Digital identity information sharing method, related equipment, medium and program product

Abstract

The invention discloses a digital identity information sharing method, related equipment, a medium and a program product, which are used for realizing the sharing security and reliability of digital identity information among different service platforms. The method comprises the steps that the terminal equipment responds to received identity sharing operation, a sharing request is sent to a gateway through an SIM card, and the identity sharing operation is used for indicating that first digital identity information in a first service platform is shared to a second service platform; the terminal equipment receives a shared voucher returned by the gateway through the SIM card, wherein the shared voucher is generated by the gateway based on card information of the SIM card and a ciphertext of the first digital identity information; and the terminal equipment provides the sharing credential for the second service platform, wherein the sharing credential is used for the second service platform to acquire the first digital identity information stored in the block chain network through the gateway.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method for sharing digital identity information, related equipment, media and program products. Background Art

[0002] With the development of Internet technology, more and more entities (such as individuals, organizations, objects, services, events, etc.) exist and operate in cyberspace, forming a variety of digital identity information. Digital identity information is the virtual representation of an entity in cyberspace, which contains the entity's identification, attributes, relationships, behaviors and other information, and is the basis for entities to interact and collaborate in cyberspace. When an entity is active on a business platform, it sometimes needs to provide the business platform with digital identity information of other business platforms.

[0003] The transition from Web1.0 to Web3.0 is a process from users only reading to users owning data assets. Web3.0 is a value Internet of "readable + writable + ownable". In Web3.0, users are both creators of digital content and owners of asset rights. In this scenario, how to share the digital identity information of users in one business platform with other business platforms has become a hot research direction. Summary of the invention

[0004] The purpose of the embodiments of the present application is to provide a method for sharing digital identity information, related equipment, media and program products, so as to achieve the security and reliability of sharing digital identity information between different business platforms.

[0005] In order to achieve the above objectives, the present application embodiment adopts the following technical solutions: In a first aspect, an embodiment of the present application provides a method for sharing digital identity information, which is applied to a terminal device, wherein the terminal device has a built-in SIM card, and the method comprises: in response to receiving an identity sharing operation, sending a sharing request to a gateway through the SIM card, wherein the identity sharing operation is used to indicate that the first digital identity information in the first business platform is shared with the second business platform; receiving a sharing credential returned by the gateway through the SIM card, wherein the sharing credential is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information; providing the sharing credential to the second business platform, wherein the sharing credential is used by the second business platform to obtain the first digital identity information stored in the blockchain network through the gateway.

[0006] In a second aspect, an embodiment of the present application provides a method for sharing digital identity information, which is applied to a gateway, and the method includes: in response to a sharing request sent by a SIM card of a terminal device, based on the card information of the SIM card and the ciphertext of the first digital identity information in the first business platform, generating a sharing credential and returning it to the SIM card, the sharing request being used to request that the first digital identity be shared with a second business platform, and the sharing credential being used by the terminal device to provide to the second business platform; upon receiving the sharing credential sent by the second business platform, obtaining the first digital identity information from the blockchain network based on the sharing credential; and returning the first digital identity information to the second business platform.

[0007] In a third aspect, an embodiment of the present application provides a device for sharing digital identity information, which is applied to a terminal device, and the device includes: a first response module, which is used to send a sharing request to a gateway through the SIM card in response to receiving an identity sharing operation, and the identity sharing operation is used to indicate that the first digital identity information in the first business platform is shared with the second business platform; a first receiving module, which is used to receive the sharing credential returned by the gateway through the SIM card, and the sharing credential is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information; a first processing module, which is used to provide the sharing credential to the second business platform, and the sharing credential is used by the second business platform to obtain the first digital identity information stored in the blockchain network through the gateway.

[0008] In a fourth aspect, an embodiment of the present application provides a device for sharing digital identity information, which is applied to a gateway, and the device includes: a second response module, which is used to respond to a sharing request sent by a SIM card of a terminal device, and generate a sharing credential based on the card information of the SIM card and the ciphertext of the first digital identity information in the first business platform, and return it to the SIM card, wherein the sharing request is used to request that the first digital identity be shared with a second business platform, and the sharing credential is used by the terminal device to provide to the second business platform; an acquisition module, which is used to obtain the first digital identity information from the blockchain network based on the sharing credential when the sharing credential sent by the second business platform is received; and a first sending module, which is used to return the first digital identity information to the second business platform.

[0009] In a fifth aspect, an embodiment of the present application provides a terminal device, comprising: a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to execute the instructions to implement a method for sharing digital identity information as provided in the first aspect.

[0010] In a sixth aspect, an embodiment of the present application provides a gateway, comprising: a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to execute the instructions to implement a method for sharing digital identity information as provided in the second aspect.

[0011] In the seventh aspect, an embodiment of the present application provides a computer-readable storage medium, which, when the instructions in the storage medium are executed by the processor of an electronic device, enables the electronic device to execute the method for sharing digital identity information as provided in the first aspect; or, when the instructions in the storage medium are executed by the processor of the electronic device, enables the electronic device to execute the method for sharing digital identity information as provided in the second aspect.

[0012] In an eighth aspect, an embodiment of the present application provides a computer program product, comprising a non-transitory computer-readable storage medium storing a computer program, wherein the computer program is operable to cause a computer to execute part or all of the steps in the method for sharing digital identity information as provided in the first aspect or the method for sharing digital identity information as provided in the second aspect.

[0013] At least one of the above technical solutions adopted in the embodiments of the present application can achieve the following beneficial effects: The gateway with high security and reliability sends the digital identity information in each business platform to the blockchain network for storage, and uses the decentralized and tamper-proof characteristics of the blockchain network to ensure the authenticity and credibility of the digital identity information in each business platform. On this basis, the gateway is used as a medium for sharing digital identity information between business platforms. When the terminal device receives the operation of sharing the first digital identity in the first business platform to the second business platform, it obtains the sharing certificate from the gateway through the SIM card and provides it to the second business platform. The second business platform obtains the first digital identity information from the gateway with the sharing certificate; since the sharing certificate is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information, the gateway can determine that the second business platform has the authority to share the first digital identity information based on the sharing certificate sent by the second business platform, and then obtains the first digital identity information from the blockchain network and returns it to the second business platform. In this way, there is no need for direct interaction between business platforms. Instead, the decentralized, authentic and reliable first digital identity information is obtained from the blockchain network through the gateway and shared among multiple business platforms, avoiding the risk of digital identity information being tampered with and leaked, as well as the adverse effects of such risks on business platforms that share digital identity information, and achieving the shared security and reliability of digital identity information between different business platforms. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings: Figure 1 A schematic diagram of an implementation environment of a method for sharing digital identity information provided in an embodiment of the present application; Figure 2 A schematic diagram of the interaction between a terminal device, a gateway, a service platform and a blockchain network provided for an embodiment of the present application Figure 3 A flowchart of a method for sharing digital identity information provided in one embodiment of the present application; Figure 4 A flowchart of a method for sharing digital identity information provided in another embodiment of the present application; Figure 5 A schematic diagram of signaling interaction between a terminal device and a gateway provided for an embodiment of the present application; Figure 6 A schematic diagram of signaling interaction between a terminal device and a gateway provided in another embodiment of the present application; Figure 7 A schematic diagram of the structure of a device for sharing digital identity information provided by an embodiment of the present application; Figure 8 A schematic diagram of the structure of a device for sharing digital identity information provided by an embodiment of the present application; Fig. 9 A schematic diagram of the structure of a terminal device provided for one embodiment of the present application; Fig.10 A schematic diagram of the structure of a gateway provided for one embodiment of the present application. DETAILED DESCRIPTION

[0015] In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the present application will be clearly and completely described below in combination with the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0016] The terms "first", "second", etc. in this specification and claims are used to distinguish similar objects, and are not used to describe a particular order or precedence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein. In addition, "and / or" in this specification and claims means at least one of the connected objects, and the character " / " generally means that the objects associated with each other are in an "or" relationship.

[0017] Traditional data sharing technology usually requires the business platform to call the interface services provided by other business platforms to obtain the digital identity information of entities on other business platforms. In this case, the business platform requesting the call can only unconditionally trust the authenticity of the data of the business platform being called. However, once the digital identity information of the business platform being called is tampered with or leaked, it will cause unpredictable risks and losses to the business platform requesting the call.

[0018] In view of this, the embodiment of the present application proposes a method for sharing digital identity information, in which a gateway with high security and reliability sends the digital identity information in each business platform to the blockchain network for storage, and utilizes the decentralized and tamper-proof characteristics of the blockchain network to ensure the authenticity and credibility of the digital identity information in each business platform. On this basis, the gateway is used as a medium for sharing digital identity information between business platforms. When the terminal device receives an operation to share the first digital identity in the first business platform with the second business platform, it obtains the sharing certificate from the gateway through the SIM card and provides it to the second business platform, and the second business platform obtains the first digital identity information from the gateway with the sharing certificate; since the sharing certificate is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information, the gateway can determine that the second business platform has the authority to share the first digital identity information based on the sharing certificate sent by the second business platform, and then obtains the first digital identity information from the blockchain network and returns it to the second business platform. In this way, there is no need for direct interaction between business platforms. Instead, the decentralized, authentic and reliable first digital identity information is obtained from the blockchain network through the gateway and shared among multiple business platforms, avoiding the risk of digital identity information being tampered with and leaked, as well as the adverse effects of such risks on business platforms that share digital identity information, and achieving the shared security and reliability of digital identity information between different business platforms.

[0019] The technical solutions provided by various embodiments of the present application are described in detail below in conjunction with the accompanying drawings.

[0020] In order to facilitate the understanding of the technical solution provided in the embodiment of the present application, firstly, Figure 1 , the implementation environment to which the technical solution provided in the embodiment of the present application is applicable is described. It should be understood that the technical solution provided in the embodiment of the present application is applied to Figure 1 The implementation environment shown is only an exemplary description and should not be understood as a limitation on the implementation environment to which the technical solution is applicable.

[0021] like Figure 1 As shown, an implementation environment applicable to the technical solution provided in an embodiment of the present application includes: a terminal device, a gateway, multiple business platforms and a blockchain network. Figure 1 Only the first business platform and the second business platform are used as an example.

[0022] The terminal device has a built-in SIM (Subscriber Identity Module) card. As an example, the SIM card can be a super SIM card, which is used to provide card application carriers, receive and execute instructions, send pop-up windows, store, and interact with gateways. Applications are deployed in the SIM card, and the functions of the SIM card can be realized through applications. The terminal device also has a built-in application client. The application client is used to provide a user operation entry, initiate the call of SIM card applications, perform identity authentication, etc.

[0023] The business platform provides diversified business services. The user of the terminal device has the corresponding digital identity information in the business platform, and the digital identity information can be used to access the corresponding resources in the business platform. The blockchain network mainly implements the underlying logic and smart contracts of the blockchain, and provides underlying functions such as data writing and query. Smart Contract is a protocol that automatically executes contracts through computer programs. Based on the decentralized, tamper-proof, and intelligent characteristics of blockchain, it converts the contract terms into executable code through programming languages, thereby realizing automated contract execution. In the embodiment of the present application, the smart contract can be used to generate a unique user ID, verify the legitimacy of the user ID, obtain the ciphertext of the digital identity information, decrypt the ciphertext of the digital identity information, generate logical processing such as operation evidence for each operation. The gateway has high security and reliability. It can interact with the blockchain network, various business platforms, and SIM cards to realize the sharing of digital identity information among multiple business platforms.

[0024] like Figure 2 As shown, when the application client receives the operation of applying for the digital identity information in the first service platform, it calls the SIM card to apply for the first digital identity information in the first service platform from the gateway. The gateway obtains the user's first digital identity information from the first service platform, sends the first digital identity information to the blockchain network, and the blockchain network executes the smart contract C1, encrypts and stores the first digital identity information using the private key, and returns the ciphertext of the first digital identity information to the gateway. The gateway sends the ciphertext of the first digital identity information to the SIM card for storage.

[0025] When the user applies to display the first digital identity information, the application client calls the SIM card to apply to the gateway for the public key for decrypting the ciphertext of the first digital identity information. After the gateway authenticates the SIM card, it obtains the public key from the blockchain network and returns it to the SIM card. The SIM card decrypts the first digital identity information and sends it to the application client for display. When the user selects the first digital identity information, the application client determines to share the first digital identity information with the second service platform, and then calls the SIM card to apply for a shared credential from the gateway. The gateway generates a corresponding shared credential based on the ciphertext of the first digital identity information and returns it to the SIM card, which is provided to the second service platform by the terminal device.

[0026] After obtaining the shared credentials, the second business platform sends the shared credentials to the gateway, which obtains the first digital identity information by calling the smart contract C2 of the blockchain network and sends it to the second business platform. In this way, the first digital identity information of the user in the first business platform is shared with the second business platform. In addition, each time the gateway accesses the blockchain network, it can also call the smart contract C3 of the blockchain network to generate the corresponding operation evidence and store it in the blockchain network for subsequent traceability and verification.

[0027] In this way, there is no need to rely on the interaction between various business platforms. Instead, the decentralized, authentic and reliable first digital identity information is obtained through the gateway and shared among multiple business platforms, avoiding the risk of digital identity information being tampered with and leaked, as well as the adverse effects of such risks on business platforms that share digital identity information, and achieving the shared security and reliability of digital identity information between different business platforms.

[0028] See also Figure 3 , is a flow chart of a method for sharing digital identity information provided by an embodiment of the present application, the method is applied to a terminal device, the terminal device has a built-in SIM card, and the method comprises the following steps: S302: In response to receiving the identity sharing operation, sending a sharing request from the gateway via the SIM card.

[0029] The identity sharing operation is used to request that the first digital identity information in the first service platform be shared with the second service platform. In the embodiment of the present application, the terminal device may receive the identity sharing operation in various ways, which is not limited in the embodiment of the present application. In actual applications, the terminal device may display information and receive the identity sharing operation through the built-in application client.

[0030] In one embodiment, the SIM card stores platform identifiers of multiple first service platforms. The terminal device displays the platform identifiers of multiple first service platforms. When receiving a selection operation for the platform identifier of at least one first service platform, the terminal device determines that an identity sharing operation is received, and determines the digital identity information in the selected first service platform as the first digital identity information.

[0031] In another embodiment, the SIM card stores ciphertexts of digital identity information in multiple first service platforms, and the ciphertexts of the digital identity information are obtained by the gateway from the blockchain network and sent to the SIM card for storage. When the terminal device receives a selection operation for the ciphertext of at least one digital identity information, it determines that an identity sharing operation has been received, and determines the digital identity information corresponding to the selected ciphertext as the first digital identity information.

[0032] In another embodiment, the SIM card stores the ciphertext of the digital identity information in multiple first service platforms, the ciphertext of the digital identity information is obtained by the gateway from the blockchain network and sent to the SIM card for storage, and the ciphertext of the digital identity information is obtained by encrypting the digital identity information based on the private key of the blockchain network. In response to receiving the identity display operation, the terminal device obtains the public key corresponding to the private key from the gateway through the SIM card, and the public key is obtained by the gateway from the blockchain network; after decrypting the ciphertext of the digital identity information in multiple first service platforms using the public key, the digital identity information in multiple first service platforms is displayed; when at least one digital identity information is selected, it is determined that the identity sharing operation is received, and the selected digital identity information is determined as the first digital identity information.

[0033] The identity display operation is used to request the display of digital identity information of a user of a terminal digital device in multiple first service platforms.

[0034] In the above implementation, the terminal device can obtain the public key from the gateway in the following manner. Specifically, in response to receiving the identity display operation, the terminal device sends a first authentication request to the gateway through the SIM card; based on the first authentication instruction received by the SIM card, the terminal device displays a first authentication window, the first authentication instruction is sent by the gateway in response to the first authentication request; receives first authentication information for authenticating the SIM card through the first authentication window, and sends the first authentication information to the gateway through the SIM card; receives the public key through the SIM card, the public key is sent by the gateway after the SIM card is authenticated based on the first authentication information.

[0035] For example, the first authentication information includes the identification code of the SIM card, etc. The first authentication window includes a text box for entering the identification code of the SIM card. The user enters the identification code of the SIM card, etc. through the text box, and the terminal device sends the identification code received through the text box to the gateway through the SIM card, and the gateway sends the identification code to the operator server for authentication and returns the authentication result to the gateway. If the authentication result indicates that the SIM card has passed the authentication, the gateway returns the public key to the SIM card for the SIM card to decrypt the ciphertext of the local digital identity information. In addition, when the gateway determines that the SIM card has passed the authentication, it also generates a corresponding first authentication serial number for the SIM card. The first authentication serial number is unique and valid this time, which is conducive to further improving the security of digital identity information shared between multiple business platforms.

[0036] For another example, the first authentication information includes a verification code received by the SIM card. The first authentication window includes a first text box for entering a mobile phone number and a second text box for entering a verification code. The user enters the mobile phone number of the SIM card through the first text box, and the terminal device sends the mobile phone number to the gateway through the SIM card. The gateway sends the mobile phone number to the operator server, and the operator server sends the verification code to the mobile phone number. After receiving the verification code, the user enters the verification code through the second text box, and the terminal device sends the verification code to the gateway through the SIM card. The gateway sends the verification code to the operator server for authentication and returns the authentication result. If the authentication result indicates that the SIM card has passed the authentication, the gateway returns the public key to the SIM card for the SIM card to decrypt the ciphertext of the local digital identity information. In addition, when the gateway determines that the SIM card has passed the authentication, it also generates a corresponding first authentication serial number for the SIM card. The first authentication serial number is unique and valid this time, which is conducive to further improving the security of sharing digital identity information between multiple business platforms.

[0037] In the above implementation, the first digital identity information includes field names and field values ​​of multiple attribute fields. The terminal device can choose to share the field values ​​of some or all attribute fields with the second service platform, thereby improving the flexibility of sharing digital identity information between multiple service platforms.

[0038] As an example, the sharing request carries the field name of the first attribute field in the first digital identity information, and the sharing request is used to request that the field value of the first attribute field be shared with the second business platform. In this case, after the terminal device determines the selected digital identity information as the first digital identity information, it also performs the following steps: displaying the field information of multiple attribute fields contained in the first digital identity information, the field information at least including the field name; in response to receiving the first selection operation, determining the selected attribute field as the first attribute field shared with the second business platform. Among them, the first selection operation refers to a selection operation on at least one attribute field, such as but not limited to clicking on at least one attribute field, long pressing at least one attribute field, etc.

[0039] For example, the first digital identity information includes field values ​​of multiple attribute fields such as account number, shopping record, delivery address, browsing record, etc. The terminal device displays these multiple attribute fields through the built-in application client for the user to select. If the application client receives the first selection operation for the two attribute fields of account number and shopping record, the two attribute fields are determined as the first attribute fields shared with the second service platform. Further, the application client calls the SIM card to send a sharing request carrying the field names of the two attribute fields to the gateway to request that the field values ​​of the two attribute fields be shared with the second service platform.

[0040] In the above implementation, the ciphertext of the digital identity information of multiple first service platforms is stored locally on the SIM card. Compared with each service platform storing the digital identity information of other service platforms, on the one hand, for the user of the terminal device, it can avoid the exposure of the digital identity information to many service platforms, reducing the risk of leakage of the digital identity information; on the other hand, for the service platform, it can avoid the uncontrollable authenticity of the digital identity information in other service platforms, which will have an adverse impact on its own business services. In addition, when the terminal device needs to display the digital identity information of the first service platform, it obtains the public key required for decryption from the gateway through the SIM card, decrypts the ciphertext of the digital identity information and displays it, so that the user can clearly know his digital identity information on different first service platforms, so as to better decide which (individual) digital identity information to share with the second service platform.

[0041] S304: Receive the shared credentials returned by the gateway through the SIM card.

[0042] The shared credential is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information. The ciphertext of the first digital identity information can be obtained by various appropriate methods, which are not limited in the embodiments of the present application. As an example, the ciphertext of the first digital identity information can be obtained by the gateway by encrypting the first digital identity information based on its own private key. As another example, the ciphertext of the first digital identity information is obtained by the gateway from the blockchain network. Of course, the ciphertext of the first digital identity information can also be obtained by encrypting the first digital identity information in other decentralized ways.

[0043] As an example, the shared credential can be obtained by splicing the card information of the SIM card, the ciphertext of the first digital identity information, and the platform identifier of the first service platform (for example, the number of the first service platform). Among them, the card information may include but is not limited to at least one of the following information: the ciphertext of the mobile phone number of the SIM card, the card identifier of the SIM card, and the first authentication serial number of the SIM card. Among them, the ciphertext of the mobile phone number of the SIM card and the card identifier of the SIM card are unique. The first authentication serial number is generated by the gateway after the SIM card is authenticated before receiving the sharing request, so the first authentication serial number is unique and the authentication is valid this time. By introducing at least one of the ciphertext of the mobile phone number, the card identifier, and the first authentication serial number in the shared credential, the legitimacy of sending the shared credential can be accurately identified, the risk of leakage of the first digital identity information can be reduced, and the security of sharing digital identity information between multiple service platforms can be further improved.

[0044] As another example, if the sharing request carries the field name of the first attribute field, the sharing credential is generated by the gateway based on the card information of the SIM card, the ciphertext of the first digital identity information, and the field name of the first attribute field. Specifically, the sharing credential can be obtained by concatenating the card information of the SIM card, the ciphertext of the first digital identity information, the platform identifier of the first service platform (for example, the number of the first service platform), and the field name of the first attribute field.

[0045] S306: Provide the shared credential to the second service platform.

[0046] The shared credential is used by the second business platform to obtain the first digital identity information stored in the blockchain network through the gateway. Since the shared credential is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information, the gateway can determine that the second business platform has the authority to share the first digital identity information based on the shared credential sent by the second business platform, and then obtain the first digital identity information from the blockchain network and return it to the second business platform.

[0047] In an embodiment of the present application, the terminal device may provide the shared credentials to the second business platform in various appropriate ways. In one embodiment, the terminal device may provide the shared credentials to the second business platform. In another embodiment, the terminal device generates a QR code image based on the shared credentials, so that the scanning device of the second business platform can obtain the shared credentials by scanning the QR code image and transmit it to the second business platform. In actual applications, the generation and display of the QR code image can be realized by the application client built into the terminal device.

[0048] The above describes some implementation methods of the above S306. Of course, it should be understood that the above S306 can also be implemented in other ways, which are not limited in the present embodiment.

[0049] In another embodiment, when the ciphertext of the first digital identity information is stored in the SIM card, before the above S302, the method for sharing the digital identity information provided in the embodiment of the present application may further include the following steps: Step A1, in response to receiving the identity generation operation, sending a second authentication request to the gateway through the SIM card. The identity generation operation is used to indicate the first digital identity information generated in the first service platform. In the embodiment of the present application, the terminal device can receive the identity generation operation in various ways, and the embodiment of the present application is not limited to this. In actual applications, the terminal device can display information and receive the identity generation operation through the built-in application client. For example, the terminal device displays the application interface of the first service platform, and when the identity generation option in the application interface is triggered, it is determined that the identity generation operation has been received.

[0050] Step A2, based on the second authentication instruction received by the SIM card, display the second authentication window. The second authentication instruction is sent by the gateway in response to the second authentication request. The specific implementation of the above step A2 is similar to the specific implementation of displaying the first authentication window based on the first authentication instruction above, and will not be repeated.

[0051] Step A3, receiving second authentication information for authenticating the SIM card through the second authentication window, and sending the second authentication information to the gateway through the SIM card. The specific implementation of the above step A3 is similar to the specific implementation of receiving the first authentication information and sending the first authentication information to the gateway through the SIM card, and will not be repeated.

[0052] Step A4, receiving the ciphertext of the first digital identity information through the SIM card. The ciphertext of the first digital identity information is the gateway requesting the first service platform to generate the first digital identity information after authenticating the SIM card based on the second authentication information, and sending the first digital identity information to the blockchain network for encryption and then returning. The specific implementation method of the gateway authenticating the SIM card based on the second authentication information is similar to the specific implementation method of the gateway authenticating the SIM card based on the first authentication information above, and will not be repeated.

[0053] In addition, when the gateway determines that the SIM card has passed the authentication, it also generates a corresponding second authentication serial number for the SIM card. The second authentication serial number is unique and valid this time, which is conducive to further improving the security of digital identity information shared between multiple business platforms.

[0054] In this embodiment, when the terminal device requests to generate the first digital identity information in the first service platform, the gateway first authenticates the SIM card of the terminal device. If the SIM card authentication is successful, the gateway requests the first service platform to generate the first digital identity information and returns it to the SIM card after encryption via the blockchain network. This can not only prevent the first digital identity information from being leaked, but also ensure the legitimacy of the terminal device and prevent the first digital identity information from being obtained by illegal persons.

[0055] One or more embodiments of the present application provide a method for sharing digital identity information. A gateway with high security and reliability sends the digital identity information in each business platform to the blockchain network for storage, and uses the decentralized and tamper-proof characteristics of the blockchain network to ensure the authenticity and credibility of the digital identity information in each business platform. On this basis, the gateway is used as a medium for sharing digital identity information between business platforms. When the terminal device receives an operation to share the first digital identity in the first business platform with the second business platform, it obtains the sharing certificate from the gateway through the SIM card and provides it to the second business platform. The second business platform obtains the first digital identity information from the gateway with the sharing certificate; since the sharing certificate is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information, the gateway can determine that the second business platform has the authority to share the first digital identity information based on the sharing certificate sent by the second business platform, and then obtains the first digital identity information from the blockchain network and returns it to the second business platform. In this way, there is no need for direct interaction between business platforms. Instead, the decentralized, authentic and reliable first digital identity information is obtained from the blockchain network through the gateway and shared among multiple business platforms, avoiding the risk of digital identity information being tampered with and leaked, as well as the adverse effects of such risks on business platforms that share digital identity information, and achieving the shared security and reliability of digital identity information between different business platforms.

[0056] Please refer to Figure 4, is a flow chart of a method for sharing digital identity information provided by another embodiment of the present application, the method is applied to a gateway, and the method includes the following steps: S402, in response to a sharing request sent by the SIM card of the terminal device, generating a sharing credential based on the card information of the SIM card and the ciphertext of the first digital identity information in the first service platform and returning the sharing credential to the SIM card.

[0057] The sharing request is used to request that the first digital identity be shared with the second business platform. The ciphertext of the first digital identity information can be obtained by various appropriate means, which is not limited in the embodiments of the present application. As an example, the ciphertext of the first digital identity information can be obtained by the gateway encrypting the first digital identity information based on its own private key. As another example, the ciphertext of the first digital identity information is obtained by the gateway from the blockchain network. Of course, the ciphertext of the first digital identity information can also be obtained by encrypting the first digital identity information in other decentralized ways. The shared credential is used by the terminal device to provide to the second business platform.

[0058] Among them, the card information may include but is not limited to at least one of the following information: the ciphertext of the mobile phone number of the SIM card, the card identification of the SIM card, and the first authentication serial number of the SIM card. Among them, the ciphertext of the mobile phone number of the SIM card and the card identification of the SIM card are unique. The first authentication serial number is generated by the gateway after the SIM card is authenticated after receiving the sharing request, so the first authentication serial number is unique and the authentication is valid. By introducing at least one of the ciphertext of the mobile phone number, the card identification, and the first authentication serial number in the shared credential, the legitimacy of sending the shared credential can be accurately identified, the risk of leakage of the first digital identity information can be reduced, and the security of sharing digital identity information between multiple business platforms can be further improved.

[0059] In the embodiment of the present application, the gateway can generate the first authentication serial number in the following manner: Step B1, in response to a first authentication request sent by the SIM card of the terminal device, a first authentication instruction is returned to the SIM card. The first authentication request is sent by the terminal device through the SIM card when receiving an identity display operation, and the first authentication instruction is used to instruct to display a first authentication window.

[0060] Step B2, receiving first authentication information sent by the SIM card. The first authentication information is received by the terminal device through the first authentication window.

[0061] Step B3: authenticating the SIM card based on the first authentication information.

[0062] Step B4: If the SIM card passes the authentication, a first authentication serial number of the SIM card is generated.

[0063] For example, the first authentication information includes the identification code of the SIM card, etc. The first authentication window includes a text box for entering the identification code of the SIM card. The user enters the identification code of the SIM card through the text box, and the terminal device sends the identification code received through the text box to the gateway through the SIM card. The gateway sends the identification code to the operator server for authentication and returns the authentication result to the gateway. If the authentication result indicates that the SIM card has passed the authentication, the gateway generates a first authentication serial number for the SIM card that uniquely identifies this authentication. The first authentication serial number is unique and valid this time, which is conducive to further improving the security of sharing digital identity information between multiple business platforms. In addition, when the gateway determines that the SIM card has passed the authentication, it can also return the public key for decrypting the ciphertext of the first digital identity information to the SIM card, so that the terminal device can display the first digital identity information in plain text to the user.

[0064] For another example, the first authentication information includes a verification code received by the SIM card. The first authentication window includes a first text box for inputting a mobile phone number and a second text box for inputting a verification code. The user inputs the mobile phone number of the SIM card through the first text box, and the terminal device sends the mobile phone number to the gateway through the SIM card, and the gateway sends the mobile phone number to the operator server, and the operator server sends the verification code to the mobile phone number. After receiving the verification code, the user enters the verification code through the second text box, and the terminal device sends the verification code to the gateway through the SIM card, and the gateway sends the verification code to the operator server for authentication and returns the authentication result. If the authentication result indicates that the SIM card has passed the authentication, the gateway generates a first authentication serial number for the SIM card that uniquely identifies this authentication. The first authentication serial number is unique and valid this time, which is conducive to further improving the security of sharing digital identity information between multiple service platforms. In addition, when the gateway determines that the SIM card has passed the authentication, it can also return the public key for decrypting the ciphertext of the first digital identity information to the SIM card, so that the terminal device can display the first digital identity information in plain text to the user.

[0065] In the embodiment of the present application, the gateway may generate shared credentials in various appropriate ways.

[0066] In one implementation, the ciphertext of the first digital identity information and the card information of the SIM card are concatenated to obtain a shared credential.

[0067] In another embodiment, the ciphertext of the first digital identity information, the card information of the SIM card, and the platform identifier of the first service platform are spliced ​​to obtain a shared credential. In this embodiment, the platform identifier of the first service platform is also introduced into the shared credential, which is conducive to the gateway accurately obtaining the first digital identity information from the blockchain network and providing sharing accuracy.

[0068] In another embodiment, when the sharing request carries the field name of the first attribute field, the ciphertext of the first digital identity information, the card information of the SIM card, the platform identifier of the first service platform and the field name of the first attribute field are concatenated to obtain the shared credential.

[0069] For example, the gateway can assemble the shared credentials in the following format: user_cert=sim_id+”|”+task_id+”|”+en_phone+”|”+platform_An+”|”+en_user_info+”|”+{field_1,field2,field3,…,field_n} Among them, user_cert represents the shared credential, task_id represents the first authentication serial number, en_phone represents the ciphertext of the mobile phone number of the SIM card, platform_An represents the platform identifier of the first service platform An, en_user_info represents the ciphertext of the first digital identity information, and field_1, field2, field3, …, field_n represent the field names of n first attribute fields.

[0070] In this way, when the gateway platform receives the shared credentials sent by the second business platform, it can accurately obtain the field value of the first attribute field from the blockchain network and share it with the second business platform, providing sharing accuracy and flexibility.

[0071] S404: Upon receiving the shared credential sent by the second business platform, obtain the first digital identity information from the blockchain network based on the shared credential.

[0072] In the embodiment of the present application, the gateway may obtain the first digital identity information from the blockchain in various appropriate ways, which is not limited in the embodiment of the present application.

[0073] In one embodiment, a ciphertext of a mobile phone number, a first authentication serial number, and a ciphertext of the first digital identity information are obtained from a shared credential; based on the ciphertext of the mobile phone number, the first authentication serial number, and the ciphertext of the first digital identity information, a call request to a first smart contract is sent to the blockchain network, and the first smart contract is used to obtain a public key for decryption based on the ciphertext of the mobile phone number and the first authentication serial number, and return the first digital identity information after decrypting the ciphertext of the first digital identity information based on the public key.

[0074] For example, the ciphertext of the first digital identity information is obtained by encrypting the first digital identity information based on the private key of the blockchain network. The ciphertext of the first digital identity information and the on-chain user identifier of the SIM card are stored in the blockchain network in the form of a key-value pair, wherein the on-chain user identifier is the key (key), the first digital identity information is the value (value), and the on-chain user identifier is obtained by performing a hash operation on the string formed by concatenating the platform identifier of the first business platform and the ciphertext of the mobile phone number. In addition, the ciphertext of the private key, the public key, and the mobile phone number of the SIM card are also stored in the blockchain network in the form of a key-value pair, wherein the ciphertext of the mobile phone number is the key (key), and the string after the public key and the private key are concatenated is the value (value).

[0075] In this case, after receiving the call request for the first smart contract, the blockchain network executes the first smart contract. The first smart contract extracts the ciphertext of the mobile phone number of the SIM card, the platform identifier of the first service platform, the ciphertext of the first digital identity information, etc. from the call request; then, the string formed by splicing the ciphertext of the mobile phone number and the platform identifier of the first service platform is hashed to obtain the on-chain user identifier of the SIM card, and the on-chain user identifier is used to query whether the ciphertext of the first digital identity information is stored in the blockchain network; if so, the ciphertext of the mobile phone number is used to obtain the public key from the blockchain network, and the ciphertext of the first digital identity information is decrypted using the public key to obtain the first digital identity information and return it to the gateway. More specifically, if the call request also carries the field name of the first attribute field, the first smart contract also obtains the field value of the first attribute field from the first digital identity information and returns it to the gateway.

[0076] In another embodiment, the shared credentials sent by the second business platform are compared with the shared credentials returned to the terminal device. If they are consistent, a call request for the first smart contract is sent to the blockchain network based on the ciphertext of the mobile phone number, the first authentication serial number, and the ciphertext of the first digital identity information. The first smart contract is used to obtain a public key for decryption based on the ciphertext of the mobile phone number and the first authentication serial number, and returns the first digital identity information after decrypting the ciphertext of the first digital identity information based on the public key.

[0077] In the above implementation, the verification operation of the shared credentials sent by the second business platform is added, which can ensure the legitimacy of the second business platform, avoid sharing the first digital identity with illegal persons, and further improve the security of sharing digital identity information among multiple business platforms.

[0078] S406: Return the first digital identity information to the second service platform.

[0079] The digital identity information sharing method provided in this embodiment is that the gateway with high security and reliability sends the digital identity information in each business platform to the blockchain network for storage, and uses the decentralized and tamper-proof characteristics of the blockchain network to ensure the authenticity and credibility of the digital identity information in each business platform. On this basis, the gateway is used as a medium for sharing digital identity information between business platforms. When the terminal device receives an operation to share the first digital identity in the first business platform with the second business platform, it obtains the sharing certificate from the gateway through the SIM card and provides it to the second business platform, and the second business platform obtains the first digital identity information from the gateway with the sharing certificate; because the sharing certificate is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information, the gateway can determine that the second business platform has the authority to share the first digital identity information based on the sharing certificate sent by the second business platform, and then obtains the first digital identity information from the blockchain network and returns it to the second business platform. In this way, there is no need for direct interaction between business platforms. Instead, the decentralized, authentic and reliable first digital identity information is obtained from the blockchain network through the gateway and shared among multiple business platforms, avoiding the risk of digital identity information being tampered with and leaked, as well as the adverse effects of such risks on business platforms that share digital identity information, and achieving the shared security and reliability of digital identity information between different business platforms.

[0080] In another embodiment, before the above S402, the method for sharing digital identity information provided in the embodiment of the present application may further include the following steps: Step C1, in response to a second authentication request sent by the SIM card of the terminal device, returning a second authentication instruction to the SIM card.

[0081] The second authentication request is sent by the terminal device through the SIM card when the terminal device receives the identity generation request, and the second authentication instruction is used to instruct the display of the second authentication window.

[0082] Step C2, receiving the second authentication information sent by the SIM card.

[0083] The second authentication information is received by the terminal device through the second authentication window.

[0084] Step C3: authenticating the SIM card based on the second authentication information.

[0085] It is worth noting that the specific implementation of the above steps C1 to C3 is similar to the above method in which the gateway sends the first authentication instruction to the SIM card to authenticate the SIM card based on the first authentication information, and will not be repeated here.

[0086] Step C4: if the SIM card passes the authentication, the first service platform is requested to generate the first digital identity information, and a call request for the second smart contract is sent to the blockchain network based on the first digital identity information.

[0087] The second smart contract is used to encrypt the first digital identity information and return the ciphertext of the first digital identity information to the gateway.

[0088] For example, the second smart contract extracts the ciphertext of the mobile phone number of the SIM card, the platform identifier of the first business platform, the first digital identity information, etc. from the call request; then, a hash operation is performed on the string formed by concatenating the ciphertext of the mobile phone number and the platform identifier of the first business platform to obtain the on-chain user identifier of the SIM card, and the first digital identity information is encrypted using the private key; further, the on-chain user identifier and the ciphertext of the first digital identity information are stored in the blockchain network in the form of a key-value pair, and the ciphertext of the first digital identity information is returned to the gateway; further, the private key, the public key corresponding to the private key, and the ciphertext of the mobile phone number are stored in the blockchain network in the form of a key-value pair.

[0089] In this embodiment, when the terminal device requests to generate the first digital identity information in the first service platform, the gateway first authenticates the SIM card of the terminal device. If the SIM card authentication is successful, the gateway requests the first service platform to generate the first digital identity information and returns it to the SIM card after encryption via the blockchain network. This can not only prevent the first digital identity information from being leaked, but also ensure the legitimacy of the terminal device and prevent the first digital identity information from being obtained by illegal persons.

[0090] To facilitate the understanding of the technical solutions provided by the above embodiments, Figure 5 and Figure 6 , the interaction process between the terminal device, the gateway, the first service platform, the second service platform and the blockchain network is described. Among them, the terminal device has a built-in application client and a SIM card.

[0091] Please refer to Figure 5 , Figure 5 A process for a gateway to generate first digital identity information in a first service platform for a first terminal device is described, the process comprising the following steps: S501: In response to receiving an identity generation operation, the application client sends a second authentication request to the SIM card.

[0092] The identity generation operation is used to instruct generation of first digital identity information of a user in a first service platform.

[0093] S502: The SIM card forwards the second authentication request to the gateway.

[0094] S503: The gateway sends a second authentication instruction to the SIM card in response to the second authentication request.

[0095] S504: The SIM card forwards the second authentication instruction to the application client.

[0096] S505: The application client displays a second authentication window based on the second authentication instruction.

[0097] S506: The application client receives the second authentication information through the second authentication window and sends it to the SIM card.

[0098] S507: The SIM card forwards the second authentication information to the gateway.

[0099] S508: After the gateway authenticates the SIM card based on the second authentication information, it generates a second authentication serial number for the SIM card.

[0100] S509: The gateway requests the first service platform to generate the first digital identity information of the user based on the card information of the SIM card.

[0101] The card information of the SIM card may include, but is not limited to, at least one of the following information: the ciphertext of the mobile phone number of the SIM card, the card identification of the SIM card, the second authentication serial number, etc. The ciphertext of the mobile phone number is obtained by encrypting the mobile phone number by the gateway.

[0102] S510: The first service platform returns first digital identity information to the gateway.

[0103] S511, the gateway sends a call request for the second smart contract to the blockchain network based on the first digital identity information, the card information of the SIM card, and the platform identifier of the first service platform.

[0104] The second smart contract is used to encrypt the first digital identity information and return the ciphertext of the first digital identity information to the gateway.

[0105] S512, the blockchain network responds to the call request, executes the first smart contract to obtain the ciphertext of the first digital identity information and the public key for decryption and returns them to the gateway.

[0106] S513, the blockchain network executes the third smart contract to obtain the operation evidence of this operation and stores it in the blockchain network.

[0107] The third smart contract is used to generate an operation credential based on the ciphertext of the first digital identity information, the card information of the SIM card, the platform identifier of the first business platform, and the current timestamp for subsequent tracing and verification.

[0108] S514: The gateway stores the ciphertext and public key of the first digital identity information.

[0109] S515, the gateway sends the encrypted text of the first digital identity information to the SIM card for storage.

[0110] S516, the SIM card sends the encrypted text of the first digital identity information to the application client.

[0111] Please refer to Figure 6 , Figure 6 The present invention describes a process in which a gateway shares first digital identity information in a first service platform with a second service platform according to a request of a terminal application. The process includes the following steps: S601: In response to receiving an identity display operation, the application client sends a first authentication request to the SIM card.

[0112] S602: The SIM card forwards the first authentication request to the gateway.

[0113] S603: The gateway sends a first authentication instruction to the SIM card in response to the first authentication request.

[0114] S604: The SIM card forwards the first authentication instruction to the application client.

[0115] S605: The application client displays a first authentication window based on the first authentication instruction.

[0116] S606: The application client receives first authentication information through the first authentication window and sends it to the SIM card.

[0117] S607: The SIM card forwards the first authentication information to the gateway.

[0118] S608: After the gateway authenticates the SIM card based on the first authentication information and succeeds, it generates a first authentication serial number for the SIM card.

[0119] S609: The gateway sends the public key to the SIM card.

[0120] S610, the SIM card decrypts the digital identity information of multiple first service platforms stored locally using the public key, obtains the digital identity information of the multiple first service platforms and returns it to the application client.

[0121] S611, the application client displays digital identity information of multiple first service platforms.

[0122] S612: When receiving a selection operation for at least one first service platform, the application client determines that an identity sharing operation has been received, and determines the selected digital identity information as the first digital identity information.

[0123] S613, the application client displays field information of multiple attribute fields included in the first digital identity information. As an example, the field information includes a field name. As another example, the field information may also include a field value.

[0124] S614: In response to receiving the first selection operation, the application client determines the selected attribute field as the first attribute field shared with the second service platform.

[0125] S615, the application client sends a sharing request to the SIM card. The sharing request carries the field name of the first attribute field in the first digital identity information. The sharing request is used to request that the field value of the first attribute field be shared with the second service platform.

[0126] S616: The SIM card forwards the sharing request to the gateway.

[0127] S617, the gateway concatenates the platform identifier of the first service platform, the card information of the SIM card, the ciphertext of the first digital identity information, and the field name of the first attribute field to obtain a shared credential and sends it to the application client through the SIM card. The card information of the SIM card includes at least one of the following information: the ciphertext of the mobile phone number of the SIM card, the first authentication serial number of the SIM card, the card identifier of the SIM card, etc.

[0128] S618: The application client provides the shared credential to the second service platform.

[0129] S619: The second service platform sends the shared credential to the gateway.

[0130] S620, the gateway parses the shared credential to obtain the platform identifier of the first service platform, the card information of the SIM card, the ciphertext of the first digital identity information, and the field name of the first attribute field.

[0131] S621, the gateway sends a call request for the first smart contract to the blockchain network based on the platform identifier of the first service platform, the card information of the SIM card, the ciphertext of the first digital identity information, and the field name of the first attribute field.

[0132] S622, the blockchain network responds to the call request, executes the first smart contract to obtain the first digital identity information and returns it to the gateway. The first smart contract is used to obtain a public key for decryption based on the ciphertext of the mobile phone number and the first authentication serial number, and decrypts the ciphertext of the first digital identity information based on the public key and returns the first digital identity information.

[0133] S623, the blockchain network executes the third smart contract to obtain the operation certificate of this operation and stores it in the blockchain network. The third smart contract is used to generate an operation certificate based on the ciphertext of the first digital identity information, the card information of the SIM card, the platform identifier of the first business platform and the current timestamp for subsequent tracing and verification.

[0134] S624, the gateway sends the first digital identity information to the second service platform.

[0135] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0136] Based on the same inventive concept, the present application embodiment also provides a structural diagram of a device for sharing digital identity information, which is applied to a terminal device with a built-in SIM card. Figure 7 , is a structural diagram of a digital identity information sharing device 700 provided in one embodiment of the present application, the device 700 includes: A first response module 710, configured to send a sharing request to a gateway through the SIM card in response to receiving an identity sharing operation, wherein the identity sharing operation is used to instruct to share the first digital identity information in the first service platform with the second service platform; A first receiving module 720 is configured to receive, through the SIM card, a shared credential returned by the gateway, where the shared credential is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information; The first processing module 730 is used to provide the shared credential to the second business platform, and the shared credential is used by the second business platform to obtain the first digital identity information stored in the blockchain network through the gateway.

[0137] In another embodiment, the SIM card stores ciphertexts of digital identity information in a plurality of first service platforms, where the ciphertexts of the digital identity information are obtained by encrypting the digital identity information based on a private key in the blockchain network; The first response module is also used to: in response to receiving an identity display operation, obtain the public key corresponding to the private key from the gateway through the SIM card, and the public key is obtained by the gateway from the blockchain network; after decrypting the ciphertext of the digital identity information in the multiple first business platforms using the public key, display the digital identity information in the multiple first business platforms; when at least one digital identity information is selected, determine that an identity sharing operation is received, and determine the selected digital identity information as the first digital identity information.

[0138] In another embodiment, when the first response module obtains the public key corresponding to the private key from the gateway through the SIM card in response to receiving the identity display operation, the following steps are performed: in response to receiving the identity display operation, sending a first authentication request to the gateway through the SIM card; displaying a first authentication window based on a first authentication instruction received by the SIM card, the first authentication instruction being sent by the gateway in response to the first authentication request; receiving first authentication information for authenticating the SIM card through the first authentication window, and sending the first authentication information to the gateway through the SIM card; receiving the public key through the SIM card, the public key being sent after the gateway authenticates the SIM card based on the first authentication information.

[0139] In another embodiment, the sharing request carries the field name of the first attribute field in the first digital identity information, the sharing request is used to request to share the field value of the first attribute field with the second service platform, and the sharing credential is generated by the gateway based on the card information of the SIM card, the ciphertext of the first digital identity information, and the field name of the first attribute field; The device 700 further includes: A first display module, used to display field information of multiple attribute fields included in the first digital identity information, wherein the field information includes field names; The first response module is further configured to, in response to receiving the first selection operation, determine the selected attribute field as the first attribute field shared with the second service platform.

[0140] In another embodiment, the first response module is further used to send a second authentication request to the gateway through the SIM card in response to receiving an identity generation operation, wherein the identity generation operation is used to indicate the generation of the first digital identity information in the first service platform; The apparatus 700 further includes: a second display module, configured to display a second authentication window based on a second authentication instruction received by the SIM card, wherein the second authentication instruction is sent by the gateway in response to the second authentication request; The first response module is also used to: receive second authentication information for authenticating the SIM card through the second authentication window, and send the second authentication information to the gateway through the SIM card; receive the ciphertext of the first digital identity information through the SIM card, the ciphertext of the first digital identity information being the gateway requesting the first service platform to generate the first digital identity information after authenticating the SIM card based on the second authentication information, and sending the first digital identity information to the blockchain network for encryption and then returning.

[0141] Obviously, the digital identity information sharing device of the embodiment of this specification can be used as the above Figure 3 The execution subject of the digital identity information sharing method shown in FIG. Figure 3 The functions realized are as follows. Since the principles are the same, they will not be described here.

[0142] Based on the same inventive concept, the present application embodiment also provides a structural diagram of a device for sharing digital identity information, which is applied to a gateway. Figure 8 , is a structural diagram of a digital identity information sharing device 800 provided in one embodiment of the present application, the device 800 includes: A second response module 810 is used to respond to a sharing request sent by a SIM card of a terminal device, generate a sharing credential based on the card information of the SIM card and the ciphertext of the first digital identity information in the first service platform, and return it to the SIM card, wherein the sharing request is used to request that the first digital identity be shared with the second service platform, and the sharing credential is used by the terminal device to provide to the second service platform; An acquisition module 820, configured to acquire the first digital identity information from a blockchain network based on the shared credential when receiving the shared credential sent by the second business platform; The first sending module 830 is used to return the first digital identity information to the second service platform.

[0143] In another embodiment, the card information includes at least one of the following information: a ciphertext of the mobile phone number of the SIM card, a first authentication serial number of the SIM card, and a card identifier of the SIM card; the first authentication serial number is generated by the gateway after the SIM card is authenticated before receiving the sharing request.

[0144] In another embodiment, the acquisition module is used to: obtain the ciphertext of the mobile phone number, the first authentication serial number, and the ciphertext of the first digital identity information from the shared credential; based on the ciphertext of the mobile phone number, the first authentication serial number, and the ciphertext of the first digital identity information, send a call request to the first smart contract to the blockchain network, the first smart contract is used to obtain a public key for decryption based on the ciphertext of the mobile phone number and the first authentication serial number, and return the first digital identity information after decrypting the ciphertext of the first digital identity information based on the public key.

[0145] In another embodiment, the second response module is further used to: in response to a first authentication request sent by a SIM card of a terminal device, return a first authentication instruction to the SIM card, wherein the first authentication request is sent by the terminal device through the SIM card when an identity display operation is received, and the first authentication instruction is used to instruct to display a first authentication window; receive first authentication information sent by the SIM card, wherein the first authentication information is received by the terminal device through the first authentication window; authenticate the SIM card based on the first authentication information; and if the SIM card passes the authentication, generate a first authentication serial number of the SIM card.

[0146] In another embodiment, the second response module is also used to: respond to a second authentication request sent by the SIM card of the terminal device, return a second authentication instruction to the SIM card, the second authentication request is sent by the terminal device through the SIM card when receiving an identity generation request, and the second authentication instruction is used to instruct the display of a second authentication window; receive second authentication information sent by the SIM card, the second authentication information is received by the terminal device through the second authentication window; authenticate the SIM card based on the second authentication information; if the SIM card passes the authentication, request the first business platform to generate first digital identity information, and send a call request for a second smart contract to the blockchain network based on the first digital identity information, the second smart contract is used to encrypt the first digital identity information and then return the ciphertext of the first digital identity information to the gateway.

[0147] Obviously, the digital identity information sharing device of the embodiment of this specification can be used as the above Figure 4 The execution subject of the digital identity information sharing method shown in FIG. Figure 4 The functions realized are as follows. Since the principles are the same, they will not be described here.

[0148] Fig. 9 This is a schematic diagram of the structure of a terminal device in an embodiment of the present application. Fig. 9At the hardware level, the terminal device includes a processor, and optionally an internal bus, a network interface, and a memory. The memory may include a memory, such as a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. Of course, the terminal device may also include hardware required for other services.

[0149] The processor, network interface and memory can be interconnected through an internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig. 9 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0150] The memory is used to store the program. Specifically, the program may include a program code, and the program code includes a computer operation instruction. The memory may include a memory and a non-volatile memory, and provides instructions and data to the processor.

[0151] The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming a digital identity information sharing device at the logical level. The processor executes the program stored in the memory and is specifically used to perform the following operations: in response to receiving an identity sharing operation, send a sharing request to the gateway through the SIM card, the identity sharing operation is used to indicate that the first digital identity information in the first service platform is shared with the second service platform; receive the sharing credential returned by the gateway through the SIM card, the sharing credential is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information; provide the sharing credential to the second service platform, the sharing credential is used for the second service platform to obtain the first digital identity information stored in the blockchain network through the gateway.

[0152] The above application Figure 3The method performed by the sharing device of digital identity information disclosed in the illustrated embodiment can be applied to a processor or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or instructions in the form of software. The above processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0153] The terminal device can also perform Figure 3 Method and device for sharing digital identity information Figure 3 The functions of the illustrated embodiment will not be described in detail in the embodiments of the present application.

[0154] Of course, in addition to software implementation methods, the terminal device of the present application does not exclude other implementation methods, such as logic devices or a combination of software and hardware, etc. That is to say, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.

[0155] The embodiment of the present application also provides a computer-readable storage medium, which stores one or more programs, wherein the one or more programs include instructions, which, when executed by a terminal device including multiple application programs, enable the terminal device to execute Figure 3The method of the illustrated embodiment is specifically used to perform the following operations: in response to receiving an identity sharing operation, sending a sharing request to the gateway through the SIM card, wherein the identity sharing operation is used to indicate that the first digital identity information in the first business platform is shared with the second business platform; receiving the sharing credential returned by the gateway through the SIM card, wherein the sharing credential is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information; providing the sharing credential to the second business platform, wherein the sharing credential is used by the second business platform to obtain the first digital identity information stored in the blockchain network through the gateway.

[0156] Fig.10 This is a schematic diagram of the structure of a gateway in an embodiment of the present application. Fig.10 At the hardware level, the gateway includes a processor, and optionally an internal bus, a network interface, and a memory. The memory may include a memory, such as a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. Of course, the gateway may also include hardware required for other services.

[0157] The processor, network interface and memory can be interconnected through an internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig.10 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0158] The memory is used to store the program. Specifically, the program may include a program code, and the program code includes a computer operation instruction. The memory may include a memory and a non-volatile memory, and provides instructions and data to the processor.

[0159] The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming a digital identity information sharing device at the logical level. The processor executes the program stored in the memory and is specifically used to perform the following operations: in response to a sharing request sent by the SIM card of the terminal device, based on the card information of the SIM card and the ciphertext of the first digital identity information in the first service platform, a sharing credential is generated and returned to the SIM card, the sharing request is used to request that the first digital identity be shared with the second service platform, and the sharing credential is used by the terminal device to provide to the second service platform; in the case of receiving the sharing credential sent by the second service platform, the first digital identity information is obtained from the blockchain network based on the sharing credential; the first digital identity information is returned to the second service platform.

[0160] The above application Figure 4 The method performed by the sharing device of digital identity information disclosed in the illustrated embodiment can be applied to a processor or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or instructions in the form of software. The above processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0161] The gateway can also perform Figure 4 Method and device for sharing digital identity information Figure 4The functions of the illustrated embodiment will not be described in detail in the embodiments of the present application.

[0162] Of course, in addition to software implementation, the gateway of the present application does not exclude other implementation methods, such as logic devices or a combination of software and hardware, etc. That is to say, the execution subject of the following processing flow is not limited to each logical unit, but can also be hardware or logic devices.

[0163] The embodiment of the present application also provides a computer-readable storage medium, which stores one or more programs, wherein the one or more programs include instructions, which, when executed by a gateway including multiple application programs, enable the gateway to execute Figure 4 The method of the illustrated embodiment is specifically used to perform the following operations: in response to a sharing request sent by a SIM card of a terminal device, based on the card information of the SIM card and the ciphertext of the first digital identity information in the first business platform, generate a sharing credential and return it to the SIM card, the sharing request is used to request that the first digital identity be shared with a second business platform, and the sharing credential is used by the terminal device to provide to the second business platform; upon receiving the sharing credential sent by the second business platform, obtain the first digital identity information from the blockchain network based on the sharing credential; and return the first digital identity information to the second business platform.

[0164] An embodiment of the present application provides a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program, and the computer program is operable to cause a computer to execute some or all of the steps in the method for sharing digital identity information provided in the embodiment of the present application.

[0165] In short, the above description is only a preferred embodiment of the present application and is not intended to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

[0166] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0167] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0168] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0169] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

Claims

1. A method for sharing digital identity information, characterized in that: Applied to a terminal device, the terminal device has a built-in SIM card, and the method includes: In response to receiving an identity sharing operation, sending a sharing request to the gateway through the SIM card, wherein the identity sharing operation is used to instruct to share the first digital identity information in the first service platform with the second service platform; Receiving, through the SIM card, a shared credential returned by the gateway, where the shared credential is generated by the gateway based on the card information of the SIM card and the ciphertext of the first digital identity information; The shared credential is provided to the second business platform, and the shared credential is used by the second business platform to obtain the first digital identity information stored in the blockchain network through the gateway.

2. The method according to claim 1, characterized in that The SIM card stores ciphertexts of digital identity information in a plurality of first service platforms, where the ciphertexts of the digital identity information are obtained by encrypting the digital identity information based on a private key in the blockchain network; Before sending a sharing request to a gateway through the SIM card in response to receiving the identity sharing operation, the method further includes: In response to receiving the identity display operation, obtaining a public key corresponding to the private key from the gateway through the SIM card, where the public key is obtained by the gateway from the blockchain network; After decrypting the ciphertext of the digital identity information in the multiple first service platforms using the public key, the digital identity information in the multiple first service platforms is displayed; In a case where at least one digital identity information is selected, it is determined that an identity sharing operation is received, and the selected digital identity information is determined as the first digital identity information.

3. The method according to claim 2, characterized in that The step of obtaining, in response to receiving the identity display operation, a public key corresponding to the private key from a gateway through the SIM card includes: In response to receiving the identity presentation operation, sending a first authentication request to a gateway through the SIM card; Based on the first authentication instruction received by the SIM card, display a first authentication window, where the first authentication instruction is sent by the gateway in response to the first authentication request; receiving first authentication information for authenticating the SIM card through the first authentication window, and sending the first authentication information to the gateway through the SIM card; The public key is received through the SIM card, where the public key is sent after the gateway authenticates the SIM card based on the first authentication information.

4. The method according to claim 2, characterized in that: The sharing request carries the field name of the first attribute field in the first digital identity information, the sharing request is used to request to share the field value of the first attribute field with the second service platform, and the sharing credential is generated by the gateway based on the card information of the SIM card, the ciphertext of the first digital identity information, and the field name of the first attribute field; After the selected digital identity information is determined as the first digital identity information, the method further includes: Displaying field information of multiple attribute fields included in the first digital identity information, wherein the field information includes field names; In response to receiving the first selection operation, the selected attribute field is determined as the first attribute field shared with the second service platform.

5. The method according to claim 1, characterized in that Before sending a sharing request to a gateway through the SIM card in response to receiving the identity sharing operation, the method further includes: In response to receiving an identity generation operation, sending a second authentication request to the gateway through the SIM card, wherein the identity generation operation is used to indicate the generation of first digital identity information in the first service platform; Based on the second authentication instruction received by the SIM card, displaying a second authentication window, wherein the second authentication instruction is sent by the gateway in response to the second authentication request; receiving second authentication information for authenticating the SIM card through the second authentication window, and sending the second authentication information to the gateway through the SIM card; The ciphertext of the first digital identity information is received through the SIM card, where the ciphertext of the first digital identity information is generated by requesting the first service platform after the gateway authenticates the SIM card based on the second authentication information, and sending the first digital identity information to the blockchain network for encryption and then returning.

6. A method for sharing digital identity information, characterized in that: Applied to a gateway, the method comprises: In response to a sharing request sent by the SIM card of the terminal device, based on the card information of the SIM card and the ciphertext of the first digital identity information in the first service platform, a sharing credential is generated and returned to the SIM card, wherein the sharing request is used to request that the first digital identity be shared with the second service platform, and the sharing credential is used by the terminal device to provide to the second service platform; Upon receiving the shared credential sent by the second service platform, obtaining the first digital identity information from the blockchain network based on the shared credential; The first digital identity information is returned to the second service platform.

7. The method according to claim 6, characterized in that The card information includes at least one of the following information: the ciphertext of the mobile phone number of the SIM card, the first authentication serial number of the SIM card, and the card identification of the SIM card; the first authentication serial number is generated by the gateway after the SIM card is authenticated before receiving the sharing request.

8. The method according to claim 7, characterized in that The obtaining the first digital identity information from the blockchain network based on the shared credential includes: Obtaining the ciphertext of the mobile phone number, the first authentication serial number, and the ciphertext of the first digital identity information from the shared credential; Based on the ciphertext of the mobile phone number, the first authentication serial number and the ciphertext of the first digital identity information, a call request for a first smart contract is sent to the blockchain network, and the first smart contract is used to obtain a public key for decryption based on the ciphertext of the mobile phone number and the first authentication serial number, and return the first digital identity information after decrypting the ciphertext of the first digital identity information based on the public key.

9. The method according to claim 7, characterized in that: Before generating, in response to the sharing request sent by the SIM card of the terminal device, a sharing credential based on the card information of the SIM card and the ciphertext of the first digital identity information in the first service platform and returning the sharing credential to the SIM card, the method further includes: In response to a first authentication request sent by a SIM card of a terminal device, returning a first authentication instruction to the SIM card, wherein the first authentication request is sent by the terminal device through the SIM card when an identity display operation is received, and the first authentication instruction is used to instruct to display a first authentication window; receiving first authentication information sent by the SIM card, where the first authentication information is received by the terminal device through the first authentication window; authenticating the SIM card based on the first authentication information; If the SIM card passes the authentication, a first authentication serial number of the SIM card is generated.

10. The method according to claim 6, characterized in that Before the step of generating, in response to the sharing request sent by the SIM card of the terminal device, a sharing credential based on the card information of the SIM card and the ciphertext of the first digital identity information in the first service platform and returning the sharing credential to the SIM card, the step of: In response to a second authentication request sent by a SIM card of a terminal device, returning a second authentication instruction to the SIM card, wherein the second authentication request is sent by the terminal device through the SIM card when receiving an identity generation request, and the second authentication instruction is used to instruct to display a second authentication window; receiving second authentication information sent by the SIM card, where the second authentication information is received by the terminal device through the second authentication window; authenticating the SIM card based on the second authentication information; If the SIM card passes the authentication, the first service platform is requested to generate the first digital identity information, and based on the first digital identity information, a call request for the second smart contract is sent to the blockchain network. The second smart contract is used to encrypt the first digital identity information and return the ciphertext of the first digital identity information to the gateway.

Images