Digital identity verification system and method based on block chain

Abstract

The invention discloses a digital identity authentication system and method based on a block chain, and relates to the technical field of digital identity authentication. When it is detected that a digital identity authentication request initiated by a user is valid, digital identity related data of the current user is collected; extracting digital identity related information of the current user request stored in the block chain; verifying the digital identity of the user, feeding back the result to the user terminal, and when the digital identity verification result of the user shows that the verification fails, analyzing the reason of the user identity verification failure according to the verification related data generated in the digital identity verification process; marking abnormal data causing verification failure, uploading the marked abnormal data to a server, and managing digital identity related data which is stored in the block chain and requested to be verified by the current user according to response data of the server; and abnormal conditions during identity verification are supervised, so that user verification failure caused by errors of a platform side is prevented, and the experience feeling of the user is improved.

Description

Technical Field

[0001] The present invention relates to the field of digital identity authentication technology, and specifically to a blockchain-based digital identity authentication system and method. Background Art

[0002] Blockchain is a decentralized distributed ledger technology that links data records into blocks in sequence and ensures the security and integrity of data through cryptography technology, providing a transparent and secure foundation for digital identity authentication. Blockchain-based identity authentication uses blockchain technology to store and verify user identity information. User identity information is encrypted and distributedly stored on the blockchain. Users can use private keys for identity authentication and process verification logic through smart contracts.

[0003] The in-depth development of digital transformation has brought about many changes in the digital identity management of enterprises, which has injected new demands and opportunities into the digital identity management market. Enterprises need to pay special attention to the privacy and security of personal information when they centrally manage the digital identities of internal employees. In particular, the application of AI technology, machine learning and big data technology will further expand the exposure and attack surface of corporate privacy information in the digital space.

[0004] The management of digital identities will affect the process of intelligent promotion within the enterprise. When an enterprise employee resigns or is transferred, when the digital identity-related data and permissions are passed to the new employee or other relevant personnel, due to the association between the employee's personal information and the digital identity, when the digital identity-related data is migrated, the personal information of the original employee to whom the digital identity belongs may be leaked. At the same time, when the new employee who inherits the digital identity accesses the internal data of the enterprise, the new employee's access to the enterprise-related data may fail due to changes in the employee's information. The above situation will cause the enterprise to bear the risk of violation and even cause losses to the enterprise itself.

[0005] In order to solve the above problems or part of the problems, the present invention provides a digital identity authentication system and method based on blockchain. Summary of the invention

[0006] The purpose of the present invention is to provide a blockchain-based digital identity authentication system and method to solve the problems raised in the above-mentioned background technology.

[0007] In order to solve the above technical problems, the present invention provides the following technical solutions: a digital identity authentication method based on blockchain, the method comprising the following steps: S1: The server receives a digital identity authentication request initiated by a user. When it detects that the digital identity authentication request initiated by the user is valid, it collects the digital identity-related data of the current user and extracts the digital identity-related information requested by the current user stored in the blockchain; S2: Perform digital identity verification based on the current user's digital identity-related data obtained in S1 and the corresponding information stored in the blockchain, and feed back the digital identity verification result of the current user to the user terminal. The user chooses whether to re-authenticate based on the feedback verification result; S3: when the result of the digital identity authentication of the user shows that the authentication fails, the cause of the user identity authentication failure is analyzed based on the authentication-related data generated during the digital identity authentication process; S4: Based on the analysis results of the reasons for the failure of user identity authentication in S3, the abnormal data that caused the verification failure is marked and uploaded to the server. The uploaded data is analyzed by the server, and the digital identity related data stored in the blockchain for the current user requesting verification is managed based on the server's response data.

[0008] Further, in said S1, when the server receives a digital identity authentication request initiated by a user, it checks the source IP address in the request message, judges the validity of the request, blocks access from external networks by setting the IP range allowed for access, and prevents requests from untrusted source addresses from entering the server; receives requests from the internal network; In S1, when extracting the digital identity related information requested by the current user stored in the blockchain, the digital identity identifier provided by the current user is used as a query parameter, and the digital identity related information of the user is retrieved through the query interface or smart contract of the blockchain platform to extract the digital identity related information requested by the current user stored in the blockchain platform; It should be noted that the identifier is used to associate the user's identity-related information with the stored data on the blockchain; enterprises use public chains or private chains, select appropriate blockchain platforms according to business needs, store the user's digital identity-related information on the blockchain, and properly format and encrypt the digital identity information before storage to ensure data integrity and security.

[0009] Further, the S2 includes: Step S2-1: Perform digital identity verification based on the current user's digital identity-related data obtained in S1 and the corresponding information stored in the blockchain, and compare the verification credentials provided by the user with the pre-stored verification credentials, such as user ID, password, biometric data, etc., to determine whether they are legitimate; Step S2-2: When the user identity authentication passes, the platform allows the user to perform specific operations or obtain specific permissions. The specific operations or specific permissions are the operations and permissions corresponding to the corresponding user identities preset in the database; when the user identity authentication fails, the verification failure result will be fed back to the user terminal, and the user will choose whether to re-authenticate based on the feedback verification result.

[0010] Further, the S3 includes: Step S3-1: Collect verification-related data, including information input by the user, error information returned by the server, and client environment information; The information input by the user includes information input by the user during the verification process, such as user name, password, verification code, etc. Such information can help determine whether the verification failure is caused by user input errors.

[0011] The error information returned by the server is specifically: when the user performs identity authentication, the server will return the corresponding verification result or error information. These error messages usually provide some hints to help determine the cause of the verification failure.

[0012] The client environment information includes information about the device and operating system used by the user, such as device type, operating system version, network connection method, etc. This information can help troubleshoot problems related to the device or operating system.

[0013] Step S3-2: Analyze the reasons for the failure of user identity authentication according to the following steps based on the collected authentication-related data: Step S3-2-1: Analyze the collected error information returned by the server, find the prompts provided in the error information, and provide corresponding feedback for common problems; the common problems represent network anomalies, account password errors, etc. For example, if the error message shows that the password is wrong, the user can be prompted to re-enter the password or reset the password. Analyze the client environment information to determine whether there are problems related to verification, for example, some devices or operating systems may not support a certain verification method, resulting in verification failure.

[0014] Step S3-2-2: Check the system log of the platform to obtain the record of user data comparison errors during the identity verification process, and obtain the abnormal data set Y provided by the user that does not match the verification information stored in the blockchain, Y={y1,y2,...,y n}, where y n represents the nth group of abnormal data in the abnormal data set; suppose the reasons for user identity authentication failure include common problems C1, security problems C2 and account problems C3; connect each group of data in the abnormal data set with the reason for the verification failure, when any group of data y in the abnormal data set i Can cause any problem C j When it appears, there is a path y i →C j ; Where i∈[1,n], j=1,2,3; Step S3-2-3: For each path, calculate its influence D according to the following formula: D(y i →C j )=P(y i )*P(C j |y i ); Among them, D(y i →C j ) represents the path y i →C j The influence degree, P(y i ) represents the abnormal data set y i The probability of occurrence can be determined based on the records in the system log to determine the frequency or probability of abnormal data groups; P(C j |y i ) indicates that in the abnormal data group y i In case of problem C j The conditional probability of occurrence can be calculated based on historical verification records using the definition of conditional probability; Step S3-2-4: According to the calculated influence of each path, the abnormal data groups connected by the path are sorted from large to small according to the values ​​of the abnormal data groups. The value of any abnormal data group is the sum of the influences of its connected paths, so as to determine the abnormal data with higher influence; according to the sorting of the abnormal data groups, the abnormal data during the current user verification is analyzed: The abnormal data groups are eliminated according to the queue sorting. If all the problems connected to the current abnormal data group are solved after correction, the elimination is stopped and the abnormal data is considered to be the target abnormal data, that is, the problem connected to the target abnormal data is the cause of the verification failure; if the connection problem is still not solved after correction of the current abnormal data group, the elimination is continued.

[0015] It should be noted that the above problems may need to be solved after one or more abnormal data groups are corrected; The solution is archived and recorded for subsequent reference. Specifically, for the inheritance of digital identities within the enterprise, when the employee corresponding to the digital identity changes, there may be data errors or incompleteness in the inheritance process, which will cause the new employee to be unable to be successfully matched during the verification process, resulting in login verification failure; the above technical solution can view the inheritance records and find problems in the inheritance process, review the employee's digital identity inheritance process and data, and ensure the accuracy and completeness of the data. Further, optimize the inheritance process for problem points, for example, record and report to relevant technical personnel in a timely manner, assist in troubleshooting and resolution, and regularly check and update the internal identity authentication system of the enterprise to ensure compatibility and consistency between systems.

[0016] Further, the S4 includes: Step S4-1: When digital identity authentication fails, the failure information is marked as abnormal data and recorded in a local database, and the marked abnormal data is uploaded to the server in real time via a network protocol; Step S4-2: On the server side, there is a dedicated storage area for storing uploaded abnormal data; the reported abnormal data includes the verification failure reason analyzed in step S3, and the interference value R of the target abnormal data on the verification process is calculated according to the following formula: R=∑mi=1 P(C k |y i )*g i / ∑mi=1 [v j *∑3 j=1D(y i →C j )] Where m represents the number of target abnormal data sets, C k Indicates the reason for verification failure; g i represents the interference weight of the data category to which the ith abnormal data group belongs, v j Represents any problem C j The influence coefficient is preset by relevant staff; Step S4-3: Monitor the uploaded abnormal data, and manage the digital identity-related data stored in the blockchain for the current user to request verification according to the abnormal solution preset in the platform database. When the interference value of the monitored abnormal data is less than the threshold W preset in the database, the user's digital identity-related data is updated and stored; when the interference value of the monitored abnormal data is greater than or equal to W, the user's digital identity-related data is locked to avoid leakage of user information in the digital identity-related data.

[0017] Due to the characteristics of blockchain, any changes to data will be recorded, making identity information tamper-proof; user identity information will be stored on the blockchain in an encrypted manner to ensure privacy and security.

[0018] The blockchain-based digital identity authentication method is decentralized and does not rely on centralized institutions for identity authentication. Instead, it achieves decentralized management through technologies such as smart contracts. This means that individuals have greater control over their own identity information and do not need to rely on third parties for identity authentication. At the same time, decentralized management can improve the security of identity information and protect personal privacy.

[0019] A digital identity authentication system based on blockchain, the system comprising: a digital identity acquisition module, an identity authentication module, a verification data feedback module and a user identity management module; The digital identity acquisition module is used to acquire the user's digital identity related data and upload the acquired related data to the server; The identity verification module is used to verify the digital identity of the user, analyze the identity-related information provided by the user, and transmit the identity verification result to the verification data feedback module; The verification data feedback module is used to analyze the cause of identity authentication failure and feed back the analysis result to the user end; The user identity management module is used to manage the user's corresponding digital identity according to the data provided by the user, and to store the user's corresponding digital identity securely; The output end of the digital identity acquisition module is connected to the input ends of the identity authentication module and the user identity management module, the output end of the identity authentication module is connected to the input end of the verification data feedback module, and the output end of the verification data feedback module is connected to the input end of the user identity management module.

[0020] Further, the digital identity acquisition module includes a data collection unit, a data parsing unit and a data transmission unit; The data collection unit is used to collect relevant data of the verification request initiator, including network information, identity information and device information of the verification request initiator; The data parsing unit is used to parse the relevant data collected by the data collection unit to determine whether to receive the verification request. If the verification request is received, the relevant information provided by the initiator of the verification request is received to extract the relevant data for digital identity verification; The data transmission unit is used to transmit the relevant data for digital identity authentication extracted by the data parsing unit, and to package the relevant data for digital identity authentication and upload it to the server.

[0021] Further, the identity verification module includes a digital identity recognition unit and an identity information analysis unit; The digital identity recognition unit is used to retrieve the data stored in the platform according to the digital identity identifier contained in the data received from the server, and when the corresponding digital identity is retrieved, obtain the digital identity related information stored in the platform; The identity information analysis unit is used to analyze the identity related information provided by the user according to the digital identity related information stored in the platform, determine whether the digital identity requested by the current user can be successfully verified, and transmit the judgment result to the verification data feedback module.

[0022] Further, the verification data feedback module includes a verification data acquisition unit and an error tracing unit; The verification data acquisition unit is used to determine whether to acquire relevant information generated during the verification process according to the verification result of the digital identity requested by the current user; The error tracing unit is used to analyze the cause of the failure of digital identity authentication and to trace the error generated during the authentication process.

[0023] Further, the user identity management module includes a digital identity inheritance unit and an identity application management unit; The digital identity inheritance unit is used to manage the digital identity related data inherited by the user according to the error tracing result, and store the updated verification related data of the digital identity requested to be verified by the current user; The identity application management unit is used to supervise the stored data in the platform and synchronize the updates related to the digital identity.

[0024] Compared with the prior art, the beneficial effects achieved by the present invention are: The present invention provides a digital identity authentication system and method based on blockchain. The blockchain technology can ensure the immutability and security of digital identity information. Through the organic combination of a digital identity acquisition module, an identity authentication module, a verification data feedback module and a user identity management module, a full range of digital identity authentication services can be achieved. Through functional modules such as an identity information analysis unit and an error tracing unit, the identity-related information provided by the user can be analyzed and traced, thereby improving the accuracy and reliability of digital identity authentication. Through functional modules such as a digital identity inheritance unit and an identity application management unit, the inheritance and management of digital identity-related data can be achieved, thereby further improving the efficiency of digital identity authentication.

[0025] When employee changes within the enterprise require the inheritance of digital identity, supervise the employee's digital identity inheritance process and verification data, provide feedback on abnormal data, record and report to relevant technical personnel in a timely manner, assist in investigation and resolution, regularly check and update the company's internal identity authentication system, optimize the relevant process business of the enterprise platform, and ensure the consistency of platform data. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings: Figure 1 It is a schematic diagram of the module structure of a digital identity authentication system based on blockchain of the present invention; Figure 2 It is a flowchart of a blockchain-based digital identity authentication method of the present invention. DETAILED DESCRIPTION

[0027] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] See also Figure 1 , Figure 2 The present invention is further described with reference to the accompanying drawings and specific embodiments.

[0029] Example 1: Figure 1 As shown, this embodiment provides a digital identity authentication system based on blockchain, the system comprising: a digital identity acquisition module, an identity authentication module, a verification data feedback module and a user identity management module; The digital identity acquisition module is used to acquire the user's digital identity related data and upload the acquired related data to the server; the digital identity acquisition module includes a data acquisition unit, a data parsing unit and a data transmission unit; The data collection unit is used to collect relevant data of the verification request initiator, including network information, identity information and device information of the verification request initiator; The data parsing unit is used to parse the relevant data collected by the data collection unit, determine whether to receive the verification request, and if the verification request is received, receive the relevant information provided by the initiator of the verification request, and extract the relevant data for digital identity verification; The data transmission unit is used to transmit the relevant data for digital identity authentication extracted by the data parsing unit, and to package the relevant data for digital identity authentication and upload it to the server.

[0030] The identity verification module is used to verify the digital identity of the user, analyze the identity-related information provided by the user, and transmit the identity verification result to the verification data feedback module; the identity verification module includes a digital identity recognition unit and an identity information analysis unit; The digital identity recognition unit is used to retrieve the data stored in the platform according to the digital identity identifier contained in the data received from the server, and when the corresponding digital identity is retrieved, obtain the digital identity related information stored in the platform; The identity information analysis unit is used to analyze the identity related information provided by the user according to the digital identity related information stored in the platform, determine whether the digital identity requested by the current user can be successfully verified, and transmit the judgment result to the verification data feedback module.

[0031] The verification data feedback module is used to analyze the reasons for identity authentication failure and feed back the analysis results to the user end; the verification data feedback module includes a verification data acquisition unit and an error tracing unit; The verification data acquisition unit is used to determine whether to acquire the relevant information generated during the verification process according to the verification result of the digital identity requested by the current user; The error tracing unit is used to analyze the causes of digital identity verification failures and to trace the errors generated during the verification process.

[0032] A user identity management module is used to manage the user's corresponding digital identity according to the data provided by the user, and to store the user's corresponding digital identity securely; the user identity management module includes a digital identity inheritance unit and an identity application management unit; The digital identity inheritance unit is used to manage the digital identity related data inherited by the user according to the error tracing result, and store the updated verification related data of the digital identity requested to be verified by the current user; The identity application management unit is used to supervise the stored data in the platform and synchronize the updates related to digital identity.

[0033] Example 2: Figure 2 As shown, this embodiment provides a blockchain-based digital identity authentication method, which is implemented based on a blockchain-based digital identity authentication system in the embodiment, and specifically includes the following steps: S1: The server receives a digital identity authentication request initiated by a user. When it detects that the digital identity authentication request initiated by the user is valid, it collects the digital identity-related data of the current user and extracts the digital identity-related information requested by the current user stored in the blockchain; In S1, when the server receives a digital identity authentication request initiated by a user, it checks the source IP address in the request message, determines the validity of the request, and blocks access from external networks by setting the IP range allowed for access, preventing requests from untrusted source addresses from entering the server; it receives requests from the internal network; In S1, when extracting the digital identity related information requested by the current user stored in the blockchain, the digital identity identifier provided by the current user is used as a query parameter, and the digital identity related information of the user is retrieved through the query interface or smart contract of the blockchain platform to extract the digital identity related information requested by the current user stored in the blockchain platform; It should be noted that the identifier is used to associate the user's identity-related information with the stored data on the blockchain; enterprises use public chains or private chains, select appropriate blockchain platforms according to business needs, store the user's digital identity-related information on the blockchain, and properly format and encrypt the digital identity information before storage to ensure data integrity and security.

[0034] S2: Perform digital identity verification based on the current user's digital identity-related data obtained in S1 and the corresponding information stored in the blockchain, and feed back the digital identity verification result of the current user to the user terminal. The user chooses whether to re-authenticate based on the feedback verification result; Step S2-1: Perform digital identity authentication based on the current user's digital identity-related data obtained in S1 and the corresponding information stored in the blockchain, and compare the verification credentials provided by the user with the pre-stored verification credentials, such as user ID, password, biometric data, etc. The comparison process includes string comparison, hash function calculation and other operations. In order to ensure the security of digital identity authentication, hash functions are usually used to encrypt the verification credentials. For example, hash functions such as SHA-256 and MD5 are used to generate irreversible encrypted hash values, which are then stored in the digital identity database or blockchain. During digital identity authentication, the verification credentials provided by the user need to be calculated using the same hash function to obtain an encrypted hash value, and then compared with the stored encrypted hash value to determine whether they match.

[0035] The specific verification method may vary depending on the application scenario; in some cases, digital identity verification involves comparing public and private keys. For example, in digital signatures and identity authentication, public and private keys are required for encryption and decryption operations. During digital identity verification, the public or private key provided by the user needs to be compared with the pre-stored public or private key to determine whether it is legitimate.

[0036] Step S2-2: When the user identity verification is passed, the platform allows the user to perform specific operations or obtain specific permissions. When the user identity verification fails, the verification failure result is fed back to the user terminal, and the feedback method includes API interface, web page or mobile application. The user chooses whether to re-authenticate based on the feedback verification result. If the verification fails, the user can try to resubmit or perform other operations.

[0037] S3: when the result of the digital identity authentication of the user shows that the authentication fails, the cause of the user identity authentication failure is analyzed based on the authentication-related data generated during the digital identity authentication process; Step S3-1: Collect verification-related data, including information input by the user, error information returned by the server, and client environment information; The information input by the user includes the user name, password, verification code, etc. The information input by the user during the verification process can help determine whether the verification failure is caused by a user input error.

[0038] The error information returned by the server is as follows: When a user performs identity authentication, the server will return the corresponding verification result or error information. These error messages usually provide some hints to help determine the cause of the authentication failure.

[0039] Client environment information includes information about the device and operating system used by the user, such as device type, operating system version, network connection method, etc. This information can help troubleshoot device or operating system related issues.

[0040] Step S3-2: Analyze the reasons for the failure of user identity authentication according to the following steps based on the collected authentication-related data: Step S3-2-1: Analyze the collected error information returned by the server, find the prompts provided in the error information, and provide corresponding feedback for common problems; the common problems represent network anomalies, account password errors, etc. For example, if the error message shows that the password is wrong, the user can be prompted to re-enter the password or reset the password. Analyze the client environment information to determine whether there are problems related to verification, for example, some devices or operating systems may not support a certain verification method, resulting in verification failure.

[0041] Step S3-2-2: Check the system log of the platform to obtain the record of user data comparison errors during the identity verification process, and obtain the abnormal data set Y provided by the user that does not match the verification information stored in the blockchain, Y={y1,y2,...,y n}, where y n represents the nth group of abnormal data in the abnormal data set; suppose the reasons for user identity authentication failure include common problems C1, security problems C2 and account problems C3; connect each group of data in the abnormal data set with the reason for the verification failure, when any group of data y in the abnormal data set i Can cause any problem C j When it appears, there is a path y i →C j ; Where i∈[1,n], j=1,2,3; Step S3-2-3: For each path, calculate its influence D according to the following formula: D(y i →C j )=P(y i )*P(C j |yi ); Among them, D(y i →C j ) represents the path y i →C j The influence degree, P(y i ) represents the abnormal data set y i The probability of occurrence can be determined based on the records in the system log to determine the frequency or probability of abnormal data groups; P(C j |y i ) indicates that in the abnormal data group y i In case of problem C j The conditional probability of occurrence can be calculated based on historical verification records using the definition of conditional probability; Step S3-2-4: According to the calculated influence of each path, the abnormal data groups connected by the path are sorted from large to small according to the values ​​of the abnormal data groups. The value of any abnormal data group is the sum of the influences of its connected paths, so as to determine the abnormal data with higher influence; according to the sorting of the abnormal data groups, the abnormal data during the current user verification is analyzed: The abnormal data groups are eliminated according to the queue sorting. If all the problems connected to the current abnormal data group are solved after correction, the elimination is stopped and the abnormal data is considered to be the target abnormal data, that is, the problem connected to the target abnormal data is the cause of the verification failure; if the connection problem is still not solved after correction of the current abnormal data group, the elimination is continued.

[0042] The above problems may require correction of one or more abnormal data groups before they can be solved; Step S3-3: According to the analysis results, the problem is processed and solved accordingly, and feedback is given to the user in a timely manner. For example, if the verification failure is caused by input errors, it is recommended that the user carefully check the input information and try again; if it is caused by a network problem, you can try to reconnect to the network or change the network environment to verify again.

[0043] Document and record the solution for later reference.

[0044] S4: Based on the analysis results of the reasons for the failure of user identity authentication in S3, the abnormal data that caused the authentication failure is marked and uploaded to the server, and the uploaded data is analyzed by the server. The digital identity related data of the current user requesting authentication stored in the blockchain is managed according to the response data of the server; Step S4-1: When digital identity authentication fails, the failure information, such as verification credentials, error code, timestamp, etc., is marked as abnormal data and recorded in a local database, and the marked abnormal data is uploaded to the server in real time via a network protocol (such as HTTP, HTTPS, etc.); Step S4-2: On the server side, there is a dedicated storage area for storing uploaded abnormal data; distributed storage, cloud storage and other technologies are used to improve storage reliability and scalability. The reported abnormal data includes the verification failure reason analyzed in step S3, and the interference value R of the target abnormal data on the verification process is calculated according to the following formula: R=∑mi=1 P(C k |y i )*g i / ∑mi=1 [v j *∑3 j=1D(y i →C j )] Where m represents the number of target abnormal data sets, C k Indicates the reason for verification failure; g i represents the interference weight of the data category to which the ith abnormal data group belongs, v j Represents any problem C j The influence coefficient is preset by relevant staff; Step S4-3: Monitor the uploaded abnormal data, and manage the digital identity-related data stored in the blockchain for the current user to request verification according to the abnormal solution preset in the platform database. When the interference value of the monitored abnormal data is less than the threshold W preset in the database, the user's digital identity-related data is updated and stored; when the interference value of the monitored abnormal data is greater than or equal to W, the user's digital identity-related data is locked to avoid leakage of user information in the digital identity-related data.

[0045] When new anomalies are discovered, feedback can be provided to relevant personnel to facilitate adjustment of the parameters and configuration of the digital identity verification system to improve the accuracy and reliability of digital identity verification.

[0046] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0047] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A digital identity authentication method based on blockchain, characterized in that: The method comprises the following steps: S1: The server receives a digital identity authentication request initiated by a user. When it detects that the digital identity authentication request initiated by the user is valid, it collects the digital identity-related data of the current user and extracts the digital identity-related information requested by the current user stored in the blockchain; S2: Perform digital identity verification based on the current user's digital identity-related data obtained in S1 and the corresponding information stored in the blockchain, and feed back the digital identity verification result of the current user to the user terminal. The user chooses whether to re-authenticate based on the feedback verification result; S3: when the result of the digital identity authentication of the user shows that the authentication fails, the cause of the user identity authentication failure is analyzed based on the authentication-related data generated during the digital identity authentication process; S4: Based on the analysis results of the reasons for the failure of user identity authentication in S3, the abnormal data that caused the verification failure is marked and uploaded to the server. The uploaded data is analyzed by the server, and the digital identity related data stored in the blockchain for the current user requesting verification is managed based on the server's response data.

2. A blockchain-based digital identity authentication method according to claim 1, characterized in that: In S1, when the server receives a digital identity authentication request initiated by a user, it checks the source IP address in the request message, determines the validity of the request, blocks access from the external network by setting the IP range allowed to access, and receives requests from the internal network; In S1, when extracting the digital identity related information requested by the current user stored in the blockchain, the digital identity identifier provided by the current user is used as a query parameter, and the user's digital identity related information is retrieved through the query interface or smart contract of the blockchain platform to extract the digital identity related information requested by the current user stored in the blockchain platform.

3. A blockchain-based digital identity authentication method according to claim 1, characterized in that: The S2 includes: Step S2-1: Perform digital identity verification based on the current user's digital identity-related data obtained in S1 and the corresponding information stored in the blockchain, and compare the verification credentials provided by the user with the pre-stored verification credentials; Step S2-2: When the user identity authentication passes, the platform allows the user to perform specific operations or obtain specific permissions. When the user identity authentication fails, the verification failure result is fed back to the user terminal, and the user chooses whether to re-authenticate based on the feedback verification result.

4. A blockchain-based digital identity authentication method according to claim 1, characterized in that: The S3 includes: Step S3-1: Collect verification-related data, including information input by the user, error information returned by the server, and client environment information; Step S3-2: Analyze the reasons for the failure of user identity authentication according to the following steps based on the collected authentication-related data: Step S3-2-1: Analyze the collected error information returned by the server, find the prompts provided in the error information, and provide corresponding feedback for common problems; Step S3-2-2: Check the system log of the platform to obtain the record of user data comparison errors during the identity verification process, and obtain the abnormal data set Y provided by the user that does not match the verification information stored in the blockchain, Y={y1,y2,...,y n }, where y n represents the nth group of abnormal data in the abnormal data set; suppose the reasons for user identity authentication failure include common problems C1, security problems C2 and account problems C3; connect each group of data in the abnormal data set with the reason for the verification failure, when any group of data y in the abnormal data set i Can cause any problem C j When it appears, there is a path y i →C j ; Step S3-2-3: For each path, calculate its influence D according to the following formula: D(y i →C j )=P(y i )*P(C j |y i ); Among them, D(y i →C j ) represents the path y i →C j The influence degree, P(y i ) represents the abnormal data set y i Probability of occurrence; P(C j |y i ) indicates that in the abnormal data group y i In case of problem C j Conditional probability of occurrence; Step S3-2-4: According to the calculated influence of each path, the abnormal data groups connected by the path are sorted from large to small according to the values ​​of the abnormal data groups. The value of any abnormal data group is the sum of the influences of its connected paths. According to the sorting of the abnormal data groups, the abnormal data during the current user verification is analyzed: The abnormal data groups are eliminated according to the queue sorting. If all the problems connected to the current abnormal data group are solved after correction, the elimination is stopped and the abnormal data is considered to be the target abnormal data; if the connection problem is still not solved after correction of the current abnormal data group, the elimination is continued.

5. A blockchain-based digital identity authentication method according to claim 1, characterized in that: The S4 includes: Step S4-1: When digital identity authentication fails, the failure information is marked as abnormal data and recorded in a local database, and the marked abnormal data is uploaded to the server in real time via a network protocol; Step S4-2: On the server side, there is a dedicated storage area for storing uploaded abnormal data; the reported abnormal data includes the verification failure reason analyzed in step S3, and the interference value R of the target abnormal data on the verification process is calculated according to the following formula: R=∑mi=1 P(C k |y i )*g i / ∑mi=1 [v j *∑3 j=1D(y i →C j )] Where m represents the number of target abnormal data sets, C k Indicates the reason for verification failure; g i represents the interference weight of the data category to which the ith abnormal data group belongs, v j Represents any problem C j The influence coefficient is preset by relevant staff; Step S4-3: Monitor the uploaded abnormal data, and manage the digital identity-related data stored in the blockchain for the current user to request verification according to the abnormal solution preset in the platform database. When the interference value of the monitored abnormal data is less than the threshold W preset in the database, the user's digital identity-related data is updated and stored; when the interference value of the monitored abnormal data is greater than or equal to W, the user's digital identity-related data is locked to avoid leakage of user information in the digital identity-related data.

6. A blockchain-based digital identity authentication system, characterized by: The system includes: a digital identity acquisition module, an identity authentication module, a verification data feedback module and a user identity management module; The digital identity acquisition module is used to acquire the user's digital identity related data and upload the acquired related data to the server; The identity verification module is used to verify the digital identity of the user, analyze the identity-related information provided by the user, and transmit the identity verification result to the verification data feedback module; The verification data feedback module is used to analyze the cause of identity authentication failure and feed back the analysis result to the user end; The user identity management module is used to manage the user's corresponding digital identity according to the data provided by the user, and to store the user's corresponding digital identity securely; The output end of the digital identity acquisition module is connected to the input ends of the identity authentication module and the user identity management module, the output end of the identity authentication module is connected to the input end of the verification data feedback module, and the output end of the verification data feedback module is connected to the input end of the user identity management module.

7. A blockchain-based digital identity authentication system according to claim 6, characterized in that: The digital identity acquisition module includes a data collection unit, a data parsing unit and a data transmission unit; The data collection unit is used to collect relevant data of the verification request initiator, including network information, identity information and device information of the verification request initiator; The data parsing unit is used to parse the relevant data collected by the data collection unit, determine whether to receive the verification request, and if the verification request is received, receive the relevant information provided by the initiator of the verification request and extract the relevant data for digital identity verification; The data transmission unit is used to transmit the relevant data for digital identity authentication extracted by the data parsing unit, and to package the relevant data for digital identity authentication and upload it to the server.

8. A blockchain-based digital identity authentication system according to claim 6, characterized in that: The identity verification module includes a digital identity recognition unit and an identity information analysis unit; The digital identity recognition unit is used to retrieve the data stored in the platform according to the digital identity identifier contained in the data received from the server, and when the corresponding digital identity is retrieved, obtain the digital identity related information stored in the platform; The identity information analysis unit is used to analyze the identity related information provided by the user according to the digital identity related information stored in the platform, determine whether the digital identity requested by the current user can be successfully verified, and transmit the judgment result to the verification data feedback module.

9. A blockchain-based digital identity authentication system according to claim 6, characterized in that: The verification data feedback module includes a verification data acquisition unit and an error tracing unit; The verification data acquisition unit is used to determine whether to acquire relevant information generated during the verification process according to the verification result of the digital identity requested by the current user; The error tracing unit is used to analyze the cause of the failure of digital identity authentication and to trace the error generated during the authentication process.

10. A blockchain-based digital identity authentication system according to claim 6, characterized in that: The user identity management module includes a digital identity inheritance unit and an identity application management unit; The digital identity inheritance unit is used to manage the digital identity related data inherited by the user according to the error tracing result, and store the updated verification related data of the digital identity requested to be verified by the current user; The identity application management unit is used to supervise the stored data in the platform and synchronize the updates related to the digital identity.

Images