Comprehensive digital identity management system

Abstract

The present invention relates to the technical field of identity management, and in particular to a comprehensive digital identity management system, which includes: an information acquisition module acquires identity information; an information cutting module cuts the identity information to obtain a number of sub-identity information; a block storage module constructs a number of initial storage blocks, and encrypts and stores the several sub-identity information in the initial storage blocks; an association module generates an initial hash value through a hash algorithm to establish an association between the initial storage blocks; an attack detection module determines whether the initial storage block is damaged by real-time detection of the actual integrity, and compares the actual integrity corresponding to the damaged storage block with the second preset integrity and the third preset integrity to determine the sending of the repair instruction; a block repair module receives the repair instruction, determines the repair measures according to the repair instruction, and completes the repair of the damaged storage block according to the repair measures. The present invention improves the security of digital identity management.

Description

Technical Field

[0001] The present invention relates to the technical field of identity management, and in particular to a comprehensive digital identity management system. Background Art

[0002] With the continuous development of digital technology, people's identity information is increasingly dependent on digital identity. The security and reliability of digital identity management systems are crucial to protecting personal privacy and maintaining social order. However, existing digital identity management systems often have some problems, such as data leakage, identity fraud, information tampering, etc.

[0003] The patent document with Chinese patent publication number CN114928455A discloses a multi-chain and multi-identity distributed digital identity management method, including: inputting user registration information in different business chains; the service chain obtains and generates a unique user master DID based on the user registration information, and issues corresponding user sub-DIDs for different business chains; based on the elliptic curve bilinear pairing algorithm, the service chain generates a platform public key and a platform private key through random numbers, generates a master DID private key through the platform private key and the user master DID, and generates each user sub-DID corresponding private key through the platform private key, the user sub-DID and the business chain identifier; and returns the user sub-DID, the user sub-DID corresponding private key and the platform public key to the corresponding business chain.

[0004] Although the digital identity management systems in the prior art can generate unique digital identities for users in different business chains and provide corresponding private key management solutions, they often ignore the problem of data integrity in storage blocks. Once the data in the storage blocks are damaged or tampered with, the security of digital identity management will be reduced. Summary of the invention

[0005] To this end, the present invention provides a comprehensive digital identity management system, which can solve the problem of reduced security in digital identity management.

[0006] To achieve the above objectives, the present invention provides a comprehensive digital identity management system, the system comprising:

[0007] Information acquisition module, used to obtain user identity information;

[0008] An information cutting module, connected to the information acquisition module, for cutting the identity information to obtain a plurality of sub-identity information;

[0009] A block storage module connected to the information cutting module, used to construct a plurality of initial storage blocks according to the number of the plurality of sub-identity information, each initial storage block being used to store the corresponding initial encrypted sub-information obtained by encrypting each sub-identity information;

[0010] an association module connected to the block storage module, for generating an initial hash value for each initial storage block through a hash algorithm, and establishing associations between the initial storage blocks according to the initial hash values;

[0011] an attack detection module, connected to the association module, for detecting the actual integrity of the data in each of the initial storage blocks in real time, so as to determine whether the initial storage blocks are damaged according to the actual integrity, and for comparing the actual integrity corresponding to each damaged storage block with the second preset integrity and the third preset integrity respectively, so as to determine the sending of the repair instruction according to the comparison result;

[0012] The block repair module is connected to the attack detection module to receive a repair instruction and determine a repair measure according to the repair instruction to repair the damaged storage block according to the repair measure and obtain a repaired storage block.

[0013] Furthermore, the information cutting module includes:

[0014] An information parsing unit, connected to the information acquisition module, for identifying the composition structure of the identity information through a pattern matching algorithm;

[0015] An information cutting unit, connected to the information parsing unit, is used to cut the identity information according to the component structure to obtain a plurality of sub-identity information:

[0016] An information verification unit is connected to the information cutting unit and is used to compare the plurality of sub-identity information with corresponding structural parts in the identity information, so as to determine the accuracy of the division result according to the comparison result.

[0017] Furthermore, the block storage module includes:

[0018] A block construction unit connected to the information cutting module, configured to construct a plurality of initial storage blocks according to the number of the plurality of sub-identity information, and to divide each of the initial storage blocks into a block header, a block body and a block tail;

[0019] A storage unit is connected to the block construction unit and is used to encrypt the sub-identity information to obtain initial encrypted sub-information, and store the initial encrypted sub-information in the block body.

[0020] Furthermore, the association module includes:

[0021] A generating unit connected to the block storage module, for editing the initial encrypted sub-information through a hash algorithm to generate a corresponding initial hash value;

[0022] An association unit connected to the generation unit is used to store the initial hash value corresponding to the initial encrypted sub-information in the block tail of the same initial storage block, and to store the initial hash value corresponding to the previous initial encrypted sub-information adjacent to the initial encrypted sub-information in the block header of the same initial storage block. The association unit is also used to establish an association between the initial storage blocks according to the initial hash value.

[0023] Furthermore, the attack detection module includes:

[0024] A monitoring unit connected to the association module, for monitoring in real time the information integrity of the encrypted sub-information and the hash value integrity of the hash value in the initial storage block, and calculating the actual integrity according to the information integrity and the hash value integrity;

[0025] a judgment unit connected to the monitoring unit and used to compare the actual integrity with a first preset integrity, and when the actual integrity is less than the first preset integrity, the judgment unit determines that the initial storage block is damaged, and the judgment unit obtains the damaged storage block;

[0026] An instruction sending unit is connected to the judgment unit and is used to compare the actual integrity with the second preset integrity and the third preset integrity to obtain a comparison result, and to judge the sending of the repair instruction according to the comparison result.

[0027] Furthermore, the monitoring unit comprises:

[0028] The information monitoring subunit is used to perform a similarity comparison between the real-time encrypted sub-information obtained by real-time detection and the initial encrypted sub-information, so as to obtain the information integrity according to the similarity comparison result;

[0029] A hash value monitoring subunit, connected to the information monitoring subunit, for performing a similarity matching comparison between the real-time hash value obtained by real-time detection and the corresponding initial hash value, so as to obtain the hash value integrity according to the similarity comparison result;

[0030] The integrity calculation subunit is connected to the information monitoring subunit and the hash value monitoring subunit, and is used to obtain the actual integrity according to the information integrity and the hash value integrity.

[0031] Furthermore, the instruction sending unit includes:

[0032] The setting subunit is used to set a second preset completeness and a third preset completeness, wherein the second preset completeness is greater than the third preset completeness;

[0033] a level determination subunit, connected to the setting subunit, for comparing the actual completeness with the second preset completeness and the third preset completeness to obtain a comparison result;

[0034] An instruction sending subunit is connected to the level determination subunit, and is used to send a first repair instruction when the actual integrity is greater than the second preset integrity, send a second repair instruction when the actual integrity is greater than a third preset integrity and less than or equal to the second preset integrity, and send a third repair instruction when the actual integrity is less than or equal to the third preset integrity.

[0035] Furthermore, the block repair module includes:

[0036] The instruction receiving unit is used for receiving the first repair instruction, the second repair instruction or the third repair instruction;

[0037] an information repair unit connected to the instruction receiving unit, and configured to repair the damaged encrypted sub-information in the damaged storage block and obtain the repaired encrypted sub-information when receiving the first repair instruction, send an associated repair instruction to an adjacent associated block when receiving the second repair instruction, repair the damaged encrypted sub-information in the damaged storage block according to the initial encrypted sub-information in the adjacent associated block, and obtain the repaired encrypted sub-information, and reconstruct the damaged storage block and obtain the repaired storage block when receiving the third repair instruction, and transmit the initial encrypted sub-information to the repaired storage block to obtain the repaired encrypted sub-information;

[0038] A hash value repair unit is connected to the information repair unit and is used to perform hash calculation on the repaired encrypted sub-information to obtain a repair hash value, and store the repair hash value in the block tail of the repair storage block and in the block headers of other initial storage blocks associated with the repair storage block.

[0039] Furthermore, the information repair unit includes:

[0040] The first repair subunit is used for, when receiving the first repair instruction, comparing the damaged encrypted sub-information with the initial encrypted sub-information one by one, marking different parts, and replacing the damaged encrypted sub-information with the corresponding part in the initial encrypted information to obtain the repaired encrypted sub-information;

[0041] a second repair subunit, connected to the first repair subunit, for sending an associated repair instruction to an adjacent associated block when receiving the second repair instruction, receiving adjacent initial encrypted sub-information returned by the adjacent associated block, determining initial encrypted sub-information corresponding to the damaged encrypted sub-information, comparing the damaged encrypted sub-information with the initial encrypted sub-information one by one, and replacing the damaged encrypted sub-information with a corresponding part in the initial encrypted information to obtain repaired encrypted sub-information;

[0042] The third repair subunit is connected to the second repair subunit and is used to delete the damaged storage block, re-establish a repair storage block, and transmit the initial encrypted sub-information to the repair storage block to obtain the repair encrypted sub-information when receiving the third repair instruction.

[0043] Furthermore, it also includes an adjustment module for updating the second preset integrity with the maximum integrity among the several actual completenesses, and updating the third preset integrity with the average of the several actual completenesses, so as to judge its repair process when detecting the storage block in the next cycle.

[0044] Compared with the prior art, the beneficial effects of the present invention are that, by setting the information acquisition module to acquire the identity information of the user, a data basis is provided for subsequent identity information processing and management, and the efficiency and accuracy of data acquisition are improved; by setting the information cutting module to cut the identity information into a plurality of sub-identity information, it is helpful for decentralized storage and management, and the risk of information leakage is reduced, and more detailed control and management of the identity information is achieved, and flexibility is improved; by setting the block storage module to construct an initial storage block according to the number of sub-identity information, distributed storage of information is achieved, and the security and reliability of data are improved; by encrypting the sub-identity information before storing it, the confidentiality of the data is enhanced, and unauthorized access is prevented. The association module is set to generate an initial hash value for each initial storage block through a hash algorithm, thereby ensuring the integrity and authenticity of the data. The association between storage blocks is established using the hash value, which facilitates the retrieval, positioning and verification of the encrypted sub-information. The attack detection module is set to detect the integrity of the data in the storage block in real time, so that data damage or tampering can be discovered in time. By comparing with the preset integrity, it can be intelligently determined whether a repair instruction needs to be sent, thereby improving the security of the encrypted sub-information. After the block repair module receives the repair instruction, it determines the repair measures and repairs the damaged storage block, thereby saving the consumption of repair resources and ensuring the security of identity information storage.

[0045] In particular, by setting the information parsing unit to use a pattern matching algorithm to accurately identify the composition structure of the identity information, including various fields, formats and rules, a basis is provided for subsequent information cutting, ensuring that the cutting process can be carried out in accordance with the logical structure of the information and actual needs, thereby improving processing efficiency and accuracy. By setting the information cutting unit to cut the identity information, the efficiency of information processing is improved, and the security of the identity information is guaranteed. By setting the information verification unit to compare the cut sub-identity information with the corresponding structural part in the original identity information, it is ensured that the cutting operation does not cause data loss or error, thereby improving the accuracy of the division results and improving the security of digital identity information management.

[0046] In particular, by setting the block construction unit to construct an initial storage block according to the number of sub-identity information, and dividing each block into a block header, a block body and a block tail, the stored information is more orderly and easy to manage. By dynamically constructing the initial storage block according to the number of sub-identity information, the block construction can adapt to the identity information management needs of different scales, thereby improving the flexibility of storage block construction. By setting the storage unit to encrypt the sub-identity information and generate initial encrypted sub-information, the confidentiality of the data is improved, and data leakage is effectively prevented. The encrypted initial encrypted sub-information is stored in the block body. Since the block body is an important part of the block storage structure, its security is fully guaranteed, thereby ensuring the security and reliability of the stored data. Through reasonable encryption and storage strategies, the storage space is efficiently utilized, unnecessary space waste is avoided, and the security of digital identity information management is improved.

[0047] In particular, the initial encrypted sub-information is edited through the hash algorithm to generate the corresponding initial hash value, which effectively verifies the integrity of the data. The characteristics of the hash algorithm make any slight change to the data cause a significant change in the hash value. Therefore, by comparing the hash value, it is possible to quickly find out whether the data has been tampered with, while improving the speed and efficiency of data processing, further enhancing the security of the data, and preventing data leakage. By setting the association unit to store the initial hash value corresponding to the initial encrypted sub-information in the block tail of the same initial storage block, and storing the initial hash value corresponding to the adjacent previous initial encrypted sub-information in the block header, the association between the initial storage blocks is successfully established, so that the system can easily locate, retrieve and verify the blocks, thereby improving the efficiency of data retrieval. Through the association between the hash value and the blocks, the integrity and authenticity of each storage block are verified, and the security of digital management of identity information is improved.

[0048] In particular, by setting the setting subunit to set the second preset integrity and the third preset integrity, a clear reference standard is provided, so that the comparison and judgment of the actual integrity have an accurate basis. By setting the level judgment subunit to compare the actual integrity with the preset integrity, the severity of data damage is accurately judged, and accurate guidance is provided for subsequent repair operations. According to different comparison results, the system takes different repair measures, avoiding unnecessary waste of resources and improving the response efficiency of the system. By setting the instruction sending subunit to quickly send corresponding repair instructions, it is ensured that the damaged data is repaired in time. According to different comparison results, different repair instructions are sent to more effectively solve the data damage problem and improve the success rate of repair, thereby improving the security of digital identity management. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 A structural block diagram of a comprehensive digital identity management system provided by an embodiment of the present invention;

[0050] Figure 2 A second structural block diagram of a comprehensive digital identity management system provided by an embodiment of the present invention;

[0051] Figure 3 A third structural block diagram of a comprehensive digital identity management system provided by an embodiment of the present invention;

[0052] Figure 4 A schematic diagram of the structure of any storage block in the comprehensive digital identity management system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0053] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0054] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0055] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is merely for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it should not be understood as a limitation on the present invention.

[0056] In addition, it should be noted that in the description of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0057] See also Figure 1 As shown, an embodiment of the present invention provides a comprehensive digital identity management system, the system comprising:

[0058] An information acquisition module 10 is used to obtain the identity information of the user;

[0059] An information cutting module 20, connected to the information acquisition module 10, for cutting the identity information to obtain a plurality of sub-identity information;

[0060] A block storage module 30, which is connected to the information cutting module 20, and is used to construct a plurality of initial storage blocks according to the number of the plurality of sub-identity information, each initial storage block being used to store the corresponding initial encrypted sub-information obtained by encrypting each sub-identity information;

[0061] an association module 40, connected to the block storage module 30, for generating an initial hash value for each initial storage block through a hash algorithm, and establishing associations between the initial storage blocks according to the initial hash values;

[0062] an attack detection module 50, which is connected to the association module 40, and is used to detect the actual integrity of the data in each of the initial storage blocks in real time, so as to determine whether the initial storage blocks are damaged according to the actual integrity. The attack detection module is also used to compare the actual integrity corresponding to each damaged storage block obtained with the second preset integrity and the third preset integrity, so as to determine the sending of the repair instruction according to the comparison result;

[0063] The block repair module 60 is connected to the attack detection module 50 to receive a repair instruction and determine a repair measure according to the repair instruction to repair the damaged storage block according to the repair measure and obtain a repaired storage block.

[0064] Specifically, when the attack detection module 50 of the embodiment of the present invention is working, the initial encrypted sub-information and the initial hash value in the initial storage block are backed up so as to repair the damaged storage block later.

[0065] Specifically, the embodiment of the present invention acquires the identity information of the user by setting the information acquisition module, provides a data basis for subsequent identity information processing and management, and improves the efficiency and accuracy of data acquisition. The identity information is divided into a plurality of sub-identity information by setting the information cutting module, which is helpful for decentralized storage and management, reduces the risk of information leakage, realizes more detailed control and management of identity information, and improves flexibility. The block storage module is set to construct an initial storage block according to the number of sub-identity information, realizes distributed storage of information, improves the security and reliability of data, and enhances the confidentiality of data by encrypting the sub-identity information before storage, preventing unauthorized access and tampering. By setting the association module to generate an initial hash value for each initial storage block through a hash algorithm, the integrity and authenticity of the data are ensured, and the association between storage blocks is established using the hash value, which facilitates the retrieval, positioning and verification of the encrypted sub-information. By setting the attack detection module to detect the integrity of the data in the storage block in real time, data damage or tampering can be discovered in time. By comparing with the preset integrity, it can be intelligently determined whether a repair instruction needs to be sent, thereby improving the security of the encrypted sub-information. After the block repair module receives the repair instruction, the repair measures are determined to repair the damaged storage block, thereby saving the consumption of repair resources and ensuring the security of identity information storage.

[0066] See also Figure 2 As shown, the information cutting module 20 includes an information parsing unit 21, an information cutting unit 22 and an information checking unit 23, wherein:

[0067] The information parsing unit 21 is used to identify the composition structure of the identity information through a pattern matching algorithm;

[0068] The information cutting unit 22 is connected to the information parsing unit 21, and is used to cut the identity information according to the component structure to obtain a plurality of sub-identity information:

[0069] The information verification unit 23 is connected to the information cutting unit 22, and is used to compare the plurality of sub-identity information with corresponding structural parts in the identity information, so as to determine the accuracy of the division result according to the comparison result.

[0070] Specifically, the pattern matching algorithm described in the embodiment of the present invention is a combination algorithm based on regular expressions and string matching algorithms. First, the information parsing unit identifies specific components in the identity information, such as name, ID number, date of birth, etc., through regular expressions. Secondly, the specific components are matched and divided through the string matching algorithm to determine the composition structure. In the embodiment provided by the present invention, the identity information such as name, ID number, date of birth, etc. provided by the user is obtained after obtaining the user's consent, and all the user information obtained complies with relevant policies and legal provisions.

[0071] Specifically, the information verification unit described in the embodiment of the present invention compares the sub-identity information with the corresponding structural parts in the identity information one by one to determine whether the sub-identity information is missing, repeated or garbled according to the comparison result. If all sub-identity information can completely match the corresponding structural parts in the identity information, then the accuracy of the division result is 100%. For erroneous sub-identity information, the corresponding structural parts in the identity information are replaced by the sub-identity information to complete the repair of the sub-identity information.

[0072] Specifically, the embodiment of the present invention sets the information parsing unit to use a pattern matching algorithm to accurately identify the composition structure of the identity information, including various fields, formats and rules, thereby providing a basis for subsequent information cutting, ensuring that the cutting process can be carried out in accordance with the logical structure of the information and actual needs, and improving processing efficiency and accuracy. By setting the information cutting unit to cut the identity information, the efficiency of information processing is improved and the security of the identity information is guaranteed. By setting the information verification unit to compare the cut sub-identity information with the corresponding structural part in the original identity information, it is ensured that the cutting operation does not cause data loss or error, thereby improving the accuracy of the division results and improving the security of digital identity information management.

[0073] Specifically, the block storage module 30 includes a block construction unit and a storage unit, wherein:

[0074] The block construction unit is used to construct a plurality of initial storage blocks according to the number of the plurality of sub-identity information, and to divide each of the initial storage blocks into a block header, a block body and a block tail;

[0075] The storage unit is connected to the block construction unit and is used to encrypt the sub-identity information to obtain initial encrypted sub-information, and store the initial encrypted sub-information in the block body.

[0076] Specifically, the embodiment of the present invention constructs an initial storage block according to the number of sub-identity information by setting the block construction unit, and divides each block into a block header, a block body and a block tail, so that the stored information is more orderly and easy to manage. By dynamically constructing the initial storage block according to the number of sub-identity information, the block construction can adapt to the identity information management needs of different scales, thereby improving the flexibility of storage block construction. By setting the storage unit to encrypt the sub-identity information and generate initial encrypted sub-information, the confidentiality of the data is improved and data leakage is effectively prevented. The encrypted initial encrypted sub-information is stored in the block body. Since the block body is an important part of the block storage structure, its security is fully guaranteed, thereby ensuring the security and reliability of the stored data. Through reasonable encryption and storage strategies, the storage space is efficiently utilized, unnecessary space waste is avoided, and the security of digital identity information management is improved.

[0077] Specifically, the association module 40 includes a generation unit and an association unit, wherein:

[0078] The generating unit is used to edit the initial encrypted sub-information through a hash algorithm to generate a corresponding initial hash value;

[0079] The association unit is connected to the generation unit and is used to store the initial hash value corresponding to the initial encrypted sub-information in the block tail of the same initial storage block, and to store the initial hash value corresponding to the previous initial encrypted sub-information adjacent to the initial encrypted sub-information in the block header of the same initial storage block. The association unit is also used to establish an association between the initial storage blocks according to the initial hash value.

[0080] Specifically, the hash algorithms commonly used in the embodiments of the present invention include SHA-256, Keccak, etc.

[0081] Specifically, the embodiment of the present invention edits the initial encrypted sub-information through a hash algorithm to generate a corresponding initial hash value, and effectively verifies the integrity of the data. The characteristics of the hash algorithm make any slight change to the data cause a significant change in the hash value. Therefore, by comparing the hash value, it is possible to quickly discover whether the data has been tampered with, while improving the speed and efficiency of data processing, further enhancing the security of the data, and preventing data leakage. By setting the association unit to store the initial hash value corresponding to the initial encrypted sub-information in the block tail of the same initial storage block, and storing the initial hash value corresponding to the adjacent previous initial encrypted sub-information in the block header, the association between the initial storage blocks is successfully established, so that the system can easily locate, retrieve and verify the blocks, thereby improving the efficiency of data retrieval, and verifying the integrity and authenticity of each storage block through the association between the hash value and the blocks, thereby improving the security of digital management of identity information.

[0082] See also Figure 3 As shown, the attack detection module 50 includes a monitoring unit 51, a judgment unit 52 and an instruction sending unit 53, wherein:

[0083] The monitoring unit 51 is used to monitor the information integrity of the encrypted sub-information and the hash value integrity of the hash value in the initial storage block in real time, and calculate the actual integrity according to the information integrity and the hash value integrity;

[0084] The judgment unit 52 is connected to the monitoring unit 51 and is used to compare the actual integrity with the first preset integrity. When the actual integrity is less than the first preset integrity, the judgment unit determines that the initial storage block is damaged, and obtains the damaged storage block.

[0085] The instruction sending unit 53 is connected to the judging unit 52, and is used to compare the actual integrity with the second preset integrity and the third preset integrity to obtain a comparison result, and to judge whether to send the repair instruction according to the comparison result.

[0086] Specifically, the first preset integrity in the embodiment of the present invention is 100%, indicating that the data in the storage block is completely identical to the initial data and is not damaged.

[0087] Specifically, the embodiment of the present invention ensures the real-time security of data by setting the monitoring unit to monitor the information integrity of the encrypted sub-information and the hash value integrity of the hash value in the initial storage block in real time, and promptly discovers any potential data damage or tampering, so as to respond quickly. By combining the integrity of the encrypted sub-information and the hash value for judgment, a comprehensive and accurate data integrity assessment is provided. By setting the judgment unit to quickly identify the damaged storage block by comparing with the first preset integrity, the data damage situation can be determined in a short time, which provides a basis for subsequent processing. By identifying the damaged storage block, unauthorized access or malicious tampering is prevented, and the security of the entire system is improved. By setting the instruction sending unit to judge whether it is necessary to send a repair instruction according to the comparison result of the actual integrity with the second preset integrity and the third preset integrity, the instruction is quickly sent to the corresponding processing module, ensuring that the damaged storage block is repaired in time, thereby improving the security of digital identity management.

[0088] Specifically, the monitoring unit 51 includes an information monitoring subunit, a hash value monitoring subunit and an integrity calculation subunit, wherein:

[0089] The information monitoring subunit is used to compare the real-time encrypted sub-information obtained by real-time detection with the initial encrypted sub-information for similarity, and obtain the information integrity according to the similarity comparison result;

[0090] The hash value monitoring subunit is connected to the information monitoring subunit, and is used to perform a similarity matching comparison between the real-time hash value obtained by real-time detection and the corresponding initial hash value, and obtain the hash value integrity according to the similarity comparison result;

[0091] The integrity calculation subunit is connected to the information monitoring subunit and the hash value monitoring subunit, and is used to obtain the actual integrity according to the information integrity and the hash value integrity.

[0092] Specifically, the information integrity and the hash value integrity of the embodiment of the present invention can be obtained by comparing the real-time encrypted sub-information with the initial encrypted sub-information bit by bit, and comparing the real-time hash value obtained by real-time detection with the corresponding initial hash value bit by bit. If all bits are the same, then the information integrity and the hash value integrity are 100%. If there are different bits, then the information integrity and the hash value integrity will be evaluated according to the number of different bits.

[0093] The actual integrity can be obtained by multiplying the information integrity by the hash value integrity.

[0094] Specifically, the embodiment of the present invention monitors the real-time encrypted sub-information and the real-time hash value through the information monitoring sub-unit and the hash value monitoring sub-unit, and compares the similarity with the initial encrypted sub-information and the initial hash value, thereby obtaining the information integrity and the hash value integrity, ensuring the integrity and security of the data. At the same time, by setting the integrity calculation sub-unit, the actual integrity is calculated according to the information integrity and the hash value integrity, providing an accurate basis for subsequent judgment and repair, realizing the encryption and storage of digital identity information, and ensuring the security and reliability of the data.

[0095] Specifically, the instruction sending unit 53 includes a setting subunit, a level determination subunit and an instruction sending subunit, wherein:

[0096] The setting subunit is used to set a second preset completeness and a third preset completeness, wherein the second preset completeness is greater than the third preset completeness;

[0097] The level determination subunit is connected to the setting subunit, and is used to compare the actual completeness with the second preset completeness and the third preset completeness to obtain a comparison result;

[0098] The instruction sending subunit is connected to the level determination subunit, and is used to send a first repair instruction when the actual completeness is greater than the second preset completeness, send a second repair instruction when the actual completeness is greater than a third preset completeness and less than or equal to the second preset completeness, and send a third repair instruction when the actual completeness is less than or equal to the third preset completeness.

[0099] Specifically, in the embodiment of the present invention, the second preset completeness is the completeness corresponding to the maximum value in the historical detection data, and the third preset completeness is the completeness corresponding to the data mean in the historical detection data.

[0100] Specifically, the embodiment of the present invention provides a clear reference standard by setting the setting subunit to set the second preset integrity and the third preset integrity, so that the comparison and judgment of the actual integrity have an accurate basis. By setting the level judgment subunit to compare the actual integrity with the preset integrity, the severity of data damage is accurately judged, and accurate guidance is provided for subsequent repair operations. According to different comparison results, the system takes different repair measures, avoiding unnecessary waste of resources and improving the response efficiency of the system. By setting the instruction sending subunit to quickly send corresponding repair instructions, it is ensured that the damaged data is repaired in time. According to different comparison results, different repair instructions are sent to more effectively solve the data corruption problem and improve the success rate of repair, thereby improving the security of digital identity management.

[0101] Specifically, the embodiment of the present invention sets the second preset completeness as the completeness corresponding to the maximum value in the historical detection data, and sets the third preset completeness as the completeness corresponding to the data mean in the historical detection data, which further enhances the adaptability and accuracy of the system. The historical data can reflect the actual operation of the system. Therefore, the preset completeness set based on the historical data is closer to reality and can accurately judge the repair level.

[0102] Specifically, the block repair module 60 includes an instruction receiving unit, an information repair unit and a hash value repair unit, wherein:

[0103] The instruction receiving unit is used to receive the first repair instruction, the second repair instruction or the third repair instruction;

[0104] The information repair unit is connected to the instruction receiving unit, and is used to repair the damaged encrypted sub-information in the damaged storage block and obtain the repaired encrypted sub-information when receiving the first repair instruction, and send the associated repair instruction to the adjacent associated block when receiving the second repair instruction, so as to repair the damaged encrypted sub-information in the damaged storage block according to the initial encrypted sub-information in the adjacent associated block and obtain the repaired encrypted sub-information, and when receiving the third repair instruction, reconstruct the damaged storage block and obtain the repaired storage block, and transmit the initial encrypted sub-information to the repaired storage block and obtain the repaired encrypted sub-information;

[0105] The hash value repair unit is connected to the information repair unit, and is used to perform hash calculation on the repaired encrypted sub-information to obtain a repair hash value, and store the repair hash value in the block tail of the repair storage block and in the block headers of other initial storage blocks associated with the repair storage block.

[0106] Specifically, the embodiment of the present invention ensures the timely start of the repair operation by setting the instruction receiving unit to quickly receive the first repair instruction, the second repair instruction or the third repair instruction, provides clear guidance for subsequent repair operations, and avoids repair failures caused by instruction errors. By setting the information repair unit to adopt different repair strategies, for minor damage, the damaged encrypted sub-information is directly repaired; for moderate damage, the information of adjacent associated blocks is used for repair; for severe damage, the damaged storage block is rebuilt. Targeted repair improves the success rate and efficiency of repair, ensures data integrity, and prevents identity information leakage or tampering due to data damage. By setting the hash value repair unit, it is ensured that the integrity of the data is restored, and the security of digital identity information management is improved.

[0107] Specifically, the information repair unit includes a first repair subunit, a second repair subunit and a third repair subunit, wherein:

[0108] The first repair subunit is used for, when receiving the first repair instruction, comparing the damaged encrypted sub-information with the initial encrypted sub-information one by one, marking different parts, and replacing the damaged encrypted sub-information with the corresponding part in the initial encrypted information to obtain the repaired encrypted sub-information;

[0109] The second repair subunit is connected to the first repair subunit, and is used to send an associated repair instruction to the adjacent associated block when receiving the second repair instruction, receive the adjacent initial encrypted sub-information returned by the adjacent associated block, determine the initial encrypted sub-information corresponding to the damaged encrypted sub-information, compare the damaged encrypted sub-information with the initial encrypted sub-information one by one, and replace the damaged encrypted sub-information with the corresponding part in the initial encrypted information to obtain the repaired encrypted sub-information;

[0110] The third repair subunit is connected to the second repair subunit, and is used to delete the damaged storage block when receiving the third repair instruction, re-establish a repair storage block, and transmit the initial encrypted sub-information to the repair storage block to obtain the repair encrypted sub-information.

[0111] Specifically, the embodiment of the present invention sets the first repair subunit to accurately repair damaged data and ensure data integrity and accuracy by comparing damaged encrypted sub-information with initial encrypted sub-information one by one and replacing different parts when the first repair instruction is received. This repairs only the damaged part instead of rebuilding the entire storage block, thereby reducing the complexity and cost of the repair operation and improving the repair efficiency. The second repair subunit is set to send an associated repair instruction to an adjacent associated block and receive the returned adjacent initial encrypted sub-information when the second repair instruction is received, so as to obtain complete data related to the damaged encrypted sub-information, thereby more accurately repairing the damaged part and using the information of the adjacent associated blocks for repair, thereby increasing the reliability of the repair. The third repair subunit is set to delete the damaged storage block and re-establish a repair storage block when the third repair instruction is received, thereby ensuring that the damaged data is completely restored and improving the security of digital identity information management.

[0112] Specifically, it also includes an adjustment module for updating the second preset integrity with the maximum integrity among the actual completenesses, and updating the third preset integrity with the average of the actual completenesses, so as to judge the repair process of the storage block when detecting the storage block in the next cycle.

[0113] Specifically, the embodiments of the present invention can dynamically adjust the repair strategy according to the actual data integrity situation by continuously monitoring and updating the preset integrity, so that the system can more accurately judge the degree of data damage and take more appropriate repair measures, more accurately control the repair process, reduce the possibility of misjudgment and missed judgment, help maintain the stability of the system, avoid system crashes or performance degradation caused by data damage, and improve the security of digital identity management.

[0114] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0115] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A comprehensive digital identity management system, characterized in that: include: Information acquisition module, used to obtain user identity information; An information cutting module, connected to the information acquisition module, for cutting the identity information to obtain a plurality of sub-identity information; A block storage module connected to the information cutting module, used to construct a plurality of initial storage blocks according to the number of the plurality of sub-identity information, each initial storage block being used to store the corresponding initial encrypted sub-information obtained by encrypting each sub-identity information; an association module connected to the block storage module, for generating an initial hash value for each initial storage block through a hash algorithm, and establishing associations between the initial storage blocks according to the initial hash values; an attack detection module, connected to the association module, for detecting the actual integrity of the data in each of the initial storage blocks in real time, so as to determine whether the initial storage blocks are damaged according to the actual integrity, and for comparing the actual integrity corresponding to each damaged storage block with the second preset integrity and the third preset integrity respectively, so as to determine the sending of the repair instruction according to the comparison result; A block repair module, connected to the attack detection module, for receiving a repair instruction and determining a repair measure according to the repair instruction, so as to repair the damaged storage block according to the repair measure and obtain a repaired storage block; Wherein, the information cutting module includes: An information parsing unit, connected to the information acquisition module, for identifying the composition structure of the identity information through a pattern matching algorithm; An information cutting unit, connected to the information parsing unit, is used to cut the identity information according to the component structure to obtain a plurality of sub-identity information: An information verification unit connected to the information cutting unit, for comparing the plurality of sub-identity information with corresponding structural parts in the identity information, so as to determine the accuracy of the division result according to the comparison result; The block storage module includes: A block construction unit connected to the information cutting module, configured to construct a plurality of initial storage blocks according to the number of the plurality of sub-identity information, and to divide each of the initial storage blocks into a block header, a block body and a block tail; a storage unit connected to the block construction unit, configured to encrypt the sub-identity information to obtain initial encrypted sub-information, and store the initial encrypted sub-information in the block body; The association module includes: A generating unit connected to the block storage module, for editing the initial encrypted sub-information through a hash algorithm to generate a corresponding initial hash value; An association unit connected to the generation unit is used to store the initial hash value corresponding to the initial encrypted sub-information in the block tail of the same initial storage block, and to store the initial hash value corresponding to the previous initial encrypted sub-information adjacent to the initial encrypted sub-information in the block header of the same initial storage block. The association unit is also used to establish an association between the initial storage blocks according to the initial hash value.

2. The comprehensive digital identity management system according to claim 1, characterized in that: The attack detection module comprises: A monitoring unit connected to the association module, for monitoring in real time the information integrity of the encrypted sub-information and the hash value integrity of the hash value in the initial storage block, and calculating the actual integrity according to the information integrity and the hash value integrity; a judgment unit connected to the monitoring unit and used to compare the actual integrity with a first preset integrity, and when the actual integrity is less than the first preset integrity, the judgment unit determines that the initial storage block is damaged, and the judgment unit obtains the damaged storage block; An instruction sending unit is connected to the judgment unit and is used to compare the actual integrity with the second preset integrity and the third preset integrity to obtain a comparison result, and to judge the sending of the repair instruction according to the comparison result.

3. The comprehensive digital identity management system according to claim 2, characterized in that: The monitoring unit comprises: An information monitoring subunit, used to perform a similarity comparison between the real-time encrypted sub-information obtained by real-time detection and the initial encrypted sub-information, so as to obtain the information integrity according to the similarity comparison result; A hash value monitoring subunit, connected to the information monitoring subunit, for performing a similarity matching comparison between the real-time hash value obtained by real-time detection and the corresponding initial hash value, so as to obtain the hash value integrity according to the similarity comparison result; The integrity calculation subunit is connected to the information monitoring subunit and the hash value monitoring subunit, and is used to obtain the actual integrity according to the information integrity and the hash value integrity.

4. The comprehensive digital identity management system according to claim 3, characterized in that: The instruction sending unit comprises: a setting subunit, configured to set a second preset completeness and a third preset completeness, wherein the second preset completeness is greater than the third preset completeness; a level determination subunit, connected to the setting subunit, for comparing the actual completeness with the second preset completeness and the third preset completeness to obtain a comparison result; An instruction sending subunit is connected to the level judgment subunit, and is used to send a first repair instruction when the actual integrity is greater than the second preset integrity, send a second repair instruction when the actual integrity is greater than a third preset integrity and less than or equal to the second preset integrity, and send a third repair instruction when the actual integrity is less than or equal to the third preset integrity.

5. The comprehensive digital identity management system according to claim 4, characterized in that: The block repair module includes: an instruction receiving unit, configured to receive the first repair instruction, the second repair instruction or the third repair instruction; an information repair unit connected to the instruction receiving unit, and configured to repair the damaged encrypted sub-information in the damaged storage block and obtain the repaired encrypted sub-information when receiving the first repair instruction, send an associated repair instruction to an adjacent associated block when receiving the second repair instruction, repair the damaged encrypted sub-information in the damaged storage block according to the initial encrypted sub-information in the adjacent associated block, and obtain the repaired encrypted sub-information, and reconstruct the damaged storage block and obtain the repaired storage block when receiving the third repair instruction, and transmit the initial encrypted sub-information to the repaired storage block to obtain the repaired encrypted sub-information; A hash value repair unit is connected to the information repair unit and is used to perform hash calculation on the repaired encrypted sub-information to obtain a repair hash value, and store the repair hash value in the block tail of the repair storage block and in the block headers of other initial storage blocks associated with the repair storage block.

6. The comprehensive digital identity management system according to claim 5, characterized in that: The information repair unit comprises: a first repair subunit, configured to, when receiving the first repair instruction, compare the damaged encrypted sub-information with the initial encrypted sub-information one by one, mark different parts, and replace the damaged encrypted sub-information with the corresponding part in the initial encrypted information to obtain repaired encrypted sub-information; a second repair subunit, connected to the first repair subunit, for sending an associated repair instruction to an adjacent associated block when receiving the second repair instruction, receiving adjacent initial encrypted sub-information returned by the adjacent associated block, determining initial encrypted sub-information corresponding to the damaged encrypted sub-information, comparing the damaged encrypted sub-information with the initial encrypted sub-information one by one, and replacing the damaged encrypted sub-information with a corresponding part in the initial encrypted information to obtain repaired encrypted sub-information; The third repair subunit is connected to the second repair subunit and is used to delete the damaged storage block, re-establish a repair storage block, and transmit the initial encrypted sub-information to the repair storage block to obtain the repair encrypted sub-information when receiving the third repair instruction.

7. The comprehensive digital identity management system according to claim 6, characterized in that: It also includes an adjustment module for updating the second preset integrity with the maximum integrity among the actual completenesses, and updating the third preset integrity with the average of the actual completenesses, so as to judge the repair process of the storage block when detecting the storage block in the next cycle.

Images