Digital identity identification method and system based on industrial internet, and medium

Abstract

The invention discloses a digital identity identification method and system based on an industrial internet and a medium, belongs to the technical field of industrial internet, and is used for solving the technical problems that an existing identity authentication system faces a centralized management bottleneck and is insufficient in safety and poor in privacy protection. The method comprises the following steps: performing identity registration in an identity registration module based on personal identity information to generate a digital identity label; storing the generated digital identity label and the corresponding personal identity information in a distributed storage module; performing authority control on the user according to the digital identity label; and based on the identity verification request, retrieving corresponding personal identity information in the distributed storage module, and performing identity authentication. A unique digital identity label is generated for each user, the uniqueness of the identity is ensured, the risk of false use of the identity is avoided, the data is stored on a plurality of distributed nodes, single-point faults and data tampering are avoided, and the safety and reliability of data storage are improved.

Description

Technical Field

[0001] The present invention relates to the field of industrial Internet technology, and in particular to a digital identity identification method, system and medium based on industrial Internet. Background Art

[0002] With the rapid development of the Industrial Internet, more and more devices and resources are connected to the network, forming a huge Internet of Things (IoT) ecosystem. In this ecosystem, the unique identification, positioning and management of devices and resources have become crucial. At the same time, with the advancement of digitalization and networking, new requirements have been put forward for the digital authentication and management of personal identities. However, the existing identity authentication and management systems have many shortcomings and challenges in the face of the complexity and high security requirements in the Industrial Internet environment.

[0003] Traditional identity authentication methods (such as username / password, SMS verification code, etc.) are easy to be cracked or misused, and there are great security risks. With the continuous escalation of network attack methods, a single identity authentication method is difficult to cope with complex security threats. And in large enterprises or organizations, it becomes very complicated to manage the identity information and permissions of a large number of users. The traditional centralized identity management system can easily become a bottleneck, resulting in reduced system performance and inefficient management. Traditional identity authentication systems usually rely on centralized databases to store user information. Once the database is attacked or leaked, the user's privacy information will face huge risks. Summary of the invention

[0004] The embodiments of the present invention provide a digital identity identification method, system and medium based on the industrial Internet, which are used to solve the following technical problems: the existing identity authentication system faces a centralized management bottleneck, and has insufficient security and poor privacy protection.

[0005] The embodiment of the present invention adopts the following technical solutions:

[0006] On the one hand, an embodiment of the present invention provides a digital identity identification method based on the industrial Internet, the method comprising: based on personal identity information, performing identity registration in an identity registration module to generate a digital identity identification;

[0007] Storing the generated digital identity and the corresponding personal identity information in a distributed storage module;

[0008] Performing authority control on the user according to the digital identity;

[0009] Based on the identity authentication request, the corresponding personal identity information is retrieved in the distributed storage module and identity authentication is performed.

[0010] In a feasible implementation, based on personal identity information, identity registration is performed in an identity registration module to generate a digital identity, specifically including:

[0011] Receive identity registration requests through the identity registration module and receive personal identity information uploaded by the user;

[0012] Based on the personal identity information, identity registration is performed in the identity registration module to generate a unique digital identity; wherein the digital identity at least includes a distributed identity DID.

[0013] In a feasible implementation manner, after performing identity registration in the identity registration module based on personal identity information and generating a digital identity, the method further includes:

[0014] Based on a preset encryption algorithm, the personal identity information uploaded by the user is encrypted, and a decryption key is sent to the user and the account authorized by the user, so that the user and the authorized account can decrypt and access the personal identity information through the decryption key.

[0015] In a feasible implementation, the generated digital identity and the corresponding personal identity information are stored in a distributed storage module, specifically including:

[0016] Based on distributed storage technology, multiple storage nodes are constructed to obtain a distributed storage module; data synchronization and collaboration are performed between storage nodes through network communication;

[0017] The generated digital identity and the encrypted personal identity information are stored in each node of the distributed storage module.

[0018] In a feasible implementation manner, the user's authority control is performed according to the digital identity, specifically including:

[0019] Different permission levels and access control policies are set and managed based on the user's digital identity DID so that users can only access data and resources that they are authorized to view or operate.

[0020] In a feasible implementation, based on the identity authentication request, the corresponding personal identity information is retrieved in the distributed storage module, and identity authentication is performed, specifically including:

[0021] Obtain several identity authentication requests and corresponding digital identity identifiers at the current moment;

[0022] Matching personal identity information in the distributed storage module according to the digital identity identifier corresponding to the identity authentication request;

[0023] If the personal identity information matched in the distributed storage module is consistent with the personal identity information in the identity authentication request, the identity authentication is successful and the authentication result is returned.

[0024] In a feasible implementation manner, after obtaining a plurality of identity authentication requests and corresponding digital identity identifiers at the current moment, the method further includes:

[0025] Through a load balancing algorithm, the plurality of identity authentication requests are distributed to different identity authentication nodes for authentication to avoid overloading of a single node; wherein the load balancing algorithm includes at least a polling algorithm and a minimum connection number algorithm.

[0026] In a feasible implementation, matching the personal identity information in the distributed storage module according to the digital identity identifier corresponding to the identity authentication request specifically includes:

[0027] The received digital identity identifier is parsed by the identity authentication node to obtain target identity information;

[0028] Based on the target identity information, information matching is performed in the distributed storage module to obtain corresponding personal identity information.

[0029] On the other hand, an embodiment of the present invention further provides a digital identity identification system based on the industrial Internet, the system comprising:

[0030] An identity registration module is used to register an identity based on personal identity information and generate a digital identity;

[0031] A distributed storage module, used to store the generated digital identity and the corresponding personal identity information;

[0032] A rights management module, used to control the rights of users according to the digital identity;

[0033] The identity authentication module is used to retrieve the corresponding personal identity information in the distributed storage module based on the identity authentication request and perform identity authentication.

[0034] Finally, an embodiment of the present invention also provides a storage medium, which is a non-volatile computer-readable storage medium, and the non-volatile computer-readable storage medium stores at least one program, each of which includes instructions, and when the instructions are executed by a terminal, the terminal executes the digital identity identification method based on the industrial Internet.

[0035] Compared with the prior art, the digital identity identification method, system and medium based on the industrial Internet provided by the embodiments of the present invention have the following beneficial effects:

[0036] 1. High security: Each user generates a unique digital identity DID, which ensures the uniqueness of the identity and avoids the risk of repeated registration and identity fraud. Advanced encryption algorithms (such as AES, RSA) are also used to encrypt user identity information to ensure the security and privacy of data during transmission and storage. Only authorized users can decrypt and access this information. Distributed storage technology is used to store data on multiple nodes, avoiding single point failures and data tampering, and improving the security and reliability of data storage.

[0037] 2. Efficiency: Through efficient parsing algorithms and optimized retrieval mechanisms, identity authentication requests can be responded to quickly. The optimization of parsing algorithms and the improvement of data structures have improved the retrieval speed and accuracy. A load balancing algorithm is also used to distribute identity authentication requests to different authentication nodes, balancing the system load and preventing a single node from being overloaded, thereby improving the system's processing capacity and response speed.

[0038] 3. Flexibility: The system is designed with future expansion needs in mind and adopts a modular design to facilitate the addition of new functions and expansion of system capacity. Through modular design, new functional modules can be easily added to meet changing needs. The system can flexibly set and manage different permission levels and access control policies based on the user's digital identity DID, ensuring that users can only access data and resources that they have permission to view or operate, meeting the needs of different application scenarios.

[0039] 4. Decentralization: Data is stored on multiple distributed nodes, avoiding the single point of failure and attack risks of centralized management. Distributed storage technology makes the system have no single point of failure, improving the reliability and security of the system. The entire system adopts a distributed architecture, and nodes synchronize and collaborate data through network communication to ensure the stable operation of the system under high concurrency. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0041] Figure 1 A flow chart of a digital identity identification method based on the industrial Internet provided by an embodiment of the present invention;

[0042] Figure 2 A schematic diagram of the structure of a digital identity identification system based on the Industrial Internet provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0043] In order to enable those skilled in the art to better understand the technical solutions in the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0044] Industrial Internet identity resolution technology is an emerging technology that aims to assign a unique identity to each industrial device and resource, and achieve efficient identity resolution and management through a distributed system. In the industrial Internet environment, higher requirements are placed on human digital identity authentication and management:

[0045] 1. High security: A more secure identity authentication method needs to be adopted to prevent identity fraud or theft and ensure the security of user identity information.

[0046] 2. Distributed management: In a distributed industrial Internet system, a distributed identity management method is needed to adapt to the decentralized characteristics of the system and avoid single points of failure and performance bottlenecks.

[0047] 3. Privacy protection: During the identity authentication and management process, the user's privacy information must be fully protected to ensure the security of user data during transmission and storage.

[0048] Based on the above requirements, the embodiment of the present invention provides a digital identity identification method based on the industrial Internet, such as Figure 1 As shown, the digital identity identification method based on the industrial Internet specifically includes steps S101-S104:

[0049] S101. Based on personal identity information, identity registration is performed in an identity registration module to generate a digital identity.

[0050] Specifically, an identity registration request is received through an identity registration module, and personal identity information uploaded by a user is received. Then, based on the personal identity information, identity registration is performed in the identity registration module to generate a unique digital identity, wherein the digital identity at least includes a distributed identity DID.

[0051] As a feasible implementation method, the identity registration module is used to receive and process registration requests for personal identity information, generate a unique digital identity identifier DID, and store the registration information in a distributed storage module.

[0052] Furthermore, after generating the digital identity, the security management module encrypts the personal identity information uploaded by the user based on a preset encryption algorithm, and sends the decryption key to the user and the account authorized by the user, so that the user and the authorized account can decrypt and access the personal identity information through the decryption key.

[0053] As a feasible implementation method, the security management module provides functions such as data encryption, identity authentication and access control to ensure the security of identity information. It uses advanced encryption algorithms such as AES algorithm and RSA algorithm to encrypt user personal identity information to ensure the security and privacy of data during transmission and storage. Only authorized users can decrypt and access this information.

[0054] S102: Store the generated digital identity and the corresponding personal identity information in a distributed storage module.

[0055] Specifically, based on distributed storage technology, multiple storage nodes are constructed to obtain a distributed storage module; data synchronization and collaboration are performed between the storage nodes through network communication.

[0056] Furthermore, the generated digital identity and the encrypted personal identity information are stored in each node of the distributed storage module.

[0057] As a feasible implementation method, the distributed storage module is based on distributed database technology. Using distributed storage technology, data is stored on multiple nodes, avoiding single point failure and data tampering, improving the security and reliability of data storage, and realizing the storage and management of identity information, ensuring high availability and consistency of data.

[0058] S103: Performing authority control on the user according to the digital identity.

[0059] Specifically, different permission levels and access control policies are set and managed based on the user's digital identity DID so that the user can only access data and resources that he or she has permission to view or operate.

[0060] As a feasible implementation method, the system can flexibly set and manage different permission levels and access control policies based on the user's digital identity (DID), ensuring that users can only access data and resources that they have permission to view or operate, meeting the needs of different application scenarios. The permission management module sets and manages different permission control policies based on the digital identity to ensure the security of resource access.

[0061] S104: Based on the identity authentication request, the corresponding personal identity information is retrieved in the distributed storage module, and identity authentication is performed.

[0062] Specifically, several identity authentication requests and corresponding digital identity identifiers at the current moment are obtained.

[0063] Furthermore, through a load balancing algorithm, the plurality of identity authentication requests are distributed to different identity authentication nodes for authentication to avoid overloading of a single node; wherein the load balancing algorithm includes at least a polling algorithm and a minimum connection number algorithm.

[0064] Furthermore, the personal identity information in the distributed storage module is matched according to the digital identity identifier corresponding to the identity authentication request; if the personal identity information matched in the distributed storage module is consistent with the personal identity information in the identity authentication request, the identity authentication is successful and the authentication result is returned.

[0065] As a feasible implementation method, matching the personal identity information in the distributed storage module according to the digital identity identifier corresponding to the identity authentication request specifically includes:

[0066] The received digital identity identifier is parsed through the identity authentication node to obtain target identity information; based on the target identity information, information matching is performed in the distributed storage module to obtain corresponding personal identity information.

[0067] As a feasible implementation method, based on the secure digital identity identification method provided by the present invention, the user identity registration process is as follows:

[0068] 1. The user submits personal identity information (such as name, ID number, phone number, etc.) to the identity registration module through the client.

[0069] 2. The identity registration module verifies the information and generates a unique digital identity DID.

[0070] 3. Store the generated DID and corresponding registration information in the distributed storage module.

[0071] 4. Return confirmation information of successful registration to the user client.

[0072] The identity authentication process is as follows:

[0073] 1. The user submits an identity authentication request to the identity authentication module through the client, including the digital identity identifier DID.

[0074] 2. The load balancing module performs load balancing on the requests and distributes the requests to a certain authentication node.

[0075] 3. The identity authentication module retrieves the corresponding identity information from the distributed storage module and performs verification.

[0076] 4. Return the authentication result to the user client.

[0077] The permission management process is as follows:

[0078] 1. Set different permission levels and access control policies based on the user’s digital identity DID.

[0079] 2. The permission management module controls user access requests according to preset policies to ensure the security of data and resources.

[0080] In addition, the embodiment of the present invention also provides a digital identity identification system based on the industrial Internet, such as Figure 2 As shown, the digital identity identification system 200 based on the industrial Internet specifically includes:

[0081] The identity registration module 210 is used to register an identity based on personal identity information and generate a digital identity;

[0082] Distributed storage module 220, used to store the generated digital identity and the corresponding personal identity information;

[0083] The authority management module 230 is used to control the authority of the user according to the digital identity;

[0084] The identity authentication module 240 is used to retrieve the corresponding personal identity information in the distributed storage module based on the identity authentication request and perform identity authentication.

[0085] Finally, an embodiment of the present invention further provides a storage medium, which is a non-volatile computer-readable storage medium, and the non-volatile computer-readable storage medium stores at least one program, each of which includes instructions, and when the instructions are executed by a terminal, the terminal executes:

[0086] Based on personal identity information, register in the identity registration module to generate a digital identity;

[0087] Storing the generated digital identity and the corresponding personal identity information in a distributed storage module;

[0088] Performing authority control on the user according to the digital identity;

[0089] Based on the identity authentication request, the corresponding personal identity information is retrieved in the distributed storage module and identity authentication is performed.

[0090] The key technical points of the present invention are as follows:

[0091] 1. Unique digital identity DID generation

[0092] Technical description: During the user registration process, a unique digital identity DID is generated through an algorithm to ensure that each user has a unique and tamper-proof identifier.

[0093] Technical advantages: The uniqueness and immutability of DID ensure the uniqueness and security of user identity, avoiding the risks of duplicate registration and identity fraud.

[0094] 2. Distributed Storage System

[0095] Technical description: Distributed database technology (such as blockchain and distributed file system) is used to store user identity information to ensure high availability and consistency of data.

[0096] Technical advantages: Distributed storage systems can avoid single points of failure, improve system reliability and fault tolerance, and ensure data consistency and security through distributed nodes.

[0097] 3. Encryption and decryption technology

[0098] Technical description: Encrypt the user's identity information (such as using AES, RSA and other encryption algorithms) to ensure the security of data during transmission and storage. Perform corresponding decryption operations during the identity authentication process.

[0099] Technical advantages: Encryption technology protects user identity information from being stolen or tampered with, ensuring the security and privacy of data during network transmission and storage.

[0100] 4. Identity authentication and resolution

[0101] Technical description: By parsing the DID submitted by the user, the corresponding identity information is retrieved from the distributed storage system, verified and compared, and the authentication result is returned.

[0102] Technical advantages: Efficient parsing algorithms and optimized retrieval mechanisms ensure the response speed and accuracy of identity authentication and improve user experience.

[0103] 5. Load balancing technology

[0104] Technical description: When receiving identity authentication requests, a load balancing algorithm (such as polling, minimum number of connections, etc.) is used to distribute the requests to different authentication nodes to balance the system load.

[0105] Technical advantages: Load balancing technology improves the system's processing capacity and response speed, avoids overloading of a single node, and ensures stable operation of the system under high concurrency conditions.

[0106] 6. Permission Management

[0107] Technical description: Different permission levels and access control policies are set and managed based on the user’s DID to ensure that users can only access data and resources that they have permission to view or operate.

[0108] Technical advantages: Refined permission management ensures the security of systems and data, prevents unauthorized access and operation, and protects user privacy and data security.

[0109] 7. Safety management mechanism

[0110] Technical description: including multi-level identity authentication (such as two-factor authentication, multi-factor authentication), data encryption, access control and other security measures.

[0111] Technical advantages: The comprehensive security management mechanism provides a full range of protection measures to ensure the security and reliability of system and user data.

[0112] 8. High Scalability

[0113] Technical description: The system is designed with future expansion needs in mind and adopts a modular design to facilitate adding new functions and expanding system capacity.

[0114] Technical advantages: High scalability ensures that the system can adapt to changing needs and the growing number of users, maintaining long-term stable operation of the system.

[0115] Specific application scenarios

[0116] ·Enterprise employee identity management: Enterprises use this system to authenticate employees and manage their rights, ensuring secure access to internal information and resources.

[0117] Medical and health field: Hospitals use this system to authenticate the identities of medical staff and patients to ensure the security and privacy of medical data.

[0118] Smart manufacturing: In smart factories, operators and equipment maintenance personnel are authenticated and their rights are managed to ensure the safety and efficiency of the production process.

[0119] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0120] Those skilled in the art will appreciate that the embodiments of this specification may be provided as methods, systems, or computer program products. Therefore, the embodiments of this specification may be in the form of complete hardware embodiments, complete software embodiments, or embodiments in combination with software and hardware. Moreover, the embodiments of this specification may be in the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0121] This specification is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of this specification. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0122] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0123] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0124] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0125] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0126] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0127] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0128] This specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. This specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0129] Each embodiment of the present invention is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device, equipment, and non-volatile computer storage medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0130] The above describes specific embodiments of the present invention. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or sequential order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0131] The above description is only an embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the embodiments of the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the embodiments of the present invention should be included in the protection scope of the present invention.

Claims

1. A digital identity identification method based on the industrial Internet, characterized in that: The method comprises: Based on personal identity information, register in the identity registration module to generate a digital identity; Storing the generated digital identity and the corresponding personal identity information in a distributed storage module; Performing authority control on the user according to the digital identity; Based on the identity authentication request, the corresponding personal identity information is retrieved in the distributed storage module and identity authentication is performed.

2. According to the digital identity identification method based on industrial Internet in claim 1, it is characterized in that: Based on personal identity information, identity registration is performed in the identity registration module to generate a digital identity, including: Receive identity registration requests through the identity registration module and receive personal identity information uploaded by the user; Based on the personal identity information, identity registration is performed in the identity registration module to generate a unique digital identity; wherein the digital identity at least includes a distributed identity DID.

3. According to the digital identity identification method based on industrial Internet in claim 1, it is characterized in that: After performing identity registration in the identity registration module based on the personal identity information and generating a digital identity, the method further includes: Based on a preset encryption algorithm, the personal identity information uploaded by the user is encrypted, and a decryption key is sent to the user and the account authorized by the user, so that the user and the authorized account can decrypt and access the personal identity information through the decryption key.

4. According to the digital identity identification method based on industrial Internet in claim 1, it is characterized in that: The generated digital identity and the corresponding personal identity information are stored in the distributed storage module, specifically including: Based on distributed storage technology, multiple storage nodes are constructed to obtain a distributed storage module; data synchronization and collaboration are performed between storage nodes through network communication; The generated digital identity and the encrypted personal identity information are stored in each node of the distributed storage module.

5. The digital identity identification method based on industrial Internet according to claim 1 is characterized in that: According to the digital identity, the user's authority is controlled, including: Different permission levels and access control policies are set and managed based on the user's digital identity DID so that users can only access data and resources that they are authorized to view or operate.

6. The digital identity identification method based on industrial Internet according to claim 1 is characterized in that: Based on the identity authentication request, the corresponding personal identity information is retrieved in the distributed storage module, and identity authentication is performed, specifically including: Obtain several identity authentication requests and corresponding digital identity identifiers at the current moment; Matching personal identity information in the distributed storage module according to the digital identity identifier corresponding to the identity authentication request; If the personal identity information matched in the distributed storage module is consistent with the personal identity information in the identity authentication request, the identity authentication is successful and the authentication result is returned.

7. A digital identity identification method based on industrial Internet according to claim 6, characterized in that: After obtaining a plurality of identity authentication requests and corresponding digital identity identifiers at the current moment, the method further includes: Through a load balancing algorithm, the plurality of identity authentication requests are distributed to different identity authentication nodes for authentication to avoid overloading of a single node; wherein the load balancing algorithm includes at least a polling algorithm and a minimum connection number algorithm.

8. The method for digital identification based on industrial Internet according to claim 7 is characterized in that: According to the digital identity identifier corresponding to the identity authentication request, matching the personal identity information in the distributed storage module specifically includes: The received digital identity identifier is parsed by the identity authentication node to obtain target identity information; Based on the target identity information, information matching is performed in the distributed storage module to obtain corresponding personal identity information.

9. A digital identity system based on the industrial Internet, characterized in that: The system comprises: An identity registration module is used to register an identity based on personal identity information and generate a digital identity; A distributed storage module, used to store the generated digital identity and the corresponding personal identity information; A rights management module, used to control the rights of users according to the digital identity; The identity authentication module is used to retrieve the corresponding personal identity information in the distributed storage module based on the identity authentication request and perform identity authentication.

10. A storage medium, characterized in that: The storage medium is a non-volatile computer-readable storage medium, which stores at least one program. Each of the programs includes instructions, and when the instructions are executed by the terminal, the terminal executes a digital identity identification method based on the industrial Internet according to any one of claims 1-8.

Images