Identification verification method and device, electronic equipment, storage medium and program product

Abstract

The embodiment of the invention discloses an identification verification method and device, electronic equipment, a storage medium and a program product, and the method comprises the steps: responding to a received identification verification request, and obtaining an identification code and signature content corresponding to the identification verification request; acquiring a digital certificate of an enterprise to which the identification code belongs; verifying the signature content based on a public key in the digital certificate; confirming the identity of the identification code in response to the passing of the verification of the signature content; and feeding back an identity confirmation result of the identification code to a sending end of the identification verification request. According to the embodiment of the invention, the identity confirmation result of the identification code is fed back to the user, so that the user can know whether the identification code is registered in the affiliated enterprise or not, whether the product with the identification code is produced by the affiliated enterprise of the identification code or not can be verified, rapid verification of the identification code is realized, and the user operation is simple.

Description

Technical Field

[0001] The present disclosure relates to identification resolution technology and authentication technology, and in particular to an identification verification method, device, electronic device, storage medium and program product. Background Art

[0002] With the development of the industrial Internet identification and resolution system, one object one code has become the mainstream trend. One object one code is a technology that uses cloud platforms to connect consumers, enterprises and circulation, thereby providing comprehensive marketing, anti-counterfeiting traceability and warehousing and logistics solutions.

[0003] At present, one item one code can guarantee the integrity and credibility of identification data to a certain extent, but for users who do not often come into contact with identification resolution, it is not easy to verify the product identification. Summary of the invention

[0004] The embodiments of the present disclosure provide an identification verification method, device, electronic device, storage medium and program product to solve the above problems.

[0005] According to a first aspect of an embodiment of the present disclosure, there is provided an identification verification method, including: In response to receiving the identification verification request, obtaining the identification code and signature content corresponding to the identification verification request; Obtaining the digital certificate of the enterprise to which the identification code belongs; Verifying the signature content based on the public key in the digital certificate; In response to successful verification of the signature content, confirming the identity of the identification code; Feedback the identity confirmation result of the identification code to the sender of the identification verification request.

[0006] In some embodiments of the present disclosure, after confirming the identity of the identification code in response to the verification of the signature content being successful, the process further includes: Extracting digest parameters and identification attributes from the signature content; verifying the identification attribute based on the digest parameter; In response to the verification of the identification attribute being successful, confirming that the signature content is credible; Feedback the credibility confirmation result of the signature content to the sender of the identification verification request.

[0007] In some embodiments of the present disclosure, after obtaining the digital certificate of the enterprise to which the identification code belongs, the method further includes: Performing step-by-step verification of the issuer's digital certificate on the digital certificate; Based on the result of the step-by-step verification, determining the identity verification result of the enterprise to which the identity verification belongs; Feedback the identity verification result of the affiliated enterprise to the sender of the identification verification request.

[0008] In some embodiments of the present disclosure, before obtaining the identification code and signature content corresponding to the identification verification request in response to receiving the identification verification request, the method further includes: The affiliated enterprise is granted the authority to generate an identification so that the affiliated enterprise can generate the identification code and the signature content that are bound to each other.

[0009] In some embodiments of the present disclosure, it further includes: The identification code, signature content and the verification result of the identification verification request are stored through the blockchain.

[0010] According to a second aspect of the present disclosure, there is provided an identification verification device, including: A first acquisition module, configured to, in response to receiving an identification verification request, acquire an identification code and signature content corresponding to the identification verification request; A second acquisition module is used to obtain a digital certificate of the enterprise to which the identification code belongs; A signature result verification module, used to verify the signature content based on the public key in the digital certificate; A verification result processing module, configured to confirm the identity of the identification code in response to the verification of the signature content being passed; A feedback module is used to feed back the identity confirmation result of the identification code to the sender of the identification verification request.

[0011] In some embodiments of the present disclosure, the identification verification device further includes: A third acquisition module, used to extract summary parameters and identification attributes from the signature content; A digest verification module, used to verify the identification attribute based on the digest parameter; The verification result processing module is further used to confirm that the signature content is credible in response to the verification of the identification attribute being passed; the feedback module is further used to feed back the credible confirmation result of the signature content to the sender of the identification verification request.

[0012] In some embodiments of the present disclosure, the identification verification device further includes: A step-by-step verification module, used for performing step-by-step verification of the issuer's digital certificate on the digital certificate; Wherein, the verification result processing module is further used to determine the identity authentication result of the affiliated enterprise based on the result of the step-by-step verification; the feedback module is further used to feedback the identity authentication result of the affiliated enterprise to the sender of the identification verification request.

[0013] In some embodiments of the present disclosure, the identification verification device further includes: The authority control module is used to grant the affiliated enterprise the authority to generate an identification so that the affiliated enterprise can generate the identification code and the signature content that are bound to each other.

[0014] In some embodiments of the present disclosure, the identification verification device further includes: A storage module is used to store the identification code, signature content and the verification result of the identification verification request through the blockchain.

[0015] According to a third aspect of the present disclosure, an electronic device is provided, including: A memory for storing a computer program product; The processor is used to execute the computer program product stored in the memory, and when the computer program product is executed, the method described in the first aspect above is implemented.

[0016] According to a fourth aspect of the embodiments of the present disclosure, a computer-readable storage medium is provided, on which computer program instructions are stored. When the computer program instructions are executed by a processor, the method described in the first aspect is implemented.

[0017] According to a fifth aspect of the embodiments of the present disclosure, a computer program product is provided, comprising computer program instructions, which, when executed by a processor, enable the processor to execute the method described in the first aspect.

[0018] The identification verification method, device, electronic device, storage medium and program product of the disclosed embodiment form a link between the identification code and the address of the identification management system, so the user can enter the identification management system by scanning the identification code through a terminal such as a mobile phone or a tablet computer, and the identification management system verifies the signature content corresponding to the identification code, thereby verifying the identity of the identification code. The management system feeds back the identity confirmation result of the identification code to the user, so that the user can know whether the identification code has been registered in the company to which it belongs, so as to verify whether the product with the identification code is produced by the company to which the identification code belongs, thereby realizing rapid verification of the identification code and simple user operation.

[0019] The technical solution of the present disclosure is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The accompanying drawings, which constitute a part of the specification, illustrate embodiments of the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0021] The present disclosure may be more clearly understood from the following detailed description with reference to the accompanying drawings, in which: Figure 1 A flowchart of an identification verification method in an embodiment of the present disclosure; Figure 2 A schematic diagram of a partial process of an identification verification method in another embodiment of the present disclosure; Figure 3 A schematic diagram of a partial process of an identification verification method in another embodiment of the present disclosure; Figure 4 A structural block diagram of an identification verification device in one embodiment of the present disclosure; Figure 5 It is a structural block diagram of an identification verification device in another embodiment of the present disclosure; Figure 6 The structure block diagram of an electronic device in one embodiment of the present disclosure is shown in FIG. DETAILED DESCRIPTION

[0022] Various exemplary embodiments of the present disclosure will now be described in detail with reference to the accompanying drawings. It should be noted that the relative arrangement of components and steps, numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present disclosure unless otherwise specifically stated.

[0023] Those skilled in the art can understand that the terms "first" and "second" in the embodiments of the present disclosure are only used to distinguish different steps, devices or modules, etc., and neither represent any specific technical meaning nor indicate the necessary logical order between them.

[0024] It should also be understood that in the embodiments of the present disclosure, “plurality” may refer to two or more than two, and “at least one” may refer to one, two, or more than two.

[0025] It should also be understood that any component, data or structure mentioned in the embodiments of the present disclosure can generally be understood as one or more, unless explicitly limited or otherwise indicated in the context.

[0026] In addition, the term "and / or" in the present disclosure is only a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in the present disclosure generally indicates that the associated objects before and after are in an "or" relationship.

[0027] It should also be understood that the description of the various embodiments in the present disclosure focuses on the differences between the various embodiments, and the same or similar aspects thereof can be referenced to each other, and for the sake of brevity, they will not be described one by one.

[0028] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the present disclosure, its application, or uses.

[0029] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered as part of the specification.

[0030] It should be noted that like reference numerals and letters refer to similar items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0031] The embodiments of the present disclosure can be applied to electronic devices such as terminal devices, computer systems, servers, etc., which can operate with many other general or special computing system environments or configurations. Examples of well-known terminal devices, computing systems, environments and / or configurations suitable for use with electronic devices such as terminal devices, computer systems, servers, etc. include, but are not limited to: personal computer systems, server computer systems, thin clients, thick clients, handheld or laptop devices, microprocessor-based systems, set-top boxes, programmable consumer electronics, network personal computers, small computer systems, large computer systems, and distributed cloud computing technology environments including any of the above systems, etc.

[0032] Electronic devices such as terminal devices, computer systems, servers, etc. can be described in the general context of computer system executable instructions (such as program modules) executed by computer systems. Generally, program modules can include routines, programs, object programs, components, logic, data structures, etc., which perform specific tasks or implement specific abstract data types. Computer systems / servers can be implemented in distributed cloud computing environments, where tasks are performed by remote processing devices linked through a communication network. In a distributed cloud computing environment, program modules can be located on local or remote computing system storage media including storage devices.

[0033] Figure 1 FIG. 1 is a flow chart of an identification verification method in an embodiment of the present disclosure. Figure 1 As shown, the identification verification method includes the following steps: S1: In response to receiving an identification verification request, obtaining an identification code and signature content corresponding to the identification verification request.

[0034] Users can enter the identification management system application (hereinafter referred to as the identification management system) by scanning the identification code on the target product through terminals such as mobile phones and tablets, and can send identification verification requests carrying identification codes in the identification management system. Among them, the identification code can be a QR code, or other types of codes that can be scanned to enter the identification management system.

[0035] After receiving the identification verification request, the identification management system extracts the identification code to be verified from the identification verification request, and obtains the signature content of the identification code by the enterprise to which the identification code belongs. Among them, the enterprise to which the identification code belongs can use the private key corresponding to the public key in the enterprise digital to sign the identification information to obtain the signature content. The identification information may include: identification code, product name and product type and other information. The signature content may include: identification code, summary encryption method, summary content, digital certificate code, digital certificate content and signing time.

[0036] S2: Obtain the digital certificate of the enterprise to which the identification code belongs.

[0037] The identification management system can determine the enterprise prefix of the enterprise to which the identification code belongs (ie, the target enterprise) based on the identification code.

[0038] In one example of the present disclosure, the identification code is 88.123.12345 / 324LS8102, and the enterprise prefix is ​​88.123.12345.

[0039] The identification management system can query the digital certificate corresponding to the enterprise prefix in the database storing the enterprise registration content through the enterprise prefix, for example, obtaining the digital certificate with the enterprise prefix of 88.123.12345. The identification management system can obtain the public key for decrypting the signature content from the digital certificate. The public key can be the public key used by the target enterprise to decrypt the identification code of all products of the same type under the enterprise.

[0040] S3: Verify the signature content based on the public key in the digital certificate.

[0041] The identification management system can use the public key in the digital certificate and the decryption method corresponding to the encrypted signature content to decrypt the encrypted signature content to obtain the decrypted content. Wherein, the encryption method of the signature content may include the SHA256 encryption method, and the identification management system can use the decryption method corresponding to the SHA256 encryption method to decrypt the signature content according to the public key in the digital certificate to obtain the decryption result. Wherein, the decryption result may include the decrypted summary data.

[0042] The identification management system can compare the decrypted summary data with the summary data in the signature content. If the decrypted summary data is consistent with the summary data in the signature content, it is confirmed that the verification of the signature content has passed; otherwise, it is confirmed that the verification of the signature content has failed.

[0043] S4: In response to the verification of the signature content being successful, confirm the identity of the identification code.

[0044] After confirming that the verification of the signature content is successful, the identity management system confirms the identity of the identification code, for example, confirming that the identification code 88.123.12345 / 324LS8102 is registered in the enterprise prefix 88.123.12345.

[0045] S5: Feedback the identity confirmation result of the identification code to the sender of the identification verification request.

[0046] After confirming the identity of the identification code, the identification management system feeds back the identification code identity confirmation result to the client of the user terminal in a visual manner to inform the user that the identification code in the identification verification request has indeed been registered in the company to which it belongs. The visual manner may include at least one of a text display manner and a pattern display manner.

[0047] In this embodiment, since a link is formed between the identification code and the address of the identification management system, the user can enter the identification management system by scanning the identification code through a terminal such as a mobile phone or a tablet computer, and the identification management system verifies the signature content corresponding to the identification code, thereby verifying the identity of the identification code. The management system feeds back the identity confirmation result of the identification code to the user, so that the user can know whether the identification code has been registered in the company to which it belongs, and thus can verify whether the product with the identification code is produced by the company to which the identification code belongs, thereby realizing rapid verification of the identification code and simple user operation.

[0048] Figure 2 FIG. 1 is a schematic diagram of a partial process of an identification verification method in another embodiment of the present disclosure. Figure 2 As shown, the identification verification method may further include the following steps: S6: Extract the digest parameter and identification attribute from the signature content.

[0049] The identification management system extracts summary parameters and identification data from the signature content. The summary parameters may include content number (Content Num), index (Index List) and parameters representing the summary generation method. The identification attribute is an attribute of a value that uniquely identifies each row in the summary table.

[0050] S7: Verify the identification attribute based on the digest parameter.

[0051] The identification management system can use the digest generation method corresponding to the digest signature to generate summary data according to the summary parameters and the identification attribute. The identification management system compares the generated summary data with the summary data in the signature content. If the generated summary data is consistent with the summary data in the signature content, it is confirmed that the verification of the identification attribute has passed, otherwise it is confirmed that the verification of the identification attribute has failed.

[0052] S8: In response to the verification of the identification attribute being successful, confirm that the signature content is credible.

[0053] After confirming that the verification of the identification attribute has passed, the identification management system confirms that the signature content is credible and generates a credible confirmation result of the signature content, which may include at least one of text information and pattern information indicating that the signature content is credible.

[0054] S9: Feedback the trusted confirmation result of the signature content to the sender of the identity verification request.

[0055] The identification management system feeds back the trusted confirmation result of the signature content to the client of the user terminal in a visual manner to inform that the signature content is authentic and valid.

[0056] In this embodiment, since the signature content corresponding to the identification code includes the summary parameters and identification attributes for generating the summary, the summary parameters and identification attributes can be used to generate summary data, and the generated summary data can be compared with the summary data in the signature content to accurately verify whether the signature content is authentic and valid. The identification management system can feed back the credible confirmation result of the signature content to the user, so that the user can know whether the signature content is authentic and valid.

[0057] Figure 3 FIG. 1 is a schematic diagram of a partial process of an identification verification method in another embodiment of the present disclosure. Figure 3 As shown, the identification verification method may further include the following steps: S10: Verify the issuer's digital certificate step by step.

[0058] The identification management system can determine the issuer of the digital certificate based on the digital certificate of the identification code, and obtain the digital certificate of the issuer for verification. If the digital certificate of the issuer has an upper-level issuer, the digital certificate of the upper-level issuer is obtained and verified; if the digital certificate of the issuer does not have an upper-level issuer, the step-by-step verification process is stopped. Repeat the detection and verification steps of the digital certificate of the upper-level issuer of the digital certificate until the root digital certificate is verified.

[0059] In one example of the present disclosure, the identification code is 88.123.12345 / 324LS8102. The identification management system obtains the digital certificate of the enterprise to which the identification code belongs (that is, the digital certificate with the enterprise prefix 88.123.12345), and the certificate issuer, public key, signature result and other information can be obtained through the digital certificate of 88.123.12345. According to the certificate issuer, the digital certificate of 88.123, the superior issuer of 88.123.12345, can also be obtained, which also includes information such as the certificate issuer, public key, signature result, etc. The signature result in the digital certificate of 88.123.12345 is verified using the public key in the digital certificate of 88.123. If the verification is successful, it proves that the digital certificate of 88.123.12345 is issued by 88.123, and the verification is successful. If the digital certificate of 88.123 also has a superior issuer, it is verified step by step in the same way until the Industrial Internet Identity Root Digital Certificate is verified.

[0060] S11: Based on the results of the step-by-step verification, determine the identity authentication result of the enterprise to which it belongs.

[0061] If the result of the level-by-level verification indicates that the verification at each level is passed, the identification management system confirms that the identity of the enterprise to which the identification code belongs is credible; if the result of the level-by-level verification indicates that the digital certificate verification at a certain level fails, the identification management system confirms that the identity of the enterprise to which the identification code belongs is not credible. The identification management system can generate an identity authentication result that indicates whether the enterprise to which the identification code belongs is credible based on the result of the level-by-level verification.

[0062] S12: Feedback the identity authentication result of the enterprise to which the identity verification request belongs to the sender.

[0063] The identification management system feeds back the identity authentication result of the enterprise to which the identification code belongs to the client of the user terminal in a visual manner.

[0064] In this embodiment, since the information of issuers of the digital certificate of the identification code at all levels can be obtained through the identification code, by verifying the digital certificate of the issuer of the digital certificate of the identification code step by step, it is possible to accurately verify whether the identity of the enterprise to which the identification code belongs is credible. The management system can feed back the identity authentication result of the enterprise to which the identification code belongs to the user, so that the user can know whether the identity of the enterprise to which the identification code belongs is credible.

[0065] In some embodiments of the present disclosure, before step S1, the following steps may also be included: granting the affiliated enterprise the authority to generate an identification so that the affiliated enterprise can generate mutually bound identification codes and signature contents.

[0066] After the identification management system grants the enterprise to which the identification code belongs (hereinafter referred to as the target enterprise) the authority to generate the logo independently, the target enterprise can download the logo image required for the logo from the identification management system, and use the private key corresponding to the public key in the target enterprise's digital certificate to sign the identification attribute to generate a logo image with the identification code. The identification code can be a QR code. The identification code and the signature content are bound to each other.

[0067] The target enterprise can paste or print the logo image on the product shell or product packaging, and the user can scan the logo code in the logo image through the terminal of the mobile phone or tablet computer to enter the logo management system and verify the logo.

[0068] In this embodiment, since the enterprises registered in the identification management system are credible, by allowing the enterprises to generate identification codes independently, having the enterprises sign and generate identification codes and being responsible for their own generated identification codes, the efficiency of generating identification codes can be improved while ensuring product traceability.

[0069] In some embodiments of the present disclosure, the identification verification method may further include the following steps: storing the identification code, signature content, and verification results of the identification verification request through blockchain.

[0070] The identification management system can store the verified identification code, signature content and verification results of the identification verification request in the blockchain as a historical verification record, so that other users (for example, if the user requesting identification verification is an agent, then other users can be distributors or consumers) can query the historical verification record based on the identification code.

[0071] In this embodiment, the tamper-proof feature of blockchain data is utilized to store the identification code, signature content, and verification results of the identification verification request in the blockchain, which can prevent tampering of the correspondence between the identification code and the signature content, and enable other users to query historical verification records based on the identification code.

[0072] Figure 4 FIG. 1 is a structural block diagram of an identification verification device in one embodiment of the present disclosure. Figure 4 As shown, the identification verification device includes: The first acquisition module 100 is used to obtain the identification code and signature content corresponding to the identification verification request in response to receiving the identification verification request; The second acquisition module 200 is used to obtain the digital certificate of the enterprise to which the identification code belongs; The signature result verification module 300 is used to verify the signature content based on the public key in the digital certificate; The verification result processing module 400 is used to confirm the identity of the identification code in response to the verification of the signature content being passed; The feedback module 500 is used to feed back the identity confirmation result of the identification code to the sender of the identification verification request.

[0073] Figure 5 FIG. 1 is a structural block diagram of an identification verification device in another embodiment of the present disclosure. Figure 5 As shown, the identification verification device also includes: The third acquisition module 600 is used to extract the digest parameter and the identification attribute from the signature content; A digest verification module 700, for verifying the identification attribute based on the digest parameter; The verification result processing module 400 is further used to confirm that the signature content is credible in response to the verification of the identification attribute being passed; the feedback module 500 is further used to feedback the credible confirmation result of the signature content to the sender of the identification verification request.

[0074] In some embodiments of the present disclosure, the identification verification device further includes: A step-by-step verification module 800 is used to verify the digital certificate of the issuer step by step; The verification result processing module 400 is further used to determine the identity authentication result of the enterprise based on the result of the step-by-step verification; the feedback module 500 is further used to feedback the identity authentication result of the enterprise to the sender of the identification verification request.

[0075] In some embodiments of the present disclosure, the identification verification device further includes: The authority control module 900 is used to grant the affiliated enterprise the authority to generate identification so that the affiliated enterprise can generate mutually bound identification codes and signature contents.

[0076] In some embodiments of the present disclosure, the identification verification device further includes: The storage module 1000 is used to store the identification code, signature content and verification results of the identification verification request through the blockchain.

[0077] It should be noted that the specific implementation of the identification verification device of the embodiment of the present disclosure is similar to the specific implementation of the identification verification method of the embodiment of the present disclosure, and the technical effect of the identification verification device of the embodiment of the present disclosure is similar to the technical effect of the identification verification method of the embodiment of the present disclosure. Please refer to the description of the identification verification method part for details. In order to reduce redundancy, it will not be repeated.

[0078] In addition, an embodiment of the present disclosure further provides an electronic device, including: Memory for storing computer programs; The processor is used to execute the computer program stored in the memory, and when the computer program is executed, the identification verification method described in any of the above embodiments of the present disclosure is implemented.

[0079] Below, reference Figure 6 To describe the electronic device according to the embodiment of the present disclosure. Figure 6 As shown, the electronic device includes one or more processors and memory.

[0080] The processor may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device to perform desired functions.

[0081] The memory may store one or more computer program products, and the memory may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, a random access memory (RAM) and / or a cache memory (cache), etc. The non-volatile memory may include, for example, a read-only memory (ROM), a hard disk, a flash memory, etc. One or more computer program products may be stored on the computer-readable storage medium, and the processor may run the computer program product to implement the identification verification method of each embodiment of the present disclosure described above and / or other desired functions.

[0082] In one example, the electronic device may further include: an input device and an output device, and these components are interconnected via a bus system and / or other forms of connection mechanisms (not shown).

[0083] In addition, the input device may also include, for example, a keyboard, a mouse, and the like.

[0084] The output device can output various information to the outside, including determined distance information, direction information, etc. The output device can include, for example, a display, a speaker, a printer, a communication network and a remote output device connected thereto, and the like.

[0085] Of course, to simplify, Figure 6 Only some of the components related to the present disclosure in the electronic device are shown, and components such as a bus, an input / output interface, etc. are omitted. In addition, according to specific application situations, the electronic device may further include any other appropriate components.

[0086] In addition to the above-mentioned methods and devices, an embodiment of the present disclosure may also be a computer program product, which includes computer program instructions, which, when executed by a processor, enable the processor to execute the steps of the identification verification method according to various embodiments of the present disclosure described in the above part of this specification.

[0087] The computer program product may be written in any combination of one or more programming languages ​​to write program code for performing the operations of the disclosed embodiments, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0088] In addition, an embodiment of the present disclosure may also be a computer-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the processor executes the steps of the identification verification method according to various embodiments of the present disclosure described in the above part of this specification.

[0089] The computer readable storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can include, for example, but is not limited to, a system, device or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0090] The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.

[0091] Each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the system embodiment, since it basically corresponds to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0092] The block diagrams of the devices, apparatuses, equipment, and systems involved in this disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagrams. As will be appreciated by those skilled in the art, these devices, apparatuses, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including," "comprising," "having," and the like are open words, referring to "including but not limited to," and can be used interchangeably therewith. The words "or" and "and" used herein refer to the words "and / or," and can be used interchangeably therewith, unless the context clearly indicates otherwise. The word "such as" used herein refers to the phrase "such as but not limited to," and can be used interchangeably therewith.

[0093] The method and apparatus of the present disclosure may be implemented in many ways. For example, the method and apparatus of the present disclosure may be implemented by software, hardware, firmware, or any combination of software, hardware, and firmware. The above order of steps for the method is for illustration only, and the steps of the method of the present disclosure are not limited to the order specifically described above, unless otherwise specifically stated. In addition, in some embodiments, the present disclosure may also be implemented as a program recorded in a recording medium, which includes machine-readable instructions for implementing the method according to the present disclosure. Therefore, the present disclosure also covers a recording medium storing a program for executing the method according to the present disclosure.

[0094] It should also be noted that in the apparatus, device and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.

[0095] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

[0096] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. A method for identifying and verifying an identity, characterized in that: include: In response to receiving the identification verification request, obtaining the identification code and signature content corresponding to the identification verification request; Obtaining the digital certificate of the enterprise to which the identification code belongs; Verifying the signature content based on the public key in the digital certificate; In response to successful verification of the signature content, confirming the identity of the identification code; Feedback the identity confirmation result of the identification code to the sender of the identification verification request.

2. The method according to claim 1, characterized in that After the identity of the identification code is confirmed in response to the verification of the signature content, the method further includes: Extracting digest parameters and identification attributes from the signature content; verifying the identification attribute based on the digest parameter; In response to the verification of the identification attribute being successful, confirming that the signature content is credible; Feedback the credibility confirmation result of the signature content to the sender of the identification verification request.

3. The method according to claim 1, characterized in that After obtaining the digital certificate of the enterprise to which the identification code belongs, the method further includes: Performing step-by-step verification of the issuer's digital certificate on the digital certificate; Based on the result of the step-by-step verification, determining the identity verification result of the enterprise to which the identity verification belongs; Feedback the identity verification result of the affiliated enterprise to the sender of the identification verification request.

4. The method according to any one of claims 1 to 3, characterized in that: Before obtaining the identification code and signature content corresponding to the identification verification request in response to receiving the identification verification request, the method further includes: The affiliated enterprise is granted the authority to generate an identification so that the affiliated enterprise can generate the identification code and the signature content that are bound to each other.

5. The method according to any one of claims 1 to 3, characterized in that: Also includes: The identification code, signature content and the verification result of the identification verification request are stored through the blockchain.

6. An identification verification device, characterized in that: include: A first acquisition module, configured to, in response to receiving an identification verification request, acquire an identification code and signature content corresponding to the identification verification request; A second acquisition module is used to obtain a digital certificate of the enterprise to which the identification code belongs; A signature result verification module, used to verify the signature content based on the public key in the digital certificate; A verification result processing module, configured to confirm the identity of the identification code in response to the verification of the signature content being passed; A feedback module is used to feed back the identity confirmation result of the identification code to the sender of the identification verification request.

7. The device according to claim 6, characterized in that Also includes: A third acquisition module, used to extract summary parameters and identification attributes from the signature content; A digest verification module, used to verify the identification attribute based on the digest parameter; The verification result processing module is further used to confirm that the signature content is credible in response to the verification of the identification attribute being passed; the feedback module is further used to feed back the credible confirmation result of the signature content to the sender of the identification verification request.

8. The device according to claim 6, characterized in that Also includes: A step-by-step verification module, used for performing step-by-step verification of the issuer's digital certificate on the digital certificate; The verification result processing module is further used to determine the identity verification result of the enterprise based on the result of the step-by-step verification; The feedback module is further used to feed back the identity verification result of the affiliated enterprise to the sender of the identification verification request.

9. The device according to any one of claims 6 to 8, characterized in that: Also includes: A storage module is used to store the identification code, signature content and the verification result of the identification verification request through the blockchain.

10. An electronic device, characterized in that: include: a memory for storing a computer program product; A processor is used to execute the computer program product stored in the memory, and when the computer program product is executed, it implements the method described in any one of claims 1 to 5.

11. A computer-readable storage medium having computer program instructions stored thereon, characterized in that: When the computer program instructions are executed by a processor, the method described in any one of claims 1 to 5 is implemented.

12. A computer program product, characterized in that The method comprises computer program instructions, which, when executed by a processor, enable the processor to execute the method according to any one of claims 1 to 5.

Images