Encrypted digital asset security binding method based on smart contract and inspection lock

Abstract

The invention discloses an encrypted digital asset security binding method based on a smart contract and an inspection lock. The method comprises the following steps: introducing a distributed identity label to improve a user identity authentication system; secondly, user information is encrypted and stored on a soul binding token chain, so that user privacy and personal information security are ensured, authentication of user under-chain information is realized through soul binding tokens, meanwhile, decentralized and non-tampering personal information authentication is realized by utilizing a block chain technology, and inspection is performed by using an inspection lock; and after the verification party receives the signature information provided by the user, the Merkel tree path and the hash values of other nodes, the verification party obtains the public key corresponding to the user from the chain and verifies the information by using the public key. After verification succeeds, the verification party constructs a Merkel tree to obtain a Hash value of the root node, then whether authentication succeeds or not is judged by comparing values in the SBT, if yes, authentication succeeds, and the check lock is unlocked, and if not, authentication fails, and the check lock continues to be locked.

Description

[0001] Technical field: The present invention belongs to the field of blockchain technology, and in particular to a method and a verification lock for securely binding encrypted digital assets based on smart contracts.

[0002] Background technology: With the increasing development and popularization of digital technology, people are increasingly inseparable from the Internet and the digital world in their daily lives. However, in the digital world, identity authentication has always been a huge challenge. At present, the traditional centralized identity authentication model has many shortcomings in data privacy risks, single point failures and identity impersonation. Blockchain technology came into being. Due to its characteristics of decentralization, non-repudiation, privacy protection, traceability, etc., it has brought new ideas and research methods to the solution of the above problems. Therefore, decentralized identity authentication technology has gradually gained people's attention and exploration. Decentralized identity authentication helps users authenticate without trusting intermediaries. Compared with the traditional centralized model, decentralized identity authentication is more secure, reliable and privacy-protecting. This technology can be used for digital currency and blockchain, and can also be widely used in online services and government public services. It is the most important technical means of identity authentication in the digital age.

[0003] Invention content: The purpose of the present invention is to provide a method and a verification lock for secure binding of encrypted digital assets based on smart contracts, which can lock the encrypted digital assets of users and cannot be activated if the authentication fails.

[0004] Description of the drawings: Figure 1 This is the off-chain information verification sequence diagram Specific implementation method:

[0005] In order to achieve the above object, the technical solution of the present invention is:

[0006] A method for securely binding encrypted digital assets based on smart contracts, comprising:

[0007] S1. Introduce distributed identity to improve the user authentication system.

[0008] Decentralized Identifiers (DID) is a new type of identifier built on self-sovereign identity, which realizes verifiable and highly trusted decentralized digital identity and has characteristics that match blockchain. Smart contracts running in the blockchain network provide all users with DID smart contracts for creating and managing decentralized identities, while Soul-Bound Token (SBT) smart contracts provide users with off-chain information storage and management.

[0009] S2. Use the DID verification lock identifier to lock the assets that need to be securely bound in the user's encrypted digital assets.

[0010] A private key challenge is set in the assets locked by the DID verification lock identifier, and at the same time, it is determined whether the user has the corresponding private key based on the public key obtained on the chain.

[0011] S3. Encrypt user information and store it on the SBT chain. At the same time, authenticate the user's off-chain information through SBT, and use blockchain technology to achieve decentralized and tamper-proof personal information authentication.

[0012] S4. The user provides the original value of the Merkle tree leaf node to the verifier. According to the needs of different scenarios, the user can provide all the original values ​​of the Merkle tree leaf nodes, or selectively provide part of the original value and the Merkle tree path and the hash value of other non-leaf nodes.

[0013] S5. Use the verification lock for verification. After the verifier receives the signature information provided by the user, the Merkle tree path and other node hash values, the verifier obtains the user's corresponding public key from the chain and verifies the information with the public key. After successful verification, the verifier constructs the Merkle tree to obtain the hash value of the root node, and then determines whether the authentication is successful by comparing the value in SBT. If they are consistent, the authentication is successful and the verification lock is unlocked. Otherwise, the authentication fails and the verification lock remains locked.

[0014] 2. The method for secure binding of encrypted digital assets based on smart contracts according to claim 1, characterized in that, in step S1, the DID verification lock identifier supports off-chain identity information authentication for secure binding of the user's encrypted digital assets.

[0015] 3. The method for securely binding encrypted digital assets based on smart contracts according to claim 1, characterized in that steps S1-S5 are for the SBT smart contract to provide off-chain information storage and management functions for users based on DID.

[0016] 4. A secure binding device for encrypted digital assets based on smart contracts, characterized by comprising:

[0017] Locking module: Use the DID verification lock identifier to lock the assets that need to be securely bound in the user's encrypted digital assets. Challenge module: Initiate a private key challenge in the assets locked by the DID verification lock identifier, and determine whether the user has the corresponding private key based on the public key obtained on the chain. Encrypt user information and store it on the SBT chain. At the same time, authenticate the user's off-chain information through SBT, and use blockchain technology to achieve decentralized and tamper-proof personal information authentication.

[0018] Verification module: Use the verification lock for verification. After the verifier receives the signature information, Merkle tree path and other node hash values ​​provided by the user, the verifier obtains the user's corresponding public key from the chain and verifies the information with the public key. After successful verification, the verifier constructs the Merkle tree to obtain the hash value of the root node, and then determines whether the authentication is successful by comparing the value in SBT. If they are consistent, the authentication is successful and the verification lock is unlocked. Otherwise, the authentication fails and the verification lock remains locked.

[0019] 5. The device for secure binding of encrypted digital assets based on smart contracts according to claim 4, characterized in that, in the locking module, the DID verification lock identifier supports off-chain identity information authentication for secure binding of the user's encrypted digital assets.

[0020] 6. The encrypted digital asset security binding device based on smart contract according to claim 4, characterized in that the locking module, challenge module and verification module are all based on DID smart contract.

[0021] 7. An encrypted digital asset security binding verification lock based on a smart contract, characterized in that user privacy and personal information security are ensured by encrypting and storing user information on the soul-binding token chain, and the user's off-chain information is authenticated through the soul-binding token. At the same time, blockchain technology is used to achieve decentralized and tamper-proof personal information authentication.

[0022] 8. According to the smart contract-based encrypted digital asset security binding verification lock of claim 7, it is characterized in that the DID verification lock is locked by default, and the opening function is enabled only after authentication is passed.

[0023] Decentralized identity authentication mainly involves the verifier judging whether the user holds the corresponding private key based on the public key obtained in the chain when challenging the user's private key for identity authentication. The verifier needs to randomly generate a challenge code for the user to choose. When the user receives the challenge code, the current timestamp is spliced ​​to generate a new string, and the user uses the private key to sign the string to obtain the signature information. The user then sends a message, timestamp and DID to the verifier. The verifier first obtains the corresponding public key of the smart contract based on the DID, and then verifies the message with the public key. After the signature is verified, it is guaranteed that the user is the owner of this DID. By splicing the randomly generated challenge code and timestamp, the randomness of each generated string is higher, and the verifier can also judge whether the signature is valid based on the timestamp. To protect the privacy of user information, when the user provides the real off-chain information to the SBT issuer and applies for the corresponding SBT, the user signs the corresponding information with a private key to ensure the integrity and privacy of the information. On the other hand, the content stored in SBT is constructed by building a Merkle tree for the user's off-chain information, and the hash value of the root node of the Merkle tree is used as the content in SBT to ensure the integrity of the user's off-chain information while avoiding the risk of privacy information leakage.

Claims

1. A method for securely binding encrypted digital assets based on smart contracts, characterized in that: include: S1. Introduce distributed identity to improve the user identity authentication system. (DID, Decentralized Identifiers) Decentralized identity is a new type of identifier based on autonomous sovereign identity, which realizes verifiable and strongly trusted decentralized digital identity and has characteristics matching blockchain. The smart contract running in the blockchain network provides all users with DID smart contracts for creating and managing decentralized identities, while the Soul-Bound Token (SBT) smart contract provides users with off-chain information storage and management. S2. Use the DID verification lock identifier to lock the assets that need to be securely bound in the user's encrypted digital assets. Set a private key challenge for the assets locked by the DID verification lock identifier, and determine whether the user has the corresponding private key based on the public key obtained on the chain. S3. Encrypt user information and store it on the SBT chain. At the same time, authenticate the user's off-chain information through SBT, and use blockchain technology to realize decentralized and tamper-proof personal information authentication. S4. The user provides the original value of the Merkle leaf node to the verifier. According to the needs of different scenarios, users can provide all the original values ​​for constructing the Merkle tree leaf nodes, or they can selectively provide part of the original values ​​and the Merkle tree path and the hash values ​​of other non-leaf nodes. S5. Use the verification lock for verification. After the verifier receives the signature information provided by the user, the Merkle tree path and other node hash values, the verifier obtains the user's corresponding public key from the chain and verifies the information with the public key. After the verification is successful, the verifier constructs the Merkle tree to obtain the hash value of the root node, and then determines whether the authentication is successful by comparing the value in SBT. If they are consistent, the authentication is successful and the verification lock is unlocked. Otherwise, the authentication fails and the verification lock continues to be locked.

2. The method for securely binding encrypted digital assets based on smart contracts according to claim 1, characterized in that: In step S1, the DID verification lock identifier supports off-chain identity information authentication for secure binding of the user's encrypted digital assets.

3. The method for securely binding encrypted digital assets based on smart contracts according to claim 1, characterized in that: Steps S1-S5 are for the SBT smart contract to provide users with off-chain information storage and management functions based on DID.

4. A secure binding device for encrypted digital assets based on smart contracts, characterized in that: include: Locking module: Use the DID verification lock identifier to lock the assets that need to be securely bound in the user's encrypted digital assets. Challenge module: Initiate a private key challenge in the assets locked by the DID verification lock identifier, and determine whether the user has the corresponding private key based on the public key obtained on the chain. Encrypt user information and store it on the SBT chain. At the same time, authenticate the user's off-chain information through SBT, and use blockchain technology to achieve decentralized and tamper-proof personal information authentication. Verification module: Use the verification lock for verification. After the verifier receives the information signed by the user, the Merkle tree path and other node hash values, the verifier obtains the user's corresponding public key from the chain and verifies the information with the public key. After the verification is successful, the verifier constructs the Merkle tree to obtain the hash value of the root node, and then determines whether the authentication is successful by comparing the value in SBT. If they are consistent, the authentication is successful and the verification lock is unlocked. Otherwise, the authentication fails and the verification lock continues to be locked.

5. The encrypted digital asset security binding device based on smart contract according to claim 4 is characterized in that: In the locking module, the DID verification lock identifier supports off-chain identity information authentication for secure binding of the user's encrypted digital assets.

6. The encrypted digital asset security binding device based on smart contract according to claim 4 is characterized in that: The locking module, challenge module, and verification module are all based on the DID smart contract.

7. An encrypted digital asset security binding verification lock based on smart contracts, characterized in that: By encrypting and storing user information on the Soul Binding Token chain, user privacy and personal information security are ensured. The user's off-chain information is authenticated through the Soul Binding Token, and blockchain technology is used to achieve decentralized and tamper-proof personal information authentication.

8. The encrypted digital asset security binding verification lock based on smart contract according to claim 7 is characterized in that: The DID verification lock is in a locked state by default, and the opening function is enabled only after authentication is passed.

Images