Identity management method and device for cross-chain gateway

Abstract

The invention discloses an identity management method and device of a cross-chain gateway, and the method comprises the steps that the cross-chain gateway sends a registration request to at least two application chains, and receives identity labels replied by the at least two application chains; and then forming distributed digital identity information based on the identity labels corresponding to the at least two application chains, and sending the distributed digital identity information to a registration end for registration. And receiving verifiable certificates corresponding to the application chains fed back by the registration end, and storing the verifiable certificates. For a first application chain in the at least two application chains, the cross-chain gateway sends the verifiable credential corresponding to the second application chain to the first application chain, and the verifiable credential corresponding to the second application chain is used by the first application chain to perform identity verification on the cross-chain gateway during cross-chain transaction, thereby realizing management of the digital identity of the cross-chain gateway. And the security of the cross-chain transaction is improved.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to an identity management method and device for a cross-chain gateway. Background Art

[0002] With the development of blockchain technology, many different blockchain platforms have emerged. However, these blockchains are usually independent of each other. In order to enable transactions between different blockchains, cross-chain transactions have emerged.

[0003] Cross-chain transactions are usually based on the transmission of cross-chain messages through cross-chain gateways. Since the cross-chain gateway needs to connect to at least two application chains, it is necessary to register the corresponding digital identity in the blockchain corresponding to each application chain. However, from the perspective of the application chain, it is impossible to know whether the cross-chain gateway holds a legal identity in another application chain.

[0004] Therefore, how to manage the digital identity of the cross-chain gateway to improve the security of cross-chain transactions is an urgent problem that needs to be solved. Summary of the invention

[0005] The embodiments of the present invention provide a method and device for identity management of a cross-chain gateway, which are used to ensure that the cross-chain gateway can hold the legitimate identities of multiple application chains at the same time, and solve the problem of identity fraud that may be caused by inconsistent signature algorithms between multiple application chains, thereby improving the security of cross-chain transactions.

[0006] In a first aspect, an embodiment of the present invention provides an identity management method for a cross-chain gateway, comprising:

[0007] The cross-chain gateway sends a registration request to at least two application chains, and receives identity identifiers replied by the at least two application chains;

[0008] The cross-chain gateway forms distributed digital identity information based on the identity identifiers corresponding to the at least two application chains, and sends the distributed digital identity information to the registration terminal for registration;

[0009] The cross-chain gateway receives and stores the verifiable credentials corresponding to each application chain fed back by the registration end, wherein the verifiable credentials corresponding to each application chain are generated after the registration end verifies the identity identifier in the distributed digital identity information;

[0010] For the first application chain among the at least two application chains, the cross-chain gateway sends the verifiable credential corresponding to the second application chain to the first application chain, and the second application chain is the application chain other than the first application chain among the at least two application chains, and the verifiable credential corresponding to the second application chain is used by the first application chain to authenticate the cross-chain gateway during cross-chain transactions.

[0011] In an embodiment of the present invention, the cross-chain gateway needs to first register identity information in each application chain, and form distributed digital identity information based on the identity information, and send it to the registration end for registration. After receiving the distributed digital identity information, the registration end will query each application chain whether the identity information corresponding to each application chain in the distributed digital identity information is correct, and when the identity information corresponding to each application chain is correct, a verifiable credential will be generated for the identity information corresponding to each application chain. The verifiable credential can verify whether the corresponding identity information is correct. The verifiable credential corresponding to the second application chain is sent to the first application chain, so that when the first application chain wants to initiate a cross-chain transaction, it can verify the identity information in the cross-chain gateway according to the stored verifiable credential corresponding to the second application chain to determine that the cross-chain gateway holds the legal identity of the second application chain, so as to solve the problem of identity impersonation caused by inconsistent signature algorithms between multiple application chains and improve the security of cross-chain transactions.

[0012] Optionally, the registration request includes the application public key in the application key pair generated by the cross-chain gateway for each application chain.

[0013] Optionally, the method further includes:

[0014] The cross-chain gateway receives a cross-chain transaction request initiated by any application chain of the at least two application chains;

[0015] The cross-chain gateway generates a signature of the distributed digital identity information based on the application private key corresponding to the application chain, and sends the distributed digital identity information and the signature to the application chain for identity authentication by the application chain.

[0016] In an embodiment of the present invention, after receiving a cross-chain transaction request from any application chain, the cross-chain gateway generates a signature of the distributed digital identity information based on the application private key, and sends the signature and the distributed digital identity information to the application chain, so that the application chain can verify the identity of the cross-chain gateway in other application chains to determine that the cross-chain gateway holds the legal identity of other application chains.

[0017] In a second aspect, an embodiment of the present invention provides an identity management method for a cross-chain gateway, which is applied to at least two application chains and specifically includes:

[0018] For a first application chain among the at least two application chains, the first application chain receives a registration request initiated by the cross-chain gateway, and stores the application public key in the registration request;

[0019] The first application chain generates an identity and sends it to the cross-chain gateway;

[0020] The first application chain receives and stores the verifiable credential corresponding to the second application chain sent by the cross-chain gateway, where the second application chain is an application chain other than the first application chain among the at least two application chains, and the verifiable credential corresponding to the second application chain is generated after the registration end verifies the identity identifier corresponding to the second application chain in the distributed digital identity information.

[0021] In the embodiment of the present invention, after receiving the registration request, the first application chain generates an identity in response to the registration request and sends it to the cross-chain gateway. The cross-chain gateway also receives the verifiable credential corresponding to the second application chain, and verifies whether the cross-chain gateway holds the legal identity of the second application chain based on the verifiable credential corresponding to the second application chain, thereby improving the security of cross-chain transactions.

[0022] Optionally, the method further includes:

[0023] The first application chain sends a cross-chain transaction request to the cross-chain gateway;

[0024] The first application chain receives the distributed digital identity information and signature sent by the cross-chain gateway in response to the cross-chain transaction request;

[0025] The first application chain verifies the distributed digital identity information and the signature based on the application public key and the verifiable credential corresponding to the second application chain. If the verification is successful, the first application chain initiates a cross-chain transaction based on the cross-chain gateway.

[0026] In a third aspect, an embodiment of the present invention provides an identity management device for a cross-chain gateway, including:

[0027] An acquisition module, used to send a registration request to at least two application chains, and receive identity identifiers replied by the at least two application chains;

[0028] A processing module, configured to construct distributed digital identity information based on identity identifiers corresponding to the at least two application chains, and send the distributed digital identity information to a registration terminal for registration;

[0029] Receive and store the verifiable credentials corresponding to each application chain fed back by the registration end, wherein the verifiable credentials corresponding to each application chain are generated after the registration end verifies the identity identifier in the distributed digital identity information;

[0030] For the first application chain among the at least two application chains, the verifiable credential corresponding to the second application chain is sent to the first application chain, the second application chain is the application chain other than the first application chain among the at least two application chains, and the verifiable credential corresponding to the second application chain is used by the first application chain to authenticate the cross-chain gateway during cross-chain transactions.

[0031] Optionally, the registration request includes the application public key in the application key pair generated by the cross-chain gateway for each application chain.

[0032] Optionally, the processing module is further used for:

[0033] Receiving a cross-chain transaction request initiated by any application chain of the at least two application chains;

[0034] A signature of the distributed digital identity information is generated based on the application private key corresponding to the application chain, and the distributed digital identity information and the signature are sent to the application chain for identity authentication by the application chain.

[0035] In a fourth aspect, an embodiment of the present invention provides an identity management device for a cross-chain gateway, including:

[0036] An acquisition unit, used to receive a registration request initiated by a cross-chain gateway and store the application public key in the registration request;

[0037] A processing unit, used to generate an identity and send it to the cross-chain gateway;

[0038] Receive and store the verifiable credential corresponding to the second application chain sent by the cross-chain gateway, where the second application chain is the application chain other than the first application chain in the at least two application chains, and the verifiable credential corresponding to the second application chain is generated after the registration end verifies the identity identifier corresponding to the second application chain in the distributed digital identity information.

[0039] Optionally, the processing unit is further used for:

[0040] Sending a cross-chain transaction request to the cross-chain gateway;

[0041] Receiving the distributed digital identity information and signature sent by the cross-chain gateway in response to the cross-chain transaction request;

[0042] Based on the application public key and the verifiable credential corresponding to the second application chain, the distributed digital identity information and the signature are verified. If the verification passes, a cross-chain transaction is initiated based on the cross-chain gateway.

[0043] In a fifth aspect, an embodiment of the present invention further provides a computer device, including:

[0044] A memory for storing program instructions;

[0045] The processor is used to call the program instructions stored in the memory and execute the identity management method of the cross-chain gateway according to the obtained program.

[0046] In a sixth aspect, an embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute the above-mentioned identity management method of the cross-chain gateway.

[0047] In the seventh aspect, an embodiment of the present invention also provides a computer program product, which includes an executable program, and the executable program is executed by a processor to implement the above-mentioned identity management method for the cross-chain gateway. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0049] Figure 1 A schematic diagram of a system architecture provided by an embodiment of the present invention;

[0050] Figure 2 A schematic diagram of a flow chart of an identity management method for a cross-chain gateway provided in an embodiment of the present invention;

[0051] Figure 3 A schematic diagram of a flow chart of an identity management method for a cross-chain gateway provided in an embodiment of the present invention;

[0052] Figure 4 A schematic diagram of the structure of an identity management device for a cross-chain gateway provided by an embodiment of the present invention;

[0053] Figure 5 A schematic diagram of the structure of an identity management device for a cross-chain gateway provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0054] In order to make the purpose, technical scheme and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0055] The application scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions protected by the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application. It is known to those of ordinary skill in the art that with the emergence of new application scenarios, the technical solutions provided by the embodiments of the present application are also applicable to similar technical problems. The terms "first" and "second" in the specification and claims of this application and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In the description of the present application, unless otherwise specified, the meaning of "multiple" is two or more.

[0056] Before introducing an identity management method for a cross-chain gateway provided in an embodiment of the present application, in order to facilitate understanding, the following background technology and terms involved in the embodiment of the present application are first introduced.

[0057] Application chain: A blockchain dedicated to a specific application is called an application chain.

[0058] Distributed digital identity (DID): It is a new digital identity management model based on distributed ledger technology (such as blockchain), which aims to solve many problems in traditional centralized identity management systems, such as the incompatibility of identity systems between different institutions, and the inconvenience of users having to repeatedly register and authenticate when switching between different platforms and services. It uses distributed ledger technology and encryption technology to provide users with a more secure, private, and interoperable digital identity solution.

[0059] Verifiable Credentials (VC): Through technologies such as encryption algorithms and digital signatures, the validity and portability of physical credentials are transferred to digital devices, and the declared content, signature, and metadata can be digitally verified within seconds or even milliseconds.

[0060] With the development of blockchain technology, many different blockchain platforms have emerged, such as Bitcoin, Ethereum, Polkadot, etc. However, these blockchains are usually independent of each other, which brings some limitations: 1. Value islands: assets on different blockchains cannot be circulated directly, forming value islands. For example, assets on the Bitcoin network are difficult to use directly on the Ethereum network, which limits the liquidity and application scenarios of assets. 2. Data isolation: data on each blockchain is also isolated from each other, making it difficult to achieve cross-chain data sharing and interaction. This is an obstacle for applications that need to integrate multi-chain data. 3. Application restrictions: different blockchains may have different characteristics and advantages, and a single blockchain often cannot meet complex application requirements. At the same time, in the process of blockchain development, there are needs such as exchange and transaction needs between different blockchain digital currencies, and interactive needs for recording and managing data between different blockchain platforms that may be used in different links of the supply chain. Cross-chain technology was born in response to these similar cross-chain needs, aiming to achieve interconnection between different blockchains.

[0061] At present, the main commonly used cross-chain technologies include notary mechanism, hash locking, side chain / relay chain and other implementation methods. Most cross-chain technologies rely on cross-chain gateways to complete the transmission of cross-chain messages. Since the cross-chain gateway needs to connect to at least two application chains, it is necessary to register the corresponding digital identity in the two application chains, but from the perspective of the application chain, it is impossible to know whether the gateway holds a legal identity in another chain.

[0062] Figure 1 A system architecture applicable to an embodiment of the present invention is exemplarily shown, which includes a cross-chain gateway 110, a registration terminal 120, and an application chain 130, wherein the application chain 130 includes at least two application chains.

[0063] The cross-chain gateway 110 is used to send a registration request to at least two application chains in the application chain 130, and receive identity identifiers replied by at least two application chains in the application chain 130. Then, based on the identity identifiers corresponding to at least two application chains in the application chain 130, a distributed digital identity information is constructed, and the distributed digital identity information is sent to the registration terminal 120 for registration. The verifiable credentials corresponding to each application chain in at least two application chains fed back by the registration terminal 120 are received and stored. Finally, for the first application chain in at least two application chains, the verifiable credentials corresponding to the second application chain are sent to the first application chain in the application chain 130. Exemplarily, the verifiable credentials corresponding to the application chains other than application chain A in the application chain 130 are sent to application chain A in the application chain 130. It can be understood that the cross-chain gateway 110 includes application chain interfaces corresponding to each application chain, such as an application chain SDK.

[0064] The registration terminal 120 includes a DID registration module, a DID verification module, and a VC issuance program. The registration terminal 120 may be an identifier registration agency, which is not specifically limited here. The DID registration module is used to receive the distributed digital identity information sent by the cross-chain gateway 110 for registration. The DID verification module is used to verify whether the distributed digital identity information is valid, and call the verification interface of each application chain in at least two application chains in the application chain 130 to verify whether the identity in the distributed digital identity information is correct. It can be understood that verifying whether the identity in the distributed digital identity information is correct may be to verify whether the distributed digital identity information contains the identity issued by the corresponding application chain. The VC issuance program is used to generate a verifiable credential for the identity corresponding to each application chain in at least two application chains in the application chain 130 after the distributed digital identity information is verified, and send it to the cross-chain gateway 110.

[0065] Application chain 130, for any application chain of at least two application chains, the application chain includes a digital identity center and a smart contract center. The digital identity center has a registration interface and a verification interface. The digital identity center is used to generate an identity after receiving a registration request from the cross-chain gateway 110 based on the registration interface, and send it to the cross-chain gateway 110. The digital identity center is also used for the registration end 120 to call the verification interface to verify whether the identity in the distributed digital identity information is correct. The smart contract center is used to store the verifiable credentials of the application chain other than the application chain sent by the cross-chain gateway 110 after obtaining it.

[0066] It should be noted that the above Figure 1 The structure shown is only an example and is not limited to this embodiment of the present invention.

[0067] Based on the above description, Figure 2 The following is a flow chart of an identity management method for a cross-chain gateway provided by an embodiment of the present invention, which can be executed by an identity management device of the cross-chain gateway.

[0068] like Figure 2 As shown in the figure, the process specifically includes:

[0069] Step 210: The cross-chain gateway sends a registration request to at least two application chains, and receives identity identifiers replied by the at least two application chains.

[0070] In the technical solution of the present invention, before conducting cross-chain transactions, the cross-chain gateway needs to register identity information in each application chain, that is, obtain the legal identity of the cross-chain gateway in each application chain. The cross-chain gateway will send a registration request to at least two application chains that need to conduct cross-chain transactions.

[0071] In some embodiments, the registration request includes the application public key in the application key pair generated by the cross-chain gateway for each application chain. Since the signature algorithms of different application chains may be different, the cross-chain gateway needs to generate the application key pair corresponding to the signature algorithm of each application chain, and send the application public key in the application key pair to the corresponding application chain. The application private key in the application key pair is used by the cross-chain gateway to generate the signature of the distributed digital identity information. The application public key in the application key pair is used by the application chain to verify whether the distributed digital identity information is complete based on the signature.

[0072] Then, after receiving the registration request from the cross-chain gateway, each of the at least two application chains will store the application public key in the registration request, and then generate an identity and send it to the cross-chain gateway. The identity can be a digital identity, which is not specifically limited here.

[0073] Step 220: The cross-chain gateway constructs distributed digital identity information based on the identity identifiers corresponding to the at least two application chains, and sends the distributed digital identity information to the registration terminal for registration.

[0074] In the technical solution of the present invention, after receiving the corresponding identity identifiers sent by at least two application chains that need to conduct cross-chain transactions, the cross-chain gateway will form distributed digital identity information based on the identity identifiers corresponding to each application chain. Specifically, the cross-chain gateway adds the identity identifiers corresponding to each application chain to the distributed digital identity document to obtain the distributed digital identity information, and then sends the distributed digital identity information to the registration end for identity registration.

[0075] In step 230, the cross-chain gateway receives and stores the verifiable credentials corresponding to each application chain fed back by the registration end. The verifiable credentials corresponding to each application chain are generated after the registration end verifies the identity in the distributed digital identity information.

[0076] In an embodiment of the present invention, a verifiable credential is used to verify the identity identifier corresponding to it. The verifiable credential corresponding to each application chain is generated after the registration end verifies the identity identifier in the distributed digital identity information. Specifically, after receiving the distributed digital identity information, the registration end verifies whether the distributed digital identity information is valid, and then queries each application chain whether the identity identifier in the distributed digital identity information is correct. When each identity identifier in the distributed digital identity information is verified, the registration end generates a verifiable credential corresponding to the identity identifier of each application chain and sends it to the cross-chain gateway. After receiving the verifiable credentials corresponding to each application chain, the cross-chain gateway stores them.

[0077] Step 240: For the first application chain among the at least two application chains, the cross-chain gateway sends the verifiable credential corresponding to the second application chain to the first application chain, where the second application chain is the application chain other than the first application chain among the at least two application chains, and the verifiable credential corresponding to the second application chain is used by the first application chain to authenticate the cross-chain gateway during cross-chain transactions.

[0078] In an embodiment of the present invention, after receiving the verifiable credentials corresponding to each application chain, the cross-chain gateway sends the verifiable credentials corresponding to the second application chain to the first application chain in at least two application chains. Among them, the second application chain is the application chain other than the first application chain in the at least two application chains. Exemplarily, there are three application chains: application chain A, application chain B, and application chain C. After the cross-chain gateway receives the verifiable credentials corresponding to the three application chains respectively, the verifiable credentials corresponding to application chain B and application chain C are sent to application chain A; the verifiable credentials corresponding to application chain A and application chain C are sent to application chain B; the verifiable credentials corresponding to application chain A and application chain B are sent to application chain C.

[0079] The verifiable credentials corresponding to the second application chain are used by the first application chain to authenticate the cross-chain gateway during cross-chain transactions.

[0080] In one possible implementation, after the cross-chain gateway is registered in each application chain, cross-chain transactions can be performed. Specifically, the cross-chain gateway receives a cross-chain transaction request initiated by any application chain in at least two application chains. The cross-chain gateway generates a signature of the distributed digital identity information based on the application private key corresponding to the application chain, and sends the distributed digital identity information and signature to the application chain for identity authentication by the application chain. When the application chain passes the identity authentication of the cross-chain gateway, cross-chain transactions can be performed based on the cross-chain gateway.

[0081] In the embodiment of the present invention, a unified distributed digital identity management method is provided for application chains using different signature algorithms, a unique distributed digital identity is given to the cross-chain gateway, and the distributed digital identity can be verified at any time. At the same time, it avoids the security issues similar to middlemen that may exist due to the inability of two application chains to interact directly, and improves the security of cross-chain transactions.

[0082] Based on the above description, Figure 3 The following is a flow chart of an identity management method for a cross-chain gateway provided by an embodiment of the present invention, which can be executed by an identity management device of the cross-chain gateway.

[0083] like Figure 3 As shown in the figure, the process specifically includes:

[0084] Step 310: For the first application chain among the at least two application chains, the first application chain receives the registration request initiated by the cross-chain gateway and stores the application public key in the registration request.

[0085] In the embodiment of the present invention, for the first application chain of at least two application chains, when the cross-chain gateway performs identity registration, it will receive a registration request from the cross-chain gateway and store the application public key in the registration request. The application public key is used to verify the received distributed digital identity information and signature when the first application chain initiates a cross-chain transaction request.

[0086] Step 320: The first application chain generates an identity and sends it to the cross-chain gateway.

[0087] In the embodiment of the present invention, the identity generated by the first application chain may be a digital identity, and the specific content of the identity is not limited herein.

[0088] In step 330, the first application chain receives and stores the verifiable credential corresponding to the second application chain sent by the cross-chain gateway. The second application chain is the application chain other than the first application chain in the at least two application chains. The verifiable credential corresponding to the second application chain is generated after the registration end verifies the identity identifier corresponding to the second application chain in the distributed digital identity information.

[0089] In an embodiment of the present invention, after receiving the verifiable credential corresponding to the second application chain sent by the cross-chain gateway, the first application chain can initiate authentication before the cross-chain transaction.

[0090] In one possible implementation, when the first application chain needs to initiate a cross-chain transaction, it will send a cross-chain transaction request to the cross-chain gateway. Then, the distributed digital identity information and signature sent by the cross-chain gateway in response to the cross-chain transaction request are received. After that, the first application chain will verify the distributed digital identity information and signature based on the application public key and the verifiable credentials corresponding to the second application chain. Specifically, the first application chain verifies the integrity of the distributed digital identity information and signature based on the application public key. After the verification is passed, it verifies whether the identity identifier corresponding to the second application chain in the distributed digital identity information is correct based on the verifiable credentials corresponding to the second application chain. If the verification is passed, the first application chain can initiate a cross-chain transaction based on the cross-chain gateway.

[0091] Based on the same technical concept, Figure 4 The following is a schematic diagram of the structure of an identity management device for a cross-chain gateway provided in an embodiment of the present invention, which can execute the process of the identity management method for the cross-chain gateway.

[0092] like Figure 4 As shown, the device specifically includes:

[0093] The acquisition module 410 is used to send a registration request to at least two application chains and receive identity identifiers replied by the at least two application chains;

[0094] The processing module 420 is used to add the identity identifiers corresponding to the at least two application chains to the distributed digital identity information, and send the distributed digital identity information to the registration terminal for registration;

[0095] Receive and store the verifiable credentials corresponding to each application chain fed back by the registration end, wherein the verifiable credentials corresponding to each application chain are generated after the registration end verifies the identity identifier in the distributed digital identity information;

[0096] For the first application chain among the at least two application chains, the verifiable credential corresponding to the second application chain is sent to the first application chain, the second application chain is the application chain other than the first application chain among the at least two application chains, and the verifiable credential corresponding to the second application chain is used by the first application chain to authenticate the cross-chain gateway during cross-chain transactions.

[0097] Optionally, the registration request includes the application public key in the application key pair generated by the cross-chain gateway for each application chain.

[0098] Optionally, the processing module 420 is further configured to:

[0099] Receiving a cross-chain transaction request initiated by any application chain of the at least two application chains;

[0100] A signature of the distributed digital identity information is generated based on the application private key corresponding to the application chain, and the distributed digital identity information and the signature are sent to the application chain for identity authentication by the application chain.

[0101] Based on the same technical concept, Figure 5 The following is a schematic diagram of the structure of an identity management device for a cross-chain gateway provided in an embodiment of the present invention, which can execute the process of the identity management method for the cross-chain gateway.

[0102] like Figure 5 As shown, the device specifically includes:

[0103] The acquisition unit 510 is used to receive a registration request initiated by the cross-chain gateway and store the application public key in the registration request;

[0104] The processing unit 520 is used to generate an identity and send it to the cross-chain gateway;

[0105] Receive and store the verifiable credential corresponding to the second application chain sent by the cross-chain gateway, where the second application chain is the application chain other than the first application chain in the at least two application chains, and the verifiable credential corresponding to the second application chain is generated after the registration end verifies the identity identifier corresponding to the second application chain in the distributed digital identity information.

[0106] Optionally, the processing unit 520 is further configured to:

[0107] Sending a cross-chain transaction request to the cross-chain gateway;

[0108] Receiving the distributed digital identity information and signature sent by the cross-chain gateway in response to the cross-chain transaction request;

[0109] Based on the application public key and the verifiable credential corresponding to the second application chain, the distributed digital identity information and the signature are verified. If the verification passes, a cross-chain transaction is initiated based on the cross-chain gateway.

[0110] Based on the same technical concept, an embodiment of the present invention further provides a computer device, including:

[0111] A memory for storing program instructions;

[0112] The processor is used to call the program instructions stored in the memory and execute the identity management method of the cross-chain gateway according to the obtained program.

[0113] Based on the same technical concept, an embodiment of the present invention also provides a computer-readable storage medium, which stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute the identity management method of the above-mentioned cross-chain gateway.

[0114] Based on the same technical concept, an embodiment of the present invention also provides a computer program product, characterized in that the computer program product includes an executable program, and the executable program is executed by a processor to implement the identity management method of the cross-chain gateway.

[0115] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0116] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0117] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0118] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0119] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A method for identity management of a cross-chain gateway, characterized in that: include: The cross-chain gateway sends a registration request to at least two application chains, and receives identity identifiers replied by the at least two application chains; The cross-chain gateway forms distributed digital identity information based on the identity identifiers corresponding to the at least two application chains, and sends the distributed digital identity information to the registration terminal for registration; The cross-chain gateway receives and stores the verifiable credentials corresponding to each application chain fed back by the registration end, wherein the verifiable credentials corresponding to each application chain are generated after the registration end verifies the identity identifier in the distributed digital identity information; For the first application chain among the at least two application chains, the cross-chain gateway sends the verifiable credential corresponding to the second application chain to the first application chain, and the second application chain is the application chain other than the first application chain among the at least two application chains, and the verifiable credential corresponding to the second application chain is used by the first application chain to authenticate the cross-chain gateway during cross-chain transactions.

2. The method according to claim 1, characterized in that The registration request includes the application public key in the application key pair generated by the cross-chain gateway for each application chain.

3. The method according to any one of claims 1 to 2, characterized in that: The method further comprises: The cross-chain gateway receives a cross-chain transaction request initiated by any application chain of the at least two application chains; The cross-chain gateway generates a signature of the distributed digital identity information based on the application private key corresponding to the application chain, and sends the distributed digital identity information and the signature to the application chain for identity authentication by the application chain.

4. A cross-chain gateway identity management method, characterized in that: The method is applied to at least two application chains, including: For a first application chain among the at least two application chains, the first application chain receives a registration request initiated by the cross-chain gateway, and stores the application public key in the registration request; The first application chain generates an identity and sends it to the cross-chain gateway; The first application chain receives and stores the verifiable credential corresponding to the second application chain sent by the cross-chain gateway, where the second application chain is an application chain other than the first application chain among the at least two application chains, and the verifiable credential corresponding to the second application chain is generated after the registration end verifies the identity identifier corresponding to the second application chain in the distributed digital identity information.

5. The method according to claim 4, characterized in that The method further comprises: The first application chain sends a cross-chain transaction request to the cross-chain gateway; The first application chain receives the distributed digital identity information and signature sent by the cross-chain gateway in response to the cross-chain transaction request; The first application chain verifies the distributed digital identity information and the signature based on the application public key and the verifiable credential corresponding to the second application chain. If the verification is successful, the first application chain initiates a cross-chain transaction based on the cross-chain gateway.

6. An identity management device for a cross-chain gateway, characterized in that: include: An acquisition module, used to send a registration request to at least two application chains, and receive identity identifiers replied by the at least two application chains; A processing module, configured to construct distributed digital identity information based on identity identifiers corresponding to the at least two application chains, and send the distributed digital identity information to a registration terminal for registration; Receive and store the verifiable credentials corresponding to each application chain fed back by the registration end, wherein the verifiable credentials corresponding to each application chain are generated after the registration end verifies the identity identifier in the distributed digital identity information; For the first application chain among the at least two application chains, the verifiable credential corresponding to the second application chain is sent to the first application chain, the second application chain is the application chain other than the first application chain among the at least two application chains, and the verifiable credential corresponding to the second application chain is used by the first application chain to authenticate the cross-chain gateway during cross-chain transactions.

7. An identity management device for a cross-chain gateway, characterized in that: include: An acquisition unit, used to receive a registration request initiated by a cross-chain gateway and store the application public key in the registration request; A processing unit, used to generate an identity and send it to the cross-chain gateway; Receive and store the verifiable credential corresponding to the second application chain sent by the cross-chain gateway, where the second application chain is the application chain other than the first application chain in the at least two application chains, and the verifiable credential corresponding to the second application chain is generated after the registration end verifies the identity identifier corresponding to the second application chain in the distributed digital identity information.

8. A computer device, characterized in that: include: A memory for storing program instructions; A processor, configured to call the program instructions stored in the memory, and execute the method described in any one of claims 1 to 3, or any one of claims 4 to 5 according to the obtained program.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute the method described in any one of claims 1 to 3, or the method described in any one of claims 4 to 5.

10. A computer program product, characterized in that The computer program product comprises an executable program, which is executed by a processor to implement the method according to any one of claims 1 to 3, or any one of claims 4 to 5.

Images