A blockchain-based identity authentication system and method

Abstract

The application particularly relates to a blockchain-based identity authentication system and method. The blockchain-based identity authentication system comprises three-layer architecture of an application layer, an interface layer and a core layer; the application layer is responsible for interaction with a user information chain and an authentication and authorization chain of the core layer, and is responsible for realizing user identity information management and authentication and authorization; the interface layer is used for connecting application of the application layer and the blockchain network of the core layer, and provides user registration, user on-chain verification login, user information modification and user information query interfaces for the application layer; the core layer is composed of the user information chain and the authentication and authorization chain. The blockchain-based identity authentication system and method record the process of identity authentication and authorization on the blockchain, realize complete control of personal identity information of a user, make identity information authorization have the characteristics of openness and transparency, verifiable traceability and safety and credibility, and avoid adverse effects caused by identity information leakage.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a blockchain-based identity authentication system and method. Background Art

[0002] Traditional identity authentication methods typically rely on a trusted third-party platform (such as WeChat or Alipay), which holds all user identity information. When a service provider needs to authenticate a user, they interact with the platform and complete the authentication process after obtaining user authorization. This approach requires users to fully trust the third-party platform, and user identity information and authorization records are centrally stored by the third-party platform, preventing users from fully controlling their identity data. If data protection mechanisms are inadequate or malicious activity leads to identity data leaks, user interests will suffer.

[0003] In order to solve the above problems, the present invention proposes an identity authentication system and method based on blockchain. Summary of the Invention

[0004] In order to overcome the shortcomings of the existing technology, the present invention provides a simple and efficient blockchain-based identity authentication system and method.

[0005] The present invention is achieved through the following technical solutions:

[0006] A blockchain-based identity authentication system, characterized by comprising a three-layer architecture of application layer, interface layer and core layer;

[0007] The application layer includes a user information management module, a user authentication and authorization module, and a mobile app;

[0008] The mobile app interacts with the user information chain and authentication and authorization chain of the core layer by calling the interface provided by the interface layer, and is responsible for implementing user identity information management and authentication and authorization; the user information chain is authoritative and unique, and is managed and operated by the management agency;

[0009] The user information management module is responsible for interacting with the user information chain, including user registration, verification login, information modification and information query;

[0010] When a user registers, the mobile app submits device information and identity information to the management agency. After review and approval, the hash value is calculated and recorded in the user information chain to realize the entry of the new identity. All user identity data is only stored in the mobile device;

[0011] When verifying login, the hash value calculated during user registration is verified on-chain, and after confirming the identity, an AccessToken (authentication token) is generated for subsequent identity authentication and authorization operations;

[0012] When modifying information, the user applies for a change to the current identity information. After approval, the hash value is recalculated and the change process is recorded in the user information chain.

[0013] The user authentication and authorization module is responsible for interacting with the authentication and authorization chain, including identity authorization and authorization query;

[0014] The participants in the identity authorization are users and third-party applications. When a user attempts to log in to a third-party application, the authentication service receives an identity authentication request from the third-party application and requests the user's identity information required for authentication. After the user agrees, the identity information is read from the mobile app and returned and written into the authentication and authorization chain for record storage, making the authorization process traceable.

[0015] Third-party applications use authorization queries to periodically poll the authorization status of user identity authentication. After agreeing to the authorization, they will obtain the requested identity data. Users use authorization queries to obtain historical authorization records of personal identity data.

[0016] The interface layer is used to connect the application layer application and the core layer blockchain network, providing the application layer with user registration, user chain verification login, user information modification and user information query interfaces;

[0017] The interface layer is built based on the Fabric SDK and is responsible for establishing a bridge for interaction between the application layer and the core layer. It converts the relevant business operations of the application layer into blockchain transactions of the core layer by calling the core layer smart contract.

[0018] The core layer consists of a user information chain and an authentication and authorization chain;

[0019] The user information chain provides identity management services and is managed and operated by a management agency, which is responsible for storing and maintaining the user's on-chain identity information;

[0020] The authentication and authorization chain is used to store evidence of the authorization process of third-party applications and ensure the secure isolation between business and user data.

[0021] The authentication and authorization chain is one or more chains, which are divided according to different business fields. They are created by the application industry or alliance after applying to the management agency to provide identity authentication and authorization services to the outside world.

[0022] The blockchain-based identity authentication method includes the following steps:

[0023] Step S1, identity registration and login;

[0024] Before using the system, users must first register their identity on the mobile app. Once the user's identity information is entered, it is stored on the mobile device and facial recognition is initiated to verify whether the identity information matches the operator. Once a match is confirmed, the facial data, identity information, and device information are merged. A registration request is sent to the user information management module in the authentication service application layer to bind the user to the device. The user can then query the registration results through the mobile app.

[0025] After the authority has reviewed and approved it, the user information contract is called through the user registration interface provided by the interface layer, and the hash result of the combined data is written into the user information chain. The hash result will serve as the unique identity of the user in the system;

[0026] After successful registration, the user logs in with the combined data of facial data, identity information and device information, and requests an Access Token (authentication token) from the authentication service as a credential for subsequent identity authentication and authorization operations;

[0027] Step S2: The user initiates login and the third-party application requests authentication;

[0028] When a user requests a service from a third-party application, the third-party application authenticates the user, choosing to perform system-based authentication to determine the user's unique ID and necessary identity information, including but not limited to name, gender, and address. Registered users complete the authentication and authorization process through interaction between the third-party application, the user's device, and the authentication service on the mobile app.

[0029] The third-party application initiates an identity authentication request to the identity authorization module in the authentication service application layer, and attaches the application and device information of the authentication source;

[0030] In step S2, an authentication ID is generated based on the application and device information of the authentication source to identify the unique authentication request processing process in the system; after obtaining the authentication ID, a QR code is generated, and the authentication service is periodically polled for status. The user needs to complete the identity authentication operation within a specific time.

[0031] Step S3: User authorization identity data and authorization record storage;

[0032] The user scans the QR code generated by the third-party application in the mobile app, obtains the unique authentication ID after parsing, and initiates a request to the user authentication and authorization module in the authentication service application layer to query the authentication details;

[0033] Through the identity authorization interface provided by the interface layer, call the authentication authorization contract to query the authentication information in the authentication authorization chain, including but not limited to third-party application information, device information initiating the request, and identity information required for authentication;

[0034] The authentication information is displayed in the mobile app for the user to review. If the user agrees to authorize, the required identity information is read from the mobile device and returned to the authentication service;

[0035] The authentication service binds the authentication ID and identity authorization information and writes them into the authentication authorization chain;

[0036] Step S4: The third-party application obtains the user's identity information and provides services;

[0037] The third-party application initiates a query request to the user authentication and authorization module in the authentication service application layer during periodic polling, and monitors the status changes of the authentication ID through the authorization query interface provided by the interface layer. After the user completes the authorization, the unique user ID and other identity information bound to the authentication ID are obtained, thus ending the polling and starting to provide services to the user.

[0038] A blockchain-based identity authentication system and device, characterized by comprising a memory and a processor; the memory is used to store a computer program, and the processor is used to implement the above-mentioned method when executing the computer program.

[0039] A readable storage medium is characterized in that: a computer program is stored on the readable storage medium, and the computer program implements the above method when executed by a processor.

[0040] The beneficial effects of the present invention are as follows: the blockchain-based identity authentication system and method authorizes the user's identity information to a third-party application. The third-party application only needs to use a designated interface and follow the authentication process to complete the identity authentication process without affecting its own account management system;

[0041] At the same time, in order to achieve full control of users’ personal identity information and prevent the adverse effects of identity information leakage, users keep their identity data in their mobile terminals. Only the hash value of device information and user identity information is written on the chain, and the credibility is endorsed by the management agency. The identity information requested by third-party applications can also be selectively authorized.

[0042] Based on the tamper-proof nature of distributed ledger data, the identity authentication and authorization process is recorded on the chain, making identity information authorization open, transparent, verifiable, traceable, secure and reliable. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or prior art description. Obviously, the drawings described below are some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0044] Figure 1 is a schematic diagram of the blockchain-based identity authentication system of the present application. Figure 1 Figure 1 is a schematic diagram of the blockchain-based identity authentication system of the present application.

[0045] Figure 1 is a schematic diagram of the blockchain-based identity authentication system of the present application. Figure 2 Figure 1 is a schematic diagram of the blockchain-based identity authentication system of the present application. DETAILED DESCRIPTION

[0046] In order to make the person skilled in the art better understand the technical solutions in the present application, the following will combine the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only some embodiments of the present application, not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor should belong to the scope of protection of the present application.

[0047] The blockchain technology is deeply integrated with the cryptography algorithm, has absolute advantages in privacy protection, data integrity and security, and fundamentally eliminates the data leakage problem, and is suitable for application scenarios with high requirements for data security.

[0048] The blockchain-based identity authentication system comprises three layers of application layer, interface layer and core layer;

[0049] The application layer comprises a user information management module, a user authentication and authorization module and a mobile terminal App;

[0050] The mobile terminal App interacts with the user information chain and the authentication and authorization chain of the core layer by calling the interfaces provided by the interface layer, and is responsible for realizing user identity information management and authentication and authorization; wherein the user information chain is authoritative and unique, and is managed and operated by a management institution;

[0051] The management institution establishes the trust basis of the user and the third-party application, and performs credibility endorsement on the user information and identity authentication and authorization records in the system. All business logics participated by the user or the third-party application need to be recorded in the blockchain ledger, so as to realize transparent, traceable, tamper-proof and non-repudiable business information.

[0052] The user information management module is responsible for interacting with the user information chain, including user registration, verification login, information modification and information query;

[0053] When a user registers, the mobile app submits device information and identity information to the management agency. After review and approval, the hash value is calculated and recorded in the user information chain to realize the entry of the new identity. All user identity data is only stored in the mobile device;

[0054] When verifying login, the hash value calculated during user registration is verified on-chain, and after confirming the identity, an AccessToken (authentication token) is generated for subsequent identity authentication and authorization operations;

[0055] When modifying information, the user applies for a change to the current identity information. After approval, the hash value is recalculated and the change process is recorded in the user information chain.

[0056] The user authentication and authorization module is responsible for interacting with the authentication and authorization chain, including identity authorization and authorization query;

[0057] The participants in the identity authorization are users and third-party applications. When a user attempts to log in to a third-party application, the authentication service receives an identity authentication request from the third-party application and requests the user's identity information required for authentication. After the user agrees, the identity information is read from the mobile app and returned and written into the authentication and authorization chain for record storage, making the authorization process traceable.

[0058] Third-party applications use authorization queries to periodically poll the authorization status of user identity authentication. After agreeing to the authorization, they will obtain the requested identity data. Users use authorization queries to obtain historical authorization records of personal identity data.

[0059] The interface layer is used to connect the application layer application and the core layer blockchain network, providing the application layer with user registration, user chain verification login, user information modification and user information query interfaces;

[0060] The interface layer is built based on the Fabric SDK and is responsible for establishing a bridge for interaction between the application layer and the core layer. It converts the relevant business operations of the application layer into blockchain transactions of the core layer by calling the core layer smart contract.

[0061] The core layer consists of a user information chain and an authentication and authorization chain;

[0062] The user information chain provides identity management services and is managed and operated by a management agency, which is responsible for storing and maintaining the user's on-chain identity information;

[0063] The authentication and authorization chain is used to store evidence of the authorization process of third-party applications, making the authorization process open, transparent, verifiable and traceable, while bringing flexibility to the system and ensuring the secure isolation between business and user data.

[0064] The authentication and authorization chain is one or more chains, which are divided according to different business fields. They are created by the application industry or alliance after applying to the management agency to provide identity authentication and authorization services to the outside world.

[0065] In this blockchain-based identity authentication system, role division is not completely fixed. The same identity subject can play the role of a user or a third-party application in different business processes. That is, a third-party application can initiate an authorization request for identity information from the user, and can also receive authorization requests from the third-party application as a user.

[0066] This blockchain-based identity authentication system can be divided into two parts: on-chain and off-chain. The on-chain part consists of the core layer's user information chain and authentication and authorization chain. A "chain" can be a channel within the same blockchain network or across different blockchain networks. The off-chain part consists of the functional interfaces of the interface layer and the functional modules of the application layer. The core layer is the operational foundation of the system and is composed of all nodes in the blockchain network. These nodes include modules such as consensus mechanisms, endorsement policies, transaction verification, and ledger management. User information management and authentication and authorization operations in the system are converted into blockchain transactions and stored in the ledgers of each node.

[0067] The blockchain-based identity authentication method includes the following steps:

[0068] Step S1, identity registration and login;

[0069] Before using the system, users must first register their identity on the mobile app. Once the user's identity information is entered, it is stored on the mobile device and facial recognition is initiated to verify whether the identity information matches the operator. Once a match is confirmed, the facial data, identity information, and device information are merged. A registration request is sent to the user information management module in the authentication service application layer to bind the user to the device. The user can then query the registration results through the mobile app.

[0070] After the authority has reviewed and approved it, the user information contract is called through the user registration interface provided by the interface layer, and the hash result of the combined data is written into the user information chain. The hash result will serve as the unique identity of the user in the system;

[0071] After successful registration, the user logs in with the combined data of facial data, identity information and device information, and requests an Access Token (authentication token) from the authentication service as a credential for subsequent identity authentication and authorization operations;

[0072] Step S2: The user initiates login and the third-party application requests authentication;

[0073] When a user requests a service from a third-party application, the third-party application authenticates the user, choosing to perform system-based authentication to determine the user's unique ID and necessary identity information, including but not limited to name, gender, and address. Registered users complete the authentication and authorization process through interaction between the third-party application, the user's device, and the authentication service on the mobile app.

[0074] The third-party application initiates an identity authentication request to the identity authorization module in the authentication service application layer, and attaches the application and device information of the authentication source;

[0075] In step S2, an authentication ID is generated based on the application and device information of the authentication source to identify the unique authentication request processing process in the system; after obtaining the authentication ID, a QR code is generated, and the authentication service is periodically polled for status. The user needs to complete the identity authentication operation within a specific time.

[0076] Step S3: User authorization identity data and authorization record storage;

[0077] The user scans the QR code generated by the third-party application in the mobile app, obtains the unique authentication ID after parsing, and initiates a request to the user authentication and authorization module in the authentication service application layer to query the authentication details;

[0078] Through the identity authorization interface provided by the interface layer, call the authentication authorization contract to query the authentication information in the authentication authorization chain, including but not limited to third-party application information, device information initiating the request, and identity information required for authentication;

[0079] The authentication information is displayed in the mobile app for the user to review. If the user agrees to authorize, the required identity information is read from the mobile device and returned to the authentication service;

[0080] The authentication service binds the authentication ID and identity authorization information into the authentication and authorization chain, making the identity authentication process reliable, traceable, secure and trustworthy.

[0081] Step S4: The third-party application obtains the user's identity information and provides services;

[0082] The third-party application initiates a query request to the user authentication and authorization module in the authentication service application layer during periodic polling, and monitors the status changes of the authentication ID through the authorization query interface provided by the interface layer. After the user completes the authorization, the unique user ID and other identity information bound to the authentication ID are obtained, thus ending the polling and starting to provide services to the user.

[0083] The blockchain-based identity authentication system and device include a memory and a processor; the memory is used to store a computer program, and the processor is used to implement the above-mentioned method when executing the computer program.

[0084] The readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described above is implemented.

[0085] Compared with existing technologies, this blockchain-based identity authentication system and method has the following characteristics:

[0086] First, it's built on the Fabric blockchain network, effectively integrating blockchain technology with identity information management. Blockchain is a decentralized system. The identity authentication and authorization system implemented on a blockchain avoids single points of failure and offers high reliability. The distributed ledger uses a chained data structure to store data, effectively preventing data tampering and enhancing the security of user identity data storage. The hashing algorithm and consensus mechanism within the blockchain ensure the authenticity and traceability of user identity data, and identity authorization records stored on the chain serve as proof, preventing disputes.

[0087] Second, a trusted management agency serves as the manager of user identity information, strictly controlling and managing user registration and information changes, and is responsible for the operational management of credibility endorsement and authentication services, establishing a foundation of trust between users and third-party applications, and making the identity authentication and authorization process tamper-proof, traceable, stable and reliable.

[0088] Third, combined with encrypted data transmission channels, malicious behaviors such as data tampering and forgery are avoided, the authenticity, credibility and integrity of user identity data are guaranteed, and it has the advantages of flexibility, stability and reliability.

[0089] The embodiment described above is only one specific implementation of the present invention. Common changes and substitutions made by those skilled in the art within the scope of the technical solution of the present invention should be included in the protection scope of the present invention.

Claims

1. A blockchain-based identity authentication system, characterized by: It includes three-layer architecture: application layer, interface layer and core layer; The application layer includes a user information management module, a user authentication and authorization module, and a mobile app; The mobile app interacts with the user information chain and authentication and authorization chain of the core layer by calling the interface provided by the interface layer, and is responsible for implementing user identity information management and authentication and authorization; the user information chain is authoritative and unique, and is managed and operated by the management agency; The user information management module is responsible for interacting with the user information chain, including user registration, verification login, information modification and information query; The user authentication and authorization module is responsible for interacting with the authentication and authorization chain, including identity authorization and authorization query; The interface layer is used to connect the application layer application and the core layer blockchain network, providing the application layer with user registration, user chain verification login, user information modification and user information query interfaces; The core layer consists of a user information chain and an authentication and authorization chain; The user information chain provides identity management services and is managed and operated by a management agency, which is responsible for storing and maintaining the user's on-chain identity information; The authentication and authorization chain is used to store evidence of the authorization process of third-party applications and ensure the secure isolation between business and user data.

2. The blockchain-based identity authentication system according to claim 1, characterized in that: When a user registers, the mobile app submits device information and identity information to the management agency. After review and approval, the hash value is calculated and recorded in the user information chain to realize the entry of the new identity. All user identity data is only stored in the mobile device; When verifying login, the hash value calculated during user registration is verified on-chain, and an AccessToken is generated after the identity is confirmed, which is used for subsequent identity authentication and authorization operations; When modifying information, the user applies for a change to the current identity information. After approval, the hash value is recalculated and the change process is recorded in the user information chain.

3. The blockchain-based identity authentication system according to claim 1, characterized in that: The participants of the identity authorization are users and third-party applications. When a user attempts to log in to a third-party application, the authentication service receives an identity authentication request from the third-party application and requests the identity information required for authentication from the user. After the user agrees, the identity information is read from the mobile app and returned, and written into the authentication and authorization chain for record storage, making the authorization process traceable; Third-party applications use authorization queries to periodically poll the authorization status of user identity authentication. After agreeing to the authorization, they will obtain the requested identity data. Users use authorization queries to obtain historical authorization records of personal identity data.

4. The blockchain-based identity authentication system according to claim 1, characterized in that: The interface layer is built based on the Fabric SDK and is responsible for establishing a bridge for interaction between the application layer and the core layer. It converts the relevant business operations of the application layer into blockchain transactions of the core layer by calling the core layer smart contract.

5. The blockchain-based identity authentication system according to claim 1, characterized in that: The authentication and authorization chain is one or more chains, which are divided according to different business fields. They are created by the application industry or alliance after applying to the management agency to provide identity authentication and authorization services to the outside world.

6. A blockchain-based identity authentication method, characterized by: The following steps are involved: Step S1, identity registration and login; Before using the system, users must first register their identity on the mobile app. Once the user's identity information is entered, it is stored on the mobile device and facial recognition is initiated to verify whether the identity information matches the operator. Once a match is confirmed, the facial data, identity information, and device information are merged. A registration request is sent to the user information management module in the authentication service application layer to bind the user to the device. The user can then query the registration results through the mobile app. After the authority has reviewed and approved it, the user information contract is called through the user registration interface provided by the interface layer, and the hash result of the combined data is written into the user information chain. The hash result will serve as the unique identity of the user in the system; After successful registration, the user logs in with the combined data of facial data, identity information and device information, and requests an Access Token from the authentication service as a credential for subsequent identity authentication and authorization operations; Step S2: The user initiates login and the third-party application requests authentication; When a user requests a service from a third-party application, the third-party application authenticates the user, choosing to perform system-based authentication to determine the user's unique ID and necessary identity information, including but not limited to name, gender, and address. Registered users complete the authentication and authorization process through interaction between the third-party application, the user's device, and the authentication service on the mobile app. The third-party application initiates an identity authentication request to the identity authorization module in the authentication service application layer, and attaches the application and device information of the authentication source; Step S3: User authorization identity data and authorization record storage; The user scans the QR code generated by the third-party application in the mobile app, obtains the unique authentication ID after parsing, and initiates a request to the user authentication and authorization module in the authentication service application layer to query the authentication details; Through the identity authorization interface provided by the interface layer, call the authentication authorization contract to query the authentication information in the authentication authorization chain, including but not limited to third-party application information, device information initiating the request, and identity information required for authentication; The authentication information is displayed in the mobile app for the user to review. If the user agrees to authorize, the required identity information is read from the mobile device and returned to the authentication service; The authentication service binds the authentication ID and identity authorization information and writes them into the authentication authorization chain; Step S4: The third-party application obtains the user's identity information and provides services; The third-party application initiates a query request to the user authentication and authorization module in the authentication service application layer during periodic polling, and monitors the status changes of the authentication ID through the authorization query interface provided by the interface layer. After the user completes the authorization, the unique user ID and other identity information bound to the authentication ID are obtained, thus ending the polling and starting to provide services to the user.

7. The blockchain-based identity authentication method according to claim 6, characterized in that: In step S2, an authentication ID is generated based on the application and device information of the authentication source to identify the unique authentication request processing process in the system; after obtaining the authentication ID, a QR code is generated, and the authentication service is polled regularly for status. The user needs to complete the identity authentication operation within a specific time.

8. A blockchain-based identity authentication device, characterized by: The method comprises a memory and a processor; the memory is used to store a computer program, and the processor is used to implement the method according to any one of claims 6 to 7 when executing the computer program.

9. A readable storage medium, characterized in that: The readable storage medium stores a computer program, which, when executed by a processor, implements the method according to any one of claims 6 to 7.

Images