Certificate management method and device based on block chain, equipment, medium and product
Patent Information
- Application Number
- CN202311058123.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-08-21
- Publication Date
- 2025-02-21
Smart Images

Figure CN119494114A_ABST
Abstract
Description
Technical Field
[0001] The embodiments of the present application relate to the field of blockchain technology, and in particular to a blockchain-based certificate management method, device, equipment, medium and product. Background Art
[0002] With the development of economy and technology, a large number of certificates have emerged to prove people's abilities or identities. As a result, data security has received more and more attention.
[0003] Since blockchain has the characteristics of traceability and non-tamperability, in related technologies, certificates are stored in blockchain and hash values are assigned to certificates. When a certificate needs to be queried, it is queried in the blockchain browser based on the hash value of the certificate; when a certificate needs to be verified, it is also queried and verified in the blockchain browser based on the hash value of the certificate.
[0004] However, in the above-mentioned related technologies, although the blockchain is tamper-proof and can ensure the data security of the certificate, the query and verification of the certificate is achieved through the blockchain browser, and the hash value of the certificate is publicly available, which will cause the leakage of the hash value of the certificate, resulting in lower security of the certificate. Summary of the invention
[0005] The present application provides a blockchain-based certificate management method, device, equipment, medium and product, and the technical solution is as follows:
[0006] According to one aspect of the present application, a blockchain-based certificate management method is provided, the method comprising:
[0007] Acquire certificate information, wherein the certificate information includes content information used to generate a certificate;
[0008] Generating a Soul Bound Token (SBT) certificate in the blockchain system based on the certificate information, wherein the SBT certificate is obtained by binding the certificate holder's information to the certificate;
[0009] The SBT certificate is stored in an on-chain folder in the blockchain system. The on-chain folder is a front-end tool that belongs to the certificate holder and is used to view the SBT certificate that the certificate holder already owns.
[0010] In some embodiments, the blockchain system includes a certificate generation service node;
[0011] Based on the certificate information, generating an on-chain certificate on the blockchain through the certificate generation service node, wherein the on-chain certificate refers to a certificate generated on the blockchain;
[0012] The certificate holder's information is mapped to the on-chain certificate to obtain the SBT certificate.
[0013] In some embodiments, the method further comprises:
[0014] Importing external certificates outside the blockchain into the blockchain system;
[0015] When the external certificate passes the information review of the certificate generation service node, the information of the certificate holder is mapped to the external certificate to obtain the SBT certificate.
[0016] According to one aspect of the present application, a blockchain-based certificate management device is provided, the device comprising:
[0017] An acquisition module, used to acquire certificate information, wherein the certificate information includes content information used to generate a certificate;
[0018] A generation module, used to generate an SBT certificate in the blockchain system based on the certificate information, wherein the SBT certificate is obtained by binding the certificate holder's information to the certificate;
[0019] A storage module is used to store the SBT certificate in an on-chain folder in the blockchain system. The on-chain folder is a front-end tool that belongs to the certificate holder and is used to view the SBT certificate that the certificate holder already owns.
[0020] According to another aspect of the present application, a computer device is provided, comprising: a processor and a memory, wherein at least one computer program is stored in the memory, and the at least one computer program is loaded and executed by the processor to implement the blockchain-based certificate management method as described above.
[0021] According to another aspect of the present application, a computer storage medium is provided, in which at least one computer program is stored. The at least one computer program is loaded and executed by a processor to implement the blockchain-based certificate management method as described above.
[0022] According to another aspect of the present application, a computer program product is provided, which includes a computer program stored in a computer-readable storage medium; the computer program is read and executed from the computer-readable storage medium by a processor of a computer device, so that the computer device executes the blockchain-based certificate management method as described above.
[0023] The beneficial effects of the technical solution provided by this application include at least:
[0024] By obtaining certificate information; generating an SBT certificate in the blockchain system based on the certificate information; and storing the SBT certificate in an on-chain folder in the blockchain system. This application ensures the transmission security of the certificate and improves the security of the certificate by storing the SBT certificate in an on-chain folder that belongs only to the certificate holder in the blockchain. BRIEF DESCRIPTION OF THE DRAWINGS
[0025] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.
[0026] Figure 1 It is a schematic diagram of a blockchain-based certificate management method provided by an exemplary embodiment of the present application;
[0027] Figure 2 is a schematic diagram of a network architecture provided by an exemplary embodiment of the present application;
[0028] Figure 3 is a flowchart of a blockchain-based certificate management method provided by an exemplary embodiment of the present application;
[0029] Figure 4 is a flowchart of a blockchain-based certificate management method provided by an exemplary embodiment of the present application;
[0030] Figure 5 is a schematic diagram of two authorization methods provided by an exemplary embodiment of the present application;
[0031] Figure 6 is a schematic diagram of active authorization provided by an exemplary embodiment of the present application;
[0032] Figure 7 is a flowchart of a blockchain-based certificate management method provided by an exemplary embodiment of the present application;
[0033] Figure 8 This is a schematic diagram of a distributed system provided by an exemplary embodiment of the present application applied to a blockchain system;
[0034] Fig. 9 is a structural diagram of a block structure provided by an exemplary embodiment of the present application;
[0035] Fig.10 is a block diagram of a blockchain-based certificate management device provided by an exemplary embodiment of the present application;
[0036] Fig.11It is a structural diagram of a computer device provided by an exemplary embodiment of the present application. DETAILED DESCRIPTION
[0037] In order to make the purpose, technical scheme and advantages of the present application clearer, the implementation mode of the present application will be further described in detail below in conjunction with the accompanying drawings. The exemplary embodiments will be described in detail here, and examples thereof are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementation modes described in the following exemplary embodiments do not represent all implementation modes consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the attached claims.
[0038] The terms used in this disclosure are for the purpose of describing specific embodiments only and are not intended to limit the disclosure. The singular forms of "a", "said" and "the" used in this disclosure and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.
[0039] It should be understood that although the terms first, second, third, etc. may be used in the present disclosure to describe various information, such information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other.
[0040] First, the blockchain system involved in the embodiment of the present application is briefly introduced:
[0041] Blockchain: It is a trusted ledger technology system maintained by multiple parties based on cryptography, distributed consensus and smart contract technology.
[0042] Blockchain address: A blockchain asset account identifier formed by converting a key generated by an asymmetric encryption algorithm according to certain rules, which can be used to receive blockchain assets.
[0043] SBT: A type of non-fungible token (NFT) issued on Ethereum or a compatible sidechain via ERC721. It is non-transferable and non-saleable.
[0044] The present application embodiment provides a schematic diagram of a certificate management method based on blockchain, such as Figure 1 As shown, the method is applied to a blockchain system, and the method can be executed by a computer device.
[0045] Exemplarily, the blockchain system obtains certificate information; the blockchain system generates an SBT certificate in the blockchain system based on the certificate information; the blockchain system stores the SBT certificate in an on-chain folder 20 in the blockchain system, and the on-chain folder 20 is a front-end tool that belongs to the certificate holder 10 and is used to view the SBT certificates that the certificate holder already owns.
[0046] Optionally, the form of the chain folder 20 can be at least one of an application (Application, APP), a web page or a mini-program, but is not limited to this, and the embodiments of the present application do not make specific limitations on this.
[0047] The certificate information includes content information used to generate or mint the certificate.
[0048] Optionally, the certificate includes at least one of an academic certificate, a degree certificate, a skill certificate, and a qualification certificate, but is not limited thereto and is not specifically limited in this embodiment of the present application.
[0049] Optionally, the certificate information includes at least one of the certificate grantor, certificate granting time, certificate granting authority, and certificate granting content, but is not limited to this, and the embodiments of the present application do not make specific limitations on this.
[0050] The SBT certificate refers to a certificate that is bound to the information of the certificate holder 10. The SBT certificate is non-transferable, non-saleable, and non-changeable.
[0051] The blockchain system includes a certificate generation business node 40, which may refer to a business node corresponding to a school institution, an educational institution, or other institution that can grant certificates.
[0052] The computer device generates an on-chain certificate on the blockchain 60 through the certificate generation business node 40, where the on-chain certificate refers to the certificate generated on the blockchain; the information of the certificate holder 10 is mapped to the on-chain certificate, and the on-chain certificate is bound to the information of the certificate holder 10 to obtain an SBT certificate.
[0053] In some embodiments, the computer device binds the information of the certificate holder 10 to the folder on the blockchain 60, and binds the folder to the information of the certificate holder 10 to obtain an on-chain folder 20 that is exclusive to the certificate holder 10; and passes the SBT certificate to the on-chain folder 20 for storage through the public node 30.
[0054] The blockchain system includes a public node 30, which is used to transfer data between the business node and the blockchain 30. After the public node 30 obtains the SBT certificate, the on-chain folder 20 corresponding to the SBT certificate is determined by matching the on-chain address corresponding to the SBT certificate and the on-chain folder 20, and then the SBT certificate is transferred to the on-chain folder 20 corresponding to the SBT certificate for storage.
[0055] In some embodiments, when the SBT certificate needs to be verified, after the certificate verification service node 50 is authorized, the chain address and certificate content corresponding to the SBT certificate are viewed through the chain folder 20 or by calling the Application Programming Interface (API).
[0056] The certificate verification business node 50 refers to a business node corresponding to a third-party organization, and the third-party organization includes at least one of a recruitment company and a rating agency, but is not limited thereto. The embodiment of the present application does not make any specific limitation on this.
[0057] Optionally, the certificate verification service node 50 is authorized in at least one of the following ways, but is not limited thereto:
[0058] The certificate holder 10 actively authorizes through the on-chain folder 20;
[0059] The certificate verification service node 50 applies for verification of the SBT certificate, and the certificate holder 10 passes the verification application.
[0060] Exemplarily, when the certificate verification service node 50 receives active authorization from the on-chain folder 20, the on-chain address and certificate content corresponding to the SBT certificate are viewed by jumping to the on-chain folder 20.
[0061] The certificate holder 10 can set at least one of the SBT certificate category for authorization verification, the time for authorization verification, and the certificate verification business node for authorization verification in the on-chain folder 20. For example, authorize Zhang San to verify his undergraduate degree certificate and bachelor's degree certificate, and the verification time is from August 2, 2023 to August 4, 2023.
[0062] When the certificate verification service node 50 receives active authorization from the on-chain folder 20, it jumps to the on-chain folder 20 to view the on-chain address and certificate content corresponding to the SBT certificate in the authorization scope.
[0063] Exemplarily, the certificate verification business node 50 applies to the certificate holder 10 for verification of the SBT certificate. When the verification application of the certificate verification business node 50 is approved, the address and certificate content corresponding to the SBT certificate are checked by jumping to the chain folder 20 or calling the API.
[0064] In summary, the method provided in this embodiment obtains certificate information; generates an SBT certificate in the blockchain system based on the certificate information; and stores the SBT certificate in an on-chain folder in the blockchain system. This application ensures the transmission security of the certificate and improves the security of the certificate by storing the SBT certificate in an on-chain folder in the blockchain that belongs only to the certificate holder.
[0065] The embodiments of the present application relate to blockchain technology. Blockchain is a new application mode of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods, each of which contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, the platform product service layer, and the application service layer.
[0066] The underlying blockchain platform can include processing modules such as user management, basic services, smart contracts, and operation monitoring. Among them, the user management module is responsible for the identity information management of all blockchain participants, including maintaining public and private key generation (account management), key management, and the maintenance of the correspondence between the user's real identity and the blockchain address (authority management), etc., and, under authorization, supervises and audits the transactions of certain real identities and provides risk control rule configuration (risk control audit); the basic service module is deployed on all blockchain node devices to verify the validity of business requests, and records valid requests to storage after consensus is reached. For a new business request, the basic service first adapts the interface for parsing and authentication (interface adaptation), and then encrypts the business information through the consensus algorithm (consensus management). The smart contract module is responsible for the registration and issuance of contracts, as well as contract triggering and contract execution. Developers can define the contract logic in a programming language and publish it to the blockchain (contract registration). According to the logic of the contract terms, the key or other events are called to trigger the execution and complete the contract logic. It also provides the function of contract upgrade and cancellation. The operation monitoring module is mainly responsible for the deployment, configuration modification, contract setting, cloud adaptation and real-time status visualization output of the product during the product release process, such as alarm, network status monitoring, node equipment health status monitoring, etc.
[0067] The platform product service layer provides the basic capabilities and implementation framework of typical applications. Developers can superimpose business features based on these basic capabilities to complete the blockchain implementation of business logic. The application service layer provides application services based on blockchain solutions for business participants to use.
[0068] The embodiments of the present application also involve cloud security, which can refer to the general term for security software, hardware, users, organizations, and security cloud platforms based on cloud computing business model applications. Cloud security integrates emerging technologies and concepts such as parallel processing, grid computing, and unknown behavior judgment. Through a large number of meshed clients, it detects abnormal software behavior in the network, obtains the latest information on Trojans and malicious programs on the Internet, and sends it to the server for automatic analysis and processing.
[0069] See also Figure 2 , Figure 2 1 is a schematic diagram of a network architecture provided in an embodiment of the present application. The network architecture may include a blockchain network, which may be composed of multiple blockchain nodes. The present application does not limit the number of blockchain nodes included in the blockchain network. Figure 2 Taking 6 blockchain nodes as an example, each blockchain node in the blockchain network is networked in a peer-to-peer network mode, and the blockchain nodes can communicate with each other according to the peer-to-peer network protocol. Each blockchain node in the blockchain network follows the broadcast mechanism and consensus mechanism to jointly ensure that the data on the blockchain cannot be tampered with or forged, and at the same time realize the decentralization and trustlessness of the blockchain.
[0070] The blockchain nodes in the blockchain network may be user terminals, servers, or systems composed of user terminals and servers, which are not limited in this application. User terminals may include, but are not limited to, PCs (Personal Computers), smart phones, tablet computers, laptop computers, PDAs, mobile Internet devices (MIDs), wearable devices (such as smart watches, smart bracelets, etc.), smart voice interaction devices, smart home appliances (such as smart TVs, etc.), vehicle-mounted devices, and other electronic devices.
[0071] The server can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, as well as big data and artificial intelligence platforms.
[0072] The blockchain maintained by the blockchain nodes in the blockchain network can be composed of a series of blocks, which can also be called data blocks. After a block is created, it needs to perform consensus processing in the blockchain network. When the consensus of the block is successful, the block is allowed to be added to the blockchain (i.e., distributed ledger). The blocks in the blockchain can be connected into a chain structure in the order of creation timestamps from small to large.
[0073] Among them, the data stored in the blockchain can be restricted in visibility, such as setting data A in the blockchain to be visible to the first object, and data B in the blockchain to be visible to the first object and the second object; then the first object has the authority to read data A in the blockchain, while the remaining objects except the first object do not have the authority to read data A in the blockchain and cannot obtain data A in the blockchain; the first object and the second object have the authority to read data B in the blockchain, while the remaining objects except the first object and the second object do not have the authority to read data B in the blockchain and cannot obtain data B in the blockchain, etc. In other words, the authorization scope of the data in the blockchain can be set by restricting the visibility of the data in the blockchain to ensure the security of the data.
[0074] It should be noted that the decentralized digital identity of each object can be registered through the decentralized identity authentication system (Decentralized Identity, DID). In this decentralized identity authentication system, the decentralized digital identity file of the subordinate organization can be signed by a trusted superior organization, and the authenticated decentralized digital identity file (that is, the decentralized digital identity file signed by the superior organization) can be stored on the chain; if it is necessary to verify the correctness of the decentralized digital identity of the subordinate organization, the decentralized digital identity file in the blockchain can be directly queried for verification; through the above method, the decentralized digital identity can be issued from the upper organization to the lower organization in turn. Among them, the public key information corresponding to the subordinate organization is indicated in the decentralized digital identity file of the subordinate organization, that is, the decentralized digital identity of the subordinate organization and the public key information of the subordinate organization are bound.
[0075] It can be understood that the aforementioned superior and subordinate institutions can be considered as objects that register decentralized digital identities in the decentralized identity authentication system; based on the decentralized identity authentication system, it is only necessary to store the decentralized digital identity files of each object on the chain, which can not only ensure that the identity data of each object is authentic and reliable, but also protect the identity data of each object from being disclosed, ensuring that the data of each object belongs to itself.
[0076] Figure 3 This is a flowchart of a blockchain-based certificate management method provided by an exemplary embodiment of the present application. The method is applied to a blockchain system and can be executed by a computer device. The method includes:
[0077] Step 302: Obtain certificate information.
[0078] The certificate information includes content information used to generate or mint the certificate.
[0079] Optionally, the certificate includes at least one of an academic certificate, a degree certificate, a skill certificate, and a qualification certificate, but is not limited thereto and is not specifically limited in this embodiment of the present application.
[0080] Optionally, the certificate information includes at least one of the certificate grantor, certificate granting time, certificate granting authority, and certificate granting content, but is not limited to this, and the embodiments of the present application do not make specific limitations on this.
[0081] Step 304: Generate an SBT certificate in the blockchain system based on the certificate information.
[0082] The SBT certificate is obtained by binding the certificate holder's information with the certificate.
[0083] An SBT certificate is a certificate that is bound to the information of the certificate holder. The SBT certificate is non-transferable, non-saleable, and non-changeable.
[0084] Optionally, the information of the certificate holder includes at least one of facial identity information, palm information, identity feature information, password information, and user name information, but is not limited to this, and the embodiments of the present application do not make specific limitations on this.
[0085] Step 306: Store the SBT certificate in an on-chain folder in the blockchain system.
[0086] The chain folder is a front-end tool that belongs to the certificate holder and is used to view the SBT certificates that he already owns.
[0087] Optionally, the folder on the chain may be in the form of at least one of an APP, a web page, or a mini-program, but is not limited thereto, and the embodiments of the present application do not specifically limit this.
[0088] Exemplarily, the computer device stores the SBT certificate generated in the blockchain system in an on-chain folder dedicated to the certificate holder. The certificate holder can view the SBT certificates he already owns in the on-chain folder, and when a third party wants to view them, they need to obtain authorization from the certificate holder.
[0089] In summary, the method provided in this embodiment obtains certificate information; generates an SBT certificate in the blockchain system based on the certificate information; and stores the SBT certificate in an on-chain folder in the blockchain system. This application stores the SBT certificate in an on-chain folder that only belongs to the certificate holder in the blockchain, and the certificate holder can view it by himself or authorize others to view it, thereby ensuring the transmission security of the certificate and improving the security of the certificate.
[0090] Figure 4 This is a flowchart of a blockchain-based certificate management method provided by an exemplary embodiment of the present application. The method is applied to a blockchain system and can be executed by a computer device. The method includes:
[0091] Step 402: Obtain certificate information.
[0092] The certificate information includes content information used to generate or mint the certificate.
[0093] Optionally, the certificate includes at least one of an academic certificate, a degree certificate, a skill certificate, and a qualification certificate, but is not limited thereto and is not specifically limited in this embodiment of the present application.
[0094] Optionally, the certificate information includes at least one of the certificate grantor, certificate granting time, certificate granting authority, and certificate granting content, but is not limited to this, and the embodiments of the present application do not make specific limitations on this.
[0095] Step 404: Generate an SBT certificate in the blockchain system based on the certificate information.
[0096] The SBT certificate is obtained by binding the certificate holder's information with the certificate.
[0097] An SBT certificate is a certificate that is bound to the information of the certificate holder. The SBT certificate is non-transferable, non-saleable, and non-changeable.
[0098] Optionally, the information of the certificate holder includes at least one of facial identity information, palm information, identity feature information, password information, and user name information, but is not limited to this, and the embodiments of the present application do not make specific limitations on this.
[0099] In some embodiments, the blockchain system includes a certificate generation service node.
[0100] Optionally, the certificate generation service node may refer to a service node corresponding to a school institution, an educational institution, or other institution that can grant certificates.
[0101] The certificate generation business node generates an SBT certificate on the blockchain and issues it to the certificate holder. Each node can only see data related to the business node.
[0102] Based on the certificate information, the computer device generates an on-chain certificate on the blockchain through the certificate generation business node. The on-chain certificate refers to the certificate generated on the blockchain; the computer device maps the certificate holder's information to the on-chain certificate to obtain an SBT certificate.
[0103] The computer device binds the certificate on the chain with the information of the certificate holder to obtain an SBT certificate that is exclusive to the certificate holder. By generating an SBT certificate on the blockchain, the entire process of generating the SBT certificate is on the chain, avoiding the link from the off-chain to the on-chain, and improving the security of data transmission.
[0104] In some embodiments, when there is already a certificate outside the blockchain, that is, when an external certificate outside the blockchain is already possessed, the computer device imports the external certificate outside the blockchain into the blockchain system; when the external certificate passes the information review of the certificate generation business node, the computer device maps the certificate holder's information to the external certificate to obtain an SBT certificate.
[0105] Optionally, the external certificate includes at least one of a paper certificate, an electronic certificate outside the blockchain, and an image certificate, but is not limited to this, and the embodiments of the present application do not make specific limitations on this.
[0106] For example, when the certificate holder already has a paper certificate but does not have an on-chain certificate in the blockchain, the information of the paper certificate is imported into the blockchain system, and the information of the paper certificate is forwarded to the issuer for information review. If the issuer passes the review, the certificate holder's information is mapped to the external certificate to obtain the SBT certificate.
[0107] Step 406: Store the SBT certificate in an on-chain folder in the blockchain system.
[0108] The chain folder is a front-end tool that belongs to the certificate holder and is used to view the SBT certificates that he already owns.
[0109] Optionally, the folder on the chain may be in the form of at least one of an APP, a web page, or a mini-program, but is not limited thereto, and the embodiments of the present application do not specifically limit this.
[0110] In some embodiments, the blockchain system includes a public node and a blockchain. The public node is used to transfer data between the business node and the blockchain, thereby avoiding a third party from directly connecting to the underlying chain and reducing efficiency. The computer device binds the certificate holder's information to a folder on the blockchain to obtain an on-chain folder; the computer device transfers the SBT certificate to the on-chain folder through the public node for storage.
[0111] Optionally, the certificate holder's information includes an on-chain address, which is an identifier used to identify the certificate holder or an on-chain folder. After the public node obtains the SBT certificate, the SBT certificate is transferred to the on-chain folder corresponding to the SBT certificate for storage by matching the on-chain address corresponding to the SBT certificate and the on-chain folder.
[0112] The computer device matches the information of the certificate holder bound to the SBT certificate with the information of the certificate holder corresponding to the on-chain folder, and if there is a match, stores the SBT certificate in the corresponding on-chain folder.
[0113] Step 408: After the certificate verification business node is authorized, the chain address and certificate content corresponding to the SBT certificate are viewed through the chain folder or by calling the API.
[0114] The blockchain system includes a certificate verification business node.
[0115] The certificate verification business node refers to the business node corresponding to the third-party organization, and the third-party organization includes at least one of a recruitment company and a rating agency, but is not limited to this. The embodiment of the present application does not make specific limitations on this.
[0116] After the certificate verification business node is authorized, the chain address and certificate content corresponding to the SBT certificate can be viewed through the chain folder or by calling the application program interface API.
[0117] Optionally, the certificate verification service node is authorized in at least one of the following ways, but is not limited thereto:
[0118] The certificate holder actively authorizes through the on-chain folder;
[0119] The certificate verification business node applies for verification of the SBT certificate, and the certificate holder passes the verification application.
[0120] For example, Figure 5 The schematic diagram of the two authorization methods shown is as follows: Authorization path 1: the certificate holder 501 can actively authorize through the on-chain folder 503. When the certificate verification business node receives the active authorization from the on-chain folder 503, it can directly view the SBT certificate in the authorization scope by jumping to the on-chain folder 503 in the blockchain 504. Authorization path 2: the certificate holder 501 can issue a verification application through the scene party application 502, which includes the application of a third-party organization, and authorize the scene party to verify the SBT certificate in the blockchain 504 after the verification application is passed.
[0121] In some embodiments, when the certificate verification service node receives active authorization from the on-chain folder, the on-chain address and certificate content corresponding to the SBT certificate are viewed by jumping to the on-chain folder.
[0122] Optionally, the computer device sets the authorization scope in the on-chain folder; when the certificate verification business node receives active authorization from the on-chain folder, the on-chain address and certificate content corresponding to the SBT certificate in the authorization scope are viewed by jumping to the on-chain folder.
[0123] The authorization scope includes at least one of the SBT certificate category for authorization verification, the time for authorization verification, and the certificate verification business node for authorization verification, but is not limited to these. The embodiments of the present application do not make specific limitations on this.
[0124] For example, Figure 6The schematic diagram of active authorization is shown in Figure (a). After the certificate holder passes the identity authentication, he can view the SBT certificate he already has in the on-chain folder. At the same time, if there is no corresponding certificate in the on-chain folder, he can upload the information of the external certificate by himself. After the certification authority reviews and approves it, the SBT certificate is generated on the chain for the individual to use for subsequent authorization. As shown in Figure (b), when authorizing, the authorization scope in the on-chain folder can be set, including: authorizing "Old A's Company" to verify "Zhang San's" "Bachelor's Degree Certificate", "Bachelor's Degree Certificate" and "Bachelor's Double Degree Certificate" between 2023.04.24 and 2024.04.24. As shown in Figure (c), after the authorization is successful, the authorization success prompt message is displayed.
[0125] In some embodiments, when the verification application of the certificate verification business node is passed, the chain address and certificate content corresponding to the SBT certificate are viewed by jumping to the chain folder or calling the API.
[0126] In summary, the method provided in this embodiment obtains certificate information; generates an SBT certificate in the blockchain system based on the certificate information; and stores the SBT certificate in an on-chain folder in the blockchain system. This application stores the SBT certificate in an on-chain folder that only belongs to the certificate holder in the blockchain, and the certificate holder can view it by himself or authorize others to view it, thereby ensuring the transmission security of the certificate and improving the security of the certificate.
[0127] The method provided in this embodiment collects SBT certificates into an on-chain folder that belongs only to the certificate holder for viewing. The on-chain folder is different from the blockchain browser that can be checked by anyone. The above method not only protects privacy but also ensures data transmission security, and is convenient, simple and easy to use.
[0128] The method provided in this embodiment generates an SBT certificate on the blockchain. The entire process of generating the SBT certificate is on the chain, avoiding the link from the off-chain to the on-chain link and improving the security of data transmission.
[0129] The method provided in this embodiment is to actively authorize the SBT certificate to a third party for verification, or the third party initiates a verification application to the certificate holder, and the certificate holder obtains the viewing permission after agreeing. This interactive method greatly facilitates the self-certification and verification process of the SBT certificate, without the need to search through a blockchain browser.
[0130] Figure 7 This is a flowchart of a blockchain-based certificate management method provided by an exemplary embodiment of the present application. The method is applied to a blockchain system, and the method involves a user, three service nodes (a public node, a certificate generation service node, and a certificate verification service node) and a blockchain. The method includes:
[0131] Step 701: Mint SBT certificate.
[0132] The certificate generation service node may refer to a service node corresponding to a school institution, an educational institution, or other institution that can grant certificates.
[0133] The certificate generation business node generates an on-chain certificate on the blockchain based on the certificate information, and maps the certificate holder's information to the on-chain certificate to obtain an SBT certificate.
[0134] Step 702: Issue an SBT certificate.
[0135] After the SBT certificate is generated, the blockchain issues the SBT certificate to the public node.
[0136] Step 703: Display the SBT certificate.
[0137] After the public node obtains the SBT certificate, the SBT certificate is displayed in the on-chain folder corresponding to the on-chain address according to the on-chain address corresponding to the user, that is, the SBT certificate is stored in the on-chain folder.
[0138] Users can view the obtained SBT certificates in the on-chain folder.
[0139] Step 704: Initiate verification of SBT certificate application.
[0140] The certificate verification business node refers to the business node corresponding to the third-party organization, and the third-party organization includes at least one of a recruitment company and a rating agency, but is not limited to this. The embodiment of the present application does not make specific limitations on this.
[0141] When the certificate verification business node needs to verify the SBT certificate, the certificate verification business node initiates an SBT certificate verification application to the blockchain.
[0142] Step 705: Forward the verification application.
[0143] The blockchain forwards the verification request to the public node.
[0144] Step 706: Find the user's on-chain address based on the verification request and send a verification request to the address.
[0145] The public node searches for the user's on-chain address based on the verification request and sends a verification request to the on-chain address.
[0146] Step 707: Display the verification application.
[0147] After determining the on-chain folder corresponding to the user's on-chain address, the verification application is displayed on the corresponding on-chain file.
[0148] Step 708: Check the verification application.
[0149] Users view verification applications through on-chain folders.
[0150] Step 709: Determine authorization to verify the SBT certificate.
[0151] The user authorization certificate verification business node verifies the SBT certificate.
[0152] Step 710: Find the corresponding SBT certificate.
[0153] After obtaining user authorization, the public node searches for the SBT certificate to be verified in the on-chain folder.
[0154] Step 711: Find the corresponding SBT certificate in the storage middleware.
[0155] The public node finds the SBT certificate to be verified in the storage middleware in the on-chain folder.
[0156] Step 712: Sharing on the chain.
[0157] After finding the SBT certificate to be verified, the public node shares it through on-chain sharing.
[0158] Step 713: Transmit the SBT certificate information on the chain.
[0159] The public node transmits the information of the SBT certificate in the blockchain to the certificate verification business node.
[0160] Step 714: Verify the information of the SBT certificate.
[0161] When receiving the information of the SBT certificate, the certificate verification service node verifies the information of the SBT certificate.
[0162] Step 715: Return verification result / viewed notification.
[0163] After the certificate verification service node verifies the information of the SBT certificate, the certificate verification service node returns a verification result / viewed notification.
[0164] Step 716: View the results.
[0165] Users view verification results / viewed notifications through on-chain folders.
[0166] In summary, the method provided in this embodiment obtains certificate information; generates an SBT certificate in the blockchain system based on the certificate information; and stores the SBT certificate in an on-chain folder in the blockchain system. When a third party needs to verify the SBT certificate, the verification of the SBT certificate can be achieved through authorization. This application stores the SBT certificate in an on-chain folder that only belongs to the certificate holder in the blockchain, and the certificate holder can view it by himself or authorize others to view it, thereby ensuring the transmission security of the certificate and improving the security of the certificate.
[0167] An exemplary embodiment of the present application provides a blockchain-based certificate management method, which is applied to a blockchain system and can be executed by a computer device.
[0168] The logic of the SBT certificate authorization verification mechanism is described as follows:
[0169] (1) Participants and Rights
[0170] Schools / educational institutions, third-party scenario parties (company recruiters, professional title rating agencies), certificate holders, on-chain folders, and public nodes are all participants in the entire process on the chain. Each party has different role permissions on the chain.
[0171] School / education institution: As a certificate generation business node, it generates SBT certificates on the chain and issues them to individuals. Each node can only see data related to its business.
[0172] Third-party scenario party: The company recruitment agency and rating agency act as a third party and proactively initiate a review application to the certificate holder, or receive authorization issued by the certificate holder through an on-chain folder, and verify the SBT certificate through the scenario party’s own application or on-chain folder.
[0173] Certificate holder: Possessing an SBT certificate and an on-chain folder bound to its personal information, authorization can be achieved through two paths: one is through the scenario party application, authorizing the scenario party to verify the certificate, and the scenario party application checks the SBT certificate by calling the interface or jumping to the on-chain folder; the other is to directly authorize and verify the SBT certificate through the on-chain folder.
[0174] On-chain folder: The folder is not an independent role, but a front-end on the public node on the chain. The public node is used to transfer SBT certificates on the chain to avoid too many scenarios directly connecting to the underlying chain, which reduces efficiency.
[0175] (2) Product operation process description
[0176] 1) Individual login to view the on-chain folder: After the individual user passes the identity authentication, he / she can view the authorized SBT certificate in the on-chain folder. At the same time, the steps of manually importing external certificates are also retained. If there is no corresponding external certificate on the chain, the individual can upload the information of the external certificate by himself / herself. After the certification authority reviews and approves it, an SBT certificate will be generated on the chain for the individual to use for subsequent authorization.
[0177] 2) Personal authorization SBT certificate: Individuals can select the certificate to be authorized, the authorized agency, and the authorization start and end time in the on-chain folder to conduct on-chain authorization.
[0178] 3) The organization checks the SBT certificate: The organization reads the SBT certificate information through the on-chain folder front-end or API to achieve verification purposes.
[0179] In some embodiments, the method adopts a double-layer chain architecture, and each direct participant (school, third-party authorized institution) acts as a business node, and only views and uploads business data related to it. The public node is responsible for transmitting the SBT certificate on the chain, and performs permission control through personal information verification of the on-chain folder. The certificate holder can only see the information of the SBT certificate related to it in the on-chain folder.
[0180] By embedding the Software Development Kit (SDK) in the certificate generation business node and the certificate verification business node, when the business personnel log in to the relevant system (such as the academic degree certification management system, etc.), the SDK is executed synchronously, and the certificate information is cast into the SBT certificate blockchain, and transmitted through the public node of the chain folder for the certificate holder to view in the chain folder.
[0181] In some embodiments, this solution involves three business nodes (SBT business public node, school / education institution business node, third-party authorized institution business node) and a front end (on-chain folder). The specific process is as follows:
[0182] Issue SBT certificate.
[0183] The school / educational institution generates an SBT certificate on the blockchain through its certificate generation business node; after the public node obtains the SBT certificate, it is issued to the corresponding on-chain folder according to the user's corresponding on-chain address; the user views the related SBT certificate through the on-chain folder.
[0184] Authorize SBT certificate.
[0185] The business node of a third-party authorized institution initiates an application on the chain to authorize the viewing of a certain type of SBT certificate for a certain user; the blockchain forwards the request to the public node, and the public node forwards the request to the user's corresponding on-chain address; the user views the application through the on-chain folder and confirms the SBT certificate to be authorized; the on-chain folder forwards the request to the public node, and the public node searches for the corresponding SBT certificate in its internal file storage middleware according to the user's on-chain address, and shares it with the authorized third party through the chain.
[0186] Verify SBT certificate.
[0187] The third-party authorized agency checks the SBT certificate on the chain corresponding to the on-chain address and certificate content; the authorized agency returns the verification result or a notification of having been viewed, and the user reads the message notification in the on-chain folder.
[0188] In summary, the certificate itself can be issued as SBT on the chain through ERC721, and the generation and uploading of data are coherent and unbroken; unlike blockchain browsers, SBT certificates are collected and viewed through on-chain folders. On-chain folders are front-end tools for individuals to view their own data information, which can be presented in the form of independent APP or H5 or WeChat applet. They have the characteristics of protecting data privacy, ensuring data transmission security, and being convenient, simple and easy to use; the certificate holder can actively authorize the certificate SBT to an external third party for viewing, and the third party can also initiate a viewing application to the certificate holder, and the certificate holder will obtain viewing permission after agreeing. This interactive method greatly facilitates the self-certification and verification process of the certificate, and there is no need to manually check it in the blockchain browser as in the existing solutions.
[0189] The blockchain system involved in the embodiment of the present invention can be a distributed system formed by connecting a client and multiple nodes (any form of computing devices in the access network, such as a server and a user terminal) through network communication.
[0190] Take the distributed system as the blockchain system as an example, see Figure 8 , Figure 8 This is an optional structural diagram of the distributed system 100 provided in the embodiment of the present application applied to the blockchain system, which is formed by multiple nodes (any form of computing devices in the access network, such as servers, user terminals) and clients, and a point-to-point network is formed between the nodes. The point-to-point network protocol is an application layer protocol running on the Transmission Control Protocol (TCP). In a distributed system, any machine such as a server or a terminal can join and become a node, and the node includes a hardware layer, an intermediate layer, an operating system layer, and an application layer.
[0191] See also Figure 8 The functions of each node in the blockchain system shown include:
[0192] 1) Routing: a basic function of a node, used to support communication between nodes.
[0193] In addition to the routing function, the node can also have the following functions:
[0194] 2) Applications are deployed in the blockchain to implement specific businesses based on actual business needs, record data related to the implementation of functions to form record data, carry digital signatures in the record data to indicate the source of the task data, and send the record data to other nodes in the blockchain system for other nodes to add the record data to a temporary block when they successfully verify the source and integrity of the record data.
[0195] For example, the services implemented by the application include:
[0196] 2.1 Wallet, used to provide the function of conducting electronic currency transactions, including initiating transactions (i.e., sending the transaction record of the current transaction to other nodes in the blockchain system. After the other nodes successfully verify, as a response to acknowledge the validity of the transaction, the transaction record data is stored in the temporary block of the blockchain; of course, the wallet also supports querying the remaining electronic currency in the electronic currency address;
[0197] 2.2 Shared ledger, used to provide functions such as storage, query and modification of account data, and send the record data of the operation on the account data to other nodes in the blockchain system. After other nodes verify the validity, as a response to acknowledging the validity of the account data, the record data will be stored in a temporary block, and a confirmation can also be sent to the node that initiated the operation.
[0198] 2.3 Smart contracts are computerized protocols that can execute the terms of a contract. They are implemented by deploying codes on a shared ledger that are executed when certain conditions are met. The codes are used to complete automated transactions based on actual business needs, such as querying the logistics status of the goods purchased by the buyer and transferring the buyer's electronic currency to the merchant's address after the buyer signs for the goods. Of course, smart contracts are not limited to executing contracts for transactions, but can also execute contracts for processing received information.
[0199] 3) Blockchain, including a series of blocks that are connected to each other in the order of their generation. Once a new block is added to the blockchain, it will not be removed. The block records the record data submitted by the nodes in the blockchain system.
[0200] See also Fig. 9 , Fig. 9This is an optional schematic diagram of the block structure provided by the embodiment of the present application. Each block includes the hash value of the transaction record stored in this block (the hash value of this block) and the hash value of the previous block. Each block is connected by the hash value to form a blockchain. In addition, the block can also include information such as the timestamp when the block was generated. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains relevant information for verifying the validity of its information (anti-counterfeiting) and generating the next block.
[0201] Fig.10 The schematic diagram of the structure of a blockchain-based certificate management device provided by an exemplary embodiment of the present application is shown. The device can be implemented as all or part of a computer device through software, hardware, or a combination of both. The device includes:
[0202] An acquisition module 1001 is used to acquire certificate information, where the certificate information includes content information used to generate a certificate;
[0203] A generating module 1002 is used to generate a soul-binding token (SBT) certificate in the blockchain system based on the certificate information, wherein the SBT certificate is obtained by binding the certificate holder's information with the certificate;
[0204] The storage module 1003 is used to store the SBT certificate in an on-chain folder in the blockchain system. The on-chain folder is a front-end tool that belongs to the certificate holder and is used to view the SBT certificate that the certificate holder already owns.
[0205] In some embodiments, the storage module 1003 is used to bind the certificate holder's information to the folder on the blockchain to obtain the on-chain folder; and transfer the SBT certificate to the on-chain folder through the public node for storage.
[0206] In some embodiments, the storage module 1003 is used to, after obtaining the SBT certificate at the public node, transfer the SBT certificate to the on-chain folder corresponding to the SBT certificate for storage by matching the SBT certificate and the on-chain address corresponding to the on-chain folder.
[0207] In some embodiments, the generation module 1002 is used to generate an on-chain certificate on the blockchain through the certificate generation business node based on the certificate information, where the on-chain certificate refers to a certificate generated on the blockchain; the certificate holder's information is mapped to the on-chain certificate to obtain the SBT certificate.
[0208] In some embodiments, the device also includes a verification module 1004, which is used to view the on-chain address and certificate content corresponding to the SBT certificate through the on-chain folder or by calling an application program interface API after the certificate verification business node is authorized.
[0209] In some embodiments, the verification module 1004 is used to view the on-chain address and the certificate content corresponding to the SBT certificate by jumping to the on-chain folder when the certificate verification business node receives active authorization from the on-chain folder.
[0210] In some embodiments, the verification module 1004 is used to set the authorization scope in the on-chain folder, and the authorization scope includes at least one of the SBT certificate category for authorization verification, the time for authorization verification, and the certificate verification business node for authorization verification; when the certificate verification business node receives an active authorization from the on-chain folder, the on-chain address and the certificate content corresponding to the SBT certificate in the authorization scope are viewed by jumping to the on-chain folder.
[0211] In some embodiments, the verification module 1004 is used to view the on-chain address and the certificate content corresponding to the SBT certificate by jumping to the on-chain folder or calling the API when the verification application of the certificate verification business node is passed.
[0212] In some embodiments, the generation module 1002 is used to import an external certificate outside the blockchain into the blockchain system; when the external certificate passes the information review of the certificate generation business node, the certificate holder's information is mapped to the external certificate to obtain the SBT certificate.
[0213] Fig.11 The structural block diagram of a computer device 1100 shown in an exemplary embodiment of the present application is shown. The computer device can be implemented as a server in the above-mentioned solution of the present application. The computer device 1100 includes a central processing unit (CPU) 1101, a system memory 1104 including a random access memory (RAM) 1102 and a read-only memory (ROM) 1103, and a system bus 1105 connecting the system memory 1104 and the central processing unit 1101. The computer device 1100 also includes a mass storage device 1106 for storing an operating system 1109, an application program 1110 and other program modules 1111.
[0214] The mass storage device 1106 is connected to the central processing unit 1101 through a mass storage controller (not shown) connected to the system bus 1105. The mass storage device 1106 and its associated computer readable medium provide non-volatile storage for the computer device 1100. That is, the mass storage device 1106 may include a computer readable medium (not shown) such as a hard disk or a compact disc read-only memory (CD-ROM) drive.
[0215] Without loss of generality, the computer-readable medium may include computer storage media and communication media. Computer storage media include volatile and non-volatile, removable and non-removable media implemented by any method or technology for storing information such as computer-readable instructions, data structures, program modules or other data. Computer storage media include RAM, Erasable Programmable Read Only Memory (EPROM), Electronically-Erasable Programmable Read-Only Memory (EEPROM) flash memory or other solid-state storage technology, CD-ROM, Digital Versatile Disc (DVD) or other optical storage, cassette, tape, disk storage or other magnetic storage devices. Of course, those skilled in the art will appreciate that the computer storage medium is not limited to the above. The above-mentioned system memory 1104 and mass storage device 1106 can be collectively referred to as memory.
[0216] According to various embodiments of the present disclosure, the computer device 1100 can also be connected to a remote computer on the network through a network such as the Internet. That is, the computer device 1100 can be connected to the network 1108 through the network interface unit 1107 connected to the system bus 1105, or the network interface unit 1107 can be used to connect to other types of networks or remote computer systems (not shown).
[0217] The memory also includes at least one computer program, which is stored in the memory. The central processor 1101 implements all or part of the steps in the blockchain-based certificate management method shown in the above-mentioned embodiments by executing the at least one program.
[0218] An embodiment of the present application also provides a computer device, which includes a processor and a memory, wherein at least one program is stored in the memory, and the at least one program is loaded and executed by the processor to implement the blockchain-based certificate management method provided by the above-mentioned method embodiments.
[0219] An embodiment of the present application also provides a computer-readable storage medium, in which at least one computer program is stored. The at least one computer program is loaded and executed by a processor to implement the blockchain-based certificate management method provided by the above-mentioned method embodiments.
[0220] An embodiment of the present application also provides a computer program product, which includes a computer program, and the computer program is stored in a computer-readable storage medium; the computer program is read and executed from the computer-readable storage medium by a processor of a computer device, so that the computer device executes to implement the blockchain-based certificate management method provided by the above-mentioned method embodiments.
[0221] It will be understood that in the specific implementation of the present application, the data involved, historical data, and data related to user data processing such as portraits related to user identity or characteristics, when the above embodiments of the present application are applied to specific products or technologies, need to obtain user permission or consent, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards of relevant countries and regions.
[0222] It should be noted that, unless otherwise clearly defined herein, all terms used in the claims are interpreted according to their ordinary meanings in the technical field. Unless otherwise clearly stated, all references to "an element, device, component, equipment, step, etc." will be openly interpreted as referring to at least one instance of an element, device, component, equipment, step, etc. Unless explicitly stated, the steps of any method disclosed herein do not have to be performed in the exact order disclosed.
[0223] It should be understood that the "plurality" mentioned in this article refers to two or more. "And / or" describes the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects are in an "or" relationship.
[0224] A person skilled in the art will understand that all or part of the steps to implement the above embodiments may be accomplished by hardware or by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, and the above-mentioned storage medium may be a read-only memory, a disk or an optical disk, etc.
[0225] The above description is only an optional embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent switching, improvements, etc. made within the spirit and principles of the present application shall be included in the protection scope of the present application.
Claims
1. A certificate management method based on blockchain, characterized in that: Applied to a blockchain system, the method includes: Acquire certificate information, wherein the certificate information includes content information used to generate a certificate; Generate a Soul Binding Token (SBT) certificate in the blockchain system based on the certificate information, where the SBT certificate is obtained by binding the certificate holder’s information to the certificate; The SBT certificate is stored in an on-chain folder in the blockchain system. The on-chain folder is a front-end tool that belongs to the certificate holder and is used to view the SBT certificate that the certificate holder already owns.
2. The method according to claim 1, characterized in that The blockchain system includes a public node and a blockchain, wherein the public node is used to transmit data; The step of storing the SBT certificate in an on-chain folder in the blockchain system includes: Binding the information of the certificate holder to the folder on the blockchain to obtain the folder on the chain; The SBT certificate is transferred to the on-chain folder for storage through the public node.
3. The method according to claim 2, characterized in that The information of the certificate holder includes the on-chain address; The transferring the SBT certificate to the on-chain folder for storage through the public node includes: After the public node obtains the SBT certificate, the SBT certificate is transferred to the on-chain folder corresponding to the SBT certificate for storage by matching the SBT certificate with the on-chain address corresponding to the on-chain folder.
4. The method according to any one of claims 1 to 3, characterized in that: The blockchain system includes a certificate verification service node; the method also includes: After the certificate verification service node is authorized, the chain address and certificate content corresponding to the SBT certificate are viewed through the chain folder or by calling the application program interface API.
5. The method according to claim 4, characterized in that After the certificate verification service node is authorized, the chain address and certificate content corresponding to the SBT certificate are viewed through the chain folder or by calling the API, including: When the certificate verification service node receives active authorization from the on-chain folder, the on-chain address and the certificate content corresponding to the SBT certificate are viewed by jumping to the on-chain folder.
6. The method according to claim 5, characterized in that The method further comprises: Set the authorization scope in the on-chain folder, where the authorization scope includes at least one of the SBT certificate category for authorization verification, the time for authorization verification, and the certificate verification business node for authorization verification; When the certificate verification service node receives active authorization from the on-chain folder, jumping to the on-chain folder to view the on-chain address and certificate content corresponding to the SBT certificate includes: When the certificate verification service node receives active authorization from the on-chain folder, it jumps to the on-chain folder to view the on-chain address and the certificate content corresponding to the SBT certificate in the authorization scope.
7. The method according to claim 4, characterized in that After the certificate verification service node is authorized, the chain address and certificate content corresponding to the SBT certificate are viewed through the chain folder or by calling the API, including: When the verification application of the certificate verification business node is passed, the on-chain address and the certificate content corresponding to the SBT certificate are viewed by jumping to the on-chain folder or calling the API.
8. A certificate management device based on blockchain, characterized in that: The device comprises: An acquisition module, used to acquire certificate information, wherein the certificate information includes content information used to generate a certificate; A generation module, used to generate an SBT certificate in the blockchain system based on the certificate information, wherein the SBT certificate is obtained by binding the certificate holder's information to the certificate; A storage module is used to store the SBT certificate in an on-chain folder in the blockchain system. The on-chain folder is a front-end tool that belongs to the certificate holder and is used to view the SBT certificate that the certificate holder already owns.
9. A computer device, characterized in that: The computer device includes: a processor and a memory, wherein at least one computer program is stored in the memory, and at least one computer program is loaded and executed by the processor to implement the blockchain-based certificate management method as described in any one of claims 1 to 7.
10. A computer storage medium, characterized in that: At least one computer program is stored in the computer-readable storage medium, and the at least one computer program is loaded and executed by the processor to implement the blockchain-based certificate management method as described in any one of claims 1 to 7.