Digital identity verification method and device, electronic equipment and storage medium

Abstract

The invention discloses a digital identity verification method and device, electronic equipment and a storage medium, and relates to the technical field of block chains, and the method comprises the steps: obtaining the identity information of a user; generating a digital identity label of the user according to the identity information by using each node in the block chain; generating a private key corresponding to the user according to the digital identity label; when the identity of the user needs to be verified, generating a digital signature by using the private key; and verifying the digital signature by using each node in the block chain according to a verification rule in the smart contract so as to verify the identity of the user. Decentralized identity authentication is realized through a block chain, and the problems of single-point failure and centralized trust are eliminated; and the identity of the user is verified by using the non-tampering block chain, so that the security of the identity information can be improved.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology, and in particular to a digital identity authentication method, device, electronic device and storage medium. Background Art

[0002] With the development of the Internet and the popularization of its applications, digital identity authentication has become increasingly important. Traditional identity authentication systems usually rely on centralized trust institutions, such as government departments, banks, and large Internet companies. Centralized identity authentication systems have problems such as single point failure risks, data leakage risks, and insufficient user privacy protection. Summary of the invention

[0003] The main purpose of the embodiments of the present application is to propose a digital identity authentication method, device, electronic device and storage medium to improve the security of identity authentication.

[0004] To achieve the above purpose, one aspect of an embodiment of the present application provides a digital identity authentication method, the method comprising the following steps:

[0005] Obtain the user's identity information;

[0006] Using each node in the blockchain to generate a digital identity of the user based on the identity information;

[0007] Generate a private key corresponding to the user according to the digital identity;

[0008] When the identity of the user needs to be verified, a digital signature is generated using the private key;

[0009] The digital signature is verified by using each of the nodes in the blockchain according to the verification rules in the smart contract to verify the identity of the user.

[0010] In some embodiments, the step of generating a digital identity of the user according to the identity information using each node in the blockchain includes the following steps:

[0011] Encrypting the identity information into an encrypted data packet;

[0012] Uploading the encrypted data packet to the blockchain;

[0013] Verifying the encrypted data packet using each node in the blockchain;

[0014] When the encrypted data packet is verified, the digital identity of the user is generated.

[0015] In some embodiments, the verifying the digital signature using each of the nodes in the blockchain according to the verification rules in the smart contract comprises the following steps:

[0016] Utilize each of the nodes in the blockchain to verify the digital signature according to the zero-knowledge proof in the smart contract; wherein the verification rule includes the zero-knowledge proof.

[0017] In some embodiments, the method further comprises the following steps:

[0018] When the identity of the user is verified, determining the target information selected by the user in the identity information;

[0019] Authorize other users to access the target information through the smart contract on the blockchain.

[0020] In some embodiments, the step of authorizing other users to access the target information through a smart contract on the blockchain includes the following steps:

[0021] encrypting the target information;

[0022] Other users are authorized to access the encrypted target information through the smart contract on the blockchain.

[0023] In some embodiments, the method further comprises the following steps:

[0024] When the identity of the user is verified, obtaining the access behavior information of the user;

[0025] Determining whether there is abnormal access behavior based on the access behavior information;

[0026] If so, calculate the warning score based on the user's authority level;

[0027] A protective measure matching the warning score is executed.

[0028] In some embodiments, the method further comprises the following steps:

[0029] The digital identity is recorded on the blockchain.

[0030] To achieve the above object, another aspect of the embodiment of the present application provides a digital identity authentication device, the device comprising:

[0031] An information acquisition unit, used to acquire the identity information of the user;

[0032] An identification generation unit, configured to generate a digital identification of the user according to the identity information using each node in the blockchain;

[0033] A private key generation unit, used to generate a private key corresponding to the user according to the digital identity;

[0034] A signature generation unit, used to generate a digital signature using the private key when the identity of the user needs to be verified;

[0035] The signature verification unit is used to verify the digital signature using each of the nodes in the blockchain according to the verification rules in the smart contract to verify the identity of the user.

[0036] In some embodiments, the identification generating unit includes:

[0037] A first information encryption unit, used to encrypt the identity information into an encrypted data packet;

[0038] A data packet uploading unit, used to upload the encrypted data packet to the blockchain;

[0039] A data packet verification unit, configured to verify the encrypted data packet using each node in the blockchain;

[0040] The identification generating subunit is used to generate the digital identification of the user after the encrypted data packet is verified.

[0041] In some embodiments, the signature verification unit includes:

[0042] A signature verification subunit is used to verify the digital signature using each of the nodes in the blockchain according to the zero-knowledge proof in the smart contract; wherein the verification rule includes the zero-knowledge proof.

[0043] In some embodiments, the device further comprises an information display unit, wherein the information display unit comprises:

[0044] An information determination unit, configured to determine target information selected by the user in the identity information after the identity of the user is verified;

[0045] An access authorization unit is used to authorize other users to access the target information through a smart contract on the blockchain.

[0046] In some embodiments, the access authorization unit includes:

[0047] A second information encryption unit, used for encrypting the target information;

[0048] The access authorization subunit is used to authorize other users to access the encrypted target information through the smart contract on the blockchain.

[0049] In some embodiments, the device further comprises a behavior monitoring unit, wherein the behavior monitoring unit comprises:

[0050] A behavior recording unit, used to obtain the user's access behavior information after the user's identity is verified;

[0051] A behavior judgment unit, used to judge whether there is abnormal access behavior according to the access behavior information;

[0052] A score calculation unit, used to calculate a warning score according to the authority level of the user if there is abnormal access behavior;

[0053] A measure execution unit is used to execute a protection measure that matches the early warning score.

[0054] In some embodiments, the apparatus further comprises:

[0055] An identification recording unit is used to record the digital identity on the blockchain.

[0056] To achieve the above-mentioned purpose, another aspect of an embodiment of the present application proposes an electronic device, which includes a memory and a processor, wherein the memory stores a computer program, and the processor implements the above-mentioned digital identity authentication method when executing the computer program.

[0057] To achieve the above-mentioned purpose, another aspect of an embodiment of the present application proposes a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned digital identity authentication method is implemented.

[0058] The embodiments of the present application include at least the following beneficial effects:

[0059] This application can obtain the user's identity information; use each node in the blockchain to generate the user's digital identity based on the identity information; generate the user's corresponding private key based on the digital identity; when the user's identity needs to be verified, use the private key to generate a digital signature; use each node in the blockchain to verify the digital signature according to the verification rules in the smart contract to verify the user's identity. Decentralized identity authentication is achieved through blockchain, eliminating single point failures and centralized trust issues; using an unalterable blockchain to verify the user's identity can improve the security of identity information. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0061] Figure 1 A flowchart of a digital identity authentication method provided in an embodiment of the present application;

[0062] Figure 2 Provided in the embodiments of this application Figure 1 The step flow chart of S110;

[0063] Figure 3 A flowchart of the steps for authorizing other users to access identity information provided in an embodiment of the present application;

[0064] Figure 4 Another flowchart of steps for authorizing other users to access identity information provided in an embodiment of the present application;

[0065] Figure 5 A flowchart of the steps for monitoring user access behavior and early warning provided in an embodiment of the present application;

[0066] Figure 6 A schematic diagram of the structure of a digital identity authentication device provided in an embodiment of the present application;

[0067] Figure 7 A schematic diagram of the structure of an identification generation unit provided in an embodiment of the present application;

[0068] Figure 8 A schematic diagram of the structure of the information display unit provided in the embodiment of the present application;

[0069] Fig. 9 A schematic diagram of the structure of an access authorization unit provided in an embodiment of the present application;

[0070] Fig.10 A schematic diagram of the structure of a behavior monitoring unit provided in an embodiment of the present application;

[0071] Fig.11 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0072] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is further described in detail below in conjunction with the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the embodiments of the present application. They are only examples of devices and methods consistent with some aspects of the embodiments of the present application as detailed in the attached claims.

[0073] It is understood that the terms "first", "second", etc. used in this application can be used to describe various concepts in this article, but unless otherwise specified, these concepts are not limited by these terms. These terms are only used to distinguish one concept from another concept. For example, without departing from the scope of the embodiment of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the words "if" and "if" as used herein can be interpreted as "at the time of" or "when" or "in response to determination".

[0074] The terms "at least one", "multiple", "each", "any", etc. used in this application, at least one includes one, two or more, multiple includes two or more, each refers to each of the corresponding multiple, and any refers to any one of the multiple.

[0075] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0076] Before describing the embodiments of the present application in detail, the related technologies involved in the embodiments of the present application are first described as follows:

[0077] With the development of the Internet and the popularization of its applications, digital identity authentication has become increasingly important. Traditional identity authentication systems usually rely on centralized trust institutions such as government departments, banks, and large Internet companies. Centralized identity authentication systems have problems such as single point failure risks, data leakage risks, and insufficient user privacy protection. Blockchain provides a new solution for digital identity authentication due to its decentralized, tamper-proof, and highly transparent characteristics.

[0078] This application aims to provide a blockchain-based digital identity authentication solution to solve the problems of centralization risk, data leakage and insufficient privacy protection in related technologies. By utilizing the distributed ledger and smart contracts of blockchain, a secure, reliable and decentralized identity authentication mechanism is achieved.

[0079] The embodiments of the present application provide a digital identity authentication method, device, electronic device and storage medium. The technical solution of the present application includes: obtaining the identity information of the user; using each node in the blockchain to generate the digital identity of the user according to the identity information; generating the private key corresponding to the user according to the digital identity; when it is necessary to verify the identity of the user, using the private key to generate a digital signature; using each node in the blockchain to verify the digital signature according to the verification rules in the smart contract to verify the identity of the user. Decentralized identity authentication is achieved through blockchain, eliminating single points of failure and centralized trust problems; using a tamper-proof blockchain to verify the identity of the user can improve the security of identity information.

[0080] The embodiment of the present application provides a digital identity authentication method, which relates to the field of blockchain. The digital identity authentication method provided in the embodiment of the present application can be applied to a terminal, can also be applied to a server, and can also be software running in a terminal or a server. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, and a car terminal, etc., but is not limited to this; the server side can be configured as an independent physical server, or it can be configured as a server cluster or distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms. The server can also be a node server in the blockchain; the software can be an application that implements the digital identity authentication method, etc., but is not limited to the above forms.

[0081] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0082] Reference Figure 1 , the embodiment of the present application provides a digital identity authentication method, which may include but is not limited to S100 to S140, as follows:

[0083] S100: Obtaining user identity information.

[0084] Exemplarily, in this embodiment, the user's identity information may be an identity document, such as an ID card or a driver's license.

[0085] S110: Generate a digital identity of the user according to the identity information using each node in the blockchain.

[0086] It can be understood that this embodiment can use the nodes in the blockchain to verify and confirm the identity information, and generate a unique digital identity after verification.

[0087] Further, refer to Figure 2 , S110 may include S111 to S114:

[0088] S111: Encrypt the identity information into an encrypted data packet;

[0089] S112: Uploading the encrypted data packet to the blockchain;

[0090] S113: Verify the encrypted data packet using each node in the blockchain;

[0091] S114: When the encrypted data packet is verified, the digital identity of the user is generated.

[0092] Exemplarily, a user submits identity information (such as an ID card, driver's license, etc.) through a user terminal, the user terminal encrypts the user's identity information and generates an encrypted data packet, the user terminal submits the encrypted data packet to the blockchain, and multiple nodes in the blockchain receive the encrypted data packet and verify the user's identity information based on the encrypted data packet.

[0093] Multiple nodes in the blockchain verify the identity information according to preset rules. After verification, a unique digital identity for the user is generated and recorded on the blockchain, making the digital identity tamper-proof and traceable.

[0094] S120: Generate a private key corresponding to the user according to the digital identity.

[0095] It is understandable that, in this embodiment, a private key corresponding to the digital identity can be generated according to an encryption method.

[0096] S130: When the identity of the user needs to be verified, a digital signature is generated using the private key.

[0097] For example, when a user sends a verification request to the blockchain, it can be determined that the user's identity needs to be verified, and then the user's private key can be used to generate the user's digital signature.

[0098] S140: Utilize each of the nodes in the blockchain to verify the digital signature according to the verification rules in the smart contract to verify the identity of the user.

[0099] Specifically, this embodiment can use each node in the blockchain to verify the verification request with a digital signature according to the verification rules in the smart contract, confirm the validity of the digital signature, and return the verification result.

[0100] Furthermore, S140 may include:

[0101] Utilize each of the nodes in the blockchain to verify the digital signature according to the zero-knowledge proof in the smart contract; wherein the verification rule includes the zero-knowledge proof.

[0102] It is understandable that this embodiment can use the zero-knowledge proof method to complete identity authentication without revealing the user's specific identity information.

[0103] Reference Figure 3 As a further optional implementation, the embodiment of the present application may further include a step of authorizing other users to access identity information, specifically including S151 to S152:

[0104] S151: When the identity of the user is verified, determining the target information selected by the user in the identity information;

[0105] S152: Authorize other users to access the target information through the smart contract on the blockchain.

[0106] It can be understood that the user arbitrarily specifies identity information that can be accessed by other users (including other users and third-party organizations except the user) as the target information, and then authorizes other users to access the target information specified by the user through the smart contract on the blockchain.

[0107] Reference Figure 4 Further, to improve security so that the target information can only be accessed by other authorized users, S152 may include S1521-S1522:

[0108] S1521: Encrypt the target information;

[0109] S1522: Authorize other users to access the encrypted target information through the smart contract on the blockchain.

[0110] During the authorized access process, the target information is encrypted for transmission so that only other authorized users can decrypt and access the target information.

[0111] Reference Figure 5 As a further optional implementation, the embodiment of the present application may further include the steps of monitoring user access behavior and early warning, specifically including S161 to S164:

[0112] S161: When the identity of the user is verified, obtaining the access behavior information of the user;

[0113] S162: Determine whether there is abnormal access behavior according to the access behavior information;

[0114] S163: If yes, calculate the warning score according to the authority level of the user;

[0115] S164: Execute protection measures that match the warning score.

[0116] Exemplarily, the user's access behavior information may include login time, operation type, IP address, etc. This embodiment can determine whether the user has abnormal access behavior based on the access behavior information, such as frequent cross-region logins, multiple failed attempts in a short period of time, etc. If so, the user's authority level is analyzed and a warning score is calculated, and the user's account may be stolen based on the warning score. When the warning score is high, protective measures can be taken, such as temporarily freezing the account, sending a warning notification, or requiring secondary verification.

[0117] As a further optional implementation, the embodiment of the present application may also include:

[0118] The digital identity is recorded on the blockchain.

[0119] It is understandable that recording digital identities on the blockchain makes the digital identities tamper-proof and traceable, thereby improving security.

[0120] Next, the solution of the embodiment of the present application will be described in detail and explained in conjunction with specific application examples:

[0121] The purpose of this embodiment is to provide a digital identity authentication method based on blockchain to solve the problems of centralization risk, data leakage and insufficient privacy protection in related technologies. By utilizing the distributed ledger and smart contracts of blockchain, a secure, reliable and decentralized identity authentication method is achieved.

[0122] This embodiment includes the following contents:

[0123] 1. Blockchain: Using consortium chain or public chain as the underlying architecture, data is stored in a distributed manner and cannot be tampered with. The nodes in the blockchain can be used to verify and confirm the user's unique digital identity.

[0124] 2. Unique digital identity generation: Each user creates a unique digital identity through the blockchain when registering. This digital identity is jointly verified and confirmed by multiple nodes in the blockchain, making it authentic and unique.

[0125] 3. Private key generation and management: Each user generates a corresponding private key based on his / her unique digital identity. Users can use private keys for identity authentication without relying on a centralized identity authentication agency. As an optional implementation method, the generation and management of private keys can adopt encryption methods to improve the security of private keys.

[0126] 4. Encryption and privacy protection: Encryption methods and anonymity protection measures are used to improve the security of user identity and related data. The user's identity information is stored in encrypted form on the blockchain, and only the user and authorized third parties can decrypt and access it.

[0127] 5. Data disclosure and authorization management: Users can selectively disclose their identity information based on the confidentiality of different data contents. At the same time, users can authorize other users or organizations to access their identity information and retain ownership and control of the data. Authorization management is implemented through smart contracts, making the authorization process transparent and traceable.

[0128] 6. Consensus mechanism: Using multiple nodes in the blockchain for consensus confirmation makes the identity authentication process safer and more reliable. The consensus mechanism ensures the accuracy and consistency of identity authentication information in a distributed environment.

[0129] 7. Access behavior monitoring and early warning: Based on the user's access behavior information, determine whether the user has abnormal access behavior. When abnormal user access is detected, analyze the user's permission level and calculate the early warning score based on the permission level. Analyze the early warning score to determine whether the user may have been hacked and take corresponding protection measures.

[0130] Specifically, the steps of this embodiment may include:

[0131] 1. Identity registration:

[0132] The user submits identity information (such as identity document) through the user terminal.

[0133] The user terminal encrypts the identity information and submits it to the blockchain.

[0134] The nodes in the blockchain verify and confirm the identity information and generate a unique digital identity.

[0135] Generate the user's corresponding private key based on the generated digital identity.

[0136] 2. Identity verification:

[0137] When a user authenticates their identity, they use their private key to generate a digital signature.

[0138] Verification requests are verified by nodes in the blockchain.

[0139] The nodes in the blockchain confirm the validity of the digital signature according to the verification rules in the smart contract and return the verification results.

[0140] 3. Data disclosure and authorization:

[0141] Users can selectively disclose some identity information as needed.

[0142] Users authorize other users or organizations to access their identity information through smart contracts.

[0143] The authorization process is recorded on the blockchain, enabling transparency and traceability.

[0144] 4. Real-time monitoring of access behavior:

[0145] Continuously monitor the user's access behavior and analyze the user's access patterns.

[0146] When abnormal behavior is detected, an early warning score is calculated based on the user's permission level.

[0147] Analyze the early warning scores to determine whether there is a risk of account theft.

[0148] Based on the analysis results, take appropriate protection measures, such as restricting access or sending warning notifications.

[0149] This embodiment has security and privacy protection measures:

[0150] 1. Data encryption: The user’s identity information is encrypted and stored before being uploaded to the blockchain. Only the user holding the private key and the authorized third party can decrypt and access it.

[0151] 2. Anonymity protection: Identity verification is completed without exposing the user's specific identity information through methods such as zero-knowledge proof.

[0152] 3. Authorization management: Users can flexibly manage and control their own identity information so that only authorized users or organizations can access it.

[0153] 4. Early warning and protection: Real-time monitoring of user access behavior information, timely detection and response to potential security threats, and ensure the security of user accounts.

[0154] Compared with the related art, this embodiment has the following beneficial effects:

[0155] 1. Decentralization: Decentralized identity authentication is achieved through blockchain, eliminating single points of failure and centralized trust issues.

[0156] 2. High security: The immutable nature and encryption methods of blockchain are utilized to ensure the security and privacy of identity information.

[0157] 3. Transparency and traceability: All identity authentication operations are recorded on the blockchain, which is highly transparent and traceable.

[0158] 4. Privacy protection: Through encryption methods and anonymity protection measures, users can complete identity authentication without revealing specific identity information.

[0159] 5. Flexible authorization management: Users can flexibly manage and control their identity information as needed, making the ownership and control of data more secure.

[0160] This embodiment has the following beneficial effects:

[0161] By using blockchain to create a unique digital identity for each user, which is verified and confirmed by distributed network nodes, truly decentralized identity authentication is achieved, breaking the limitations of traditional reliance on centralized institutions; users use their own unique private keys for identity authentication, without relying on centralized identity institutions, and use encryption methods and anonymity protection measures to ensure user privacy; at the same time, users can selectively disclose their identity information and have full control over their own identity information; the multi-node consensus mechanism of blockchain is used to ensure the security and reliability of the identity authentication process, and any changes to identity information require extensive confirmation, greatly improving the anti-tampering capability; based on real-time user behavior analysis, it is determined whether there is abnormal access, and combined with user authority level risk assessment, corresponding warnings and protection measures are given, realizing dynamic monitoring and protection of user identities, and realizing the authenticity, credibility, privacy protection and personal autonomy of identity information, laying the foundation for building a truly safe and reliable digital identity system.

[0162] Use blockchain to create a unique identity. Each user has a unique digital identity, which is verified and confirmed by the nodes in the blockchain. The authenticity and credibility of the identity information is ensured by forming a corresponding private key based on the unique digital identity of each user. Users can use their own private keys for identity authentication without relying on a centralized identity authentication agency. Encryption methods and anonymity protection measures are used to protect the privacy of the user's identity and related data. Users can selectively disclose their identity information based on the confidentiality of the data content, and can authorize other users or organizations to access their identity information while retaining ownership and control of the data. Consensus confirmation is performed using multiple nodes in the blockchain to ensure the security and reliability of the identity authentication process. In addition, the user's access is judged based on the real-time behavior records of the user. If the user access is abnormal, the user's permission level is analyzed, and a warning score is calculated based on the user's permission level. The warning score is analyzed to determine whether the user has been hacked and corresponding protection measures are taken.

[0163] Next, a more specific embodiment will be described.

[0164] User Registration:

[0165] 1. User submitted identity information:

[0166] The user submits identity documents (such as ID card, driver's license, etc.) through the mobile phone application.

[0167] The application encrypts the user identity information and generates an encrypted data packet.

[0168] 2. Upload to blockchain:

[0169] The encrypted data package is submitted to the blockchain through the application.

[0170] Multiple nodes in the blockchain receive encrypted data packets and verify the user's identity information based on the encrypted data packets.

[0171] 3. Verification and Validation:

[0172] Multiple nodes in the blockchain verify identity information according to preset verification rules.

[0173] After verification, a unique digital identity for the user is generated.

[0174] Digital identities are recorded on the blockchain, making them immutable and traceable.

[0175] 4. Generate a private key:

[0176] Generate a corresponding private key for the user for subsequent identity authentication.

[0177] Users receive and securely store private keys through the app.

[0178] Authentication:

[0179] 1. User initiates verification request:

[0180] When users shop on e-commerce platforms, they need to authenticate their identity.

[0181] The user generates a digital signature using the private key through the application and submits a verification request.

[0182] 2. Verification process:

[0183] The verification request is sent to the verification node in the blockchain.

[0184] The verification node verifies the digital signature according to the verification rules of the smart contract.

[0185] 3. Verification result returned:

[0186] After the verification node confirms the validity of the digital signature, it records the result on the blockchain.

[0187] The verification result is returned to the e-commerce platform to complete the identity verification.

[0188] Privacy protection and data authorization:

[0189] 1. Selective disclosure of identity information:

[0190] Users selectively disclose part of their identity information based on the confidentiality of the data.

[0191] Users set the scope and permissions of public information through the application.

[0192] 2. Authorize third party access:

[0193] Users authorize other users or organizations to access their identity information through smart contracts.

[0194] Authorization information is recorded on the blockchain, making it transparent and traceable.

[0195] 3. Privacy protection:

[0196] Use zero-knowledge proof method to complete identity authentication without revealing specific identity information.

[0197] During the authorized access process, data is transmitted in encrypted form and only the authorized party can decrypt and access it.

[0198] Real-time behavior monitoring and early warning:

[0199] 1. Access behavior recording and monitoring:

[0200] Record users' access behavior in real time, including login time, operation type, IP address, etc.

[0201] Through the nodes in the blockchain, user behavior patterns are monitored and analyzed.

[0202] 2. Abnormal access judgment:

[0203] Determine whether the user has abnormal access behavior (such as frequent cross-region logins, multiple failed attempts in a short period of time, etc.).

[0204] When abnormal behavior is detected, the user's permission level is analyzed and a warning score is calculated.

[0205] 3. Early warning and protection measures:

[0206] Determine whether the user’s account is likely to be hacked based on the warning score.

[0207] When the risk is higher, protective measures are taken, such as temporarily freezing the account, sending warning notifications, or requiring secondary verification.

[0208] 4. Continuous monitoring and updating:

[0209] Continuously monitor user behavior, update user access behavior models, and improve the accuracy of abnormal judgment.

[0210] Through machine learning algorithms, early warning score calculations and protection measures are continuously optimized.

[0211] Security and privacy protection measures:

[0212] 1. Data encryption:

[0213] The user's identity information is encrypted and stored before being uploaded to the blockchain, making the data secure.

[0214] Only the user holding the private key and authorized third parties can decrypt and access the data.

[0215] 2. Anonymity protection:

[0216] By using methods such as zero-knowledge proof, the user's specific identity information is not exposed during the identity verification process.

[0217] This ensures that users' identity privacy is fully protected when they enjoy services.

[0218] 3. Authorization management:

[0219] Users can flexibly manage and control their identity information through smart contracts.

[0220] Make the authorization process transparent and traceable, and users retain ownership and control of their data.

[0221] 4. Early warning and protection:

[0222] Monitor users' access behavior in real time to promptly detect and respond to potential security threats.

[0223] Based on the warning score, take appropriate protection measures to ensure the safety of user accounts.

[0224] In summary, this embodiment uses the following technical means to improve the security of user identity authentication:

[0225] 1. Identity registration and verification mechanism based on blockchain: including encrypted storage of identity information, verification rules of smart contracts, consensus mechanism of verification nodes, etc.

[0226] 2. Privacy protection: Use zero-knowledge proof to protect user privacy during the identity authentication process.

[0227] 3. Architecture design: including the design and implementation of blockchain, smart contracts, user-side applications and verification nodes.

[0228] Reference Figure 6 The embodiment of the present application also provides a digital identity authentication device, which can implement the above-mentioned digital identity authentication method, and the device includes:

[0229] An information acquisition unit, used to acquire the identity information of the user;

[0230] An identification generation unit, configured to generate a digital identification of the user according to the identity information using each node in the blockchain;

[0231] A private key generation unit, used to generate a private key corresponding to the user according to the digital identity;

[0232] A signature generation unit, used to generate a digital signature using the private key when the identity of the user needs to be verified;

[0233] The signature verification unit is used to verify the digital signature using each of the nodes in the blockchain according to the verification rules in the smart contract to verify the identity of the user.

[0234] Reference Figure 7 In some embodiments, the identification generating unit includes:

[0235] A first information encryption unit, used to encrypt the identity information into an encrypted data packet;

[0236] A data packet uploading unit, used to upload the encrypted data packet to the blockchain;

[0237] A data packet verification unit, configured to verify the encrypted data packet using each node in the blockchain;

[0238] The identification generating subunit is used to generate the digital identification of the user after the encrypted data packet is verified.

[0239] In some embodiments, the signature verification unit includes:

[0240] A signature verification subunit is used to verify the digital signature using each of the nodes in the blockchain according to the zero-knowledge proof in the smart contract; wherein the verification rule includes the zero-knowledge proof.

[0241] Reference Figure 8 In some embodiments, the device further comprises an information display unit, wherein the information display unit comprises:

[0242] An information determination unit, configured to determine target information selected by the user in the identity information after the identity of the user is verified;

[0243] An access authorization unit is used to authorize other users to access the target information through a smart contract on the blockchain.

[0244] Reference Fig. 9 In some embodiments, the access authorization unit includes:

[0245] A second information encryption unit, used for encrypting the target information;

[0246] The access authorization subunit is used to authorize other users to access the encrypted target information through the smart contract on the blockchain.

[0247] Reference Fig.10 In some embodiments, the device further comprises a behavior monitoring unit, wherein the behavior monitoring unit comprises:

[0248] A behavior recording unit, used to obtain the user's access behavior information after the user's identity is verified;

[0249] A behavior judgment unit, used to judge whether there is abnormal access behavior according to the access behavior information;

[0250] A score calculation unit, used to calculate a warning score according to the authority level of the user if there is abnormal access behavior;

[0251] A measure execution unit is used to execute a protection measure that matches the early warning score.

[0252] In some embodiments, the apparatus further comprises:

[0253] An identification recording unit is used to record the digital identity on the blockchain.

[0254] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0255] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above digital identity authentication method when executing the computer program. The electronic device can be any smart terminal including a tablet computer, a car computer, etc.

[0256] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0257] See also Fig.11 , Fig.11 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:

[0258] The processor 1101 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;

[0259] The memory 1102 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 1102 can store an operating system and other applications. When the technical solution provided in the embodiments of this specification is implemented by software or firmware, the relevant program code is stored in the memory 1102, and the processor 1101 calls and executes the digital identity authentication method of the embodiments of this application;

[0260] Input / output interface 1103, used to implement information input and output;

[0261] The communication interface 1104 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WIFI, Bluetooth, etc.);

[0262] A bus 1105 that transmits information between various components of the device (e.g., the processor 1101, the memory 1102, the input / output interface 1103, and the communication interface 1104);

[0263] The processor 1101 , the memory 1102 , the input / output interface 1103 and the communication interface 1104 are connected to each other in communication within the device via the bus 1105 .

[0264] It can be understood that the electronic device of this embodiment executes the above digital identity authentication method, which can bring the following beneficial effects:

[0265] By using blockchain to create a unique digital identity for each user, which is verified and confirmed by distributed network nodes, truly decentralized identity authentication is achieved, breaking the limitations of traditional reliance on centralized institutions; users use their own unique private keys for identity authentication, without relying on centralized identity institutions, and use encryption methods and anonymity protection measures to ensure user privacy; at the same time, users can selectively disclose their identity information and have full control over their own identity information; the multi-node consensus mechanism of blockchain is used to ensure the security and reliability of the identity authentication process, and any changes to identity information require extensive confirmation, greatly improving the anti-tampering capability; based on real-time user behavior analysis, it is determined whether there is abnormal access, and combined with user authority level risk assessment, corresponding warnings and protection measures are given, realizing dynamic monitoring and protection of user identities, and realizing the authenticity, credibility, privacy protection and personal autonomy of identity information, laying the foundation for building a truly safe and reliable digital identity system.

[0266] Use blockchain to create a unique identity. Each user has a unique digital identity, which is verified and confirmed by the nodes in the blockchain. The authenticity and credibility of the identity information is ensured by forming a corresponding private key based on the unique digital identity of each user. Users can use their own private keys for identity authentication without relying on a centralized identity authentication agency. Encryption methods and anonymity protection measures are used to protect the privacy of the user's identity and related data. Users can selectively disclose their identity information based on the confidentiality of the data content, and can authorize other users or organizations to access their identity information while retaining ownership and control of the data. Consensus confirmation is performed using multiple nodes in the blockchain to ensure the security and reliability of the identity authentication process. In addition, the user's access is judged based on the real-time behavior records of the user. If the user access is abnormal, the user's permission level is analyzed, and a warning score is calculated based on the user's permission level. The warning score is analyzed to determine whether the user has been hacked and corresponding protection measures are taken.

[0267] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, the above-mentioned digital identity authentication method is implemented.

[0268] It can be understood that the contents of the above method embodiments are all applicable to the present storage medium embodiments, the functions specifically implemented by the present storage medium embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0269] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0270] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0271] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0272] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0273] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0274] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0275] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0276] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0277] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0278] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0279] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0280] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but the scope of the rights of the present invention is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present invention should be within the scope of the rights of the present invention.

Claims

1. A digital identity authentication method, characterized in that: The method comprises the following steps: Obtain the user's identity information; Using each node in the blockchain to generate a digital identity of the user based on the identity information; Generate a private key corresponding to the user according to the digital identity; When the identity of the user needs to be verified, a digital signature is generated using the private key; The digital signature is verified by using each of the nodes in the blockchain according to the verification rules in the smart contract to verify the identity of the user.

2. A digital identity authentication method according to claim 1, characterized in that: The method of using each node in the blockchain to generate a digital identity of the user according to the identity information comprises the following steps: Encrypting the identity information into an encrypted data packet; Uploading the encrypted data packet to the blockchain; Verifying the encrypted data packet using each node in the blockchain; When the encrypted data packet is verified, the digital identity of the user is generated.

3. A digital identity authentication method according to claim 1, characterized in that: The method of verifying the digital signature using each of the nodes in the blockchain according to the verification rules in the smart contract includes the following steps: Utilize each of the nodes in the blockchain to verify the digital signature according to the zero-knowledge proof in the smart contract; wherein the verification rule includes the zero-knowledge proof.

4. A digital identity authentication method according to claim 1, characterized in that: The method further comprises the following steps: When the identity of the user is verified, determining the target information selected by the user in the identity information; Authorize other users to access the target information through the smart contract on the blockchain.

5. A digital identity authentication method according to claim 4, characterized in that: The step of authorizing other users to access the target information through the smart contract on the blockchain includes the following steps: encrypting the target information; Other users are authorized to access the encrypted target information through the smart contract on the blockchain.

6. A digital identity authentication method according to claim 1, characterized in that: The method further comprises the following steps: When the identity of the user is verified, obtaining the access behavior information of the user; Determining whether there is abnormal access behavior based on the access behavior information; If so, calculate the warning score based on the user's authority level; A protective measure matching the warning score is executed.

7. A digital identity authentication method according to any one of claims 1 to 6, characterized in that: The method further comprises the following steps: The digital identity is recorded on the blockchain.

8. A digital identity authentication device, characterized in that: The device comprises: An information acquisition unit, used to acquire the identity information of the user; An identification generation unit, configured to generate a digital identification of the user according to the identity information using each node in the blockchain; A private key generation unit, used to generate a private key corresponding to the user according to the digital identity; A signature generation unit, used to generate a digital signature using the private key when the identity of the user needs to be verified; The signature verification unit is used to verify the digital signature using each of the nodes in the blockchain according to the verification rules in the smart contract to verify the identity of the user.

9. An electronic device, characterized in that: The electronic device comprises a memory and a processor, the memory stores a computer program, and the processor implements a digital identity authentication method as described in any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, a digital identity authentication method as claimed in any one of claims 1 to 7 is implemented.

Images