Information verification method, device and equipment and readable storage medium

Abstract

The application discloses an information verification method and device, equipment and a readable storage medium, and relates to the technical field of network security, to solve the problem that the information verification process is relatively complicated and the communication overhead is relatively large. The method comprises the following steps: receiving a first certificate sent by a second device; performing a first operation according to the first certificate; wherein the first operation comprises at least one of the following: verifying the first certificate based on first authentication agency information corresponding to the first device and endorsement related information corresponding to the first certificate stored in a block chain account book; and sending a verification request carrying an intelligent contract identifier and the first certificate to a block chain node, wherein the intelligent contract identifier is identification information corresponding to a target intelligent contract, and the target intelligent contract comprises the first authentication agency information. The embodiment of the application can improve the efficiency of information verification and reduce the communication overhead.

Description

Technical Field

[0001] This invention relates to the field of network security technology, and in particular to an information verification method, apparatus, device, and readable storage medium. Background Technology

[0002] Public Key Infrastructure (PKI) can be used to implement functions such as the generation, management, storage, distribution, and revocation of keys and certificates based on public key cryptography. Digital certificates are an important carrier for implementing these security functions, and digital certificates are issued by Certificate Authorities (CAs).

[0003] During the verification of digital certificates by the dependent party, the Certificate Authority (CA) that issued the digital certificate needs to be verified. Only when the CA is verified successfully can the verification of the digital certificate be completed. The dependent party needs to interact with the CA multiple times during the CA verification process to obtain the CA's root certificate. This makes the digital certificate verification process cumbersome and incurring significant communication overhead. Summary of the Invention

[0004] This invention provides an information verification method, apparatus, device, and readable storage medium to solve the problems of cumbersome information verification process and high communication overhead.

[0005] In a first aspect, embodiments of the present invention provide an information verification method, applied to a first device, comprising:

[0006] Receive the first certificate sent by the second device;

[0007] Based on the first certificate, perform the first operation;

[0008] The first operation includes at least one of the following:

[0009] The first certificate is verified based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger.

[0010] A verification request carrying a smart contract identifier and the first certificate is sent to a blockchain node, wherein the smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the information of the first certification authority.

[0011] Optionally, the verification of the first certificate based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger includes:

[0012] Based on the first certificate and the first certification authority information, obtain the endorsement-related information corresponding to the first certificate from the blockchain ledger;

[0013] The first certificate is verified based on the endorsement information.

[0014] Optionally, obtaining the endorsement-related information corresponding to the first certificate from the blockchain ledger based on the first certificate and the first certification authority information includes:

[0015] Obtain target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certificate by the first certification authority corresponding to the first device;

[0016] The step of verifying the first certificate based on the endorsement information includes:

[0017] If the target endorsement information is found, the first certificate is verified based on the target endorsement information.

[0018] Optionally, when the target endorsement information is found, verifying the first certificate based on the target endorsement information includes:

[0019] If the target endorsement information is found, the first certificate is verified according to the first verification strategy based on the target endorsement information.

[0020] Optionally, the first verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the first preset condition;

[0021] The first preset condition includes any one of the following:

[0022] The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information;

[0023] The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

[0024] Optionally, the target smart contract may further include a second verification strategy.

[0025] Optionally, the smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

[0026] Optionally, the endorsement information includes: certificate identifier, certification body identifier, and first information;

[0027] The first information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

[0028] Optionally, the endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information;

[0029] The second information includes at least one of the following: reason for revocation, time of revocation, certification body identification, and certification body signature.

[0030] Optionally, receiving the first certificate sent by the second device includes:

[0031] Receive a service request sent by the second device, which carries the first certificate.

[0032] Optionally, after performing the first operation based on the first certificate, the method further includes:

[0033] Based on the result of the first operation, a service request response is sent to the second device.

[0034] Optionally, after sending a verification request carrying the smart contract identifier and the first certificate to the blockchain node, the method further includes:

[0035] Receive the verification result sent by the blockchain node.

[0036] Secondly, embodiments of the present invention provide an information verification method applied to a blockchain node, comprising:

[0037] Receive a verification request sent by the first device, which carries a smart contract identifier and a first certificate;

[0038] The first certificate is verified based on the endorsement information corresponding to the first certificate stored in the target smart contract and the blockchain ledger.

[0039] The smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the first certification authority information corresponding to the first device.

[0040] Optionally, the verification of the first certificate based on the endorsement-related information corresponding to the first certificate stored in the target smart contract and blockchain ledger includes:

[0041] Obtain target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certification authority for the first certificate;

[0042] If the target endorsement information is found, the first certificate is verified based on the target endorsement information.

[0043] Optionally, the target smart contract further includes a second verification strategy;

[0044] When the target endorsement information is found, the step of verifying the first certificate based on the target endorsement information includes:

[0045] If the target endorsement information is found, the first certificate is verified according to the second verification strategy based on the target endorsement information to obtain the verification result;

[0046] The verification result is sent to the first device.

[0047] Optionally, the second verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the second preset conditions;

[0048] The second preset condition includes any one of the following:

[0049] The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information;

[0050] The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

[0051] Optionally, the smart contract is published by the first device and recorded on the blockchain ledger and / or blockchain node.

[0052] Optionally, the endorsement information includes: certificate identifier, certification body identifier, and first information;

[0053] The first information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

[0054] Optionally, the endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information;

[0055] The second information includes at least one of the following: reason for revocation, time of revocation, certification body identifier and certification body signature, wherein the identifier of the endorsement information to be revoked is the identifier information corresponding to the endorsement information to be revoked.

[0056] Optionally, before obtaining the target endorsement information from the blockchain ledger, the method further includes:

[0057] Receive the first certificate and the endorsement information corresponding to the first certificate sent by the second device;

[0058] Based on the first certificate, the endorsement information is verified according to the third verification strategy;

[0059] The verified endorsement information is recorded in the blockchain ledger.

[0060] Optionally, the third verification strategy includes: determining that the endorsement information has been verified if the endorsement information meets a third preset condition;

[0061] The third preset condition includes at least one of the following:

[0062] The certificate identifier in the endorsement information matches the first certificate;

[0063] The certification authority identifier in the endorsement information matches the second certification authority corresponding to the blockchain node.

[0064] The signature of the certification body in the endorsement information is correct.

[0065] Optionally, the blockchain ledger includes at least one of the endorsement revocation information, and before obtaining the target endorsement information from the blockchain ledger, the method further includes:

[0066] Receive endorsement revocation information from the certification body;

[0067] Verify the endorsement revocation information according to the fourth verification strategy;

[0068] The endorsement revocation information that has been verified is recorded in the blockchain ledger.

[0069] Optionally, the fourth verification strategy includes: if the endorsement revocation information meets the fourth preset condition, determining that the endorsement revocation information has passed verification;

[0070] The fourth preset condition includes at least one of the following:

[0071] The certification authority identifier in the endorsement revocation information matches the second certification authority information corresponding to the blockchain node;

[0072] The signature of the certification authority in the endorsement revocation information is correct.

[0073] Thirdly, embodiments of the present invention provide an information verification method, applied to a second device, comprising:

[0074] Send the first certificate to the first device.

[0075] Optionally, sending the first certificate to the first device includes:

[0076] Send a service request carrying the first certificate to the first device.

[0077] Optionally, after sending the first certificate to the first device, the method further includes:

[0078] Receive the service request response sent by the first device.

[0079] Optionally, the method further includes:

[0080] Send the first certificate and the endorsement information corresponding to the first certificate to the blockchain node.

[0081] Fourthly, embodiments of the present invention provide an information verification device, which is a first device comprising:

[0082] The first receiving module is used to receive the first certificate sent by the second device;

[0083] An execution module is configured to perform a first operation based on the first certificate;

[0084] The first operation includes at least one of the following:

[0085] The first certificate is verified based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger.

[0086] A verification request carrying a smart contract identifier and the first certificate is sent to a blockchain node, wherein the smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the information of the first certification authority.

[0087] Fifthly, embodiments of the present invention provide an information verification device, which is a blockchain node, comprising:

[0088] The second receiving module is used to receive a verification request sent by the first device, which carries a smart contract identifier and a first certificate.

[0089] The first verification module is used to verify the first certificate based on the endorsement information corresponding to the first certificate stored in the target smart contract and the blockchain ledger.

[0090] The smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the first certification authority information corresponding to the first device.

[0091] Sixthly, embodiments of the present invention provide an information verification device, which is a second device, comprising:

[0092] The first sending module is used to send the first certificate to the first device.

[0093] In a seventh aspect, embodiments of the present invention also provide an information verification device, which is a first device, comprising: a transceiver, a memory, a processor, and a program stored in the memory and executable on the processor, wherein the processor executes the program to implement the steps in the method described in the first aspect.

[0094] Eighthly, embodiments of the present invention also provide an information verification device, which is a blockchain node, comprising: a transceiver, a memory, a processor, and a program stored in the memory and executable on the processor, wherein the processor executes the program to implement the steps in the method described in the second aspect.

[0095] In a ninth aspect, embodiments of the present invention also provide an information verification device, which is a second device, comprising: a transceiver, a memory, a processor, and a program stored in the memory and executable on the processor, wherein the processor executes the program to implement the steps in the method described in the third aspect.

[0096] In a tenth aspect, embodiments of the present invention also provide a readable storage medium storing a program that, when executed by a processor, implements the steps of the methods described in the first, second, or third aspects.

[0097] In this embodiment, the information verification method is applied to a first device and includes: receiving a first certificate sent by a second device; performing a first operation based on the first certificate; wherein the first operation includes at least one of the following: verifying the first certificate based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger; and sending a verification request carrying a smart contract identifier and the first certificate to a blockchain node. Through the above settings, the verification of the first certificate can be completed based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger, eliminating the need to verify the identity of the certification authority again. This improves the efficiency of information verification, reduces the number of data interactions during the information verification process, and thus reduces the communication overhead of information verification. Attached Figure Description

[0098] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0099] Figure 1 This is a block diagram of a wireless communication system applicable to an embodiment of the present invention;

[0100] Figure 2 This is one of the flowcharts of the information verification method provided in the embodiments of the present invention;

[0101] Figure 3 This is the second flowchart of the information verification method provided in the embodiments of the present invention;

[0102] Figure 4 This is the third flowchart of the information verification method provided in the embodiments of the present invention;

[0103] Figure 5 This is the fourth flowchart of the information verification method provided in the embodiments of the present invention;

[0104] Figure 6 This is the fifth flowchart of the information verification method provided in the embodiments of the present invention;

[0105] Figure 7 This is one of the structural schematic diagrams of the information verification device provided in the embodiments of the present invention;

[0106] Figure 8 This is a second schematic diagram of the structure of the information verification device provided in the embodiments of the present invention;

[0107] Figure 9 This is the third structural schematic diagram of the information verification device provided in the embodiments of the present invention;

[0108] Figure 10 This is one of the structural schematic diagrams of the information verification device provided in the embodiments of the present invention;

[0109] Figure 11 This is a second schematic diagram of the structure of the information verification device provided in this embodiment of the invention;

[0110] Figure 12 This is the third structural schematic diagram of the information verification device provided in the embodiments of the present invention. Detailed Implementation

[0111] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of this application are within the scope of protection of this application.

[0112] The terms "first," "second," etc., used in the specification and claims of this application are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such terms can be used interchangeably where appropriate so that embodiments of this application can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first" and "second" are generally of the same class, not limited in number; for example, a first object can be one or more. Furthermore, in the specification and claims, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects are in an "or" relationship.

[0113] It is worth noting that the technologies described in this application are not limited to Long Term Evolution (LTE) / LTE-Advanced (LTE-A) systems, but can also be used in other wireless communication systems, such as Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Frequency Division Multiple Access (FDMA), Orthogonal Frequency Division Multiple Access (OFDMA), Single-carrier Frequency-Division Multiple Access (SC-FDMA), and other systems. The terms "system" and "network" in this application are often used interchangeably, and the described technologies can be used not only in the systems and radio technologies mentioned above, but also in other systems and radio technologies. The following description describes New Radio (NR) systems for illustrative purposes, and NR terminology is used in most of the following description; however, these technologies can also be applied to applications beyond NR systems, such as 6th Generation (6G) communication systems.

[0114] Figure 1This diagram illustrates a block diagram of a wireless communication system applicable to an embodiment of the present invention. The wireless communication system includes a terminal 11 and a network device 12. The terminal 11 can also be referred to as a terminal device or user equipment (UE). The terminal 11 can be a mobile phone, tablet computer, laptop computer, personal digital assistant (PDA), handheld computer, netbook, ultra-mobile personal computer (UMPC), mobile internet device (MID), wearable device, vehicle-mounted device (VUE), pedestrian terminal (PUE), or other terminal-side devices. Wearable devices include wristbands, headphones, glasses, etc. It should be noted that the specific type of terminal 11 is not limited in this embodiment. Network device 12 can be a base station or core network equipment. The base station can be referred to as a Node B, Evolved Node B, Access Point, Base Transceiver Station (BTS), Radio Base Station, Radio Transceiver, Basic Service Set (BSS), Extended Service Set (ESS), B Node, Evolved B Node (eNB), Home B Node, Home Evolved B Node, WLAN Access Point, WiFi Node, Transmitting Receiving Point (TRP), or any other suitable term in the field, as long as the same technical effect is achieved. The base station is not limited to specific technical terms. It should be noted that in this embodiment, only a base station in an NR system is used as an example, but the specific type of base station is not limited. Core network equipment can be referred to as a Location Management Function (LMF), Enhanced Serving Mobile Location Center (E-SMLC), Location Server, or any other suitable term in the field.

[0115] In the current New Radio (NR) protocol, network-side devices typically make initial access through the Synchronization Signal / Physical Broadcast Channel Block (SS / PBCH) resource.

[0116] See Figure 2 , Figure 2 This is one of the flowcharts of the information verification method provided in the embodiments of the present invention, such as... Figure 2 As shown, this embodiment of the invention provides an information verification method applied to a first device, the method comprising the following steps:

[0117] Step 201: Receive the first certificate sent by the second device.

[0118] In this embodiment, the first certificate is a digital certificate corresponding to the second device sent by the second device, and the first device can verify the first certificate. In specific implementation, the first device can be considered as the device corresponding to the dependent party, and the second device as the device corresponding to the certificate user.

[0119] A certificate user can be understood as the owner of the certificate, which can be a specific person, organization, or hardware / software device. A dependent party can be understood as a user who trusts the certificate system and needs to rely on the digital certificate or signature to conduct related activities; this includes individuals, organizations, and hardware / software devices.

[0120] The second device sends the first certificate to the first device. The specific method by which the second device sends the first certificate to the first device is not limited here. Optionally, in some embodiments, step 201 includes:

[0121] Receive a service request sent by the second device, which carries the first certificate.

[0122] In this embodiment, the second device sends a service request carrying the first certificate to the first device. The first device receives the service request carrying the first certificate.

[0123] In this embodiment, receiving the first certificate sent by the second device includes receiving a service request carrying the first certificate sent by the second device. The first certificate is sent by the second device simultaneously with the service request. Once the first device verifies the first certificate, service interaction between the first and second devices can be achieved. With this setup, the second device does not need to send the first certificate separately, reducing communication overhead and improving the efficiency of service interaction.

[0124] Step 202: Perform the first operation based on the first certificate.

[0125] The first operation includes at least one of the following:

[0126] The first certificate is verified based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger.

[0127] A verification request carrying a smart contract identifier and a first certificate is sent to the blockchain node. The smart contract identifier is the identification information corresponding to the target smart contract, and the target smart contract includes the information of the first certification authority.

[0128] After receiving the first certificate, the first device performs the first operation based on the first certificate. For ease of description, the following will refer to the verification of the first certificate based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger as the first sub-operation. This sub-operation involves sending a verification request carrying the smart contract identifier and the first certificate to the blockchain node. Here, the smart contract identifier is the identification information corresponding to the target smart contract, and the target smart contract including the first certification authority information is referred to as the second sub-operation.

[0129] It should be understood that the first device performing the first sub-operation based on the first certificate can also be understood as the first device directly verifying the first certificate.

[0130] In this scenario, the first device can be considered to have access to the blockchain ledger. In some embodiments, the first device is a member of the blockchain system, therefore it can download the blockchain ledger information locally and verify the first certificate based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger. This setup further improves the efficiency of certificate verification.

[0131] It should be understood that the first device performing the second sub-operation based on the first certificate can also be understood as the first device requesting the blockchain node to verify the first certificate. A blockchain node can be understood as a device that acts as a blockchain node in the blockchain ledger; in some embodiments, a blockchain node can also be referred to as a blockchain node device.

[0132] In some embodiments, the first device may be considered to have no access to the blockchain ledger, and the first device needs to verify the first certificate through a blockchain node. In other embodiments, the first device may be considered to have access to the blockchain ledger, but the first device has limited computing resources, so the first device preferably verifies the first certificate through a blockchain node.

[0133] Optionally, in some embodiments, after step 202, the method further includes: receiving the verification result sent by the blockchain node.

[0134] When the first device performs a second sub-operation based on the first certificate, the blockchain node verifies the first certificate and sends a verification result to the first device based on the verification result. The first device can receive the verification result.

[0135] It should be noted that verifying the first certificate by the first device requires certain computing resources. When the first device has limited computing resources, or when the first device needs to verify a large number of certificates, sending a verification request carrying the smart contract identifier and the first certificate to the blockchain node for verification by the blockchain node can effectively reduce the computing resource pressure on the first device and make the allocation of computing resources more reasonable.

[0136] In this embodiment, smart contracts are used to verify certificate information, which reduces the resource consumption of the first device itself. At the same time, based on the tamper-proof nature of blockchain data, the security and reliability of smart contract execution results are improved.

[0137] In this embodiment, the information verification method is applied to a first device and includes: receiving a first certificate sent by a second device; performing a first operation based on the first certificate; wherein the first operation includes at least one of the following: verifying the first certificate based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger; and sending a verification request carrying a smart contract identifier and the first certificate to a blockchain node. Through the above settings, the verification of the first certificate can be completed based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger, eliminating the need to verify the identity of the certification authority again. This improves the efficiency of information verification, reduces the number of data interactions during the information verification process, and thus reduces the communication overhead of information verification.

[0138] In this embodiment, all endorsement-related information is stored in the blockchain ledger. In some embodiments, storing all endorsement-related information in the blockchain ledger can also be understood as storing all endorsement-related information within the blockchain system. Because the blockchain system itself has two core characteristics: data is difficult to tamper with and it is decentralized, the endorsement-related information recorded in the blockchain ledger can be more authentic and reliable based on these inherent characteristics.

[0139] Optionally, in some embodiments, the first certificate is verified based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger, including:

[0140] Based on the information of the first certificate and the first certification body, obtain the endorsement-related information corresponding to the first certificate from the blockchain ledger;

[0141] The first certificate is verified based on the endorsement information.

[0142] The first device retrieves the endorsement information corresponding to the first certificate from the blockchain ledger based on the received first certificate and first certification authority information. The first device then verifies the first certificate based on the retrieved endorsement information.

[0143] The first certification authority information corresponding to the first device can be understood as information about certification authorities trusted by the first device itself. In some embodiments, the first certification authority information may include identification information of certification authorities trusted by the first device itself. Furthermore, in other embodiments, the first certification authority information may also include a list of root certificates of certification authorities trusted by the first device.

[0144] It should be understood that the specific method by which the first device obtains the endorsement-related information corresponding to the first certificate from the blockchain ledger based on the first certificate and the first certification authority information is not limited here. For example, the first device determines the search terms based on the identification information of the first certificate and the first certification authority information. The matching endorsement-related information obtained from the blockchain ledger based on these search terms is the endorsement-related information corresponding to the first certificate.

[0145] The endorsement information corresponding to the first certificate can be understood as the endorsement information provided by the certification authority. In practical implementation, the second device can apply for signature endorsements from multiple certification authorities for the first certificate, thereby obtaining the endorsement information corresponding to multiple certification authorities, allowing the same certificate to be applied to multiple security domains.

[0146] To facilitate understanding, an example will be provided below. The process by which the second device obtains its endorsement information is as follows: The second device or its agent sends its corresponding first certificate and authentication information to the certification authority. The certification authority verifies the certificate and signs it for endorsement, thus obtaining the endorsement information. The first certificate can be a self-signed certificate or a digital certificate issued by the certification authority; the authentication information can be a token or a digital signature, etc.

[0147] It should be understood that the specific method by which the first device verifies the first certificate based on the endorsement information is not limited here.

[0148] Optionally, in some embodiments, based on the first certificate and the first certification authority information, the endorsement-related information corresponding to the first certificate is obtained from the blockchain ledger, including:

[0149] Obtain the target endorsement information from the blockchain ledger. The target endorsement information is the endorsement information and / or endorsement revocation information of the first certificate by the first certification authority corresponding to the first device.

[0150] The first certificate is verified based on the endorsement information, including:

[0151] If the target endorsement information is found, the first certificate is verified based on the target endorsement information.

[0152] The first device retrieves the target endorsement information from the blockchain ledger. This target endorsement information consists of the endorsement and / or revocation information of the first certificate by the first certification authority corresponding to the first device. Then, upon finding the target endorsement information, the first device verifies the first certificate based on this information.

[0153] The first certification body corresponding to the first device can be understood as the certification body trusted by the first device. The endorsement information of the first certification body for the first certificate can be considered as the certification information written by the first certification body when issuing the first certificate, which can be used to verify the first certificate. The revocation information of the first certification body's endorsement of the first certificate can be understood as the first certification body revoking its endorsement of the first certificate.

[0154] It should be understood that at least one endorsement and / or endorsement revocation information is usually pre-recorded on the blockchain ledger. Obtaining the target endorsement information from the blockchain ledger can be understood as querying the target endorsement information from at least one endorsement and / or endorsement revocation information pre-recorded on the blockchain ledger.

[0155] It should be noted that in some embodiments, if the target endorsement information is not found, the first device determines that the first certificate verification fails.

[0156] In this embodiment, the target endorsement information is the endorsement information and / or endorsement revocation information of the first certificate by the first certification authority corresponding to the first device. Verifying the first certificate based on the endorsement information and / or endorsement revocation information allows for convenient verification of the first certificate, improving the efficiency of certificate verification. Furthermore, the validity of the endorsement information can be determined through the endorsement revocation information, improving the accuracy of certificate verification.

[0157] It should be understood that the specific method for verifying the first certificate based on the target endorsement information is not limited here. The specific method for verifying the first certificate based on the target endorsement information will vary depending on the content of the target endorsement information.

[0158] It should be understood that the specific content of the endorsement information is not limited here. For example, in some embodiments, the endorsement information includes a certificate identifier and a certification authority identifier. Optionally, in some embodiments, the endorsement information includes: a certificate identifier, a certification authority identifier, and first information;

[0159] The first piece of information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

[0160] Endorsement information can be used to indicate trust in the certification authority corresponding to the certification authority and the certificate corresponding to the certificate.

[0161] It should be understood that the certificate identifier can be interpreted as the identification information of the certificate corresponding to the endorsement information. The specific content of the certificate identifier is not limited here. For example, in some embodiments, the certificate identifier is the certificate hash value. In other embodiments, the certificate identifier is the certificate serial number. Of course, in some embodiments, the certificate identifier can also be the complete certificate.

[0162] It should be understood that the certification authority identifier can be interpreted as the identification information of the certification authority that generates the endorsement information. The specific content of the certification authority identifier is not limited here. For example, in some embodiments, the certification authority identifier is the certification authority code. In other embodiments, the certification authority identifier is the certification authority name.

[0163] The certification authority signature can be understood as the certification authority that generates the endorsement information signing the endorsement information.

[0164] It should be understood that the specific content of the endorsement information is not limited here. For example, in some embodiments, the endorsement revocation information includes an identifier of the endorsement information to be revoked. Optionally, in some embodiments, the endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information;

[0165] The second piece of information includes at least one of the following: reason for revocation, time of revocation, certification body identification, and certification body signature.

[0166] Endorsement revocation information can be used to indicate that the endorsement information corresponding to the identifier that needs to be revoked is invalid.

[0167] It should be understood that the certification body's signature can be interpreted as the certification body that generated the endorsement revocation information signing the endorsement revocation information.

[0168] Optionally, in some embodiments, when target endorsement information is found, the first certificate is verified based on the target endorsement information, including:

[0169] If the target endorsement information is found, the first certificate is verified according to the first verification strategy based on the target endorsement information.

[0170] If the target endorsement information is found, the first device verifies the first certificate based on the target endorsement information and in accordance with the first verification strategy.

[0171] It should be understood that the first verification strategy is pre-specified. In specific implementations, the first verification strategy used by the first device when verifying different digital certificates may be the same or different.

[0172] It should be understood that the specific content of the first verification strategy is not limited here. For example, in some embodiments, the first verification strategy includes determining that the first certificate verification is successful when the target endorsement information includes endorsement information but does not include endorsement revocation information.

[0173] In this embodiment, when target endorsement information is found, the first certificate is verified according to the first verification strategy based on the target endorsement information. Through the above settings, the verification of the first certificate will be performed according to the preset verification strategy, improving the standardization of certificate verification and the reliability of the verification results.

[0174] Optionally, in some embodiments, the first verification strategy includes: determining that the first certificate verification is successful if the target endorsement information meets the first preset condition;

[0175] The first preset condition includes any one of the following:

[0176] The endorsement information matches the first certificate, and the target endorsement information does not include endorsement revocation information;

[0177] The endorsement information matches the first certificate, but the endorsement revocation information does not match the first certificate.

[0178] The statement that the endorsement information matches the first certificate and that the target endorsement information does not include endorsement revocation information can be understood as the target endorsement information including the endorsement information, the endorsement information matching the first certificate, and the target endorsement information not including endorsement revocation information.

[0179] The endorsement information matching the first certificate can be understood as the certificate corresponding to the certificate identifier included in the endorsement information being the first certificate. Otherwise, it can be considered that the endorsement information does not match the first certificate.

[0180] The statement that the endorsement information matches the first certificate, but the endorsement revocation information does not match the first certificate, can be understood as the target endorsement information including the endorsement information and the endorsement revocation information, the endorsement information matching the first certificate, and the endorsement revocation information not matching the first certificate.

[0181] A mismatch between the endorsement revocation information and the first certificate can be understood as the endorsement information corresponding to the identifier of the endorsement to be revoked included in the endorsement revocation information not matching the first certificate. Otherwise, it can be assumed that the endorsement revocation information matches the first certificate.

[0182] It should be understood that if the endorsement information does not match the first certificate, the first certificate verification can be determined to have failed, regardless of whether the target endorsement information includes endorsement revocation information.

[0183] In this embodiment, if the target endorsement information meets the first preset condition, the first certificate can be considered to have endorsement information from a certification authority trusted by the first device, and this endorsement information has not been revoked. This setting improves the accuracy of certificate verification and makes the certificate verification process more rigorous.

[0184] Optionally, the target smart contract may also include a second verification strategy.

[0185] The first device sends a verification request to the blockchain node, carrying a smart contract identifier and a first certificate. The smart contract identifier is the identification information corresponding to the target smart contract, and the target smart contract includes the first certification authority information and the second verification strategy.

[0186] It should be understood that the second verification strategy is pre-defined by the first device. In specific implementation, the first verification strategy and the second verification strategy can be the same or different. Preferably, the first verification strategy and the second verification strategy are the same. The specific content of the second verification strategy is not limited here; for details, please refer to the relevant description of the first verification strategy above. To avoid repetition, it will not be repeated here.

[0187] In practical implementation, the blockchain system includes multiple blockchain nodes. The first device can send a verification request carrying a smart contract identifier and a first certificate to any of the blockchain nodes. If the target smart contract includes first certification authority information and a second verification strategy, each blockchain node will verify the first certificate according to the second verification strategy; therefore, different blockchain nodes will obtain the same verification result.

[0188] In this embodiment, the target smart contract further includes a second verification strategy. With the above settings, when the first device sends a verification request carrying the smart contract identifier and the first certificate to any blockchain node, different blockchain nodes can obtain the same verification result, thereby improving the consistency of the certificate verification results and thus enhancing the reliability of the certificate verification results.

[0189] Optionally, the smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

[0190] A first device pre-publishes at least one smart contract, and a blockchain ledger and / or blockchain nodes record the smart contracts published by the first device. In some embodiments, the smart contracts pre-published by the first device include information about a first certification authority. In other embodiments, the smart contracts pre-published by the first device include information about a first certification authority and a second verification strategy.

[0191] A smart contract can be understood as a computer protocol designed to disseminate, verify, or execute contracts in an informational manner. After a smart contract is published, it can be stored on a blockchain ledger and / or blockchain nodes, and can be invoked by different blockchain nodes or devices.

[0192] It should be understood that each smart contract pre-published by the first device has corresponding identification information. When the first device can send a verification request carrying the smart contract identifier and the first certificate to any blockchain node, the blockchain node can invoke the corresponding smart contract based on the smart contract identifier.

[0193] In this embodiment, the smart contract is published and recorded on the blockchain ledger and / or blockchain node by the first device. Therefore, the first device does not need to carry the smart contract when sending a verification request to the blockchain node, reducing data transmission volume. The blockchain node can call the corresponding smart contract according to the smart contract identifier, thereby obtaining different first certification authority information and second verification strategies, improving the flexibility of smart contract invocation.

[0194] Optionally, in some embodiments, after performing the first operation based on the first certificate, the method further includes:

[0195] Based on the result of the first operation, a service request response is sent to the second device.

[0196] After the first device performs the first operation based on the first certificate, the information verification method further includes the following steps: sending a business request response to the second device based on the result of the first operation.

[0197] It should be understood that, in some embodiments, sending a service request response to the second device based on the result of the first operation can be understood as follows: on the one hand, if the result of the first operation is that the first certificate verification is successful, a service request success notification is sent to the second device; on the other hand, if the result of the first operation is that the first certificate verification is unsuccessful, a service request failure notification is sent to the second device.

[0198] In some embodiments, sending a service request response to the second device based on the result of the first operation can also be understood as responding to a service request sent by the second device based on the result of the first operation. Specifically, if the result of the first operation is that the first certificate verification is successful, a service connection with the second device is established; if the result of the first operation is that the first certificate verification fails, a service connection with the second device is not established.

[0199] In this embodiment of the application, after the first device performs the first operation based on the first certificate, it will also send a service request response to the second device based on the result of the first operation, so that the first device and the second device can respond to the result of the first operation in a timely manner, thereby improving the efficiency of information interaction between the first device and the second device.

[0200] See Figure 3 , Figure 3 This is the second flowchart of the information verification method provided in the embodiments of the present invention, such as... Figure 3 As shown in the figure, this embodiment of the invention provides an information verification method applied to a blockchain node. The information verification method specifically includes the following steps:

[0201] Step 301: Receive a verification request sent by the first device, which carries a smart contract identifier and a first certificate.

[0202] Step 302: Verify the first certificate based on the endorsement information corresponding to the first certificate stored in the target smart contract and the blockchain ledger;

[0203] Among them, the smart contract identifier is the identification information corresponding to the target smart contract, and the target smart contract includes the first certification authority information corresponding to the first device.

[0204] It should be understood that this embodiment is as a comparison with... Figure 2 The implementation method corresponding to the blockchain node side of the illustrated embodiment can be found in the following documentation for details. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0205] Optionally, step 302 includes:

[0206] Obtain the target endorsement information from the blockchain ledger. The target endorsement information is the endorsement information of the first certification authority for the first certificate and / or endorsement revocation information.

[0207] If the target endorsement information is found, the first certificate is verified based on the target endorsement information.

[0208] The blockchain node retrieves the target endorsement information from the blockchain ledger. This target endorsement information consists of the endorsement and / or revocation information of the first certificate issued by the first certification authority corresponding to the blockchain node. Then, upon finding the target endorsement information, the blockchain node verifies the first certificate based on this information.

[0209] The first certification authority corresponding to the first device can be understood as the certification authority trusted by the blockchain nodes. The endorsement information of the first certification authority for the first certificate can be considered as proof information written by the first certification authority when issuing the first certificate, which can be used to verify the first certificate. The revocation information of the first certification authority's endorsement of the first certificate can be understood as the first certification authority revoking its endorsement of the first certificate.

[0210] It should be understood that at least one endorsement and / or endorsement revocation information is usually pre-recorded on the blockchain ledger. Obtaining the target endorsement information from the blockchain ledger can be understood as querying the target endorsement information from at least one endorsement and / or endorsement revocation information pre-recorded on the blockchain ledger.

[0211] It should be noted that in some embodiments, if the target endorsement information is not found, the blockchain node determines that the first certificate verification fails.

[0212] In this embodiment, the target endorsement information is the endorsement information and / or endorsement revocation information of the first certificate by the first certification authority corresponding to the first device. Verifying the first certificate based on the endorsement information and / or endorsement revocation information allows for convenient verification of the first certificate, improving the efficiency of certificate verification. Furthermore, the validity of the endorsement information can be determined through the endorsement revocation information, improving the accuracy of certificate verification.

[0213] Optionally, the target smart contract may also include a second verification strategy;

[0214] The step of verifying the first certificate based on the target endorsement information, when such information is found, includes:

[0215] If the target endorsement information is found, the first certificate is verified according to the second verification strategy based on the target endorsement information to obtain the verification result;

[0216] Send the verification result to the first device.

[0217] If the target endorsement information is found, the blockchain node verifies the first certificate according to the second verification strategy based on the target endorsement information, obtains the verification result, and sends the obtained verification result to the first device. The first device can receive the verification result sent by the blockchain node.

[0218] It should be understood that the second verification strategy is pre-specified. In practice, blockchain nodes may use the same or different second verification strategies when verifying different digital certificates.

[0219] It should be understood that the specific content of the second verification strategy is not limited here. For example, in some embodiments, the second verification strategy includes determining that the first certificate verification is successful when the target endorsement information includes endorsement information but does not include endorsement revocation information.

[0220] In this embodiment, when target endorsement information is found, the first certificate is verified according to the first verification strategy based on the target endorsement information. Through the above settings, the verification of the first certificate will be performed according to the preset verification strategy, improving the standardization of certificate verification and the reliability of the verification results.

[0221] Optionally, the second verification strategy includes: determining that the first certificate verification is successful if the target endorsement information meets the second preset conditions;

[0222] The second preset condition includes any one of the following:

[0223] The endorsement information matches the first certificate, and the target endorsement information does not include endorsement revocation information;

[0224] The endorsement information matches the first certificate, but the endorsement revocation information does not match the first certificate.

[0225] It should be understood that this embodiment is as a comparison with... Figure 2 The implementation method corresponding to the blockchain node side of the illustrated embodiment can be found in the following documentation for details. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0226] Optionally, the smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

[0227] It should be understood that this embodiment is as a comparison with... Figure 2 The implementation method corresponding to the blockchain node side of the illustrated embodiment can be found in the following documentation for details. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0228] Optionally, the endorsement information includes: certificate identifier, certification body identifier, and primary information;

[0229] The first piece of information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

[0230] It should be understood that this embodiment is as a comparison with... Figure 2The implementation method corresponding to the blockchain node side of the illustrated embodiment can be found in the following documentation for details. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0231] Optionally, the endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information;

[0232] The second information includes at least one of the following: reason for revocation, time of revocation, certification body identification and certification body signature, and the identifier of the endorsement information to be revoked is the identifier information corresponding to the endorsement information to be revoked.

[0233] It should be understood that this embodiment is as a comparison with... Figure 2 The implementation method corresponding to the blockchain node side of the illustrated embodiment can be found in the following documentation for details. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0234] Optionally, before retrieving the target endorsement information from the blockchain ledger, the method further includes:

[0235] Receive the first certificate and the endorsement information corresponding to the first certificate sent by the second device;

[0236] Based on the first certificate, the endorsement information is verified according to the third verification strategy;

[0237] Verified endorsement information is recorded in the blockchain ledger.

[0238] The blockchain node receives the first certificate and the corresponding endorsement information sent by the second device. Then, based on the first certificate, the blockchain node verifies the endorsement information according to the third verification strategy, and finally records the verified endorsement information to the blockchain ledger.

[0239] It should be understood that at least one endorsement is pre-recorded on the blockchain ledger; therefore, the endorsement information needs to be pre-recorded on the blockchain ledger. Specifically, at least one endorsement is pre-recorded on the blockchain ledger before the target endorsement information is retrieved from it.

[0240] Specifically, the endorsement information can be considered to be recorded on the blockchain ledger in the following manner: receiving the certificate sent by the second device and the endorsement information corresponding to the first certificate; verifying the endorsement information according to the third verification strategy based on the certificate; and recording the verified endorsement information on the blockchain ledger.

[0241] Of course, in some embodiments, the endorsement information can also be recorded on the blockchain ledger in the following way: the second device verifies the corresponding endorsement information based on the certificate, and then directly sends the verified endorsement information to the blockchain ledger, and records the verified endorsement information on the blockchain ledger.

[0242] In this embodiment, before obtaining the target endorsement information from the blockchain ledger during the verification of the first certificate, the endorsement information corresponding to the first certificate needs to be recorded on the blockchain ledger. In specific implementation, devices corresponding to different dependent parties can record their respective endorsement information on the blockchain ledger using the method described above.

[0243] In this embodiment of the application, before obtaining the target endorsement information from the blockchain ledger, the method further includes: receiving a first certificate and the endorsement information corresponding to the first certificate sent by a second device; verifying the endorsement information according to a third verification strategy based on the first certificate; and recording the verified endorsement information to the blockchain ledger. With the above settings, the endorsement information can be pre-recorded on the blockchain ledger. Uploading the endorsement information to the chain only requires one operation, and the corresponding endorsement information can be directly obtained from the blockchain ledger during subsequent certificate verifications, improving the efficiency of certificate verification.

[0244] It should be understood that the third verification strategy is pre-defined. For example, in some embodiments, blockchain nodes publish smart contracts that include a third verification strategy and record them in the blockchain ledger. In specific implementations, different blockchain nodes may use the same or different third verification strategies. Preferably, different blockchain nodes use the same third verification strategy.

[0245] It should be understood that the specific content of the third verification strategy is not limited here. For example, in some embodiments, the third verification strategy includes: determining that the endorsement information has been verified if the certificate identifier in the endorsement information matches the first certificate. In other embodiments, the third verification strategy includes: determining that the endorsement information has been verified if the certification authority identifier in the endorsement information matches the second certification authority corresponding to the blockchain node.

[0246] Optionally, in other embodiments, the third verification strategy includes: determining that the endorsement information has been verified if the endorsement information meets a third preset condition;

[0247] The third precondition includes at least one of the following:

[0248] The certificate identifier in the endorsement information matches the first certificate;

[0249] The certification authority identifier in the endorsement information matches the second certification authority corresponding to the blockchain node;

[0250] The certification authority's signature in the endorsement information is correct.

[0251] If the certificate identifier in the endorsement information matches the first certificate, it can be understood that the certificate corresponding to the certificate identifier is the first certificate. Otherwise, it is considered that the certificate identifier in the endorsement information does not match the first certificate.

[0252] If the certification authority identifier in the endorsement information matches the second certification authority corresponding to the blockchain node, it can be understood that the certification authority corresponding to the certification authority identifier is the second certification authority. Otherwise, it is considered that the certification authority identifier in the endorsement information does not match the second certification authority corresponding to the blockchain node.

[0253] A correct certification authority signature in the endorsement information can be understood as follows: the certification authority signature is generated based on the first key, and when a blockchain node signs the same content using a second key that matches the first key, the resulting signature is identical to the certification authority signature. Otherwise, the certification authority signature in the endorsement information is considered incorrect.

[0254] In this embodiment, the endorsement information is deemed verified if it meets a third preset condition. The third preset condition includes at least one of the following: the certificate identifier in the endorsement information matches the first certificate; the certification authority identifier in the endorsement information matches the second certification authority corresponding to the blockchain node; and the certification authority signature in the endorsement information is correct. The strictness of the strategy for verifying the endorsement information can be adjusted using the third preset condition.

[0255] Optionally, the blockchain ledger includes at least one endorsement revocation message, and the method further includes, before retrieving the target endorsement message from the blockchain ledger:

[0256] Receive endorsement revocation information from the certification body;

[0257] Verify the endorsement revocation information according to the fourth verification strategy;

[0258] Verified endorsement revocation information will be recorded in the blockchain ledger.

[0259] The blockchain node receives the endorsement revocation information sent by the certification authority. Then, the blockchain node verifies the endorsement revocation information according to the fourth verification strategy, and finally records the verified endorsement revocation information to the blockchain ledger.

[0260] It should be understood that at least one endorsement revocation message is pre-recorded on the blockchain ledger; therefore, it is necessary to record the endorsement revocation message on the blockchain ledger in advance. Specifically, at least one endorsement revocation message is pre-recorded on the blockchain ledger before the target endorsement information is retrieved.

[0261] Specifically, the endorsement revocation information can be considered to be recorded on the blockchain ledger in the following manner: receiving the endorsement revocation information sent by the certification authority; verifying the endorsement revocation information according to the fourth verification strategy; and recording the verified endorsement revocation information on the blockchain ledger.

[0262] Of course, in some embodiments, endorsement revocation information can also be recorded on the blockchain ledger in the following way: the certification authority directly sends the endorsement revocation information to the blockchain ledger and records the endorsement revocation information on the blockchain ledger.

[0263] It should be understood that the certification authority in this embodiment can be any certification authority. In some embodiments, the certification authority in this embodiment may include a certification authority trusted by the first device and / or a certification authority trusted by the blockchain node.

[0264] In practice, after generating the endorsement revocation information, the certification authority can record the endorsement revocation information to the blockchain ledger in real time using the above method, or it can record the endorsement revocation information to the blockchain ledger uniformly according to preset rules using the above method.

[0265] In this embodiment, before obtaining the target endorsement information from the blockchain ledger during the verification of the first certificate, at least one endorsement revocation message needs to be recorded on the blockchain ledger. In practice, devices corresponding to different certification authorities can record their respective endorsement revocation messages on the blockchain ledger using the method described above.

[0266] In this embodiment of the application, before obtaining the target endorsement information from the blockchain ledger, the method further includes: receiving endorsement revocation information sent by the certification authority; verifying the endorsement revocation information according to the fourth verification strategy; and recording the verified endorsement revocation information to the blockchain ledger. Through the above settings, endorsement revocation information can be pre-recorded on the blockchain ledger. Uploading the endorsement revocation information to the chain only requires one operation, and subsequent verifications of the certificate can directly retrieve the corresponding endorsement revocation information from the blockchain ledger, improving the efficiency of certificate verification.

[0267] It should be understood that the fourth verification strategy is pre-defined. For example, in some embodiments, blockchain nodes publish smart contracts that include the fourth verification strategy and record them in the blockchain ledger. In specific implementations, different blockchain nodes may use the same or different fourth verification strategies. Preferably, different blockchain nodes use the same fourth verification strategy.

[0268] It should be understood that the specific content of the fourth verification strategy is not limited here. Optionally, in some embodiments, the fourth verification strategy includes: determining that the endorsement revocation information has passed verification if the endorsement revocation information meets the fourth preset condition;

[0269] The fourth preset condition includes at least one of the following:

[0270] The certification authority identifier in the endorsement revocation information is matched with the second certification authority information corresponding to the blockchain node;

[0271] The signature of the certification authority in the endorsement revocation information is correct.

[0272] The second certification authority information corresponding to a blockchain node can be understood as information about certification authorities trusted by the blockchain node itself. In some embodiments, the second certification authority information may include identification information of certification authorities trusted by the blockchain node. Furthermore, in other embodiments, the second certification authority information may also include a list of root certificates of certification authorities trusted by the blockchain node.

[0273] If the certification authority identifier in the endorsement revocation information matches the second certification authority information corresponding to the blockchain node, it can be understood that the certification authority corresponding to the certification authority identifier in the endorsement revocation information is a certification authority trusted by the blockchain node. Otherwise, it is considered that the certification authority identifier in the endorsement revocation information does not match the second certification authority information corresponding to the blockchain node.

[0274] A correct certification authority signature in an endorsement revocation message can be understood as follows: the certification authority signature was generated based on a third key, and when a blockchain node signs the same content using a fourth key that matches the third key, the resulting signature is identical to the certification authority signature. Otherwise, the certification authority signature in the endorsement revocation message is considered incorrect.

[0275] In this embodiment, the endorsement revocation information is deemed verified if it meets a fourth preset condition. The fourth preset condition includes at least one of the following: the certification authority identifier in the endorsement revocation information matches the second certification authority information corresponding to the blockchain node; or the certification authority signature in the endorsement revocation information is correct. The strictness of the strategy for verifying endorsement revocation information can be adjusted using the fourth preset condition.

[0276] See Figure 4 , Figure 4 This is the third flowchart of the information verification method provided in the embodiments of the present invention, such as... Figure 4 As shown, this embodiment of the invention provides an information verification method applied to a second device. The information verification method specifically includes the following steps:

[0277] Step 401: Send the first certificate to the first device.

[0278] It should be understood that this embodiment is as a comparison with... Figure 2 The specific implementation method of the second device side corresponding to the illustrated embodiment can be found in [reference needed]. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0279] Optionally, in some embodiments, step 401 includes:

[0280] Send a service request carrying the first certificate to the first device.

[0281] It should be understood that this embodiment is as a comparison with... Figure 2 The specific implementation method of the second device side corresponding to the illustrated embodiment can be found in [reference needed]. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0282] Optionally, in some embodiments, after step 401, the method further includes:

[0283] Receive the service request response sent by the first device.

[0284] It should be understood that this embodiment is as a comparison with... Figure 2 The specific implementation method of the second device side corresponding to the illustrated embodiment can be found in [reference needed]. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0285] Optionally, in some embodiments, the method further includes:

[0286] Send the first certificate and the endorsement information corresponding to the first certificate to the blockchain node.

[0287] It should be understood that this embodiment is as a comparison with... Figure 2 The specific implementation method of the second device side corresponding to the illustrated embodiment can be found in [reference needed]. Figure 2 The relevant descriptions in the illustrated embodiments will not be repeated here to avoid repetition. This implementation method can also be applied to... Figure 2 The corresponding embodiments achieve the same beneficial effects.

[0288] For ease of understanding, the specific process of the information verification method provided by the embodiments of the present invention will be described below using specific examples.

[0289] First, it should be noted that in this embodiment, the device corresponding to the dependent party has pre-recorded the corresponding endorsement information to the blockchain ledger, and the certification authority has pre-recorded the endorsement revocation information to the blockchain ledger. In Embodiments 1 and 2, the first device is the device corresponding to any dependent party, the second device is the device corresponding to any certificate user, and the blockchain node is any blockchain node on the blockchain system.

[0290] Example 1

[0291] Please see Figure 5 , Figure 5 This is the fourth flowchart illustrating the information verification method provided in this embodiment of the invention. Figure 5 As shown, the second device sends a service request carrying the first certificate to the first device. After receiving the service request carrying the first certificate, the first device retrieves the target endorsement information from the blockchain ledger based on the first certificate and the first certification authority information. The target endorsement information is the endorsement information and / or endorsement revocation information of the first certification authority corresponding to the first device for the first certificate.

[0292] The first device verifies the first certificate based on the target endorsement information according to a preset verification strategy. In this embodiment, the preset verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets preset conditions. The first preset conditions include any one of the following: the endorsement information matches the first certificate, and the target endorsement information does not include endorsement revocation information; the endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

[0293] The first device sends a service request response to the second device based on the verification result. Specifically, if the first device successfully verifies the first certificate, it sends a service request success notification to the second device and establishes service interaction with the second device. If the first device fails to verify the first certificate, it sends a service request response to the second device, which is a service request failure notification.

[0294] Example 2

[0295] Please see Figure 6 , Figure 6 This is the fifth flowchart illustrating the information verification method provided in this embodiment of the invention. Figure 6 As shown, the second device sends a service request carrying the first certificate to the first device. After receiving the service request carrying the first certificate, the first device sends a verification request carrying the smart contract identifier and the first certificate to the blockchain node. The smart contract identifier is the identification information corresponding to the target smart contract, and the target smart contract includes the information of the first certification authority.

[0296] In response to a verification request, a blockchain node retrieves the target endorsement information from the blockchain ledger. The target endorsement information is the endorsement information of the first certification authority for the first certificate and / or endorsement revocation information.

[0297] Then, the blockchain node verifies the first certificate based on the target endorsement information according to a preset verification strategy. In this embodiment, the preset verification strategy includes: determining that the first certificate has passed verification if the target endorsement information meets preset conditions. The first preset conditions include any one of the following: the endorsement information matches the first certificate, and the target endorsement information does not include endorsement revocation information; or the endorsement information matches the first certificate, but the endorsement revocation information does not match the first certificate.

[0298] The blockchain node sends the verification result to the first device based on the verification result. Specifically, if the blockchain node verifies the first certificate successfully, it sends the verification result to the first device, indicating successful verification. If the blockchain node fails to verify the first certificate, it sends the verification result to the first device, indicating verification failure.

[0299] The first device sends a service request response to the second device based on the verification result. Specifically, if the verification result is successful, the first device sends a service request success notification to the second device and establishes service interaction with the second device. If the verification result is unsuccessful, the first device sends a service request response to the second device, wherein the service request response is a service request failure notification.

[0300] This invention also provides an information verification device, which is a first device. See also... Figure 7 , Figure 7 This is one of the structural diagrams of the information verification device provided in the embodiments of the present invention. Because the principle of the information verification device in solving the problem is similar to... Figure 2 The information verification methods in the illustrated embodiments are similar, so the implementation of this information verification device can refer to the implementation of the method, and the repeated parts will not be described again.

[0301] like Figure 7 As shown, this embodiment of the invention provides an information verification device 700, which is a first device. The information verification device 700 includes:

[0302] The first receiving module 701 is used to receive the first certificate sent by the second device;

[0303] Execution module 702 is configured to perform a first operation based on the first certificate;

[0304] The first operation includes at least one of the following:

[0305] The first certificate is verified based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger.

[0306] A verification request carrying a smart contract identifier and the first certificate is sent to a blockchain node, wherein the smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the information of the first certification authority.

[0307] Optionally, the verification of the first certificate based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger includes:

[0308] Based on the first certificate and the first certification authority information, obtain the endorsement-related information corresponding to the first certificate from the blockchain ledger;

[0309] The first certificate is verified based on the endorsement information.

[0310] Optionally, obtaining the endorsement-related information corresponding to the first certificate from the blockchain ledger based on the first certificate and the first certification authority information includes:

[0311] Obtain target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certificate by the first certification authority corresponding to the first device;

[0312] The step of verifying the first certificate based on the endorsement information includes:

[0313] If the target endorsement information is found, the first certificate is verified based on the target endorsement information.

[0314] Optionally, when the target endorsement information is found, verifying the first certificate based on the target endorsement information includes:

[0315] If the target endorsement information is found, the first certificate is verified according to the first verification strategy based on the target endorsement information.

[0316] Optionally, the first verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the first preset condition;

[0317] The first preset condition includes any one of the following:

[0318] The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information;

[0319] The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

[0320] Optionally, the target smart contract may further include a second verification strategy.

[0321] Optionally, the smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

[0322] Optionally, the endorsement information includes: certificate identifier, certification body identifier, and first information;

[0323] The first information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

[0324] Optionally, the endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information;

[0325] The second information includes at least one of the following: reason for revocation, time of revocation, certification body identification, and certification body signature.

[0326] Optionally, the first receiving module 701 includes:

[0327] The receiving unit is used to receive a service request sent by the second device, which carries the first certificate.

[0328] Optionally, the information verification device 700 further includes:

[0329] The second sending module is used to send a service request response to the second device based on the result of the first operation.

[0330] Optionally, the information verification device 700 includes:

[0331] The third receiving module is used to receive the verification results sent by the blockchain node.

[0332] The information verification device 700 provided in this embodiment of the invention can perform the above-described... Figure 2 The method embodiments shown are similar in principle and technical effect, and will not be described again here.

[0333] This invention also provides an information verification device, which is a blockchain node. See also... Figure 8 , Figure 8 This is the second structural diagram of the information verification device provided in the embodiments of the present invention. Because the principle of the information verification device in solving the problem is similar to... Figure 3The information verification methods in the illustrated embodiments are similar, so the implementation of this information verification device can refer to the implementation of the method, and the repeated parts will not be described again.

[0334] like Figure 8 As shown, this embodiment of the invention provides an information verification device 800, which is a blockchain node. The information verification device 800 includes:

[0335] The second receiving module 801 is used to receive a verification request sent by the first device, which carries a smart contract identifier and a first certificate.

[0336] The first verification module 802 is used to verify the first certificate based on the endorsement information corresponding to the first certificate stored in the target smart contract and the blockchain ledger.

[0337] The smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the first certification authority information corresponding to the first device.

[0338] Optionally, the first verification module 802 includes:

[0339] The acquisition unit is used to acquire target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certification authority for the first certificate;

[0340] The verification unit is used to verify the first certificate based on the target endorsement information when the target endorsement information is found.

[0341] Optionally, the target smart contract further includes a second verification strategy;

[0342] The verification unit is specifically used for:

[0343] If the target endorsement information is found, the first certificate is verified according to the second verification strategy based on the target endorsement information to obtain the verification result;

[0344] The verification result is sent to the first device.

[0345] Optionally, the second verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the second preset conditions;

[0346] The second preset condition includes any one of the following:

[0347] The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information;

[0348] The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

[0349] Optionally, the smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

[0350] Optionally, the endorsement information includes: certificate identifier, certification body identifier, and first information;

[0351] The first information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

[0352] Optionally, the endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information;

[0353] The second information includes at least one of the following: reason for revocation, time of revocation, certification body identifier and certification body signature, wherein the identifier of the endorsement information to be revoked is the identifier information corresponding to the endorsement information to be revoked.

[0354] Optionally, the information verification device 800 further includes:

[0355] The fourth receiving module is used to receive the first certificate and the endorsement information corresponding to the first certificate sent by the second device;

[0356] The second verification module is used to verify the endorsement information based on the first certificate and according to the third verification strategy.

[0357] The first recording module is used to record the verified endorsement information into the blockchain ledger.

[0358] Optionally, the third verification strategy includes: determining that the endorsement information has been verified if the endorsement information meets a third preset condition;

[0359] The third preset condition includes at least one of the following:

[0360] The certificate identifier in the endorsement information matches the first certificate;

[0361] The certification authority identifier in the endorsement information matches the second certification authority corresponding to the blockchain node.

[0362] The signature of the certification body in the endorsement information is correct.

[0363] Optionally, the blockchain ledger includes at least one of the endorsement revocation messages, and the information verification device 800 further includes:

[0364] The fifth receiving module is used to receive endorsement revocation information sent by the certification authority;

[0365] The third verification module is used to verify the endorsement revocation information according to the fourth verification strategy;

[0366] The second recording module is used to record the endorsement revocation information that has been verified to the blockchain ledger.

[0367] Optionally, the fourth verification strategy includes: if the endorsement revocation information meets the fourth preset condition, determining that the endorsement revocation information has passed verification;

[0368] The fourth preset condition includes at least one of the following:

[0369] The certification authority identifier in the endorsement revocation information matches the second certification authority information corresponding to the blockchain node;

[0370] The signature of the certification authority in the endorsement revocation information is correct.

[0371] The information verification device 800 provided in this embodiment of the invention can perform the above-described... Figure 3 The method embodiments shown are similar in principle and technical effect, and will not be described again here.

[0372] This invention also provides an information verification device, which is a second device. See also... Figure 9 , Figure 9 This is the third structural diagram of the information verification device provided in this embodiment of the invention. Because the principle by which the information verification device solves the problem is similar to... Figure 4 The information verification methods in the illustrated embodiments are similar, so the implementation of this information verification device can refer to the implementation of the method, and the repeated parts will not be described again.

[0373] like Figure 9 As shown, this embodiment of the invention provides an information verification device 900, which is a second device. The information verification device 900 includes:

[0374] The first sending module 901 is used to send the first certificate to the first device.

[0375] Optionally, the first transmitting module 901 includes:

[0376] The sending unit is used to send a service request carrying the first certificate to the first device.

[0377] Optionally, the information verification device 900 further includes:

[0378] The sixth receiving module is used to receive the service request response sent by the first device.

[0379] Optionally, the information verification device 900 further includes:

[0380] The third sending module is used to send the first certificate and the endorsement information corresponding to the first certificate to the blockchain node.

[0381] The information verification device 900 provided in this embodiment of the invention can perform the above-described... Figure 4 The method embodiments shown are similar in principle and technical effect, and will not be described again here.

[0382] This invention also provides an information verification device, which is a first device. Because the principle of the information verification device in solving the problem is similar to... Figure 2 The information verification methods in the illustrated embodiments are similar; therefore, the implementation of this information verification device can refer to the implementation of the method, and repeated details will not be elaborated further. Figure 10 As shown, the information verification device of this embodiment includes: a processor 1000, configured to read a program from a memory 1020 and execute the following processes:

[0383] Based on the first certificate, perform the first operation;

[0384] The first operation includes at least one of the following:

[0385] The first certificate is verified based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger.

[0386] Send a verification request carrying a smart contract identifier and the first certificate to the blockchain node, wherein the smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the information of the first certification authority;

[0387] Processor 1000 is used to read the program from memory 1020 and execute the following procedures:

[0388] Receive the first certificate sent by the second device via transceiver 1010;

[0389] Transceiver 1010 is used to receive and send data under the control of processor 1000.

[0390] Among them, Figure 10In this context, the bus architecture can include any number of interconnected buses and bridges, specifically linking various circuits of one or more processors represented by processor 1000 and memory represented by memory 1020 together. The bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. The bus interface provides an interface. The transceiver 1010 can be multiple elements, including transmitters and receivers, providing a unit for communicating with various other devices over a transmission medium. For different user equipment, the user interface 1030 can also be an interface capable of connecting external or internal devices, including but not limited to keypads, displays, speakers, microphones, joysticks, etc.

[0391] The processor 1000 is responsible for managing the bus architecture and general processing, while the memory 1020 can store the data used by the processor 1000 when performing operations.

[0392] Optionally, the processor 1000 is also used to read from the memory 1020 and perform the following steps:

[0393] Based on the first certificate and the first certification authority information, obtain the endorsement-related information corresponding to the first certificate from the blockchain ledger;

[0394] The first certificate is verified based on the endorsement information.

[0395] Optionally, the processor 1000 is also used to read from the memory 1020 and perform the following steps:

[0396] Obtain target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certificate by the first certification authority corresponding to the first device;

[0397] The step of verifying the first certificate based on the endorsement information includes:

[0398] If the target endorsement information is found, the first certificate is verified based on the target endorsement information.

[0399] Optionally, the processor 1000 is also used to read from the memory 1020 and perform the following steps:

[0400] If the target endorsement information is found, the first certificate is verified according to the first verification strategy based on the target endorsement information.

[0401] Optionally, the first verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the first preset condition;

[0402] The first preset condition includes any one of the following:

[0403] The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information;

[0404] The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

[0405] Optionally, the target smart contract may further include a second verification strategy.

[0406] Optionally, the smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

[0407] Optionally, the endorsement information includes: certificate identifier, certification body identifier, and first information;

[0408] The first information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

[0409] Optionally, the endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information;

[0410] The second information includes at least one of the following: reason for revocation, time of revocation, certification body identification, and certification body signature.

[0411] Optionally, the processor 1000 is also used to read from the memory 1020 and perform the following steps:

[0412] Receive a service request sent by the second device, which carries the first certificate.

[0413] Optionally, the processor 1000 is also used to read from the memory 1020 and perform the following steps:

[0414] Based on the result of the first operation, a service request response is sent to the second device.

[0415] The information verification device provided in this embodiment of the invention can perform, for example... Figure 2 The method embodiments shown are similar in principle and technical effect, and will not be described again here.

[0416] This invention also provides an information verification device, which is a blockchain node. Because the principle by which the information verification device solves the problem is similar to... Figure 3 The information verification methods in the illustrated embodiments are similar; therefore, the implementation of this information verification device can refer to the implementation of the method, and repeated details will not be elaborated further. Figure 11As shown, the information verification device of this embodiment includes: a processor 1100, configured to read a program from a memory 1120 and execute the following processes:

[0417] The first certificate is verified based on the endorsement information corresponding to the first certificate stored in the target smart contract and the blockchain ledger.

[0418] The smart contract identifier is the identification information corresponding to the target smart contract, and the target smart contract includes the first certification authority information corresponding to the first device.

[0419] The processor 1100 is used to read the program in the memory 1120 and execute the following process: receiving a verification request sent by the first device through the transceiver 1110, which carries a smart contract identifier and a first certificate;

[0420] Transceiver 1110 is used to receive and send data under the control of processor 1100.

[0421] Among them, Figure 11 In this context, the bus architecture may include any number of interconnected buses and bridges, specifically linking various circuits together, represented by one or more processors (processor 1100) and memory (memory 1120). The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. The bus interface provides an interface. The transceiver 1110 may be multiple elements, including transmitters and transceivers, providing a unit for communicating with various other devices over a transmission medium. The processor 1100 is responsible for managing the bus architecture and general processing, and the memory 1120 may store data used by the processor 1100 during operation.

[0422] Optionally, the processor 1100 is also used to read the program in the memory 1120 and perform the following steps:

[0423] Obtain target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certification authority for the first certificate;

[0424] If the target endorsement information is found, the first certificate is verified based on the target endorsement information.

[0425] Optionally, the target smart contract may further include a second verification strategy.

[0426] Processor 1100 is also used to read programs from memory 1120 and perform the following steps:

[0427] If the target endorsement information is found, the first certificate is verified according to the second verification strategy based on the target endorsement information to obtain the verification result;

[0428] The verification result is sent to the first device.

[0429] Optionally, the second verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the second preset conditions;

[0430] The second preset condition includes any one of the following:

[0431] The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information;

[0432] The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

[0433] Optionally, the smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

[0434] Optionally, the endorsement information includes: certificate identifier, certification body identifier, and first information;

[0435] The first information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

[0436] Optionally, the endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information;

[0437] The second information includes at least one of the following: reason for revocation, time of revocation, certification body identifier and certification body signature, wherein the identifier of the endorsement information to be revoked is the identifier information corresponding to the endorsement information to be revoked.

[0438] Optionally, the processor 1100 is also used to read the program in the memory 1120 and perform the following steps:

[0439] Receive the first certificate and the endorsement information corresponding to the first certificate sent by the second device;

[0440] Based on the first certificate, the endorsement information is verified according to the third verification strategy;

[0441] The verified endorsement information is recorded in the blockchain ledger.

[0442] Optionally, the third verification strategy includes: determining that the endorsement information has been verified if the endorsement information meets a third preset condition;

[0443] The third preset condition includes at least one of the following:

[0444] The certificate identifier in the endorsement information matches the first certificate;

[0445] The certification authority identifier in the endorsement information matches the second certification authority corresponding to the blockchain node.

[0446] The signature of the certification body in the endorsement information is correct.

[0447] Optionally, the processor 1100 is also used to read the program in the memory 1120 and perform the following steps:

[0448] Receive endorsement revocation information from the certification body;

[0449] Verify the endorsement revocation information according to the fourth verification strategy;

[0450] The endorsement revocation information that has been verified is recorded in the blockchain ledger.

[0451] Optionally, the fourth verification strategy includes: if the endorsement revocation information meets the fourth preset condition, determining that the endorsement revocation information has passed verification;

[0452] The fourth preset condition includes at least one of the following:

[0453] The certification authority identifier in the endorsement revocation information matches the second certification authority information corresponding to the blockchain node;

[0454] The signature of the certification authority in the endorsement revocation information is correct.

[0455] The information verification device provided in this embodiment of the invention can perform the above-described... Figure 3 The method embodiments shown are similar in principle and technical effect, and will not be described again here.

[0456] This invention also provides an information verification device, which is a second device. Because the principle by which the information verification device solves the problem is similar to... Figure 4 The information verification methods in the illustrated embodiments are similar; therefore, the implementation of this information verification device can refer to the implementation of the method, and repeated details will not be elaborated further. Figure 12 As shown, the information verification device of this embodiment includes: a processor 1200, configured to read a program from a memory 1220 and execute the following processes:

[0457] The first certificate is sent to the first device via transceiver 1210;

[0458] Transceiver 1210 is used to receive and send data under the control of processor 1200.

[0459] Among them, Figure 12 In this context, the bus architecture can include any number of interconnected buses and bridges, specifically linking various circuits of one or more processors represented by processor 1200 and memory represented by memory 1220 together. The bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. The bus interface provides an interface. Transceiver 1210 can be multiple elements, including transmitters and receivers, providing a unit for communicating with various other devices over a transmission medium. For different user equipment, user interface 1230 can also be an interface capable of connecting external or internal devices, including but not limited to keypads, displays, speakers, microphones, joysticks, etc.

[0460] The processor 1200 is responsible for managing the bus architecture and general processing, while the memory 1220 can store the data used by the processor 1200 when performing operations.

[0461] Optionally, the processor 1200 is also used to read from the memory 1220 and perform the following steps:

[0462] Send a service request carrying the first certificate to the first device.

[0463] Optionally, the processor 1200 is also used to read from the memory 1220 and perform the following steps:

[0464] Receive the service request response sent by the first device.

[0465] Optionally, the processor 1200 is also used to read from the memory 1220 and perform the following steps:

[0466] Send the first certificate and the endorsement information corresponding to the first certificate to the blockchain node.

[0467] The information verification device provided in this embodiment of the invention can perform, for example... Figure 4 The method embodiments shown are similar in principle and technical effect, and will not be described again here.

[0468] The readable storage medium provided in this application embodiment is used to store a program, which can be executed by a processor to implement as follows: Figure 2 The various steps in the method embodiments shown, or implementations such as Figure 3 The various steps in the method embodiments shown, or implementations such as Figure 4 The steps in the method embodiment shown.

[0469] In the several embodiments provided in this application, it should be understood that the disclosed methods and apparatus can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between devices or units may be electrical, mechanical, or other forms.

[0470] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can be physically comprised separately, or two or more units can be integrated into one unit. The integrated unit described above can be implemented in hardware or in the form of hardware plus software functional units.

[0471] The integrated units implemented as software functional units described above can be stored in a computer-readable storage medium. These software functional units, stored in a storage medium, include several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute some steps of the transmission and reception methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0472] The above description represents the preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. An information verification method, applied to a first device, characterized in that, include: Receive the first certificate sent by the second device; Based on the first certificate, perform the first operation; The first operation includes at least one of the following: The first certificate is verified based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger; wherein, the first certification authority information includes the identification information of the certification authority trusted by the first device itself; Send a verification request carrying a smart contract identifier and the first certificate to the blockchain node, wherein the smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the information of the first certification authority; The verification of the first certificate based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger includes: Based on the first certificate and the first certification authority information, obtain the endorsement-related information corresponding to the first certificate from the blockchain ledger; The first certificate is verified based on the endorsement information. The step of obtaining the endorsement-related information corresponding to the first certificate from the blockchain ledger based on the first certificate and the first certification authority information includes: Obtain target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certificate by the first certification authority corresponding to the first device; The step of verifying the first certificate based on the endorsement information includes: If the target endorsement information is found, the first certificate is verified based on the target endorsement information; The target smart contract also includes a second verification strategy; The second verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the second preset condition; The second preset condition includes any one of the following: The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information; The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

2. The method according to claim 1, characterized in that, The step of verifying the first certificate based on the target endorsement information when the target endorsement information is found includes: If the target endorsement information is found, the first certificate is verified according to the first verification strategy based on the target endorsement information.

3. The method according to claim 2, characterized in that, The first verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the first preset condition; The first preset condition includes any one of the following: The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information; The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

4. The method according to claim 1, characterized in that, The smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

5. The method according to claim 1, characterized in that, The endorsement information includes: certificate identifier, certification body identifier, and primary information; The first information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

6. The method according to claim 1, characterized in that, The endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information; The second information includes at least one of the following: reason for revocation, time of revocation, certification body identification, and certification body signature.

7. The method according to claim 1, characterized in that, The receipt of the first certificate sent by the second device includes: Receive a service request sent by the second device, which carries the first certificate.

8. The method according to claim 7, characterized in that, After performing the first operation based on the first certificate, the method further includes: Based on the result of the first operation, a service request response is sent to the second device.

9. The method according to claim 1, characterized in that, After sending a verification request carrying the smart contract identifier and the first certificate to the blockchain node, the method further includes: Receive the verification result sent by the blockchain node.

10. An information verification method applied to a blockchain node, characterized in that, include: Receive a verification request sent by the first device, which carries a smart contract identifier and a first certificate; The first certificate is verified based on the endorsement information corresponding to the first certificate stored in the target smart contract and the blockchain ledger. Wherein, the smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the first certification authority information corresponding to the first device; wherein, the first certification authority information includes the identifier information of the certification authority trusted by the first device itself; The verification of the first certificate based on the endorsement information corresponding to the first certificate stored in the target smart contract and blockchain ledger includes: Obtain target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certification authority for the first certificate; If the target endorsement information is found, the first certificate is verified based on the target endorsement information; The target smart contract also includes a second verification strategy; When the target endorsement information is found, the step of verifying the first certificate based on the target endorsement information includes: If the target endorsement information is found, the first certificate is verified according to the second verification strategy based on the target endorsement information to obtain the verification result; Send the verification result to the first device; The second verification strategy includes: determining that the first certificate verification is successful if the target endorsement information meets the second preset conditions; The second preset condition includes any one of the following: The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information; The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

11. The method according to claim 10, characterized in that, The smart contract is issued by the first device and recorded on the blockchain ledger and / or blockchain node.

12. The method according to claim 10, characterized in that, The endorsement information includes: certificate identifier, certification body identifier, and primary information; The first information includes at least one of the following: endorsement validity period, certificate policy, key purpose, application scenario, and certification authority signature.

13. The method according to claim 10, characterized in that, The endorsement revocation information includes: an identifier of the endorsement information to be revoked and second information; The second information includes at least one of the following: reason for revocation, time of revocation, certification body identifier and certification body signature, wherein the identifier of the endorsement information to be revoked is the identifier information corresponding to the endorsement information to be revoked.

14. The method according to claim 10, characterized in that, Before obtaining the target endorsement information from the blockchain ledger, the method further includes: Receive the first certificate and the endorsement information corresponding to the first certificate sent by the second device; Based on the first certificate, the endorsement information is verified according to the third verification strategy; The verified endorsement information is recorded in the blockchain ledger.

15. The method according to claim 14, characterized in that, The third verification strategy includes: determining that the endorsement information has passed verification when the endorsement information meets the third preset condition; The third preset condition includes at least one of the following: The certificate identifier in the endorsement information matches the first certificate; The certification authority identifier in the endorsement information matches the second certification authority corresponding to the blockchain node; The signature of the certification body in the endorsement information is correct.

16. The method according to claim 10, characterized in that, The blockchain ledger includes at least one of the endorsement revocation information, and before obtaining the target endorsement information from the blockchain ledger, the method further includes: Receive endorsement revocation information from the certification body; Verify the endorsement revocation information according to the fourth verification strategy; The endorsement revocation information that has been verified is recorded in the blockchain ledger.

17. The method according to claim 16, characterized in that, The fourth verification strategy includes: if the endorsement revocation information meets the fourth preset condition, determining that the endorsement revocation information has passed verification; The fourth preset condition includes at least one of the following: The certification authority identifier in the endorsement revocation information matches the second certification authority information corresponding to the blockchain node; The signature of the certification authority in the endorsement revocation information is correct.

18. An information verification device, wherein the information verification device is a first device, characterized in that, include: The first receiving module is used to receive the first certificate sent by the second device; An execution module is configured to perform a first operation based on the first certificate; The first operation includes at least one of the following: The first certificate is verified based on the first certification authority information corresponding to the first device and the endorsement information corresponding to the first certificate stored in the blockchain ledger; wherein, the first certification authority information includes the identification information of the certification authority trusted by the first device itself; Send a verification request carrying a smart contract identifier and the first certificate to the blockchain node, wherein the smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the information of the first certification authority; The verification of the first certificate based on the first certification authority information corresponding to the first device and the endorsement-related information corresponding to the first certificate stored in the blockchain ledger includes: Based on the first certificate and the first certification authority information, obtain the endorsement-related information corresponding to the first certificate from the blockchain ledger; The first certificate is verified based on the endorsement information. The step of obtaining the endorsement-related information corresponding to the first certificate from the blockchain ledger based on the first certificate and the first certification authority information includes: Obtain target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certificate by the first certification authority corresponding to the first device; The step of verifying the first certificate based on the endorsement information includes: If the target endorsement information is found, the first certificate is verified based on the target endorsement information; The target smart contract also includes a second verification strategy; The second verification strategy includes: determining that the first certificate verification is successful when the target endorsement information meets the second preset condition; The second preset condition includes any one of the following: The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information; The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

19. An information verification device, wherein the information verification device is a blockchain node, characterized in that, include: The second receiving module is used to receive a verification request sent by the first device, which carries a smart contract identifier and a first certificate. The first verification module is used to verify the first certificate based on the endorsement information corresponding to the first certificate stored in the target smart contract and the blockchain ledger. Wherein, the smart contract identifier is the identifier information corresponding to the target smart contract, and the target smart contract includes the first certification authority information corresponding to the first device; wherein, the first certification authority information includes the identifier information of the certification authority trusted by the first device itself; The first verification module includes: The acquisition unit is used to acquire target endorsement information from the blockchain ledger, wherein the target endorsement information is the endorsement information and / or endorsement revocation information of the first certification authority for the first certificate; The verification unit is used to verify the first certificate based on the target endorsement information when the target endorsement information is found. The target smart contract also includes a second verification strategy; The verification unit is specifically used for: If the target endorsement information is found, the first certificate is verified according to the second verification strategy based on the target endorsement information to obtain the verification result; Send the verification result to the first device; The second verification strategy includes: determining that the first certificate verification is successful if the target endorsement information meets the second preset conditions; The second preset condition includes any one of the following: The endorsement information matches the first certificate, and the target endorsement information does not include the endorsement revocation information; The endorsement information matches the first certificate, and the endorsement revocation information does not match the first certificate.

20. An information verification device, wherein the information verification device is a first device, comprising: A transceiver, a memory, a processor, and a program stored in the memory and executable on the processor; characterized in that, The processor is configured to read a program from memory to implement the steps of the method as described in any one of claims 1 to 9.

21. An information verification device, wherein the information verification device is a blockchain node, comprising: A transceiver, a memory, a processor, and a program stored in the memory and executable on the processor; characterized in that, The processor is configured to read a program from memory to implement the steps of the method as described in any one of claims 10 to 17.

22. A readable storage medium for storing a program, characterized in that, When the program is executed by a processor, it implements the steps of the method as described in any one of claims 1 to 9, or implements the steps of the method as described in any one of claims 10 to 17.

Images