Block chain-based information authentication method and related equipment

Abstract

The invention discloses an information authentication method based on a block chain and related equipment. The method comprises the following steps: sending a login request of a target block chain resource account to a first trusted party server; receiving first challenge information sent by the first trusted party server in response to the login request; sending the first challenge information to an authentication server, so that the authentication server performs signature processing on the first challenge information by using an object private key corresponding to a target block chain resource account stored in the block chain; receiving the signed first challenge information, and sending the signed first challenge information to a first trusted party server, so that the first trusted party server verifies the signed first challenge information by using a corresponding object public key to obtain a first verification result; and receiving a first verification result sent by the first trusted party server, and when the first verification result is that verification is passed, confirming that login succeeds, and outputting an application interface of the target block chain resource account. According to the method, the login efficiency can be improved, and the privacy of the object can be effectively protected.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology, and specifically to a blockchain-based information authentication method, a blockchain-based information authentication device, a computer device, a computer-readable storage medium, and a computer program product. Background Art

[0002] An electronic account is a virtual account based on the Internet and mobile communication technology, which can be used to store, transfer and manage electronic assets such as electronic money, electronic bills, and electronic securities. When registering and logging into an electronic account, the user's permission to use the account must be verified.

[0003] Currently, registration and login of electronic accounts are mostly completed through the user's username and password. This method makes it easy for users to forget their passwords, resulting in low login efficiency. In addition, during verification, the user's private information, such as biometric information, will be directly obtained, which may lead to the leakage of the user's information.

[0004] Therefore, how to improve the efficiency of user registration and login of electronic accounts and protect user privacy has become a technical problem that needs to be solved urgently. Summary of the invention

[0005] The embodiments of the present application provide a blockchain-based information authentication method and related equipment, which, by combining with blockchain technology, can improve login efficiency and effectively protect the privacy of the object.

[0006] On the one hand, an embodiment of the present application discloses a blockchain-based information authentication method, the method comprising:

[0007] In response to a login operation of the target blockchain resource account, sending a login request of the target blockchain resource account to the first trusted party server;

[0008] receiving first challenge information sent by the first trusted party server in response to the login request;

[0009] Sending the first challenge information to an authentication server, so that the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain to obtain the signed first challenge information;

[0010] Receiving the signed first challenge information sent by the authentication server, and sending the signed first challenge information to the first trusted party server, so that the first trusted party server verifies the signed first challenge information using the object public key corresponding to the target blockchain resource account to obtain a first verification result;

[0011] Receive the first verification result sent by the first trusted party server, and when the first verification result is verification passed, confirm that the login is successful, and output the application interface of the target blockchain resource account.

[0012] On the one hand, an embodiment of the present application discloses a blockchain-based information authentication method, the method comprising:

[0013] Receiving a login request of a target blockchain resource account sent by a terminal device in response to a login operation of the target blockchain resource account, and generating first challenge information according to the login request;

[0014] Sending the first challenge information to the terminal device, so that the terminal device sends the first challenge information to the authentication server for signature processing;

[0015] Receiving the signed first challenge information sent by the terminal device, where the signed first challenge information is sent to the terminal device after the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain;

[0016] The signed first challenge information is verified using the object public key corresponding to the target blockchain resource account to obtain a first verification result, and the first verification result is sent to the terminal device, so that when the first verification result is verification passed, the terminal device confirms that the login is successful and outputs the application interface of the target blockchain resource account.

[0017] The present application discloses, on the one hand, a blockchain-based information authentication device, which includes:

[0018] A sending unit, configured to send a login request of the target blockchain resource account to the first trusted party server in response to a login operation of the target blockchain resource account;

[0019] A receiving unit, configured to receive first challenge information sent by the first trusted party server in response to the login request;

[0020] The sending unit is further used to send the first challenge information to the authentication server, so that the authentication server uses the object private key corresponding to the target blockchain resource account stored in the blockchain to sign the first challenge information to obtain the signed first challenge information;

[0021] The receiving unit is further configured to receive the signed first challenge information sent by the authentication server, and send the signed first challenge information to the first trusted party server, so that the first trusted party server verifies the signed first challenge information using the object public key corresponding to the target blockchain resource account to obtain a first verification result;

[0022] The receiving unit is further used to receive the first verification result sent by the first trusted party server, and when the first verification result is verification passed, confirm that the login is successful and output the application interface of the target blockchain resource account.

[0023] The present application discloses, on the one hand, a blockchain-based information authentication device, which includes:

[0024] A receiving unit, configured to receive a login request of a target blockchain resource account sent by a terminal device in response to a login operation of the target blockchain resource account, and generate first challenge information according to the login request;

[0025] a sending unit, configured to send the first challenge information to the terminal device, so that the terminal device sends the first challenge information to an authentication server for signature processing;

[0026] The receiving unit is further used to receive the signed first challenge information sent by the terminal device, where the signed first challenge information is sent to the terminal device after the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain;

[0027] The processing unit is used to verify the signed first challenge information using the object public key corresponding to the target blockchain resource account, obtain a first verification result, and send the first verification result to the terminal device, so that when the first verification result is verification passed, the terminal device confirms that the login is successful and outputs the application interface of the target blockchain resource account.

[0028] On the one hand, an embodiment of the present application discloses a computer device, which includes a processor suitable for implementing one or more computer programs; and a computer-readable storage medium, wherein the computer-readable storage medium stores one or more computer programs, and the one or more computer programs are suitable for being loaded and executed by the processor in the above-mentioned blockchain-based information authentication method.

[0029] On the one hand, the implementation of the present application discloses a computer-readable storage medium, which stores one or more computer programs, and the one or more computer programs are suitable for being loaded by a processor and executing the above-mentioned blockchain-based information authentication method.

[0030] In one aspect, the present application discloses a computer program product, which includes a computer program stored in a computer-readable storage medium. A processor of a computer device reads the computer program from the computer-readable storage medium, and the processor executes the computer program, so that the computer device executes the above-mentioned blockchain-based information authentication method.

[0031] In the embodiment of the present application, in response to the login operation of the target blockchain resource account, a login request of the target blockchain resource account is sent to the first trusted party server; the first challenge information sent by the first trusted party server in response to the login request is received; the first challenge information is sent to the authentication server, so that the authentication server uses the object private key corresponding to the target blockchain resource account stored in the blockchain to sign the first challenge information and obtain the signed first challenge information. When signing, the object private key is obtained from the blockchain, which can ensure the accuracy of the private key, and there is no need to directly contact the privacy information (such as biometric information) of the object, so the privacy of the object can be protected; the first challenge information after the signature sent by the authentication server is received, and the first challenge information after the signature is sent to the first trusted party server, so that the first trusted party server uses the object public key corresponding to the target blockchain resource account to verify the signed first challenge information and obtain the first verification result; the first verification result sent by the first trusted party server is received, and when the first verification result is verified, the login is confirmed to be successful, and the application interface of the target blockchain resource account is output. In this process, the login request is verified based on the trusted party server, and during the verification process, verification is performed through the private key stored in the blockchain, which does not directly contact the privacy of the object and can protect the privacy of the object; the object is also not required to enter a password or other operations, which can improve login efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1A is a schematic diagram of a data sharing system disclosed in an embodiment of the present application;

[0034] Figure 1B It is a schematic diagram of a blockchain disclosed in an embodiment of the present application;

[0035] Figure 1C It is a schematic diagram of a process of generating a new block disclosed in an embodiment of the present application;

[0036] Figure 2 This is an architecture diagram of a blockchain-based information authentication system disclosed in an embodiment of the present application;

[0037] Figure 3 It is a flowchart of a blockchain-based information authentication method disclosed in an embodiment of the present application;

[0038] Figure 4 It is a flowchart of another information authentication method based on blockchain disclosed in an embodiment of the present application;

[0039] Figure 5 This is a schematic diagram of a registration process of a target blockchain resource account disclosed in an embodiment of the present application;

[0040] Figure 6 This is a schematic diagram of a login process of a target blockchain resource account disclosed in an embodiment of the present application;

[0041] Figure 7 It is a structural diagram of a blockchain-based information authentication device disclosed in an embodiment of the present application;

[0042] Figure 8 It is a schematic diagram of the structure of another information authentication device based on blockchain disclosed in an embodiment of the present application;

[0043] Fig. 9 It is a structural schematic diagram of a computer device disclosed in an embodiment of the present application. DETAILED DESCRIPTION

[0044] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0045] In order to more clearly understand the technical solution provided by the embodiments of the present application, some key terms involved in the embodiments of the present application are first introduced here:

[0046] 1. Blockchain

[0047] Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. It has the characteristics of decentralization, non-tamperability and traceability, and can realize the safe sharing and interaction of data.

[0048] See also Figure 1A The data sharing system shown, the data sharing system 100 refers to a system for sharing data between nodes, and the data sharing system may include multiple nodes 101, and the multiple nodes 101 may refer to each client in the data sharing system. Each node 101 can receive input information when performing normal work, and maintain the shared data in the data sharing system based on the received input information. In order to ensure the information intercommunication within the data sharing system, there may be an information connection between each node in the data sharing system, and information can be transmitted between nodes through the above information connection. For example, when any node in the data sharing system receives input information, other nodes in the data sharing system obtain the input information according to the consensus algorithm, and store the input information as data in the shared data, so that the data stored on all nodes in the data sharing system are consistent.

[0049] Each node in the data sharing system has a corresponding node identifier, and each node in the data sharing system can store the node identifiers of other nodes in the data sharing system, so that the generated blocks can be broadcast to other nodes in the data sharing system according to the node identifiers of other nodes. A node identifier list as shown in the following table can be maintained in each node, and the node name and node identifier are stored in the node identifier list accordingly. Among them, the node identifier can be an IP (Internet Protocol, a protocol for interconnecting networks) address and any other information that can be used to identify the node. Table 1 only takes the IP address as an example for illustration.

[0050] Table 1

[0051] Node Name Node ID Node 1 117.114.151.174 Node 2 117.116.189.145 … … Node N 119.123.789.258

[0052] Each node in the data sharing system stores the same blockchain. The blockchain consists of multiple blocks, see Figure 1BThe blockchain consists of multiple blocks. The genesis block includes a block header and a block body. The block header stores the input information characteristic value, version number, timestamp and difficulty value, and the block body stores the input information; the next block of the genesis block takes the genesis block as the parent block, and the next block also includes a block header and a block body. The block header stores the input information characteristic value of the current block, the block header characteristic value, version number, timestamp and difficulty value of the parent block, and so on, so that the block data stored in each block in the blockchain is associated with the block data stored in the parent block, ensuring the security of the input information in the block.

[0053] When generating each block in the blockchain, see Figure 1C When the node where the blockchain is located receives the input information, it verifies the input information. After the verification is completed, the input information is stored in the memory pool and the hash tree used to record the input information is updated. After that, the update timestamp is updated to the time when the input information is received, and different random numbers are tried to calculate the eigenvalue multiple times so that the calculated eigenvalue can satisfy the following formula:

[0054] SHA256(SHA256(version+prev_hash+merkle_root+ntime+nbits+x)) <TARGET

[0055] Among them, SHA256 is the eigenvalue algorithm used to calculate the eigenvalue; version (version number) is the version information of the relevant block protocol in the blockchain; prev_hash is the block header eigenvalue of the parent block of the current block; merkle_root is the eigenvalue of the input information; ntime is the update time of the update timestamp; nbits is the current difficulty, which is a fixed value within a period of time and is determined again after exceeding the fixed time period; x is a random number; TARGET is the eigenvalue threshold, which can be determined based on nbits.

[0056] In this way, when the random number that satisfies the above formula is calculated, the information can be stored accordingly, the block header and block body can be generated, and the current block can be obtained. Subsequently, the node where the blockchain is located sends the newly generated block to other nodes in the data sharing system according to the node identification of other nodes in the data sharing system. Other nodes verify the newly generated block and add the newly generated block to the blockchain stored in them after the verification is completed.

[0057] 2. Blockchain Resource Account

[0058] A blockchain resource account is a digital account based on blockchain technology that mainly provides digital asset management. It allows interactions and transactions on decentralized applications (DApps). Blockchain resource accounts can be used in the form of browser plug-ins or mobile applications, and they provide a more convenient and easy-to-use way to interact with DApps. Blockchain resource accounts allow users to manage digital assets and freely transfer digital assets between different blockchains by accessing supported blockchain networks. Blockchain resource accounts usually support multiple different types of digital assets, and users can use them to send and receive digital assets and trade. Blockchain resource accounts also provide secure authentication functions, allowing users to authenticate and authorize operations on DApps. For example, web3 resource accounts are used to store digital assets such as NFTs.

[0059] FIDO2

[0060] FIDO2 (an open authentication framework): passwordless authentication, open authentication standards, including the W3C Web Authentication Specification (WebAuthn) (web layer) Client to Authenticator Protocol (CTAP). Benefits of FIDO2: Improve usability and achieve strong account security. Among them, the WebAuthn protocol allows websites and applications to use public key cryptography for user authentication instead of relying on traditional usernames and passwords; the CTAP protocol provides a method for communicating with hardware authenticators (such as security keys or biometric devices) to ensure that the user's authentication process is safe and reliable.

[0061] There are two main components in fido2: client devices and fido servers. Client devices can be smartphones, computers, USB keys, and other devices that support the fido2 standard. It includes a supported browser and fido2 client, which is mainly used to generate key pairs. The Fido server contains the user's public key and authentication policy. When a user tries to log in or authenticate, the fido server will issue a challenge to the client device, requiring it to generate an encrypted response.

[0062] 4. Relying party

[0063] The trusted party (which can be understood as a third-party server) provides an interface that supports the FIDO2 standard protocol and supports user registration and identity authentication.

[0064] In combination with the above description, the embodiment of the present application provides an information authentication scheme based on blockchain, which applies the FIDO2 protocol to the blockchain asset account, and in combination with the provided trusted party server, can realize the rapid login of the object, while protecting the privacy of the object from being leaked. Taking the first object wanting to log in to the target blockchain resource account as an example, the scheme includes the following steps: ① In response to the login operation of the target blockchain resource account, send a login request of the target blockchain resource account to the first trusted party server. ② Receive the first challenge information sent by the first trusted party server in response to the login request. ③ Send the first challenge information to the authentication server, so that the authentication server uses the object private key corresponding to the target blockchain resource account stored in the blockchain to sign the first challenge information and obtain the signed first challenge information. When signing, the object private key is obtained from the blockchain, which can ensure the accuracy of the private key, and there is no need to directly contact the privacy information of the object, so the privacy of the object can be protected. ④ Receive the signed first challenge information sent by the authentication server, and send the signed first challenge information to the first trusted party server, so that the first trusted party server uses the object public key corresponding to the target blockchain resource account to verify the signed first challenge information and obtain the first verification result. ⑤ Receive the first verification result sent by the first trusted party server, and when the first verification result is verification passed, confirm that the login is successful, and output the application interface of the target blockchain resource account. During the object's login process, the login request is verified according to the trusted party server, and during the verification process, the verification is performed through the private key stored in the blockchain, which does not directly contact the privacy of the object, and can protect the privacy of the object; the object does not need to enter a password or other operations, which can improve the login efficiency.

[0065] See also Figure 2 , is a network architecture diagram of a blockchain-based information authentication system disclosed in an embodiment of the present application, and the information authentication system may include a terminal device 10, an authentication server 20, a trusted party server 30, and a blockchain network 40. Among them, there are multiple nodes 401 included in the blockchain network 40, and the nodes 401 in the blockchain network 40 can be terminals or servers. The terminal device 10, the authentication server 20, and the trusted party server 30 can all establish a communication connection with the node 401 of the blockchain network; a communication connection can be established between the terminal device 10 and the trusted party server 30; and a communication connection can be established between the terminal device 10 and the authentication server 30.

[0066] Among them, the terminal device 10 mentioned in the embodiment of the present application can be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, a car terminal, a smart TV, etc., but is not limited to this; the server mentioned in the embodiment of the present application (including the trusted party server 30 and the authentication server 20) can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network, content distribution network), and big data, etc. The embodiment of the present application does not limit this. The terminal device 10, the authentication server 20, the trusted party server 30 and the blockchain network 40 in the information authentication system are introduced below:

[0067] Terminal device 10: In the embodiment of the present application, the terminal device 10 is a terminal used by any object (ie, user) to register and log in a blockchain resource account. The terminal device 10 includes a registration interface and a login interface. Both interfaces can be displayed through a browser. The blockchain resource account can be registered through the registration interface object, and the blockchain resource account can be logged in and used through the login interface object. Specifically, the terminal device 10 is mainly used to perform the following steps: 1. In response to the registration operation of the target blockchain resource account, a registration request is generated. 2. In response to the login operation of the target blockchain resource account, a login request is generated. 3. Responsible for sending and receiving data, including sending a registration request and a login request to the trusted party server 30, receiving the first challenge information and the second challenge information sent by the trusted party server 30, sending the first challenge information and the second challenge information to the authentication server 20, receiving the first challenge information and the second challenge information sent by the authentication server 20, sending the first challenge information and the second challenge information after signing to the trusted party server 30, and receiving the first verification result and the second verification result sent by the trusted party server 30. 4. Output a notification message of successful registration to the object; 5. Output the application interface of the target blockchain resource account to the object.

[0068] Authentication server 20: Authentication server 20 can be a platform authenticator, such as a fingerprint authenticator on a mobile phone or laptop; it can also be a roaming authenticator, an authenticator connected via Bluetooth, NFC or USB, such as an authenticator similar to a USB shield or a dynamic token. Specifically, authentication server 20 is mainly used to perform the following steps: 1. Generate a corresponding key pair (including an object private key and an object public key) for an available trusted party server, and send the object private key to the blockchain. Figure 2As shown, the authentication server 20 stores a relationship table between a trusted party server and a key pair. It can be seen that when the trusted party server is different, the corresponding public key and private key are also different. For example, when the trusted party server is Example1.com, the corresponding private key is aaaa, and the corresponding public key is bbbb. 2. Sending and receiving data, including receiving the first challenge information and the second challenge information sent by the terminal device 10, and sending the signed first challenge information and the signed second challenge information to the terminal device 10. 3. Sign the first challenge information according to the generated object private key, and obtain the object private key from the blockchain to sign the first challenge information.

[0069] Trusted party server 30: The trusted party server 30 provides an interface that supports the FIDO2 protocol. Specifically, the trusted party server 30 is mainly used to perform the following steps: 1. Send and receive data, including receiving a registration request and a login request sent by the terminal device 10, receiving a signed first challenge message and a signed second challenge message sent by the terminal device 10, and sending a first verification result and a second verification result to the terminal device 10; 2. Generate a second challenge message according to the registration request, and generate a first challenge message according to the login request, wherein the essence of the challenge message is a random number; 3. Verify the signed first challenge message and the signed second challenge message; 4. Send the association relationship between the object information and the target blockchain resource account address to the node 401 of the blockchain network. A relationship table between an object identifier and a public key is stored in the trusted party server. When multiple objects trust the same trusted party server at the same time, the public key of the object can be determined by the object identifier.

[0070] Node 401 of blockchain network 40: The blockchain corresponding to the blockchain network stores the association relationship between the object information and the target blockchain resource account, that is, for different users, the blockchain resource accounts owned are stored in the blockchain. In the embodiment of the present application, the node 401 of the blockchain network is mainly used to perform the following steps: 1. Receive the object private key sent by the authentication server, and write the object private key into the blockchain; 2. Receive the association relationship between the object information of the first object and the target blockchain resource account address, and write it into the blockchain; 3. Receive the first verification result sent by the trusted party service 30, and send a notification to the terminal device 10 allowing the terminal device to log in to the target blockchain resource account.

[0071] The information authentication system is applicable to a variety of identity authentication scenarios, including but not limited to login scenarios, payment scenarios, registration scenarios, etc.

[0072] For example, if the first object has a target blockchain resource account, then in combination with the information authentication system, the process of the first object logging into the target blockchain resource account is as follows: the first object enters the login information through the login interface of the terminal device, and then submits the login information to the background of the terminal device, and then generates a login request according to the login information; the terminal device sends the login request to the first trusted party server (the first trusted party is determined from multiple trusted party servers); the first trusted party server generates a first challenge message according to the login request, and then sends the first challenge message to the terminal device; the terminal device sends the received first challenge message to the authentication server; the authentication server obtains the object private key of the first object from the blockchain to sign the first challenge message to obtain the signed first challenge message; the signed first challenge message is sent to the terminal device, and the terminal device sends the signed first challenge message to the first trusted party server; the first trusted party server verifies the signed first challenge message through the object public key, thereby determining whether the first object is allowed to log in to the target blockchain resource account. During the login process, the login verification is completed through the challenge message sent by the trusted party and the object private key stored in the blockchain. In this process, there is no need to directly contact the information of the first object, so the privacy information of the first object can be protected.

[0073] It should be noted that in this application, the relevant data involved in the blockchain-based information authentication method, such as the login request and registration request of the first object, etc. When the above embodiments of this application are applied to specific products or technologies, user permission or consent must be obtained, and the relevant data collection, use and processing processes must comply with relevant laws, regulations and standards, and comply with the principles of legality, legitimacy and necessity, and do not involve obtaining data types prohibited or restricted by laws and regulations. In some optional embodiments, the relevant data involved in the embodiments of this application are obtained after the object has been authorized separately. In addition, when obtaining the separate authorization of the object, the purpose of the relevant data involved is indicated to the object.

[0074] The blockchain-based information authentication method proposed in the embodiments of the present application will be introduced in detail below.

[0075] See also Figure 3 , is a flowchart of a blockchain-based information authentication method disclosed in an embodiment of the present application. The blockchain-based information authentication method can be executed by a terminal device, specifically, Figure 2 The terminal device 10 shown in the figure, the information authentication method based on blockchain may specifically include but is not limited to the following steps:

[0076] S301: In response to a login operation of a target blockchain resource account, a login request of the target blockchain resource account is sent to a first trusted party server.

[0077] The target blockchain resource account of each object includes two processes: registration and login. First, registration. After successful registration, you can log in and use it. The following is an explanation of the registration process, which includes the following steps:

[0078] 1. The terminal device responds to the registration operation of the target blockchain resource account and sends a registration request for the target blockchain resource account to the first trusted party server. The terminal device displays the registration interface of the blockchain resource account. After the first object enters its own registration information (such as basic information, including user name, fingerprint or face, etc.) in the registration interface, it reports this information to the terminal device, and the terminal device generates a registration request based on the registration information. Then, a list of available trusted party server addresses is obtained from the authentication server. If the first trusted party server is selected, the registration request is sent to the first trusted party server according to the address of the first trusted party server. The first trusted party server is any one in the trusted party server list, and can be customized. The trusted party server is a trustworthy object for the terminal device, and the object ID, password and other information can be assured to be informed to the trusted party server.

[0079] 2. The terminal device receives the second challenge information sent by the first trusted party server in response to the registration request. After receiving the registration request, the first trusted party server generates the second challenge information, a random number, based on the registration request, and then sends the second challenge information to the terminal device. The second challenge information carries the identifier of the object and the identifier of the first trusted party server.

[0080] 3. The terminal device sends a second challenge message to the authentication server, so that the authentication server generates an object private key and an object public key based on the first object after receiving the second challenge message, writes the object private key into the blockchain, and uses the object private key to sign the second challenge message to obtain the signed second challenge message. The key pair consisting of the object private key and the object public key corresponds to the first trusted party server. When there are multiple trusted party servers, there are multiple key pairs, and each key pair corresponds to a trusted party server. In this process, it is necessary to first confirm whether the authenticator exists. If it does not exist, it is necessary to provide an object to insert the corresponding authenticator before there will be a corresponding authentication server. Among them, the authentication server first generates a credential identifier representing the authenticator, and then generates the object private key and the object public key in combination with the credential identifier.

[0081] Among them, it should be noted that, during the registration process, the first trusted party server provides a pair of interfaces for registration: a registration challenge information acquisition interface and a registration response sending interface, which are respectively used by the terminal device to receive the second challenge information sent by the first trusted party server in response to the registration request by calling the registration challenge information acquisition interface, and by the terminal device to send the second challenge information to the authentication server by calling the registration response sending interface.

[0082] 4. The terminal device receives the signed second challenge information sent by the authentication server, and sends the signed second challenge information to the first trusted party server, so that the first trusted party server verifies the signed second challenge information using the object public key carried by the signed second challenge information, obtains the second verification result, and when the second verification result is verification passed, writes the association between the object information of the first object and the target blockchain resource account address into the blockchain. Among them, the use of the object public key to parse the signed second challenge information will also obtain a corresponding random number. If this random number is consistent with the random number generated by the first trusted party, it means that the verification is passed.

[0083] 5. The terminal device receives the second verification result sent by the first trusted party server, and when the second verification result is verification passed, confirms that the registration is successful, and outputs a notification message of successful registration. If successful, the first object can receive a notification message of "registration successful" on the registration interface.

[0084] After the target blockchain resource account of the first object is successfully registered, the next step is to log in and use it. When logging in and using it, the terminal device responds to the login operation of the target blockchain resource account and sends a login request for the target blockchain resource account to the first trusted party server. After the terminal device displays the login interface of the blockchain resource account, the first object enters his login information (including fingerprint and face information) in the login interface, and reports this information to the terminal device, and the terminal device generates a login request based on the login information. Then, a list of available trusted party server addresses is obtained from the authentication server. Since the first trusted party server selected during the registration process is also selected during login, the login request is sent to the first trusted party server according to the address of the first trusted party server. The same trusted party server is selected during the registration and login process.

[0085] S302: Receive first challenge information sent by the first trusted party server in response to a login request.

[0086] In a possible implementation, the terminal device receives the first challenge information sent by the first trusted party server in response to the login request by calling the login challenge information acquisition interface. When the first trusted party server receives the login request, it generates the first challenge information based on the login request, which is also a random number, and then sends the first challenge information to the terminal device through the login challenge information acquisition interface.

[0087] S303: Send the first challenge information to the authentication server, so that the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain to obtain the signed first challenge information.

[0088] In a possible implementation, the terminal device sends the first challenge information to the authentication server by calling the login response sending interface. After receiving the first challenge information, the authentication server obtains the object private key corresponding to the target blockchain resource account from the blockchain, and then uses the object private key to sign the first challenge information to obtain the signed first challenge information. Since there are multiple private keys stored in the blockchain, the private key is obtained according to the identification of the trusted party server, and the private keys corresponding to different trusted party servers are different.

[0089] Among them, step S302 and step S303 involve a pair of interfaces: a login challenge information acquisition interface and a login response sending interface, which are provided by the trusted party server to the terminal device during the login process, and realize the connection between the terminal device and the trusted party server.

[0090] S304: Receive the signed first challenge information sent by the authentication server, and send the signed first challenge information to the first trusted party server, so that the first trusted party server verifies the signed first challenge information using the object public key corresponding to the target blockchain resource account to obtain a first verification result.

[0091] The terminal device first receives the signed first challenge information, and then sends the signed first challenge information to the first trusted party server. The first trusted party server verifies the signed first challenge information using the object public key corresponding to the target blockchain resource account to obtain the first verification result. The object public key can be obtained directly from the first trusted party server or from the blockchain. The signed first challenge information is parsed using the object public key to obtain a corresponding random number. If this random number is consistent with the random number generated by the first trusted party, it means that the first verification is passed.

[0092] S305: Receive a first verification result sent by the first trusted party server, and when the first verification result is verification passed, confirm that the login is successful, and output the application interface of the target blockchain resource account.

[0093] After receiving the first verification result sent by the first trusted party server, the terminal device first confirms whether the first verification result is passed. If passed, the login is confirmed to be successful, and the application interface of the target blockchain resource account is output. If not, a prompt message indicating login failure is output.

[0094] In the embodiment of the present application, the terminal device is mainly used as the execution subject, and it is explained that in the registration and login process of the target blockchain resource account, the terminal device generates a registration request in response to the registration operation of the target blockchain resource account; generates a login request in response to the login operation of the target blockchain resource account; is responsible for sending and receiving data, including sending a registration request and a login request to a trusted party server, receiving a first challenge information and a second challenge information sent by a first trusted party server, sending the first challenge information and the second challenge information to an authentication server, receiving the signed first challenge information and the signed second challenge information sent by the authentication server, sending the signed first challenge information and the signed second challenge information to the first trusted party server, receiving the first verification result and the second verification result sent by the first trusted party server; outputting a notification message of successful registration to the object; and outputting an application interface of the target blockchain resource account to the object.

[0095] See also Figure 4 , is a flow chart of another information authentication method based on blockchain disclosed in an embodiment of the present application. The information authentication method based on blockchain can be executed by a first trusted party server, and specifically can be Figure 2 The trusted party server 30 shown in FIG. 1 , correspondingly, the information authentication method based on blockchain may specifically include but is not limited to the following steps:

[0096] S401: Receive a login request of a target blockchain resource account sent by a terminal device in response to a login operation of the target blockchain resource account, and generate first challenge information according to the login request.

[0097] The first trusted party server is mainly used to generate challenge information and provide verification strategies. In the registration phase, the first trusted party server receives the registration request of the target blockchain resource account sent by the terminal device in response to the registration operation of the target blockchain resource account, and generates the second challenge information based on the registration request; in the login phase, the first trusted party server receives the login request of the target blockchain resource account sent by the terminal device in response to the login operation of the target blockchain resource account, and generates the first challenge information based on the login request. Both the first challenge information and the second challenge information are random numbers, but they are in two stages, so the first challenge information and the second challenge information are different.

[0098] S402: Send the first challenge information to the terminal device, so that the terminal device sends the first challenge information to the authentication server for signature processing.

[0099] During the registration phase, the second challenge information also needs to be sent to the terminal device, so that the terminal device sends the second challenge information to the authentication server for signature processing.

[0100] S403: Receive the signed first challenge information sent by the terminal device, where the signed first challenge information is signed by the authentication server using the object private key corresponding to the target blockchain resource account stored in the blockchain and then sent to the terminal device.

[0101] During the registration phase, the first trusted party server receives the signed second challenge information sent by the terminal device. The signed second challenge information is sent to the terminal device after the authentication server signs the second challenge information using the object private key. The object private key is generated based on the first object after the authentication server receives the second challenge information.

[0102] S404: Use the object public key corresponding to the target blockchain resource account to verify the signed first challenge information, obtain a first verification result, and send the first verification result to the terminal device, so that when the first verification result is verification passed, the terminal device confirms that the login is successful and outputs the application interface of the target blockchain resource account.

[0103] During the login phase, in addition to sending the first verification result to the terminal device, the first verification result can also be sent to the node of the blockchain network when the first verification result is passed, so that the node of the blockchain network allows the terminal device to log in to the target blockchain resource account.

[0104] During the registration phase, the first trusted party server verifies the signed second challenge information using the object public key carried in the signed second challenge information, obtains a second verification result, and sends the second verification result to the terminal device, so that when the second verification result is a verification pass, the terminal device confirms that the registration is successful and outputs a notification message of successful registration. Similarly, when the second verification result is a verification pass, the association between the object information of the first object and the target blockchain resource account address can be sent to the node of the blockchain network, so that the node of the blockchain network writes the association between the object information of the first object and the target blockchain resource account address into the blockchain.

[0105] The embodiment of the present application mainly takes the first trusted party server as the execution entity, and explains how the first trusted party server generates the first challenge information and the second challenge information during the registration and login process of the target blockchain resource account, and how to verify the registration and login.

[0106] Combined with the above explanation, the following Figure 2 Taking the system shown as an example, the information authentication method based on blockchain provided by the embodiment of the present application is described in detail in an interactive form, that is, the interaction between the terminal device, the first trusted party server, the authentication server and the nodes of the blockchain network. The information authentication method based on blockchain includes the registration process and the login process of the target blockchain resource account. For the registration process, please refer to Figure 5 , including the following steps:

[0107] S501: The first object sends a registration operation for a target blockchain resource account on a registration interface to a terminal device.

[0108] S502: The terminal device generates a registration request in response to the registration operation of the target blockchain resource account.

[0109] S503: The terminal device sends a registration request to the first trusted party server.

[0110] S504: The first trusted party server generates second challenge information according to the registration request.

[0111] S505: The first trusted party server sends a second challenge message to the terminal device.

[0112] S506: The terminal device sends a second challenge message to the authentication server.

[0113] S507: The authentication server generates an object private key and an object public key, and uses the object private key to sign the second challenge information to obtain the signed second challenge information.

[0114] S508: Send the object private key to the node of the blockchain network.

[0115] S509: The authentication server sends the signed second challenge information to the terminal device.

[0116] S510: The terminal device sends the signed second challenge information to the first trusted party server.

[0117] S511: The first trusted party server verifies the signed second challenge information using the object public key carried in the signed second challenge information to obtain a second verification result.

[0118] S512: The first trusted party server sends a second verification result to the terminal device.

[0119] S513: When the second verification result is that the verification is passed, the registration is confirmed to be successful, and the terminal device outputs a notification message of successful registration.

[0120] Please refer to the login process Figure 6, including the following steps:

[0121] S601: The first object sends a login operation for a target blockchain resource account on a login interface to a terminal device.

[0122] S602: The terminal device generates a login request in response to the login operation of the target blockchain resource account.

[0123] S603: The terminal device sends a login request to the first trusted party server.

[0124] S604: The first trusted party server generates first challenge information according to the registration request.

[0125] S605: The first trusted party server sends a first challenge message to the terminal device.

[0126] S606: The terminal device sends a first challenge message to the authentication server.

[0127] S607: The authentication server obtains the object private key from the blockchain.

[0128] S608: The authentication server uses the object private key to sign the first challenge information to obtain the signed first challenge information.

[0129] S609: The authentication server sends the signed first challenge information to the terminal device.

[0130] S610: The terminal device sends a signed first challenge message to the first trusted party server.

[0131] S611: The first trusted party server verifies the signed first challenge information using the stored object public key to obtain a first verification result.

[0132] S612: The first trusted party server sends a first verification result to the terminal device.

[0133] S613: When the first verification result is verification passed, the login is confirmed to be successful, and the terminal device outputs the application interface of the target blockchain resource account.

[0134] S614: The first trusted party server sends the association relationship between the object information of the first object and the target blockchain resource account address to the node of the blockchain network.

[0135] Based on the above method embodiment, the present application embodiment also provides an information authentication device based on blockchain. Figure 7 , is a schematic diagram of the structure of a blockchain-based information authentication device provided in an embodiment of the present application, Figure 7 The information authentication device 700 shown can run the following units:

[0136] A sending unit 701 is used to send a login request of the target blockchain resource account to the first trusted party server in response to a login operation of the target blockchain resource account;

[0137] A receiving unit 702 is configured to receive first challenge information sent by the first trusted party server in response to the login request;

[0138] The sending unit 701 is further configured to send the first challenge information to the authentication server, so that the authentication server uses the object private key corresponding to the target blockchain resource account stored in the blockchain to sign the first challenge information to obtain the signed first challenge information;

[0139] The receiving unit 702 is further configured to receive the signed first challenge information sent by the authentication server, and send the signed first challenge information to the first trusted party server, so that the first trusted party server verifies the signed first challenge information using the object public key corresponding to the target blockchain resource account to obtain a first verification result;

[0140] The receiving unit 702 is also used to receive the first verification result sent by the first trusted party server, and when the first verification result is verification passed, confirm that the login is successful and output the application interface of the target blockchain resource account.

[0141] In a possible implementation, when the sending unit 701 sends a login request of the target blockchain resource account to the first trusted party server in response to the login operation of the target blockchain resource account, it is specifically used to perform the following steps:

[0142] In response to a login operation of the target blockchain resource account, obtaining a list of available trusted party server addresses from the authentication server;

[0143] Determining address information of a first trusted party server from the available trusted party server address list;

[0144] Send a login request for the target blockchain resource account to the first trusted party server according to the address information of the first trusted party server.

[0145] In a possible implementation, when the receiving unit 702 receives the first challenge information sent by the first trusted party server in response to the login request, it is specifically configured to perform the following steps:

[0146] Receive first challenge information sent by the first trusted party server in response to the login request by calling a login challenge information acquisition interface;

[0147] When the sending unit 701 sends the first challenge information to the authentication server, it is specifically used to perform the following steps:

[0148] The first challenge information is sent to the authentication server by calling the login response sending interface.

[0149] In a possible implementation, the sending unit 701 is further configured to send a registration request for the target blockchain resource account to the first trusted party server in response to a registration operation of the target blockchain resource account;

[0150] The receiving unit 702 is further configured to receive second challenge information sent by the first trusted party server in response to the registration request;

[0151] The sending unit 701 is further configured to send the second challenge information to the authentication server, so that the authentication server generates the object private key and the object public key based on the first object after receiving the second challenge information, writes the object private key into the blockchain, and uses the object private key to sign the second challenge information to obtain the signed second challenge information, and the key pair consisting of the object private key and the object public key has a corresponding relationship with the first trusted party server;

[0152] The receiving unit 702 is also used to receive the signed second challenge information sent by the authentication server, and send the signed second challenge information to the first trusted party server, so that the first trusted party server uses the object public key carried by the signed second challenge information to verify the signed second challenge information to obtain a second verification result, and when the second verification result is that the verification is passed, the association relationship between the object information of the first object and the target blockchain resource account address is written into the blockchain; receive the second verification result sent by the first trusted party server, and when the second verification result is that the verification is passed, confirm that the registration is successful, and output a notification message of successful registration.

[0153] It can be understood that the functions of each functional unit of the information authentication device provided in the embodiment of the present application can be specifically implemented according to the method in the above method embodiment, and its specific implementation process can refer to the relevant description in the above method embodiment, which will not be repeated here.

[0154] In a feasible embodiment, the information authentication device provided in the embodiment of the present application can be implemented in software. The information authentication device can be stored in a memory. It can be software in the form of programs and plug-ins, and includes a series of units, including a receiving unit and a sending unit; wherein the receiving unit and the sending unit are used to implement the information authentication method based on blockchain provided in the embodiment of the present application.

[0155] In other feasible embodiments, the information authentication device provided in the embodiments of the present application can also be implemented in a combination of software and hardware. As an example, the information authentication device provided in the embodiments of the present application can be a processor in the form of a hardware decoding processor, which is programmed to execute the blockchain-based information authentication method provided in the embodiments of the present application. For example, the processor in the form of a hardware decoding processor can adopt one or more application-specific integrated circuits (ASICs), DSPs, programmable logic devices (PLDs), complex programmable logic devices (CPLDs), field programmable gate arrays (FPGAs) or other electronic components.

[0156] Based on the description of the above method embodiment, the present application embodiment also proposes an information authentication device based on a blockchain network, see Figure 8 As shown, the data processing device 800 can run the following units:

[0157] A receiving unit 801 is used to receive a login request of a target blockchain resource account sent by a terminal device in response to a login operation of the target blockchain resource account, and generate first challenge information according to the login request;

[0158] A sending unit 802 is used to send the first challenge information to the terminal device, so that the terminal device sends the first challenge information to the authentication server for signature processing;

[0159] The receiving unit 801 is further used to receive the signed first challenge information sent by the terminal device, where the signed first challenge information is sent to the terminal device after the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain;

[0160] The processing unit 803 is used to verify the signed first challenge information using the object public key corresponding to the target blockchain resource account, obtain a first verification result, and send the first verification result to the terminal device, so that when the first verification result is verification passed, the terminal device confirms that the login is successful and outputs the application interface of the target blockchain resource account.

[0161] In a possible implementation, the sending unit 802 is further configured to perform the following steps:

[0162] If the first verification result is verification passed, the first verification result is sent to the node of the blockchain network, so that the node of the blockchain network allows the terminal device to log in to the target blockchain resource account.

[0163] In a possible implementation, the receiving unit 801 is further configured to receive a registration request for the target blockchain resource account sent by the terminal device in response to a registration operation of the target blockchain resource account, and generate second challenge information based on the registration request;

[0164] The sending unit 802 is further configured to send the second challenge information to the terminal device, so that the terminal device sends the second challenge information to the authentication server for signature processing;

[0165] The receiving unit 801 is further configured to receive the signed second challenge information sent by the terminal device, wherein the signed second challenge information is generated by the authentication server based on the first object after receiving the second challenge information, and the second challenge information is signed by the object private key and then sent to the terminal device;

[0166] The processing unit 803 is also used to verify the signed second challenge information using the object public key carried in the signed second challenge information, obtain a second verification result, and send the second verification result to the terminal device, so that when the second verification result is verification passed, the terminal device confirms that the registration is successful and outputs a notification message of successful registration.

[0167] In a possible implementation, the object public key carried in the signed second challenge information is used to verify the signed second challenge information, and the sending unit 802 is further configured to perform the following steps:

[0168] If the second verification result is verification passed, the association relationship between the object information of the first object and the target blockchain resource account address is sent to the node of the blockchain network, so that the node of the blockchain network writes the association relationship between the object information of the first object and the target blockchain resource account address into the blockchain.

[0169] It can be understood that the functions of each functional unit of the information authentication device provided in the embodiment of the present application can be specifically implemented according to the method in the above method embodiment, and its specific implementation process can refer to the relevant description in the above method embodiment, which will not be repeated here.

[0170] In a feasible embodiment, the information authentication device provided in the embodiment of the present application can be implemented in software. The information authentication device can be stored in a memory. It can be software in the form of programs and plug-ins, and includes a series of units, including a receiving unit, a sending unit, and a processing unit; wherein the receiving unit, the sending unit, and the processing unit are used to implement the blockchain-based information authentication method provided in the embodiment of the present application.

[0171] In other feasible embodiments, the information authentication device provided in the embodiments of the present application can also be implemented in a combination of software and hardware. As an example, the information authentication device provided in the embodiments of the present application can be a processor in the form of a hardware decoding processor, which is programmed to execute the blockchain-based information authentication method provided in the embodiments of the present application. For example, the processor in the form of a hardware decoding processor can adopt one or more application-specific integrated circuits (ASICs), DSPs, programmable logic devices (PLDs), complex programmable logic devices (CPLDs), field programmable gate arrays (FPGAs) or other electronic components.

[0172] Based on the description of the above method embodiment and the device embodiment, the present application embodiment also provides a computer device; the computer device can be the terminal device mentioned above, or the first trusted party server mentioned above. Fig. 9 The computer device may include at least a processor 901, an input interface 902, an output interface 903 and a computer-readable storage medium 904; wherein the processor 901, the input interface 902, the output interface 903 and the computer-readable storage medium 904 may be connected via a bus or other connection methods.

[0173] The computer-readable storage medium 904 may be stored in a memory of a computer device. The computer-readable storage medium 904 is used to store a computer program. The computer program includes computer instructions. The processor 901 is used to execute the program instructions stored in the computer-readable storage medium 904. The processor 901 (or CPU (Central Processing Unit)) is the computing core and control core of the computer device, which is suitable for implementing one or more computer instructions, and is specifically suitable for loading and executing one or more computer instructions to implement a corresponding method flow or a corresponding function.

[0174] The embodiment of the present application also provides a computer-readable storage medium (Memory), which is a memory device in a computer device for storing programs and data. It is understandable that the computer-readable storage medium here can include both built-in storage media in the computer device and, of course, extended storage media supported by the computer device. The computer-readable storage medium provides a storage space that stores the operating system of the computer device. In addition, one or more computer instructions suitable for being loaded and executed by the processor are also stored in the storage space. These computer instructions can be one or more computer programs (including program codes). It should be noted that the computer-readable storage medium here can be a high-speed RAM memory, or a non-volatile memory (Non-VolatileMemory), such as at least one disk storage; optionally, it can also be at least one computer-readable storage medium located away from the aforementioned processor.

[0175] In some embodiments, when the computer device is a terminal device, the processor 901 may load and execute one or more computer instructions stored in the computer-readable storage medium 904 to implement the above-mentioned Figure 3 , Figure 5 as well as Figure 6 In a specific implementation, the computer instructions in the computer-readable storage medium 904 are loaded by the processor 901 and execute the following steps:

[0176] In response to a login operation of the target blockchain resource account, sending a login request of the target blockchain resource account to the first trusted party server;

[0177] receiving first challenge information sent by the first trusted party server in response to the login request;

[0178] Sending the first challenge information to an authentication server, so that the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain to obtain the signed first challenge information;

[0179] Receiving the signed first challenge information sent by the authentication server, and sending the signed first challenge information to the first trusted party server, so that the first trusted party server verifies the signed first challenge information using the object public key corresponding to the target blockchain resource account to obtain a first verification result;

[0180] Receive the first verification result sent by the first trusted party server, and when the first verification result is verification passed, confirm that the login is successful, and output the application interface of the target blockchain resource account.

[0181] In one possible implementation, the computer instructions in the computer-readable storage medium 904 are loaded and executed by the processor 901 in response to the login operation of the target blockchain resource account, and when sending the login request of the target blockchain resource account to the first trusted party server, are specifically used to perform the following steps:

[0182] In response to a login operation of the target blockchain resource account, obtaining a list of available trusted party server addresses from the authentication server;

[0183] Determining address information of a first trusted party server from the available trusted party server address list;

[0184] Send a login request for the target blockchain resource account to the first trusted party server according to the address information of the first trusted party server.

[0185] In a possible implementation, the computer instructions in the computer-readable storage medium 904 are loaded and executed by the processor 901 to perform the following steps when receiving the first challenge information sent by the first trusted party server in response to the login request:

[0186] Receive first challenge information sent by the first trusted party server in response to the login request by calling a login challenge information acquisition interface;

[0187] When the computer instructions in the computer-readable storage medium 904 are loaded and executed by the processor 901 to send the first challenge information to the authentication server, they are specifically used to perform the following steps:

[0188] The first challenge information is sent to the authentication server by calling the login response sending interface.

[0189] In one possible implementation, the computer instructions in the computer-readable storage medium 904 are further used by the processor 901 to load and execute the following steps:

[0190] In response to the registration operation of the target blockchain resource account, sending a registration request for the target blockchain resource account to the first trusted party server;

[0191] Receiving second challenge information sent by the first trusted party server in response to the registration request;

[0192] Sending the second challenge information to the authentication server, so that the authentication server generates the object private key and the object public key based on the first object after receiving the second challenge information, writes the object private key into the blockchain, and uses the object private key to sign the second challenge information to obtain the signed second challenge information, and the key pair consisting of the object private key and the object public key has a corresponding relationship with the first trusted party server;

[0193] Receiving the signed second challenge information sent by the authentication server, and sending the signed second challenge information to the first trusted party server, so that the first trusted party server verifies the signed second challenge information using the object public key carried by the signed second challenge information to obtain a second verification result, and when the second verification result is verification passed, writing the association relationship between the object information of the first object and the target blockchain resource account address into the blockchain;

[0194] The second verification result sent by the first trusted party server is received, and when the second verification result is verification passed, the registration is confirmed to be successful, and a notification message of successful registration is output.

[0195] In some embodiments, when the computer device is a first trusted party server, the processor 901 may load and execute one or more computer instructions stored in the computer-readable storage medium 904 to implement the above-mentioned Figure 4 , Figure 5 as well as Figure 6 In a specific implementation, the computer instructions in the computer-readable storage medium 904 are loaded by the processor 901 and execute the following steps:

[0196] Receiving a login request of a target blockchain resource account sent by a terminal device in response to a login operation of the target blockchain resource account, and generating first challenge information according to the login request;

[0197] Sending the first challenge information to the terminal device, so that the terminal device sends the first challenge information to the authentication server for signature processing;

[0198] Receiving the signed first challenge information sent by the terminal device, where the signed first challenge information is sent to the terminal device after the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain;

[0199] The signed first challenge information is verified using the object public key corresponding to the target blockchain resource account to obtain a first verification result, and the first verification result is sent to the terminal device, so that when the first verification result is verification passed, the terminal device confirms that the login is successful and outputs the application interface of the target blockchain resource account.

[0200] In one possible implementation, the signed first challenge information is verified using the object public key corresponding to the target blockchain resource account. After obtaining the first verification result, the computer instructions in the computer-readable storage medium 904 are further used by the processor 901 to load and execute the following steps:

[0201] If the first verification result is verification passed, the first verification result is sent to the node of the blockchain network, so that the node of the blockchain network allows the terminal device to log in to the target blockchain resource account.

[0202] In one possible implementation, the computer instructions in the computer-readable storage medium 904 are further used by the processor 901 to load and execute the following steps:

[0203] Receiving a registration request for the target blockchain resource account sent by the terminal device in response to a registration operation of the target blockchain resource account, and generating second challenge information based on the registration request;

[0204] Sending the second challenge information to the terminal device, so that the terminal device sends the second challenge information to the authentication server for signature processing;

[0205] receiving a signed second challenge message sent by the terminal device, wherein the signed second challenge message is sent to the terminal device after the authentication server generates the object private key and the object public key based on the first object after receiving the second challenge message and signs the second challenge message using the object private key;

[0206] The signed second challenge information is verified using the object public key carried in the signed second challenge information to obtain a second verification result, and the second verification result is sent to the terminal device, so that when the second verification result is verification passed, the terminal device confirms that the registration is successful and outputs a notification message of successful registration.

[0207] In a possible implementation, the signed second challenge information is verified using the object public key carried by the signed second challenge information. After obtaining the second verification result, the computer instructions in the computer-readable storage medium 904 are further used by the processor 901 to load and execute the following steps:

[0208] If the second verification result is verification passed, the association relationship between the object information of the first object and the target blockchain resource account address is sent to the node of the blockchain network, so that the node of the blockchain network writes the association relationship between the object information of the first object and the target blockchain resource account address into the blockchain.

[0209] According to one aspect of the present application, a computer program product or a computer program is provided, the computer program product or the computer program including computer instructions, the computer instructions being stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the information authentication method based on blockchain provided in the above-mentioned various optional modes.

[0210] It should be noted that, for the above-mentioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the order of the actions described, because according to the present application, some steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0211] In the several embodiments provided in this application, it should be understood that the disclosed device can be implemented in other ways. For example, the device embodiments described above are only schematic, and the division of the modules described above is only a logical function division. There may be other division methods in actual implementation, such as multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed.

[0212] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A blockchain-based information authentication method, characterized in that: The method comprises: In response to a login operation of the target blockchain resource account, sending a login request of the target blockchain resource account to the first trusted party server; receiving first challenge information sent by the first trusted party server in response to the login request; Sending the first challenge information to an authentication server, so that the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain to obtain the signed first challenge information; Receiving the signed first challenge information sent by the authentication server, and sending the signed first challenge information to the first trusted party server, so that the first trusted party server verifies the signed first challenge information using the object public key corresponding to the target blockchain resource account to obtain a first verification result; Receive the first verification result sent by the first trusted party server, and when the first verification result is verification passed, confirm that the login is successful, and output the application interface of the target blockchain resource account.

2. The method according to claim 1, characterized in that The step of sending a login request of the target blockchain resource account to the first trusted party server in response to the login operation of the target blockchain resource account includes: In response to a login operation of the target blockchain resource account, obtaining a list of available trusted party server addresses from the authentication server; Determining address information of a first trusted party server from the available trusted party server address list; Send a login request for the target blockchain resource account to the first trusted party server according to the address information of the first trusted party server.

3. The method according to claim 1, characterized in that The receiving first challenge information sent by the first trusted party server in response to the login request includes: Receive first challenge information sent by the first trusted party server in response to the login request by calling a login challenge information acquisition interface; The sending the first challenge information to the authentication server includes: The first challenge information is sent to the authentication server by calling the login response sending interface.

4. The method according to claim 1, characterized in that: The method further comprises: In response to the registration operation of the target blockchain resource account, sending a registration request for the target blockchain resource account to the first trusted party server; receiving second challenge information sent by the first trusted party server in response to the registration request; Sending the second challenge information to the authentication server, so that the authentication server generates the object private key and the object public key based on the first object after receiving the second challenge information, writes the object private key into the blockchain, and uses the object private key to sign the second challenge information to obtain the signed second challenge information, and the key pair consisting of the object private key and the object public key has a corresponding relationship with the first trusted party server; Receiving the signed second challenge information sent by the authentication server, and sending the signed second challenge information to the first trusted party server, so that the first trusted party server verifies the signed second challenge information using the object public key carried by the signed second challenge information to obtain a second verification result, and when the second verification result is verification passed, writing the association relationship between the object information of the first object and the target blockchain resource account address into the blockchain; The second verification result sent by the first trusted party server is received, and when the second verification result is verification passed, the registration is confirmed to be successful, and a notification message of successful registration is output.

5. A blockchain-based information authentication method, characterized in that: The method comprises: Receiving a login request of a target blockchain resource account sent by a terminal device in response to a login operation of the target blockchain resource account, and generating first challenge information according to the login request; Sending the first challenge information to the terminal device, so that the terminal device sends the first challenge information to the authentication server for signature processing; Receiving the signed first challenge information sent by the terminal device, where the signed first challenge information is sent to the terminal device after the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain; The signed first challenge information is verified using the object public key corresponding to the target blockchain resource account to obtain a first verification result, and the first verification result is sent to the terminal device, so that when the first verification result is verification passed, the terminal device confirms that the login is successful and outputs the application interface of the target blockchain resource account.

6. The method according to claim 5, characterized in that After verifying the signed first challenge information using the object public key corresponding to the target blockchain resource account and obtaining the first verification result, the method further includes: If the first verification result is verification passed, the first verification result is sent to the node of the blockchain network, so that the node of the blockchain network allows the terminal device to log in to the target blockchain resource account.

7. The method according to claim 5, characterized in that The method further comprises: Receiving a registration request for the target blockchain resource account sent by the terminal device in response to a registration operation of the target blockchain resource account, and generating second challenge information based on the registration request; Sending the second challenge information to the terminal device, so that the terminal device sends the second challenge information to the authentication server for signature processing; receiving a signed second challenge message sent by the terminal device, wherein the signed second challenge message is sent to the terminal device after the authentication server generates the object private key and the object public key based on the first object after receiving the second challenge message and signs the second challenge message using the object private key; The signed second challenge information is verified using the object public key carried in the signed second challenge information to obtain a second verification result, and the second verification result is sent to the terminal device, so that when the second verification result is verification passed, the terminal device confirms that the registration is successful and outputs a notification message of successful registration.

8. The method according to claim 7, characterized in that After verifying the signed second challenge information by using the object public key carried in the signed second challenge information and obtaining a second verification result, the method further includes: If the second verification result is verification passed, the association relationship between the object information of the first object and the target blockchain resource account address is sent to the node of the blockchain network, so that the node of the blockchain network writes the association relationship between the object information of the first object and the target blockchain resource account address into the blockchain.

9. An information authentication device based on blockchain, characterized in that: The device comprises: A sending unit, configured to send a login request of the target blockchain resource account to the first trusted party server in response to a login operation of the target blockchain resource account; A receiving unit, configured to receive first challenge information sent by the first trusted party server in response to the login request; The sending unit is further used to send the first challenge information to the authentication server, so that the authentication server uses the object private key corresponding to the target blockchain resource account stored in the blockchain to sign the first challenge information to obtain the signed first challenge information; The receiving unit is further configured to receive the signed first challenge information sent by the authentication server, and send the signed first challenge information to the first trusted party server, so that the first trusted party server verifies the signed first challenge information using the object public key corresponding to the target blockchain resource account to obtain a first verification result; The receiving unit is further used to receive the first verification result sent by the first trusted party server, and when the first verification result is verification passed, confirm that the login is successful and output the application interface of the target blockchain resource account.

10. An information authentication device based on blockchain, characterized in that: The device comprises: A receiving unit, configured to receive a login request of a target blockchain resource account sent by a terminal device in response to a login operation of the target blockchain resource account, and generate first challenge information according to the login request; a sending unit, configured to send the first challenge information to the terminal device, so that the terminal device sends the first challenge information to an authentication server for signature processing; The receiving unit is further used to receive the signed first challenge information sent by the terminal device, where the signed first challenge information is sent to the terminal device after the authentication server signs the first challenge information using the object private key corresponding to the target blockchain resource account stored in the blockchain; The processing unit is used to verify the signed first challenge information using the object public key corresponding to the target blockchain resource account, obtain a first verification result, and send the first verification result to the terminal device, so that when the first verification result is verification passed, the terminal device confirms that the login is successful and outputs the application interface of the target blockchain resource account.

11. A computer device, characterized in that: The computer device comprises: a processor adapted to implement one or more computer programs; and, A computer-readable storage medium storing one or more computer programs, wherein the one or more computer programs are suitable for being loaded by the processor and executing the blockchain-based information authentication method as described in any one of claims 1-4 or 5-8.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores one or more computer programs, and the one or more computer programs are suitable for being loaded by a processor and executing the blockchain-based information authentication method as described in any one of claims 1-4 or 5-8.

13. A computer program product, characterized in that The computer program product includes a computer program, which is stored in a computer-readable storage medium. The processor of the computer device reads the computer program from the computer-readable storage medium, and the processor executes the computer program, so that the computer device executes the blockchain-based information authentication method as described in any one of claims 1-4 or 5-8.

Images