm field, a hash operation is performed on the user ID revocation information according to the hash algorithm. That is, the user ID in the user ID revocation information is anonymized, and the hash value of the user ID revocation information after hash operation is written into the corresponding field of the status database.

[0257] Optionally, the information processing method further includes:

[0258] Obtain second target keyword information, which is sent by the user terminal in the consortium blockchain system;

[0259] Based on the second target keyword information, query the target user identifier revocation information in the status database;

[0260] The second target keyword information includes: the user identifier to be queried, the second blockchain name, and the second target field. The second target field includes a field indicating the name of the domain where KGC is located (domainName), a field indicating the name of IMS (imsName), or a set of user identifier revocation lists used in the domain where KGC is located (domainSerial).

[0261] In this embodiment of the invention, when the user terminal wants to obtain the revocation information of the target user identifier, the second target keyword information sent by the user terminal is obtained, and a query is performed in the status database based on the second target keyword information.

[0262] Optionally, in the information processing method, the step of querying the target user identifier revocation information in the status database based on the second target keyword information includes:

[0263] The user identifier to be queried is hashed according to the hash algorithm indicated in the ID-PKC system parameters to obtain the hash value of the user identifier to be queried after hashing.

[0264] Based on the second target keyword information, query the state database for the hash value of the user identifier to be queried after hash operation.

[0265] In this embodiment of the invention, if a result is found in the status database based on the second target keyword information, the target user identifier revocation information is revoked, and the result information is returned to the user terminal, for example, the target user identifier information has been revoked.

[0266] If no result is found in the status database, the user identifier to be queried is hashed according to the hash algorithm indicated in the ID-PKC system parameters, and the hash value of the user identifier to be queried after hashing is used to query the status database; if the same hash value is found, the user identifier to be queried is a revoked user identifier, and the result information is returned to the user terminal, for example, the user identifier to be queried has been revoked.

[0267] If no matching hash value is found, the user identifier to be queried is considered a valid user identifier, and the result information is returned to the user terminal. For example, the user identifier to be queried is valid, so that regardless of whether the anonymous user identifier to be queried is valid, the result can be found on the blockchain.

[0268] like Figure 3 As shown, this embodiment of the invention also provides an information processing device 300, comprising:

[0269] The first acquisition module 301 is used to acquire transaction information in the digital ledger of the consortium blockchain system. The transaction information includes at least one of the public cryptography ID-PKC system parameters based on the identifier and user identifier revocation information.

[0270] The first processing module 302 is used to perform target processing on the state database corresponding to the consortium blockchain system based on transaction information.

[0271] The target processing includes at least one of the following:

[0272] Transaction information writing and processing;

[0273] Transaction information deletion processing;

[0274] Transaction information update processing.

[0275] This invention provides an embodiment of obtaining transaction information from the digital ledger of a consortium blockchain system. The transaction information includes at least one of identifier-based public cryptography (KGC) system parameters and user identifier revocation information. Based on the transaction information, target processing is performed on the state database corresponding to the consortium blockchain system, such as writing the transaction information into the state database. Since the consortium blockchain system contains multiple KGCs, the state database contains transaction information corresponding to multiple KGCs. Therefore, user terminals can query transaction information from different KGC domains through the state database, making the querying of ID-PKC system parameters and user identifier revocation information independent of PKI, thus achieving secure cross-domain communication.

[0276] Optionally, the information processing device 300 further includes:

[0277] The write module is used to write the transaction information into the digital ledger of the consortium blockchain system.

[0278] Optionally, in the information processing device 300, the writing module is specifically used for:

[0279] After the transaction information is verified by at least one consortium blockchain node in the consortium blockchain system, the transaction information is written into the digital ledger of the consortium blockchain system.

[0280] Optionally, in the information processing device 300, the ID-PKC system parameters include:

[0281] The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating.

[0282] The name of the domain where the first KGC resides;

[0283] The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system.

[0284] Optionally, in the information processing device 300, the first processing module 302 includes:

[0285] The first processing unit is configured to perform the first target processing corresponding to the first processing parameter in the corresponding domain of the state database according to the name of the domain where the first KGC is located.

[0286] Optionally, the information processing device 300 further includes:

[0287] The second acquisition module is used to acquire first target keyword information, wherein the first target keyword information is sent by the user terminal in the consortium blockchain system;

[0288] The first query module is used to query the target ID-PKC system parameters in the status database based on the first target keyword information;

[0289] The first target keyword information includes: a first blockchain name and a first target field. The first target field includes a field indicating the name of the domain where KGC is located, a field indicating the name of PPS, or a set of ID-PKC system parameters used in the domain where KGC is located.

[0290] Optionally, in the information processing device 300, the user identifier revocation information includes:

[0291] The second processing parameter corresponding to the user identifier revocation information includes writing or deleting.

[0292] The name of the domain where the first KGC resides;

[0293] The revocation information includes at least one of a first field, a second field, and a third field, wherein the first field is used to indicate whether the revoked user ID needs to be anonymous, the second field is used to indicate the revoked user ID, and the third field is used to indicate the reason for the revocation of the user ID.

[0294] Optionally, in the information processing device 300, the first processing module 302 includes:

[0295] The second processing unit is configured to perform the second target processing corresponding to the second processing parameter in the corresponding domain of the state database according to the name of the domain where the first KGC is located.

[0296] Optionally, in the information processing device 300, the ID-PKC system parameters further include: a hash algorithm for anonymizing the user identifier revocation information; then the second processing unit is specifically used for:

[0297] After performing a hash operation on the user ID revocation information according to the hash algorithm, the hash value of the user ID revocation information after the hash operation is written into the corresponding field of the status database.

[0298] Optionally, the information processing device 300 further includes:

[0299] The third acquisition module is used to acquire the second target keyword information, which is sent by the user terminal in the consortium blockchain system.

[0300] The second query module is used to query the target user identifier revocation information in the status database based on the second target keyword information;

[0301] The second target keyword information includes: the user identifier to be queried, the second blockchain name, and the second target field. The second target field includes a field indicating the name of the domain where KGC is located, a field indicating the IMS name, or a set of user identifier revocation lists used in the domain where KGC is located.

[0302] Optionally, in the information processing device 300, the second query module is specifically used for:

[0303] The user identifier to be queried is hashed according to the hash algorithm indicated in the ID-PKC system parameters to obtain the hash value of the user identifier to be queried after hashing.

[0304] Based on the second target keyword information, query the state database for the hash value of the user identifier to be queried after hash operation.

[0305] It should be noted that the apparatus provided in the embodiments of the present invention can implement all the method steps implemented in the above information processing method embodiments and can achieve the same technical effect. Here, the parts that are the same as those in the method embodiments and the beneficial effects will not be described in detail.

[0306] like Figure 4 As shown, this embodiment of the invention also provides an electronic device 400, including: a transceiver 410 and a processor 420, wherein:

[0307] The transceiver 410 is used to acquire transaction information from the digital ledger of the consortium blockchain system, the transaction information including at least one of identifier-based public cryptography ID-PKC system parameters and user identifier revocation information;

[0308] The processor 420 is used to perform target processing on the state database corresponding to the consortium blockchain system based on transaction information.

[0309] The target processing includes at least one of the following:

[0310] Transaction information writing and processing;

[0311] Transaction information deletion processing;

[0312] Transaction information update processing.

[0313] This invention provides an embodiment of obtaining transaction information from the digital ledger of a consortium blockchain system. The transaction information includes at least one of identifier-based public cryptography (KGC) system parameters and user identifier revocation information. Based on the transaction information, target processing is performed on the state database corresponding to the consortium blockchain system, such as writing the transaction information into the state database. Since the consortium blockchain system contains multiple KGCs, the state database contains transaction information corresponding to multiple KGCs. Therefore, user terminals can query transaction information from different KGC domains through the state database, making the querying of ID-PKC system parameters and user identifier revocation information independent of PKI, thus achieving secure cross-domain communication.

[0314] Optionally, in the electronic device, the processor is further configured to:

[0315] The transaction information is written into the digital ledger of the consortium blockchain system.

[0316] Optionally, in the electronic device 400, the processor 420 is further configured to:

[0317] After the transaction information is verified by at least one consortium blockchain node in the consortium blockchain system, the transaction information is written into the digital ledger of the consortium blockchain system.

[0318] Optionally, in the electronic device 400, the ID-PKC system parameters include:

[0319] The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating.

[0320] The name of the domain where the first KGC resides;

[0321] The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system.

[0322] Optionally, in the electronic device 400, the processor 420 is further configured to:

[0323] Based on the name of the domain where the first KGC is located, the first target processing corresponding to the first processing parameter is executed in the corresponding domain of the state database.

[0324] Optionally, in the electronic device 400, the processor 420 is further configured to:

[0325] Obtain first target keyword information, wherein the first target keyword information is sent by the user terminal in the consortium blockchain system;

[0326] Based on the first target keyword information, query the target ID-PKC system parameters in the status database;

[0327] The first target keyword information includes: a first blockchain name and a first target field. The first target field includes a field indicating the name of the domain where KGC is located, a field indicating the name of PPS, or a set of ID-PKC system parameters used in the domain where KGC is located.

[0328] Optionally, in the electronic device 400, the user identifier revocation information includes:

[0329] The second processing parameter corresponding to the user identifier revocation information includes writing or deleting.

[0330] The name of the domain where the first KGC resides;

[0331] The revocation information includes at least one of a first field, a second field, and a third field, wherein the first field is used to indicate whether the revoked user ID needs to be anonymous, the second field is used to indicate the revoked user ID, and the third field is used to indicate the reason for the revocation of the user ID.

[0332] Optionally, in the electronic device 400, the processor 420 is further configured to:

[0333] Based on the name of the domain where the first KGC is located, the second target processing corresponding to the second processing parameter is executed in the corresponding domain of the state database.

[0334] Optionally, in the electronic device, wherein the ID-PKC system parameters further include: a hash algorithm for anonymizing the user identifier revocation information; then the processor is further configured to:

[0335] After performing a hash operation on the user ID revocation information according to the hash algorithm, the hash value of the user ID revocation information after the hash operation is written into the corresponding field of the status database.

[0336] Optionally, in the electronic device 400, the processor 420 is further configured to:

[0337] Obtain second target keyword information, which is sent by the user terminal in the consortium blockchain system;

[0338] Based on the second target keyword information, query the target user identifier revocation information in the status database;

[0339] The second target keyword information includes: the user identifier to be queried, the second blockchain name, and the second target field. The second target field includes a field indicating the name of the domain where KGC is located, a field indicating the IMS name, or a set of user identifier revocation lists used in the domain where KGC is located.

[0340] Optionally, in the electronic device 400, the processor 420 is further configured to:

[0341] The user identifier to be queried is hashed according to the hash algorithm indicated in the ID-PKC system parameters to obtain the hash value of the user identifier to be queried after hashing.

[0342] Based on the second target keyword information, query the state database for the hash value of the user identifier to be queried after hash operation.

[0343] It should be noted that the electronic device provided in the embodiments of the present invention can implement all the method steps implemented in the above information processing method embodiments and can achieve the same technical effect. Here, the parts that are the same as those in the method embodiments and the beneficial effects will not be described in detail.

[0344] Another aspect of the present invention provides an electronic device, such as... Figure 5 As shown, it includes: a processor 501; and a memory 503 connected to the processor 501 via a bus interface 502. The memory 503 is used to store programs and data used by the processor 501 when performing operations. The processor 501 calls and executes the programs and data stored in the memory 503.

[0345] The transceiver 504 is connected to the bus interface 502 and is used to receive and send data under the control of the processor 501.

[0346] Among them, Figure 5 In this context, the bus architecture can include any number of interconnected buses and bridges, specifically linking various circuits together, represented by one or more processors (processor 501) and memory (memory 503). The bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. The bus interface provides an interface. The transceiver 504 can be multiple elements, including transmitters and receivers, providing a unit for communicating with various other devices over a transmission medium. Processor 501 is responsible for managing the bus architecture and general processing, and memory 503 can store data used by processor 501 during operation.

[0347] Those skilled in the art will understand that all or part of the steps of the above embodiments can be implemented by hardware or by a program instructing the relevant hardware to implement them. The program includes instructions to perform some or all of the steps of the above methods; and the program can be stored in a readable storage medium, which can be any form of storage medium.

[0348] This invention also provides a readable storage medium storing a program or instructions. When the program or instructions are executed by a processor, they implement the steps in the information processing method described above and achieve the same technical effect. To avoid repetition, they will not be described again here.

[0349] The processor is the processor in the electronic device described in the above embodiments. The readable storage medium includes computer-readable storage media, such as computer read-only memory (ROM), random access memory (RAM), magnetic disk, or optical disk.

[0350] It should be further noted that the terminals described in this specification include, but are not limited to, smartphones, tablets, etc., and many of the functional components described are referred to as modules in order to emphasize the independence of their implementation.

[0351] In this embodiment of the invention, the module can be implemented in software so that it can be executed by various types of processors. For example, an identified executable code module may include one or more physical or logical blocks of computer instructions, which may be constructed as objects, procedures, or functions. Nevertheless, the executable code of the identified module does not need to be physically located together, but may include different instructions stored in different bits, which, when logically combined, constitute the module and achieve the module's intended purpose.

[0352] In practice, an executable code module can be a single instruction or many instructions, and can even be distributed across multiple different code segments, different programs, and across multiple memory devices. Similarly, operational data can be identified within the module and can be implemented in any suitable form and organized within any suitable type of data structure. This operational data can be collected as a single dataset or distributed across different locations (including different storage devices), and can exist, at least in part, solely as electronic signals within the system or network.

[0353] When a module can be implemented using software, considering the current level of hardware technology, modules that can be implemented in software can be implemented using hardware circuits by those skilled in the art to achieve the corresponding functions, without considering cost. These hardware circuits include conventional very-large-scale integrated circuits (VLSI) or gate arrays, as well as existing semiconductors such as logic chips and transistors, or other discrete components. Modules can also be implemented using programmable hardware devices, such as field-programmable gate arrays, programmable array logic, and programmable logic devices.

[0354] The exemplary embodiments described above are with reference to the accompanying drawings. Many different forms and embodiments are feasible without departing from the spirit and teachings of the invention. Therefore, the invention should not be construed as limiting the exemplary embodiments set forth herein. Rather, these exemplary embodiments are provided to make the invention complete and convey the scope of the invention to those skilled in the art. In these drawings, component dimensions and relative dimensions may be exaggerated for clarity. The terminology used herein is for the purpose of describing particular exemplary embodiments only and is not intended to be limiting. As used herein, unless clearly indicated otherwise, the singular forms “a,” “an,” and “the” are intended to include all such forms. It will be further understood that the terms “comprising” and / or “including”, when used in this specification, indicate the presence of the stated features, integers, steps, operations, components, and / or elements, but do not exclude the presence or addition of one or more other features, integers, steps, operations, components, and / or groups thereof. Unless otherwise indicated, when stated, a range of values ​​includes the upper and lower limits of the range and any subranges in between.

[0355] The above description represents the preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. An information processing method, characterized in that, The method of the first key generation center (KGC) applied in a consortium blockchain system includes: Obtain transaction information from the digital ledger of a consortium blockchain system, the transaction information including at least one of identifier-based public cryptographic ID-PKC system parameters and user identifier revocation information, the consortium blockchain system including multiple KGCs; Based on the transaction information, target processing is performed on the state database corresponding to the consortium blockchain system, wherein the state database includes transaction information corresponding to the multiple KGCs; The target processing includes at least one of the following: Transaction information writing and processing; Transaction information deletion processing; Transaction information update processing; The ID-PKC system parameters include: The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating. The name of the domain where the first KGC resides; The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system; The step of performing target processing on the state database corresponding to the consortium blockchain system based on transaction information includes: Based on the name of the domain where the first KGC is located, the first target processing corresponding to the first processing parameter is executed in the corresponding domain of the state database.

2. The information processing method according to claim 1, characterized in that, Before obtaining transaction information from the digital ledger of the consortium blockchain system, the process also includes: The transaction information is written into the digital ledger of the consortium blockchain system.

3. The information processing method according to claim 2, characterized in that, The step of writing the transaction information into the digital ledger of the consortium blockchain system includes: After the transaction information is verified by at least one consortium blockchain node in the consortium blockchain system, the transaction information is written into the digital ledger of the consortium blockchain system.

4. The information processing method according to claim 1, characterized in that, Also includes: Obtain first target keyword information, wherein the first target keyword information is sent by the user terminal in the consortium blockchain system; Based on the first target keyword information, query the target ID-PKC system parameters in the status database; The first target keyword information includes: a first blockchain name and a first target field. The first target field includes a field indicating the name of the domain where KGC is located, a field indicating the name of PPS, or a set of ID-PKC system parameters used in the domain where KGC is located.

5. The information processing method according to claim 1, characterized in that, The user ID revocation information includes: The second processing parameter corresponding to the user identifier revocation information includes writing or deleting. The name of the domain where the first KGC resides; The revocation information includes at least one of a first field, a second field, and a third field, wherein the first field is used to indicate whether the revoked user ID needs to be anonymous, the second field is used to indicate the revoked user ID, and the third field is used to indicate the reason for the revocation of the user ID.

6. The information processing method according to claim 5, characterized in that, The step of performing target processing on the state database corresponding to the consortium blockchain system based on transaction information includes: Based on the name of the domain where the first KGC is located, the second target processing corresponding to the second processing parameter is executed in the corresponding domain of the state database.

7. The information processing method according to claim 6, characterized in that, The ID-PKC system parameters further include: a hash algorithm for anonymizing the user identifier revocation information; then, executing the second target processing corresponding to the second processing parameter in the corresponding field of the state database includes: After performing a hash operation on the user ID revocation information according to the hash algorithm, the hash value of the user ID revocation information after the hash operation is written into the corresponding field of the status database.

8. The information processing method according to claim 1, characterized in that, Also includes: Obtain second target keyword information, which is sent by the user terminal in the consortium blockchain system; Based on the second target keyword information, query the target user identifier revocation information in the status database; The second target keyword information includes: the user identifier to be queried, the second blockchain name, and the second target field. The second target field includes a field indicating the name of the domain where KGC is located, a field indicating the IMS name, or a set of user identifier revocation lists used in the domain where KGC is located.

9. The information processing method according to claim 8, characterized in that, The step of querying the target user identifier revocation information in the status database based on the second target keyword information includes: The user identifier to be queried is hashed according to the hash algorithm indicated in the ID-PKC system parameters to obtain the hash value of the user identifier to be queried after hashing. Based on the second target keyword information, query the state database for the hash value of the user identifier to be queried after hash operation.

10. An information processing device, characterized in that, include: The first acquisition module is used to acquire transaction information from the digital ledger of the consortium blockchain system. The transaction information includes at least one of the public cryptography ID-PKC system parameters based on the identifier and user identifier revocation information. The consortium blockchain system includes multiple KGCs. The first processing module is used to perform target processing on the state database corresponding to the consortium blockchain system based on transaction information. The state database includes transaction information corresponding to the multiple KGCs. The target processing includes at least one of the following: Transaction information writing and processing; Transaction information deletion processing; Transaction information update processing; The ID-PKC system parameters include: The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating. The name of the domain where the first KGC in the consortium blockchain system resides; The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system; The first processing module includes: The first processing unit is configured to perform the first target processing corresponding to the first processing parameter in the corresponding domain of the state database according to the name of the domain where the first KGC is located.

11. An electronic device, characterized in that, include: Transceiver and processor: The transceiver is used to acquire transaction information from the digital ledger of the consortium blockchain system. The transaction information includes at least one of the identifier-based public cryptography ID-PKC system parameters and user identifier revocation information. The consortium blockchain system includes multiple KGCs. The processor is used to perform target processing on the state database corresponding to the consortium blockchain system according to the transaction information, wherein the state database includes the transaction information corresponding to the multiple KGCs; The target processing includes at least one of the following: Transaction information writing and processing; Transaction information deletion processing; Transaction information update processing; The ID-PKC system parameters include: The first processing parameter corresponding to the ID-PKC system parameter includes writing, deleting, or updating. The name of the domain where the first KGC in the consortium blockchain system resides; The public parameters corresponding to the ID-PKC algorithm supported by the consortium blockchain system; The processor is further configured to: Based on the name of the domain where the first KGC is located, the first target processing corresponding to the first processing parameter is executed in the corresponding domain of the state database.

12. An information processing apparatus, comprising: A transceiver, a processor, a memory, and a program or instructions stored in the memory and executable on the processor; characterized in that, when the processor executes the program or instructions, it implements the steps of the information processing method as described in any one of claims 1 to 9.

13. A readable storage medium having a program or instructions stored thereon, characterized in that, When the program or instructions are executed by the processor, they implement the steps in the information processing method as described in any one of claims 1 to 9.

Images