Education digital identity authentication method of distributed heterogeneous system based on block chain

Abstract

The invention discloses an educational digital identity authentication method of a distributed heterogeneous system based on a block chain, and relates to the technical field of block chains, an identity information set and an educational system information set are pre-collected and stored by using an asymmetric encryption algorithm, an identity standardization model is constructed based on the identity information set and the educational system information set, and the educational digital identity authentication method of the distributed heterogeneous system based on the block chain is established. Based on an identity standardization model, identity data of registered personnel is managed by using an intelligent contract, cross-chain data sharing is performed on the identity data by using homomorphic encryption and differential privacy technologies, and cross-chain verification is performed by using a decryption key of homomorphic encryption and a private key of an asymmetric encryption algorithm, so that the security and transparency of the data are greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain, and in particular to an educational digital identity authentication method of a distributed heterogeneous system based on blockchain. Background Art

[0002] In modern digital education systems, managing and verifying the identity information of students and teachers is a vital task. However, traditional identity authentication systems rely on centralized data storage and management, which are vulnerable to threats such as cyber attacks, data leakage, and privacy violations. Under this architecture, data interoperability between institutions is poor, making it difficult to achieve comprehensive and efficient identity authentication. In addition, information tampering and forgery are also more likely to occur in the absence of an effective verification mechanism. These deficiencies not only restrict the openness and collaboration of the education system, but also reduce the protection of data security and user privacy to a certain extent. These challenges call for a more secure, reliable and decentralized identity authentication solution.

[0003] Blockchain technology, with its decentralized, tamper-proof and transparent characteristics, provides an ideal technical framework for solving identity management problems in the traditional education industry. By recording digital identity information in encrypted form on the blockchain, the education system can achieve data immutability and transparency, improving data security and trust. However, the existing blockchain technology still faces some challenges in the process of educational applications, especially in terms of data privacy and computing efficiency; and the transparency of the blockchain also brings the risk of privacy leakage. Although the data is encrypted, the blockchain lacks a built-in privacy protection mechanism and often needs to be combined with external encryption technology to enhance data security.

[0004] The Chinese patent application with publication number CN110766579A provides an online education management verification system and method based on a blockchain platform, which can bind an online education system account to a blockchain digital identity; the online education institution issues an electronic certificate to a qualified user and stores the electronic certificate in the blockchain; the electronic certificate and the information of the grantee are written into the blockchain smart contract. However, this method fails to solve the identity authentication problem of students and teachers.

[0005] To this end, the present invention proposes an educational digital identity authentication method for a distributed heterogeneous system based on blockchain. Summary of the invention

[0006] The present invention aims to solve at least one of the technical problems existing in the prior art. To this end, the present invention proposes an educational digital identity authentication method based on a distributed heterogeneous system of blockchain, which improves the security and transparency of data.

[0007] To achieve the above purpose, a distributed heterogeneous system education digital identity authentication method based on blockchain is proposed, which includes the following steps: Step 1: Pre-collect and store identity information sets and education system information sets using an asymmetric encryption algorithm; Step 2: Construct an identity standardization model based on the identity information set and the education system information set; Step 3: Based on the identity standardization model, use smart contracts to manage the identity data of registrants; Step 4: Use homomorphic encryption and differential privacy technology to share identity data across chains; Step 5: Use the homomorphic encryption decryption key and the asymmetric encryption algorithm private key for cross-chain verification; The identity information set is collected and stored in the following manner: When a student first registers an account on the educational institution platform, collect each student’s identity information and public key information; Extract the identity information of each registered teacher and the teacher's registered public key information directly from the internal system of the educational institution where the user has registered; The identity information set includes the identity information and public key information of each student, and the identity information and public key information of each registered teacher; Divide the identity information set into non-sensitive information and sensitive information according to data type; Use a distributed file system to store non-sensitive information; The sensitive information is encrypted using a public key, the encrypted sensitive information is used as sensitive information ciphertext, and the sensitive information ciphertext is stored in a distributed file system; The education system information set is collected and stored in the following manner: When registering on the blockchain network, each educational institution provides its education system information, and all education system information constitutes the education system information set; The education system information is collected and stored in the database of the blockchain network background; The method of constructing the identity standardization model based on the identity information set and the education system information set is: For each educational institution: Setting the participation agreement of the identity standardization model of the sensitive information ciphertext of the students enrolled in the educational institution as the participation agreement of the educational institution; Define a standardized identity model using participation protocols and build an identity registration and management system; Implement identity authentication mechanisms based on identity registration and management systems; The said participation protocols include a distributed identity standard and a verifiable credentials standard; The distributed identity standard selects the W3C distributed identity standard, and the DID is stored on the blockchain, including public key information and service endpoints; The Verifiable Credentials standard uses the W3C Verifiable Credentials standard to describe identity attributes. The VC is issued by an educational institution and is cryptographically signed to ensure the integrity and authenticity of the credential. The method of defining a standardized model of identity using the participation protocol is: Use participation protocols to define identifiers, credential content, and credential metadata for identity information; The method of constructing the identity registration and management system is: As the credential issuer, the educational institution generates and signs the DID and VC documents of students and registered teachers, and stores the hash values ​​of the DID and VC documents on the blockchain to ensure the immutability of the data; completes identity registration, The method of managing the identity data of registered personnel using smart contracts based on the identity standardization model includes the following steps: Step 31: Generate a unique DID and VC document for each student and each registered teacher using the identity standardization model; Step 32: Generate a content hash for the sensitive information ciphertext of each student and each registered teacher in the distributed file system using a hash algorithm; Step 33: Each educational institution calls the registration smart contract deployed on the blockchain, passing the user’s DID, the hash value of the VC document, and the content hash of the sensitive information ciphertext; Step 34: The smart contract records the DID and VC hash value on the blockchain and updates the smart contract status; The cross-chain data sharing of identity data using homomorphic encryption and differential privacy technology includes the following steps: Step 41: Select a homomorphic encryption algorithm to homomorphically encrypt the content hash of the sensitive information ciphertext of each student and each registered teacher in the distributed file system of each educational institution; Step 42: Before or during homomorphic encryption, select a differential privacy mechanism to add random noise to the sensitive information ciphertext; Step 43: Select a cross-chain technology framework and configure smart contracts or cross-chain bridges to support data transfer between different blockchain networks; Step 44: Send the homomorphically encrypted sensitive information ciphertext of each educational institution to the blockchain network through the cross-chain bridge; Step 45: Send the content hash of the sensitive information ciphertext of each educational institution to the target chain; The method of using the homomorphic encryption decryption key and the private key of the asymmetric encryption algorithm for cross-chain verification is: The blockchain network uses content hashing on the target blockchain to verify the integrity of the received sensitive information ciphertext; The authorized entity queries the content hash of the sensitive information ciphertext that needs to be accessed by executing the smart contract, traverses and uses the decryption key of the homomorphic encryption algorithm to decrypt the homomorphically encrypted content hashes of each item in the write record of the target blockchain, finds the hash value that is consistent with the content hash of the executed smart contract, and obtains the storage address in the distributed file system corresponding to the hash value; The sensitive information ciphertext read from the storage address in the distributed file system is used as the target sensitive information ciphertext; The authorized entity uses the asymmetric encrypted private key to decrypt the target sensitive information ciphertext.

[0008] An electronic device is proposed, comprising: a processor and a memory, wherein the memory stores a computer program that can be called by the processor; The processor executes the above-mentioned educational digital identity authentication method for a distributed heterogeneous system based on blockchain by calling the computer program stored in the memory.

[0009] A computer-readable storage medium is provided, on which a rewritable computer program is stored; When the computer program runs on a computer device, the computer device executes the above-mentioned educational digital identity authentication method based on a distributed heterogeneous system of blockchain.

[0010] Compared with the prior art, the present invention has the following beneficial effects: The present invention pre-collects and uses an asymmetric encryption algorithm to store identity information sets and education system information sets, builds an identity standardization model based on the identity information sets and the education system information sets, uses smart contracts to manage the identity data of registered personnel based on the identity standardization model, uses homomorphic encryption and differential privacy technology to share the identity data across chains, and uses the decryption key of homomorphic encryption and the private key of the asymmetric encryption algorithm for cross-chain verification; starting with the collection and encryption of user identity information, the identity standardization model is built and the identity data is managed by using smart contracts, and finally the secure sharing and verification of data is achieved by using the decryption key of homomorphic encryption and the private key of the asymmetric encryption algorithm. The whole process utilizes the decentralized characteristics of blockchain and double identity authentication to improve the security and transparency of student and teacher identity authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 This is a flow chart of an educational digital identity authentication method for a distributed heterogeneous system based on blockchain in Example 1 of the present invention; Figure 2This is a flowchart of managing the identity data of registered personnel in Example 1 of the present invention; Figure 3 This is a flowchart of cross-chain data sharing and verification of identity data in Example 1 of the present invention. DETAILED DESCRIPTION

[0012] The technical scheme of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0013] Example 1

[0014] like Figure 1 As shown, the educational digital identity authentication method of the distributed heterogeneous system based on blockchain includes the following steps: Step 1: Pre-collect and store identity information sets and education system information sets using an asymmetric encryption algorithm; Step 2: Construct an identity standardization model based on the identity information set and the education system information set; Step 3: Based on the identity standardization model, use smart contracts to manage the identity data of registrants; Step 4: Use homomorphic encryption and differential privacy technology to share identity data across chains; Step 5: Use the homomorphic encryption decryption key and the asymmetric encryption algorithm private key for cross-chain verification; The identity information set is collected and stored in the following manner: When a student first registers an account on the educational institution platform, collect each student’s identity information and public key information; Specifically, the student's identity information includes basic identity information such as the user's name, date of birth, gender, nationality, etc., contact information such as email address and phone number, educational background such as school name, major, degree, graduation year, and academic certificates such as academic qualifications and transcripts; The student's public key information is the public key of the asymmetric encryption algorithm automatically assigned to each student by the background of the educational institution platform when the student logs in for the first time. The public key is used for subsequent encryption and digital signature. The public key is saved by the educational institution platform and is publicly available information. The corresponding private key is generated together with the public key. The private key is saved by the student's client and is non-public information. The asymmetric encryption algorithm can be any one of the encryption algorithms such as RSA and elliptic encryption algorithm; Extract the identity information of each registered teacher and the teacher's registered public key information directly from the internal system of the educational institution where the user has registered; Specifically, the identity information of the registered teacher includes basic identity information such as nationality, name, date of birth and gender, contact information such as email address and telephone number, academic background such as degree obtained, professional field, and graduate school, professional qualification certification such as teacher qualification certificate number and issuing agency, past teaching experience including school name, teaching subjects, tenure time and other teaching experience, as well as professional development including seminars, training courses attended and relevant certificates obtained; The teacher's registered public key information can be directly obtained from the background database of the educational institution platform; The identity information set includes the identity information and public key information of each student, and the identity information and public key information of each registered teacher; Divide the identity information collection into non-sensitive information and sensitive information according to data type. For example, the student's name and gender are non-sensitive information, while the student's email address and phone number are sensitive information. Non-sensitive information is stored using a distributed file system. It is understandable that this distributed file system is suitable for storing public data or public information that does not involve privacy, such as the titles and abstracts of academic papers and research reports, or teachers' teaching and research results. The sensitive information is encrypted using a public key, the encrypted sensitive information is used as sensitive information ciphertext, and the sensitive information ciphertext is stored in a distributed file system; It is understandable that blockchain is not suitable for directly storing large files or large amounts of data, because each data write will affect the performance and storage efficiency of the chain, and storage by blockchain can make any modification of the original data detectable; therefore, what is saved on the blockchain is the hash value of the ciphertext of sensitive information, which is used for addressing in the distributed file system; Furthermore, the education system information set is collected and stored in the following manner: When registering on the blockchain network, each educational institution provides its education system information, and all education system information constitutes the education system information set; The education system information is collected and stored in the database of the blockchain network background; Specifically, the education system information includes the name, address, certification status and other institutional information of the education institution, including the technology stack, API interface, data format and other system configurations supported by the current system, including the blockchain node information such as the blockchain node address and configuration parameters of each institution, and the identity management protocol and standard participation protocol used by each institution; It should be noted that each educational institution is a node of the blockchain, and all educational institutions constitute a blockchain network. Each educational institution sets up a distributed file system to share students' non-sensitive information and encrypted sensitive information; Furthermore, the method of constructing the identity standardization model based on the identity information set and the education system information set is: For each educational institution: Setting the participation agreement of the identity standardization model of the sensitive information ciphertext of the students enrolled in the educational institution as the participation agreement of the educational institution; Define a standardized identity model using participation protocols and build an identity registration and management system; Implement identity authentication mechanisms based on identity registration and management systems; Specifically, the participation protocol may be a distributed identity standard and a verifiable credential standard; The distributed identity standard is the DID standard, which is to select the W3C distributed identity standard to ensure that the identity identifier is globally unique, and the DID is stored on the blockchain, including public key information and service endpoints; The Verifiable Credentials standard is the VC standard, which is the W3C Verifiable Credentials standard used to describe identity attributes. The VC is issued by an educational institution and is cryptographically signed to ensure the integrity and authenticity of the credential. The method of defining a standardized model of identity using the participation protocol is: Use participation protocols to define identifiers, credential content, and credential metadata for identity information; The identifier is, for example, did:123456789abcdefghi, to identify a user or entity; The credential content, such as name, education background, student ID, etc., is expressed in JSON-LD format and is used to define the core data of the user's identity; The credential metadata includes issuer information, issue date, expiration date, etc.; Furthermore, the method of constructing the identity registration and management system is: As the credential issuer, the educational institution generates and signs the DID and VC documents of students and registered teachers, and stores the hash values ​​of the DID and VC documents on the blockchain to ensure the immutability of the data; identity registration is completed.

[0015] Furthermore, the educational institution may also perform operations such as updating the user's VC or revoking the validity of a certain VC as needed; like Figure 2 As shown in the flowchart of managing the identity data of registrants, the use of smart contracts to manage the identity data of registrants based on the identity standardization model includes the following steps: Step 31: Generate a unique DID and VC document for each student and each registered teacher using the identity standardization model; Step 32: Generate a content hash for the sensitive information ciphertext of each student and each registered teacher in the distributed file system using a hash algorithm; Step 33: Each educational institution calls the registration smart contract deployed on the blockchain, passing the user’s DID, the hash value of the VC document, and the content hash of the sensitive information ciphertext; Step 34: The smart contract records the DID and VC hash value on the blockchain to ensure the integrity and immutability of the data; and updates the smart contract status; the smart contract status includes metadata such as registration time and issuer information; Understandably, smart contracts play a central role in the registration, verification, and management of identity data, ensuring the security, integrity, and efficiency of the system; like Figure 3 As shown in the flowchart of cross-chain data sharing and verification of identity data, the cross-chain data sharing of identity data using homomorphic encryption and differential privacy technology includes the following steps: Step 41: Select a homomorphic encryption algorithm to homomorphically encrypt the content hash of the sensitive information ciphertext of each student and each registered teacher in the distributed file system of each educational institution; the homomorphic encryption algorithm includes but is not limited to Paillier encryption or BFV encryption algorithms; It is understandable that the homomorphic encryption algorithm can perform calculations without decrypting the data. The result after calculation is still encrypted, and the correct calculation result can be obtained after decryption. Therefore, it is very convenient to use in distributed systems or cross-organizational data sharing scenarios. Even if the data needs to be transmitted and processed between different entities, homomorphic encryption can still maintain the privacy of the data; and homomorphic encryption of the hash value of the encrypted sensitive information ciphertext can achieve multiple encryption, that is, the asymmetric encryption algorithm protects the security of data in transmission and prevents the risk of unauthorized access or data leakage, while the homomorphic encryption algorithm protects the security of data during processing and storage, allowing data to be processed without decryption, thereby increasing the security of data access and processing; Step 42: Before or during homomorphic encryption, select a differential privacy mechanism to add random noise to the sensitive information ciphertext to ensure that it is difficult to infer the original input from the output, thereby achieving the goal of differential privacy and further protecting sensitive information; the differential privacy mechanism includes but is not limited to a Laplace noise mechanism or a Gaussian noise mechanism; Step 43: Select a cross-chain technology framework and configure smart contracts or cross-chain bridges to support data transmission between different blockchain networks; specifically, the cross-chain technology framework includes but is not limited to Polkadot, Cosmos, etc.; Step 44: Send the homomorphically encrypted sensitive information ciphertext of each educational institution to the blockchain network through the cross-chain bridge; Step 45: Send the content hash of the sensitive information ciphertext of each educational institution to the target chain; the target chain includes the main chain, side chain or private chain, etc. The specific choice is determined according to the actual needs of the educational institution; for example: if the system architecture determines that storage and verification are performed on the main chain, then the target chain is the main chain, and if it involves a consortium chain of multiple institutions, sensitive data may be processed and verified in the private chain instead of being disclosed on the main chain to protect privacy and improve efficiency; and the side chain is an independent blockchain attached to the main chain, with its own consensus mechanism and governance rules. Data can be verified and processed on the side chain; Furthermore, the method of using the homomorphic encryption decryption key and the asymmetric encryption algorithm private key for cross-chain verification is: The blockchain network uses content hashing on the target blockchain to verify the integrity of the received sensitive information ciphertext; The authorized entity queries the content hash of the sensitive information ciphertext that needs to be accessed by executing the smart contract, traverses and uses the decryption key of the homomorphic encryption algorithm, decrypts the content hash of each item in the write record of the target blockchain that has been homomorphically encrypted, finds the hash value that is consistent with the content hash of the executed smart contract, obtains the storage address in the distributed file system corresponding to the hash value, and realizes the rapid positioning of the sensitive information ciphertext in the distributed file system; the authorized entity is generally the student or registered teacher himself, and in some special cases, it can also be a person or institution authorized by the student or registered teacher; and the sensitive information ciphertext that needs to be accessed is generally the information of the student or registered teacher himself; It can be understood that decrypting the content hash using the decryption key of the homomorphic encryption algorithm is the first level of identity authentication. Only an authorized entity with the correct decryption key of the homomorphic encryption algorithm can successfully find the corresponding content hash, and thus further find the storage address of the content hash in the distributed file system; The sensitive information ciphertext read from the storage address in the distributed file system is used as the target sensitive information ciphertext; The authorized entity uses the asymmetric encrypted private key to decrypt the target sensitive information ciphertext; It can be understood that using the asymmetric encrypted private key to decrypt the target sensitive information ciphertext is the second level of identity authentication. Only when the asymmetric encrypted private key is the correct authorized entity can the target sensitive information ciphertext be successfully decrypted, thereby achieving the reading of the complete target sensitive information.

[0016] Example 2

[0017] The present application also provides an electronic device. The electronic device may include one or more processors and one or more memories. The memories store computer-readable codes, and when the computer-readable codes are executed by one or more processors, the educational digital identity authentication method based on the distributed heterogeneous system of blockchain as described above may be executed.

[0018] The electronic device may include a bus, one or more CPUs, ROM, RAM, a communication port connected to a network, an input / output component, a hard disk, etc. A storage device in the electronic device, such as a ROM or a hard disk, may store the educational digital identity authentication method of the distributed heterogeneous system based on blockchain provided in the present application.

[0019] Furthermore, the electronic device may also include a user interface. Of course, this architecture is only exemplary, and when implementing different devices, one or more components in the electronic device may be omitted according to actual needs.

[0020] Example 3

[0021] The present application also discloses a computer-readable storage medium, on which a rewritable computer program is stored; When the computer program is run on a computer device, the computer device executes the educational digital identity authentication method for a distributed heterogeneous system based on blockchain according to the embodiment of the present application described with reference to the above figures in the background. Computer-readable storage media include, but are not limited to, for example, volatile memory and / or non-volatile memory. Volatile memory may include, for example, random access memory (RAM) and cache memory (cache). Non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc.

[0022] In addition, according to the implementation of the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the present application provides a non-transitory machine-readable storage medium, the non-transitory machine-readable storage medium stores machine-readable instructions, the machine-readable instructions can be run by a processor to execute instructions corresponding to the method steps provided by the present application, and when the computer program is executed by a central processing unit (CPU), the above functions defined in the method of the present application are executed.

[0023] The methods, apparatuses, and devices of the present application may be implemented in many ways. For example, the methods, apparatuses, and devices of the present application may be implemented by software, hardware, firmware, or any combination of software, hardware, and firmware. The above order of steps for the method is for illustration only, and the steps of the method of the present application are not limited to the order specifically described above unless otherwise specified. In addition, in some embodiments, the present application may also be implemented as programs recorded in a recording medium, which include machine-readable instructions for implementing the method according to the present application. Therefore, the present application also covers recording media storing programs for executing the method according to the present application.

[0024] In addition, the parts of the above-mentioned technical solutions provided in the embodiments of the present application that are consistent with the implementation principles of the corresponding technical solutions in the prior art are not described in detail to avoid excessive redundancy.

[0025] The specific implementation modes as described above further describe the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation mode of the present invention and is not intended to limit the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

[0026] The above preset parameters or preset thresholds are all set by technicians in this field according to actual conditions or obtained through large-scale data simulation.

[0027] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. The educational digital identity authentication method of the distributed heterogeneous system based on blockchain is characterized by: The following steps are involved: Step 1: Pre-collect and store identity information sets and education system information sets using an asymmetric encryption algorithm; Step 2: Construct an identity standardization model based on the identity information set and the education system information set; Step 3: Based on the identity standardization model, use smart contracts to manage the identity data of registrants; Step 4: Use homomorphic encryption and differential privacy technology to share identity data across chains; Step 5: Use the homomorphic encryption decryption key and the asymmetric encryption algorithm private key for cross-chain verification; The method of constructing the identity standardization model based on the identity information set and the education system information set is: For each educational institution: Setting the participation agreement of the identity standardization model of the sensitive information ciphertext of the students enrolled in the educational institution as the participation agreement of the educational institution; Use participation agreements to define identity standardization models and build identity registration and management systems; implement identity authentication mechanisms based on identity registration and management systems.

2. The educational digital identity authentication method of a distributed heterogeneous system based on blockchain according to claim 1 is characterized in that: The identity information set is collected in the following manner: When a student first registers an account on the educational institution platform, collect each student’s identity information and public key information; Extract the identity information of each registered teacher and the teacher's registered public key information directly from the internal system of the educational institution where the user has registered; The identity information set includes the identity information of each student and the student's public key information, as well as the identity information of each registered teacher and the registered teacher's public key information.

3. The educational digital identity authentication method of a distributed heterogeneous system based on blockchain according to claim 2 is characterized in that: The storage method of the identity information set is: Divide the identity information set into non-sensitive information and sensitive information according to data type; Use a distributed file system to store non-sensitive information; The sensitive information is encrypted using a public key, the encrypted sensitive information is used as sensitive information ciphertext, and the sensitive information ciphertext is stored in a distributed file system.

4. The educational digital identity authentication method of a distributed heterogeneous system based on blockchain according to claim 3 is characterized in that: The education system information set is collected and stored in the following manner: When registering on the blockchain network, each educational institution provides its education system information, and all education system information constitutes the education system information set; The education system information collection is stored in the database of the blockchain network background.

5. The educational digital identity authentication method of a distributed heterogeneous system based on blockchain according to claim 4 is characterized in that: The said participation protocols include a distributed identity standard and a verifiable credentials standard; The distributed identity standard selects the W3C distributed identity standard, and the DID is stored on the blockchain, including public key information and service endpoints; The Verifiable Credentials standard uses the W3C Verifiable Credentials standard to describe identity attributes. The VC is issued by an educational institution and is cryptographically signed to ensure the integrity and authenticity of the credential.

6. The educational digital identity authentication method of a distributed heterogeneous system based on blockchain according to claim 5 is characterized in that: The method of defining a standardized model of identity using the participation protocol is: Use participation protocols to define identifiers, credential content, and credential metadata for identity information; The method of constructing the identity registration and management system is: As the credential issuer, the educational institution generates and signs the DID and VC documents of students and registered teachers, and stores the hash values ​​of the DID and VC documents on the blockchain to ensure the immutability of the data; identity registration is completed.

7. The educational digital identity authentication method of a distributed heterogeneous system based on blockchain according to claim 6 is characterized in that: The method of managing the identity data of registered personnel using smart contracts based on the identity standardization model includes the following steps: Step 31: Generate a unique DID and VC document for each student and each registered teacher using the identity standardization model; Step 32: Generate a content hash for the sensitive information ciphertext of each student and each registered teacher in the distributed file system using a hash algorithm; Step 33: Each educational institution calls the registration smart contract deployed on the blockchain, passing the user’s DID, the hash value of the VC document, and the content hash of the sensitive information ciphertext; Step 34: The smart contract records the DID and VC hash value on the blockchain and updates the smart contract status.

8. The educational digital identity authentication method of a distributed heterogeneous system based on blockchain according to claim 7 is characterized in that: The cross-chain data sharing of identity data using homomorphic encryption and differential privacy technology includes the following steps: Step 41: Select a homomorphic encryption algorithm to homomorphically encrypt the content hash of the sensitive information ciphertext of each student and each registered teacher in the distributed file system of each educational institution; Step 42: Before or during homomorphic encryption, select a differential privacy mechanism to add random noise to the sensitive information ciphertext; Step 43: Select a cross-chain technology framework and configure smart contracts or cross-chain bridges to support data transfer between different blockchain networks; Step 44: Send the homomorphically encrypted sensitive information ciphertext of each educational institution to the blockchain network through the cross-chain bridge; Step 45: Send the content hash of the sensitive information ciphertext of each educational institution to the target chain.

9. The educational digital identity authentication method of a distributed heterogeneous system based on blockchain according to claim 8 is characterized in that: The method of using the homomorphic encryption decryption key and the private key of the asymmetric encryption algorithm for cross-chain verification is: The blockchain network uses content hashing on the target blockchain to verify the integrity of the received sensitive information ciphertext; The authorized entity queries the content hash of the sensitive information ciphertext that needs to be accessed by executing the smart contract, traverses and uses the decryption key of the homomorphic encryption algorithm to decrypt the homomorphically encrypted content hashes of each item in the write record of the target blockchain, finds the hash value that is consistent with the content hash of the executed smart contract, and obtains the storage address in the distributed file system corresponding to the hash value; The sensitive information ciphertext read from the storage address in the distributed file system is used as the target sensitive information ciphertext; The authorized entity uses the asymmetric encrypted private key to decrypt the target sensitive information ciphertext.

10. An electronic device, characterized in that: include: A processor and a memory, wherein: The memory stores a computer program that can be called by the processor; The processor executes the educational digital identity authentication method for a distributed heterogeneous system based on blockchain as described in any one of claims 1 to 9 in the background by calling the computer program stored in the memory.

11. A computer-readable storage medium, characterized in that: A rewritable computer program is stored thereon; When the computer program runs on a computer device, the computer device executes the educational digital identity authentication method for a distributed heterogeneous system based on blockchain as described in any one of claims 1 to 9 in the background.

Images