Anonymous identity verification method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention provides an anonymous identity verification method and device, electronic equipment and a storage medium, and relates to the technical field of security. A first anonymous identity mark of the user is obtained, the first anonymous identity mark is generated according to the main identity key in response to an identity mark generation operation of the user, the main identity key is generated by a server and stored in the user equipment, and privacy information of the user is stored in the server; and carrying out anonymous identity verification according to the first anonymous identity mark. By adopting the method, the leakage risk of the privacy information of the user can be reduced, meanwhile, the privacy detection behavior aiming at the user can be prevented, and the safety of the privacy information of the user is improved.

Description

Technical Field

[0001] The present application relates to the field of security technology, and in particular to a method, device, electronic device and storage medium for anonymous identity authentication. Background Art

[0002] With the continuous development of the Internet, the risk of leakage of user privacy information is also increasing. For example, users are accustomed to using their real identity or private information as their identity credentials to complete digital signatures. Or when users access network services, they often need to provide some private information (such as contact information) to the service provider to verify their real identity.

[0003] In the above process, private information is treated as part of the interactive data. On the one hand, this private information is extremely easy to be leaked or illegally used. On the other hand, the activity tracks and / or behavior patterns of users when using network services are also easily obtained by technologies such as user profiling. The user profiling results combined with user identity information (such as the user's real identity, contact information) are easily used for commercial purposes (such as targeted advertising). How to effectively protect user privacy information has become an urgent problem to be solved. Summary of the invention

[0004] The purpose of the embodiments of the present application is to provide a method, device, electronic device and storage medium for anonymous identity authentication.

[0005] To solve the above technical problems, the embodiments of the present application are implemented through the following aspects.

[0006] According to a first aspect of an embodiment of the present disclosure, a method for anonymous identity authentication is provided, which is applied to a user device, wherein the user device includes a primary identity key of a user, and the method includes:

[0007] Acquire a first anonymous identity token of the user, where the first anonymous identity token is generated according to the master identity key in response to an identity token generation operation of the user, where the master identity key is generated by a server and stored in the user device, and the user's private information is stored in the server;

[0008] Anonymous identity authentication is performed according to the first anonymous identity mark.

[0009] According to a second aspect of an embodiment of the present disclosure, there is provided an apparatus for anonymous identity authentication, which is applied to a user device, wherein the user device includes a primary identity key of a user, including:

[0010] an acquisition module, configured to acquire a first anonymous identity mark of a user, wherein the first anonymous identity mark is generated according to the master identity key in response to an identity mark generation operation of the user, the master identity key is generated by a server and stored in the user device, and the privacy information of the user is stored in the server;

[0011] A verification module is used to perform anonymous identity verification according to the first anonymous identity mark.

[0012] According to a third aspect of an embodiment of the present disclosure, an electronic device is provided, comprising: a memory, a processor, and computer executable instructions stored on the memory and executable on the processor, wherein the computer executable instructions, when executed by the processor, implement the following steps: obtaining a first anonymous identity marker of a user, wherein the first anonymous identity marker is generated according to a master identity key in response to an identity marker generation operation of the user, wherein the master identity key is generated by a server and stored in the user device, and the user's privacy information is stored in the server; and performing anonymous identity authentication according to the first anonymous identity marker.

[0013] According to a fourth aspect of an embodiment of the present disclosure, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a processor, the steps of: obtaining a first anonymous identity marker of a user, wherein the first anonymous identity marker is generated according to a master identity key in response to an identity marker generation operation of the user, wherein the master identity key is generated by a server and stored in the user device, and the user's privacy information is stored in the server; and performing anonymous identity authentication according to the first anonymous identity marker.

[0014] The technical solution provided by the embodiment of the present disclosure is as follows: obtaining the first anonymous identity mark of the user, the first anonymous identity mark is generated according to the master identity key in response to the user's identity mark generation operation, the master identity key is generated by the server and stored in the user device, and the user's privacy information is stored in the server; anonymous identity authentication is performed according to the first anonymous identity mark. The above technical approach can reduce the risk of leakage of the user's privacy information, and at the same time prevent privacy spying on the user, thereby improving the security of the user's privacy information.

[0015] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure.

[0016] Other features and advantages of the present disclosure will be described in detail in the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0018] Figure 1 A schematic diagram showing an application scenario of anonymous identity authentication provided by an embodiment of the present application;

[0019] Figure 2 A schematic diagram showing a flow chart of a method for anonymous identity authentication provided by an embodiment of the present application;

[0020] Figure 3 A schematic diagram showing a logical structure of a user equipment provided in an embodiment of the present application is shown;

[0021] Figure 4 Another schematic diagram showing the process of anonymous identity authentication provided by an embodiment of the present application;

[0022] Figure 5 Another schematic diagram showing a flow chart of the anonymous identity authentication method provided in an embodiment of the present application;

[0023] Figure 6 Another schematic diagram showing a flow chart of the anonymous identity authentication method provided in an embodiment of the present application;

[0024] Figure 7 A schematic diagram showing a flow chart of a method for anonymous identity authentication provided by an embodiment of the present application;

[0025] Figure 8 Another schematic diagram showing the process of anonymous identity authentication provided by an embodiment of the present application;

[0026] Fig. 9 Another schematic diagram showing a flow chart of the anonymous identity authentication method provided in an embodiment of the present application;

[0027] Fig.10 Another schematic diagram showing a flow chart of the anonymous identity authentication method provided in an embodiment of the present application;

[0028] Fig.11 Another schematic diagram showing a flow chart of the anonymous identity authentication method provided in an embodiment of the present application;

[0029] Fig.12 A block diagram showing an anonymous identity authentication device provided in an embodiment of the present application;

[0030] Fig.13A block diagram showing another anonymous identity authentication device provided in an embodiment of the present application;

[0031] Fig.14 A block diagram showing an anonymous identity authentication device provided in an embodiment of the present application;

[0032] Fig.15 A block diagram showing another anonymous identity authentication device provided in an embodiment of the present application;

[0033] Fig.16 A schematic diagram of the hardware structure of an electronic device for executing the anonymous identity authentication method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0034] In order to enable those skilled in the art to better understand the technical solutions in the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work should fall within the scope of protection of the present application.

[0035] First, the application scenario of this application is described. The inventor of this application realizes that the main reasons for the easy leakage of user privacy include the following:

[0036] 1. Third parties (such as network service providers) can directly access users' private information.

[0037] 2. Users usually directly use private information as identity credentials.

[0038] 3. The identity credentials used by the user will not change.

[0039] In order to solve the above technical problems, the inventor of the present application proposes an anonymous identity authentication method, which can reduce the risk of leakage of user's privacy information, and at the same time prevent privacy prying against users, thereby improving the security of user's privacy information.

[0040] Figure 1 A schematic diagram showing an application scenario of anonymous identity authentication provided by an embodiment of the present application is shown as follows: Figure 1 As shown, the scenario includes a user device 100, a server 110, and a third-party device 120. The user device 100 and the server 110, the server 110 and the third-party device 120, and the user device 100 and the third-party device 120 can be connected by wire or wirelessly. The server 110 includes, but is not limited to, a single server, a server cluster, a cloud server, or a cloud server cluster.

[0041] Figure 2 A schematic diagram showing a flow chart of an anonymous identity authentication method provided in an embodiment of the present application is shown. Figure 2 The method in the embodiment can be executed by the user device 100. In other words, the method can be executed by software or hardware installed in the user device 100. Figure 2 As shown, the method may include the following steps.

[0042] In step S101, a first anonymous identity mark of a user is obtained.

[0043] The first anonymous identity mark is generated according to the master identity key in response to the user's identity mark generation operation. The master identity key is generated by the server 110 and stored in the user device 100 . The user's privacy information is stored in the server 110 .

[0044] In some possible implementations, the server may respond to a user registration instruction from an administration agency, generate a public key and a private key corresponding to the user through an asymmetric key generation algorithm, such as the ED25519 algorithm, and save the private key of the user generated by the ED25519 algorithm as a master identity key in the user device 100. At the same time, the server may save the public key, the private key and the privacy information of the user corresponding to the user in the server for subsequent identity authentication.

[0045] Figure 3 A schematic diagram of a logical structure of a user device 100 provided in an embodiment of the present application is shown as follows: Figure 3As shown, the user device 100 may be a physical security key device that is convenient for the user to carry, including a processing component 101, a display component 102, a confirmation component 103, a storage component 104 and an interface component 105. Among them, the processing component 101 is the main control unit of the user device 100, which may be a microprocessor chip, such as a 51 single-chip microcomputer; the display component 102 is used to display the information in the identity authentication to the user, and may be a general display element such as a liquid crystal display or an LED display; the confirmation component 103 is used to receive the user's confirmation operation on the key information displayed by the display component 102, and protect the security of the identity authentication, and may include a variety of possible implementation schemes, such as a light touch button, a fingerprint recognition component, a facial recognition component or an iris recognition component. When the display component 102 is a touch display screen, the confirmation component 103 may also be a touch element on the display component 102. The storage component 104 is used to store information during the identity authentication process. In some possible implementations, the storage component 104 may include a security element chip. The security element chip can lock the write permission of the master identity key and the direct read permission of the master identity key in response to the lock operation issued by the management agency through the server after the master identity key is written, and no longer accept any write or modification request to the master identity key, nor allow direct reading of the master identity key, further improving the security of the user device 100. The interface component 105 is used to connect with a third-party device or server, and there may be a variety of possible implementations. For example, the interface component 105 may be a USB interface component for communicating with a third-party device or server by means of a physical connection, or may use a wireless communication component such as NFC (Near Field Communication) or WiFi for communicating with a third-party device 120 or server 110 by wireless means. In some possible implementations, the storage component 104 may also be implemented in an integrated chip manner with the processing component 101. This application does not limit the specific implementation scheme of the user device 100.

[0046] In some embodiments, the user device 100 may adopt the following steps to generate a first anonymous identity token according to the master identity key in response to the user's identity token generation operation.

[0047] Step 10: Determine whether a preset condition for generating a first anonymous identity mark is met.

[0048] The preset condition may be at least one of the following conditions:

[0049] 1) A preset periodic condition is met. For example, the periodic condition may be to trigger the update of the first anonymous identity mark once every 24 hours. When the periodic condition is met, the display component 102 may display a prompt message for updating the first anonymous identity mark.

[0050] 2) Meeting preset connectivity conditions, such as establishing a connection with other devices (such as third-party devices 120), or disconnecting from other devices (such as third-party devices 120), such as displaying a prompt message for updating the first anonymous identity mark after disconnecting from the third-party device 120.

[0051] 3) The confirmation component 103 senses the user's touch operation. For example, the first anonymous identity mark can be generated according to the master identity key after the prompt information for updating the first anonymous identity mark is displayed and the confirmation component 103 senses the user's confirmation operation. The first anonymous identity mark can also be generated according to the master identity key only in response to the user's active touch operation.

[0052] By adopting the above technical method, an event trigger or a period trigger can be used, and after sensing the user's confirmation operation, a first anonymous identity mark is generated according to the master identity key to generate or update the first anonymous identity mark, thereby improving the security of identity authentication.

[0053] Step 11: When a preset condition is met, in response to receiving an identity marker generation operation from a user, a first anonymous identity marker is generated according to a master identity key.

[0054] In some possible implementations, a preset first timer (e.g., 30 seconds) may be started when a preset periodic condition or connectivity condition is met. When the first timer has not timed out and a user confirmation operation on the confirmation component 103 is sensed, the public key and private key of the first sub-identity key may be obtained by the security element chip in the storage component 104 according to the stored master security key through a KDF (Key Derivation Function) algorithm, and the public key of the first sub-identity key may be used as the first anonymous identity mark, and the user device 100 may save the public key and private key of the first sub-identity key. When the first timer times out and the user confirmation operation on the confirmation component 103 is not sensed, the anonymous identity mark generation operation is ignored.

[0055] The KDF algorithm may be, for example, any one of PBKDF2, HKDF, Scrypt or Argon2, and this application does not impose any limitation on this.

[0056] In step S102, anonymous identity authentication is performed according to the first anonymous identity mark.

[0057] After generating the first anonymous identity marker, the user equipment 100 may perform anonymous identity authentication according to the first anonymous identity marker.

[0058] By adopting the above-mentioned technical approach, since the user's privacy information is stored in the server 110 and is not directly used in the identity authentication process, the risk of leakage of the user's privacy information can be reduced. In addition, the first anonymous identity mark used for anonymous identity authentication can be generated and / or updated in response to the user's identity mark generation operation, which solves the privacy spying behavior (such as user portrait) of third-party devices against the unchanging anonymous identity mark, and can effectively improve the security of user privacy information.

[0059] In some embodiments, anonymous identity authentication can be performed based on the first anonymous identity marker in the following manner: in response to a received digital signature request, a first digital signature is generated for the content to be digitally signed in the digital signature request using the first anonymous identity marker, and the first digital signature is returned to the third-party device 120.

[0060] This application is a digital signature scenario. Figure 4 Another flow chart of the anonymous identity authentication method provided in the embodiment of the present application is shown as follows: Figure 4 As shown, step S102 may include the following steps.

[0061] In step S102-1, the content to be digitally signed is obtained.

[0062] The content to be digitally signed includes a second anonymous identity mark. Taking the application of medical scenarios as an example, the third-party device 120 can be a computer system of a medical institution. After the third-party device 120 generates the user's electronic medical record, it can be connected to the user device 100 through the interface component 105. For example, when the interface component is a USB interface, it can be connected to the user device 100 through the USB interface, so that the user can complete the digital signature of the electronic medical record through the user device 100.

[0063] In this embodiment, the content to be digitally signed includes an electronic medical record and a second anonymous identity token. The second anonymous identity token can be the public key of the sub-identity key of the user to be signed in the electronic medical record. When performing the digital signature, the public key of the sub-identity key of the user to be signed obtained in advance can be used together with the electronic medical record as the content to be digitally signed.

[0064] In step S102 - 2 , it is determined whether the second anonymous identity marker matches the first anonymous identity marker.

[0065] In some possible implementations, the second anonymous identity marker included in the content to be digitally signed may be first obtained and matched with the first anonymous identity marker (the public key of the first sub-identity key) stored in the user device 100 .

[0066] In step S102-3, when the second anonymous identity identifier matches the first anonymous identity identifier, a first digital signature is generated for the content to be digitally signed by using the first sub-identity key.

[0067] For example, the following steps may be used to generate a first digital signature for the content to be digitally signed by using the private key of the first sub-identity key stored in the storage component 104 .

[0068] Step 20: Calculate the hash value of the content to be digitally signed.

[0069] In some possible implementations, a hash value of the content to be digitally signed is generated by a preset hash algorithm, wherein the hash algorithm may be, for example, SHA2 or SHA256, or other well-known hash algorithms, which are not limited in this application.

[0070] For example, in a medical scenario application, after receiving the content to be digitally signed including the electronic medical record and the second anonymous identity mark, the user device 100 can calculate the hash value of the content to be digitally signed. In the digital signature algorithm, the hash value can also be called a digest.

[0071] Step 21: Display the digital signature request and hash value to the user so that the user can confirm the digital signature request.

[0072] For example, the digital signature request and the hash value may be displayed on the display component 102 of the user device 100 , so that the user may confirm the digital signature request through the confirmation component 103 .

[0073] In some possible implementations, a second timer (eg, 30 seconds) may be set, and when the second timer times out and no confirmation operation of the user on the confirmation component 103 is sensed, the digital signature process may be terminated.

[0074] Step 22: In response to the signature confirmation operation of the user, generate a first digital signature for the content to be digitally signed according to the hash value and the first sub-identity key.

[0075] For example, the security element chip in the storage component 104 can perform encryption calculation according to the hash value and the private key of the first sub-identity key according to a preset digital signature algorithm to obtain an encrypted hash value, and use the encrypted hash value as the first digital signature. The above-mentioned digital signature algorithm can be, for example, ED25519, and this application does not limit the digital signature algorithm.

[0076] After the user device 300 obtains the first digital signature, the first digital signature and the first anonymous identity mark can be sent to the third-party device 120. After receiving the first digital signature and the first anonymous identity mark, the third-party device 120 decrypts the first digital signature (encrypted hash value) through the first anonymous identity mark to obtain the decrypted hash value, and then treats the digital signature content (electronic medical record and the second anonymous identity mark) according to the same preset hash algorithm as the user device 100 to generate a hash value. When the decrypted hash value and the generated hash value are the same, it is confirmed that the digital signature of the electronic medical record is successful; otherwise, it is confirmed that the digital signature of the electronic medical record has failed.

[0077] In step S102-4, when the second anonymous identity mark does not match the first anonymous identity mark, a prompt message indicating that the digital signature fails is displayed.

[0078] By adopting the above technical approach, when completing the digital signature, since the user's privacy information is stored in the server 110 and is not directly used in the digital signature process, the risk of leakage of the user's privacy information can be reduced, and the security of the user's privacy information can be effectively improved.

[0079] Figure 5 Another flow chart of the anonymous identity authentication method provided in the embodiment of the present application is shown as follows: Figure 5 As shown, step S102 may also include the following steps:

[0080] In step S102-5, a signature verification request is received.

[0081] The signature verification request includes the digitally signed content and the digital signature to be verified, wherein the digitally signed content includes the third anonymous identity mark.

[0082] For example, still taking the digital signature of the medical system as an example, after receiving the digital signature, the third-party device 120 of the medical system can also connect with the user device 100 to verify the digital signature.

[0083] The signature verification request includes signed digital content, which may include the user's electronic medical record and a third anonymous identity mark, wherein the third anonymous identity mark is an anonymous identity mark that is sent by the user device 100 to the third-party device 120 of the medical system together with the digital signature after the digital signature to be verified is generated.

[0084] In step S102-6, a hash value of the digitally signed content is calculated, and a second digital signature is calculated based on the hash value and the third anonymous identity mark.

[0085] In some possible implementations, a hash value of the content to be digitally signed is generated by a preset hash algorithm, wherein the hash algorithm may be, for example, SHA2 or SHA256, or other well-known hash algorithms, which are not limited in this application.

[0086] For example, in an application of a medical scenario, after receiving the digitally signed content including the electronic medical record and the third anonymous identity mark, the user device 100 can calculate the hash value of the digitally signed content. In the digital signature algorithm, the hash value can also be called a digest.

[0087] In some possible implementations, the processing component 101 of the user device 100 can perform encryption calculation according to the hash value and the third anonymous identity flag according to a preset digital signature algorithm to obtain an encrypted hash value, and use the encrypted hash value as the second digital signature. The above-mentioned digital signature algorithm can be, for example, ED25519, and this application does not limit the digital signature algorithm.

[0088] In step S102-7, the second digital signature is compared with the digital signature to be verified to see if they match.

[0089] In step S102-8, when the second digital signature matches the digital signature to be verified, the verification result of the third anonymous identity mark and the master identity key is determined.

[0090] Since the public key and private key of the first sub-identity key stored in the user device can be updated periodically or actively based on the user's confirmation operation, the public key and private key of the first sub-identity key are time-sensitive, that is, the public key of the first sub-identity key when performing digital signature may not match the public key of the currently stored first sub-key.

[0091] In some possible implementations, a full set of public keys of the first sub-identity key can be generated according to the first preset generation parameter of the KDF (Key Derivation Function) algorithm and the master identity key, and the full set of public keys of the first sub-identity key can be stored in the storage component 104 of the user device 100. In the case where the full set of public keys of the first sub-identity key includes the third anonymous identity marker, that is, the third anonymous identity marker is generated according to the master identity key of the user device 100, then the verification result of the third anonymous identity marker and the master identity key is confirmed to be passed. In the case where the full set of public keys of the first sub-identity key does not include the third anonymous identity marker, that is, the third anonymous identity marker is not generated according to the master identity key of the user device 100, then the verification result of the third anonymous identity marker and the master identity key is confirmed to be failed. The above process can be completed by the security element chip in the storage component 104 to further increase security. The above-mentioned first preset generation parameter can be saved in the user device 100 by the server 110 when generating the master identity key, so as to limit the scope of the user device when generating the first sub-identity key according to the master identity key. For example, each master identity key can generate up to 1024 different first sub-identity keys, that is, 1024 different public key and private key pairs of the first sub-identity keys. When the user device 100 generates the first sub-identity key according to the master identity key in response to the user's confirmation operation, the first sub-identity key can be randomly generated within the range limited by the first preset generation parameter.

[0092] In step S102-9, when the verification result is passed, the signature verification result indicating that the signature verification passed is sent.

[0093] If the verification result is passed, the signature verification result that passed the signature verification can be sent.

[0094] In step S102-10, when the second digital signature does not match the digital signature to be verified or the verification result is failed, a signature verification result indicating that the signature verification failed is sent.

[0095] In another embodiment, a user confirmation operation step may be added after step S102-5, that is, after receiving the signature verification request, a third timer (for example, 30 seconds) is started, and subsequent steps are continued after the third timer has not timed out and in response to the user's confirmation operation on the confirmation component 103. If the user's confirmation operation on the confirmation component 103 is still not sensed after the third timer times out, the process is exited.

[0096] By adopting the above technical method, the digital signature can be verified without exposing the user's privacy information, which can reduce the risk of leakage of the user's privacy information and effectively improve the security of the user's privacy information.

[0097] In some embodiments, anonymous identity authentication may also be performed in the following manner: providing a first anonymous identity marker to the third-party device 120 so that the third-party device 120 completes the user's anonymous identity authentication to the server 110 according to the first anonymous identity marker.

[0098] For example, it can be applied to the scenario of identity login authentication. The user needs to log in to the third-party device 120 of the medical system, and can provide the first anonymous identity mark to the third-party device 120 of the medical system. The third-party device 120 of the medical system can complete the anonymous identity authentication of the user to the server 110 according to the first anonymous identity mark. The server 110 can complete the identity authentication according to the first anonymous identity mark and the master identity key pre-stored in the server 110 and the corresponding user's privacy information. For example, the server 110 can return whether the age of the user corresponding to the first anonymous identity mark meets the preset conditions, such as whether he is over 18 years old, in response to the request of the third-party device 120, without obtaining the user's privacy information, such as the actual age.

[0099] By adopting the above technical approach, when anonymous identity authentication is completed, since the user's privacy information is stored in the server 110 and is not directly used in the identity authentication process, the risk of leakage of the user's privacy information can be reduced, and the security of the user's privacy information can be effectively improved.

[0100] Figure 6 Another flow chart of the anonymous identity authentication method provided in the embodiment of the present application is shown as follows: Figure 6 As shown, the method may also include the following steps:

[0101] In step S103, in response to the user's identity token generation operation, a fourth anonymous identity token is generated according to the master identity key.

[0102] When a preset condition is met, a fourth anonymous identity marker is generated according to the master identity key in response to receiving an identity marker generation operation of the user.

[0103] The preset condition may be at least one of the following conditions:

[0104] 1) Satisfying a preset periodic condition, for example, the periodic condition may trigger updating of the first anonymous identity flag once every 24 hours.

[0105] 2) Satisfying a preset connectivity condition, such as establishing a connection with another device (eg, third-party device 120 ), or disconnecting from another device (eg, third-party device 120 ).

[0106] 3) The confirmation component 103 senses the user's touch operation. For example, after displaying the prompt information for updating the first anonymous identity mark and sensing the user's confirmation operation, the fourth anonymous identity mark can be generated according to the main identity key. Alternatively, the fourth anonymous identity mark can be generated according to the main identity key only in response to the user's active touch operation.

[0107] The above step of generating the fourth anonymous identity mark according to the master identity key is the same as step 11, and will not be described in detail here.

[0108] In step S104, the first anonymous identity marker in the user equipment 100 is replaced with the fourth anonymous identity marker.

[0109] In some possible implementations, the fourth anonymous identity marker may be a public key of a second sub-identity key generated by the user device 100 according to the master identity key and the first preset generation parameter. The user device 100 may save the public key of the second sub-identity key to replace the public key of the first sub-identity key, and save the private key of the second sub-identity key to replace the private key of the first sub-identity key.

[0110] By adopting the above-mentioned technical method, the anonymous identity marker used for anonymous identity authentication can be updated in response to the user's identity marker generation operation, thereby solving the privacy intrusion behavior (such as user portrait) conducted by third-party devices on the unchanging anonymous identity marker, and can effectively improve the security of user privacy information.

[0111] Figure 7 A flow chart of the anonymous identity authentication method provided in the embodiment of the present application is shown, which is applied to the server 110, such as Figure 7 As shown, the method may include the following steps:

[0112] In step S201 , an anonymous identity authentication request initiated by a third-party device 120 is received.

[0113] Among them, the anonymous identity authentication request includes a first anonymous identity token and at least one verification item. The first anonymous identity token is generated by the user device 100 in response to the user's identity token generation operation according to the master identity key. The master identity key is generated by the server 110 and stored in the user device 100. The server 110 includes multiple master identity keys and user privacy information corresponding to each master key information.

[0114] Since the server 110 includes multiple master identity keys and user privacy information corresponding to each master key information, it can receive an anonymous identity authentication request initiated by the third-party device 120, and perform identity authentication based on the first anonymous identity flag and at least one verification item in the anonymous identity authentication request and the corresponding user privacy information.

[0115] Taking the application of medical system as an example, when the hospital interacts with the user, the user will use the first anonymous identity mark to perform digital signature or identity verification, and no longer expose his or her real identity or other private information (such as phone number, address, name, etc.). The hospital connects to the server 110 through the third-party device 120 according to the first anonymous identity mark, and initiates an anonymous identity verification request, wherein the verification item may be, for example, whether the first anonymous identity mark is a valid anonymous identity mark, or whether the user corresponding to the first anonymous identity mark meets the preset verification conditions, such as whether the age meets 18 years old.

[0116] In step S202, a verification result of the verification item is obtained according to the first anonymous identity mark.

[0117] Figure 8 A flow chart of the anonymous identity authentication method provided in the embodiment of the present application is shown, which is applied to the server 110, such as Figure 8 As shown, step S202 may include the following steps:

[0118] In step S202-1, a first target master identity key corresponding to a first anonymous identity token is determined from the master identity key set.

[0119] In some possible implementations, the server 110 may generate an anonymous identity token set corresponding to the master identity key based on the master identity key and the second preset generation parameter. The second preset generation parameter may be the same as the first preset generation parameter, and is used to limit the scope of generating the first sub-identity key based on the master identity key. For example, each master identity key may generate up to 1024 different first sub-identity keys, that is, 1024 different first sub-identity key public key and private key pairs, and the 1024 first sub-identity keys corresponding to each master identity key may form an anonymous identity token set. The server 110 may traverse each master identity key and the corresponding anonymous identity token set, and when the anonymous identity token set corresponding to any master identity key includes the first anonymous identity token, the master identity key is determined as the first target master identity key.

[0120] In step S202 - 2 , it is determined whether the set of master identity keys includes the first target master identity key.

[0121] In step S202 - 3 , when the first target master identity key is included in the master identity key set, a verification result of the verification item is determined according to the target privacy information corresponding to the first target master identity key.

[0122] For example, when the master identity key set includes the first target master identity key, it can be determined that the first anonymous identity marker is a real and valid anonymous identity marker, and it can also be determined whether the user's age meets a preset condition based on the age information of the first target master identity key.

[0123] In some embodiments, the server 110 may also communicate with an external information system through a trusted connection to obtain further user privacy information and determine the verification result of the verification item.

[0124] In step S202 - 4 , when the master identity key set does not include the first target master identity key, it is determined that the verification result is that the first anonymous identity token is illegal.

[0125] In step S203 , the verification result is sent to the third-party device 120 .

[0126] In another embodiment, before receiving the anonymous identity authentication request initiated by the third-party device 120, the authentication of the third-party device 120 may be completed according to the authentication procedure, so as to further improve the security of identity authentication.

[0127] By adopting the above technical approach, when anonymous identity authentication is completed, since the user's privacy information is stored in the server 110 and is not directly used in the identity authentication process, the risk of leakage of the user's privacy information can be reduced, and the security of the user's privacy information can be effectively improved.

[0128] In some scenarios, the verification project may be anonymous identity verification. For example, in a medical system, for legitimate reasons such as disease analysis and academic research, hospitals often need to analyze historical medical records. Since all electronic medical records contain only anonymous identity tags, hospitals cannot associate different medical records, and thus cannot fully analyze the disease development history of a user. At this time, the hospital can connect to the server 110 through the third-party device 120 to initiate an anonymous identity verification project. Fig. 9 Another flowchart of the anonymous identity authentication method provided in the embodiment of the present application is shown, which is applied to the server 110. Fig. 9 As shown, step S202 may include the following steps:

[0129] In step S202-5, a first target master identity key of a target user corresponding to the first anonymous identity token is determined from the master identity key set.

[0130] In step S202-6, the candidate master identity key corresponding to each candidate anonymous identity token is determined from the master identity key set.

[0131] The anonymous identity authentication request also includes at least one candidate anonymous identity flag, and the verification item includes anonymous identity verification.

[0132] The step of determining the first target master identity key corresponding to the first anonymous identity token from the master identity key set and the step of determining the candidate master identity key corresponding to each candidate anonymous identity token can refer to step S202-1, which will not be described in detail here.

[0133] In step S202-7, it is determined whether the master identity key set includes the first target master identity key and the candidate master identity key corresponding to each candidate anonymous identity token.

[0134] In step S202-8, a target candidate anonymous identity marker is determined from the candidate anonymous identity markers, and a set of the target candidate anonymous identity markers is used as a verification result of anonymous identity identity verification. If the target candidate anonymous identity marker is not included in the candidate anonymous identity markers, the verification result is determined to be a verification failure.

[0135] The candidate master identity key corresponding to the target candidate anonymous identity flag is the same as the first target master identity key.

[0136] For example, the first target master identity key corresponding to the first anonymous identity mark A1 is AK1, and the candidate master identity keys corresponding to the candidate anonymous identity marks B1, B2, ..., Bn are BK1, BK2, ..., BKn, respectively. When BK1, BK2, BK4 are the same as AK1, the set consisting of B1, B2 and B4 is used as the target candidate anonymous identity mark set, and the target candidate anonymous identity mark set is used as the verification result of the anonymous identity verification of the first anonymous identity mark A1. When any one of BK1, BK2, ..., BKn is different from AK1, the verification result is determined to be verification failure.

[0137] In step S202-9, when the master identity key set does not include the first target master identity key or any candidate master identity key, it is determined that the verification result of the anonymous identity identity verification is that the anonymous identity flag is illegal.

[0138] In some embodiments, an anonymous identity flag for obtaining the master identity key may also be returned in the verification result.

[0139] For example, the anonymous identity authentication request includes a first anonymous identity token A1 and candidate anonymous identity tokens B1, B2, ..., Bn. When the master identity key corresponding to A1, B2, B3 fails to be obtained from the master identity key set, it can be determined that the verification result is that the anonymous identity token is illegal and carries the anonymous identity tokens A1, B2, B3.

[0140] In another embodiment, before receiving the anonymous identity authentication request initiated by the third-party device 120, the authentication of the third-party device 120 may be completed according to the authentication procedure, so as to further improve the security of identity authentication.

[0141] By adopting the above technical method, anonymous identity verification can be completed without leaking the user's privacy information, effectively improving the security of the user's privacy information.

[0142] In another embodiment, the verification item may also be anonymous identity association verification, and the anonymous identity authentication request further includes at least one candidate anonymous identity mark and an association condition, wherein the association condition is, for example, to verify whether the user corresponding to the first anonymous identity mark has a direct blood relationship with the user corresponding to any candidate anonymous identity mark, or to query whether the user corresponding to the first anonymous identity mark has an address adjacent to the user corresponding to any candidate anonymous identity mark. Fig. 9 Similar, no further elaboration.

[0143] Fig.10 Another flow chart of the anonymous identity authentication method provided in the embodiment of the present application is shown, which is applied to the server 110, such as Fig.10 As shown, before receiving the anonymous identity authentication request initiated by the third-party device, a registration method of the user device 100 may also be included, and the method may also include the following steps.

[0144] In step S204, a user registration request from a user is received.

[0145] The user registration request may include the user's privacy information.

[0146] In some embodiments, the user may apply for the user device 100 from the management agency. For example, the user may log in to the server 110 and submit an electronic application to send a user registration request to the server 110, including the user's privacy information. Alternatively, a paper form may be submitted on-site at the management agency, and a management user (e.g., staff) of the management agency may submit the user registration request to the server based on the paper form.

[0147] In step S205, in response to the management user's approval of the user registration request, a master identity key of the user is generated.

[0148] For example, in response to the management user's audit passing operation, the server can generate the public key and private key corresponding to the user through an asymmetric key generation algorithm, such as the ED25519 algorithm, and use the user's private key generated by the ED25519 algorithm as the user's primary identity key.

[0149] In step S206, the master identity key is saved in the user device, and the master identity key and the user's private information are associated and saved in the server.

[0150] In some possible implementations, after generating the master identity key of the user, the server 110 may store the master identity key in the secure element chip included in the storage component 104 of the user device 100. The secure element chip may lock the write permission and / or the direct read permission of the master identity key in response to the lock operation issued by the management agency through the server 110 after writing the master identity key, and no longer accept any write or modification request for the master identity key, nor allow direct reading of the master identity key, thereby further improving the security of the user device 100. The server 110 may store the public key, private key and privacy information of the user corresponding to the user in the server 110 for subsequent identity authentication.

[0151] By adopting the above technical approach, by storing the master identity key in the user device 100, the user's privacy information is not exposed during the identity authentication process, which can reduce the risk of leakage of the user's privacy information and improve the security of the user's privacy information.

[0152] Fig.11 Another flow chart of the anonymous identity authentication method provided in the embodiment of the present application is shown, which is applied to the server 110, such as Fig.11 As shown, after the master identity key is saved in the user device 100, a method for data query of the user device 100 may also be included, and the method may also include the following steps.

[0153] In step S207, a data query request initiated by the user equipment 100 is received.

[0154] The user device 100 can be connected to the server 110 via the interface component 105. In some possible implementations, after the user device 100 establishes a connection with the server 110, a data query request can be automatically initiated, or a data query request can be initiated in response to a user confirmation operation on the confirmation component 103.

[0155] In step S208, the randomly generated character string is sent to the user equipment so that the user equipment digitally signs the character string according to the stored master identity key.

[0156] In some possible implementations, the processing component 101 may obtain a hash value of a string according to a preset hash algorithm, and the server may also send a hash value of any preset content as a string to the user device 100. The security element chip in the storage component 104 performs encryption calculation according to the hash value and the master identity Mu Yao according to a preset digital signature algorithm to obtain an encrypted hash value, and uses the encrypted hash value as a digital signature. The above digital signature algorithm may be, for example, ED25519, and this application does not limit the digital signature algorithm.

[0157] In step S209, the digital signature sent by the user equipment is received, and the second target primary identity key corresponding to the user equipment is determined according to the digital signature and the character string.

[0158] In some possible implementations, the server 110 may calculate a digital signature set based on each master identity key in the master identity key set and a character string according to a preset digital signature algorithm. In order to improve the efficiency of the query, the above-mentioned digital signature set may also be calculated in advance and stored in the server 110. After receiving the digital signature sent by the user device 100, a target digital signature that is identical to the digital signature may be determined from the digital signature set based on the digital signature, and the master identity key corresponding to the target digital signature may be used as the second target master identity key.

[0159] In step S210, private information corresponding to the second target master identity key is obtained and displayed.

[0160] The privacy information corresponding to the user can be read from the server 110 according to the second target master identity key, or further user privacy information can be obtained by communicating with an external information system through a trusted connection, for example, the user's credit information can be obtained by connecting with the user's credit system.

[0161] By adopting the above technical approach, the user's privacy information can be obtained through the master identity key stored in the user's device, which can reduce the risk of leakage of the user's privacy information and improve the security of the user's privacy information.

[0162] Fig.12 A block diagram of an anonymous identity authentication device provided in an embodiment of the present application is shown, which is applied to a user device, such as Fig.12 As shown, the anonymous identity authentication device 200 includes:

[0163] The acquisition module 210 is used to acquire the user's first anonymous identity token, which is generated according to the master identity key in response to the user's identity token generation operation. The master identity key is generated by the server and stored in the user device, and the user's privacy information is stored in the server.

[0164] The verification module 220 is used to perform anonymous identity verification according to the first anonymous identity mark.

[0165] Optionally, the verification module 220 is further configured to generate a first digital signature for the content to be digitally signed in the digital signature request by using the first anonymous identity mark in response to the received digital signature request, and return the first digital signature to the third-party device; or

[0166] A first anonymous identity mark is provided to a third-party device, so that the third-party device completes anonymous identity authentication of the user to the server according to the first anonymous identity mark.

[0167] Optionally, the user device further includes a first sub-identity key, the first anonymous identity mark is a public key of the first sub-identity key, and the content to be digitally signed includes a second anonymous identity mark. The verification module 220 is further used to obtain the content to be digitally signed; if the second anonymous identity mark matches the first anonymous identity mark, generate a first digital signature for the content to be digitally signed using the first sub-identity key; or, if the second anonymous identity mark does not match the first anonymous identity mark, display a prompt message indicating that the digital signature failed.

[0168] Optionally, the verification module 220 is also used to calculate the hash value of the content to be digitally signed; display the digital signature request and the hash value to the user so that the user confirms the digital signature request; and generate a first digital signature for the content to be digitally signed based on the hash value and the first sub-identity key in response to the user's signature confirmation operation.

[0169] Optionally, the verification module 220 is further used to receive a signature verification request, the signature verification request includes the digitally signed content and the digital signature to be verified, wherein the digitally signed content includes a third anonymous identity mark; calculate the hash value of the digitally signed content, and calculate the second digital signature based on the hash value and the third anonymous identity mark; when the second digital signature matches the digital signature to be verified, determine the verification result of the third anonymous identity mark and the master identity key, and when the verification result is passed, send the signature verification result of passing the signature verification; or, when the second digital signature does not match the digital signature to be verified or the verification result is failed, send the signature verification result of failing the signature verification.

[0170] Fig.13 A block diagram showing another anonymous identity authentication device provided in an embodiment of the present application is shown, which is applied to a user device, such as Fig.13 As shown, the anonymous identity authentication device 200 further includes:

[0171] The updating module 230 is configured to generate a fourth anonymous identity marker according to the master identity key in response to the user's identity marker generation operation; and replace the first anonymous identity marker in the user device with the fourth anonymous identity marker.

[0172] The device 200 provided in the embodiment of the present application can execute each method in the foregoing method embodiment and realize the functions and beneficial effects of each method in the foregoing method embodiment, which will not be repeated here.

[0173] Fig.14 A block diagram of an anonymous identity authentication device provided in an embodiment of the present application is shown, which is applied to a server, such as Fig.14 As shown, the anonymous identity authentication device 300 includes:

[0174] The receiving module 310 is used to receive an anonymous identity authentication request initiated by a third-party device, the anonymous identity authentication request including a first anonymous identity tag and at least one verification item, the first anonymous identity tag is generated by the user device in response to the user's identity tag generation operation according to the master identity key, the master identity key is generated by the server and stored in the user device, and the server includes multiple master identity keys and user privacy information corresponding to each master key information;

[0175] A verification module 320, configured to obtain a verification result of a verification item according to the first anonymous identity mark;

[0176] The sending module 330 is used to send the verification result to a third-party device.

[0177] Optionally, the verification module 320 is further used to determine a target master identity key corresponding to the first anonymous identity token from the master identity key set; when the target master identity key is included in the master identity key set, determine a verification result of the verification item according to the target privacy information corresponding to the target master identity key; or, when the target master identity key is not included in the master identity key combination, determine that the verification result is that the first anonymous identity token is illegal.

[0178] Optionally, the anonymous identity authentication request further includes at least one candidate anonymous authentication identity token, the authentication item includes anonymous identity identity authentication, and the authentication module 320 is further configured to determine a first target primary identity key of a target user corresponding to the first anonymous identity token from the primary identity key set;

[0179] Determine, from the master identity key set, a candidate master identity key corresponding to each candidate anonymous identity token;

[0180] In a case where the master identity key set does not include the first target master identity key or any candidate anonymous identity token, determining that the verification result is that the anonymous identity token is illegal;

[0181] In a case where the master identity key combination includes the first target master identity key and the candidate anonymous identity marker, a target candidate anonymous identity marker is determined from the candidate anonymous identity markers, the candidate master identity key corresponding to the target candidate anonymous identity marker is the same as the first target master identity key, a set consisting of the target candidate anonymous identity markers is used as a verification result of anonymous identity identity verification, and in a case where the target candidate anonymous identity marker is not included in the candidate anonymous identity markers, the verification result is determined to be a verification failure.

[0182] Fig.15 A block diagram showing another anonymous identity authentication device provided in an embodiment of the present application, which is applied to a server, such as Fig.15 As shown, the anonymous identity authentication device 300 further includes:

[0183] The registration query module 340 is used to receive a user registration request from a user, which includes the user's privacy information; generate the user's master identity key in response to the management user's approval of the user registration request; save the master identity key to the user's device, and associate the master identity key with the user's privacy information and save it in the server.

[0184] Optionally, the registration query module 340 is also used to receive a data query request initiated by a user device; send a randomly generated string to the user device so that the user device digitally signs the string according to the saved master identity key; receive the digital signature sent by the user device, and determine the second target master identity key corresponding to the user device based on the digital signature and the string; obtain and display the privacy information corresponding to the second target master identity key.

[0185] The device 200 provided in the embodiment of the present application can execute each method in the foregoing method embodiment and realize the functions and beneficial effects of each method in the foregoing method embodiment, which will not be repeated here.

[0186] Fig.16 A schematic diagram of the hardware structure of an electronic device that implements the embodiment of the present application is shown. Referring to the figure, at the hardware level, the electronic device includes a processor, and optionally, an internal bus, a network interface, and a memory. Among them, the memory may include a memory, such as a high-speed random access memory (Random-Access Memory, RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage, etc. Of course, the electronic device may also include hardware required for other services.

[0187] The processor, the network interface and the memory may be interconnected through an internal bus, which may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one bidirectional arrow is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0188] The memory stores the program. Specifically, the program may include a program code, and the program code includes a computer operation instruction. The memory may include a memory and a non-volatile memory, and provides instructions and data to the processor.

[0189] The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming a device for locating the target user at the logical level. The processor executes the program stored in the memory and specifically performs: Figure 2 , Figure 4-11 The method disclosed in the illustrated embodiment realizes the functions and beneficial effects of each method described in the foregoing method embodiments, which will not be described in detail here.

[0190] The above application Figure 2 , Figure 4-11The method disclosed in the illustrated embodiment may be implemented in a processor or by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the processor or by instructions in the form of software. The above processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application may be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. The steps of the method disclosed in conjunction with the embodiments of the present application may be directly embodied as being executed by a hardware decoding processor, or may be executed by a combination of hardware and software modules in a decoding processor. The software module can be located in a storage medium mature in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0191] The electronic device can also execute the methods described in the foregoing method embodiments, and realize the functions and beneficial effects of the methods described in the foregoing method embodiments, which will not be repeated here.

[0192] Of course, in addition to software implementation methods, the electronic device of the present application does not exclude other implementation methods, such as logic devices or a combination of software and hardware, etc. That is to say, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.

[0193] The embodiment of the present application also provides a computer-readable storage medium, wherein the computer-readable medium stores one or more programs, and when the one or more programs are executed by an electronic device including multiple application programs, the electronic device executes Figure 2 , Figure 4-11 The method disclosed in the illustrated embodiment realizes the functions and beneficial effects of each method described in the foregoing method embodiments, which will not be described in detail here.

[0194] The computer-readable storage medium includes a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0195] Furthermore, an embodiment of the present application also provides a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, and when the program instructions are executed by a computer, the following process is implemented: Figure 2 , Figure 4-11 The method disclosed in the illustrated embodiment realizes the functions and beneficial effects of each method described in the foregoing method embodiments, which will not be described in detail here.

[0196] In short, the above is only a preferred embodiment of the present application and does not limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

[0197] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0198] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0199] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0200] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

Claims

1. A method for anonymous identity authentication, characterized in that: Applied to a user device, the user device comprising a master identity key of a user, the method comprising: Acquire a first anonymous identity token of the user, where the first anonymous identity token is generated according to the master identity key in response to an identity token generation operation of the user, where the master identity key is generated by a server and stored in the user device, and the user's private information is stored in the server; Anonymous identity authentication is performed according to the first anonymous identity mark.

2. The method according to claim 1, characterized in that The anonymous identity authentication according to the first anonymous identity mark comprises: In response to the received digital signature request, generating a first digital signature for the content to be digitally signed in the digital signature request by using the first anonymous identity mark, and returning the first digital signature to the third-party device; or The first anonymous identity mark is provided to a third-party device, so that the third-party device completes anonymous identity authentication of the user to the server according to the first anonymous identity mark.

3. The method according to claim 2, characterized in that The user device further includes a first sub-identity key, the first anonymous identity tag is a public key of the first sub-identity key, the content to be digitally signed includes a second anonymous identity tag, and in response to the received data signature request, generating a first digital signature for the content to be digitally signed in the digital signature request by using the first anonymous identity tag includes: Obtaining the content to be digitally signed; In the case where the second anonymous identity identifier matches the first anonymous identity identifier, generating a first digital signature for the content to be digitally signed by using the first sub-identity key; or, When the second anonymous identity mark does not match the first anonymous identity mark, a prompt message indicating that the digital signature fails is displayed.

4. The method according to claim 3, characterized in that Generating a first digital signature for the content to be digitally signed in the digital signature request by using the first sub-identity key includes: Calculating the hash value of the content to be digitally signed; Displaying the digital signature request and the hash value to the user so that the user confirms the digital signature request; In response to a signature confirmation operation by the user, a first digital signature is generated for the content to be digitally signed according to the hash value and the first sub-identity key.

5. The method according to claim 2, characterized in that: The method further comprises: receiving a signature verification request, the signature verification request including digitally signed content and a digital signature to be verified, wherein the digitally signed content includes a third anonymous identity mark; Calculating a hash value of the digitally signed content, and calculating a second digital signature based on the hash value and the third anonymous identity mark; If the second digital signature matches the digital signature to be verified, determining the verification result of the third anonymous identity mark and the master identity key, and if the verification result is passed, sending the signature verification result indicating that the signature verification passed; or When the second digital signature does not match the digital signature to be verified or the verification result is failed, a signature verification result indicating that the signature verification failed is sent.

6. The method according to any one of claims 1 to 5, characterized in that The method further comprises: In response to the user's identity marker generation operation, generating a fourth anonymous identity marker according to the master identity key; The first anonymous identity marker in the user equipment is replaced with the fourth anonymous identity marker.

7. A method for anonymous identity authentication, characterized in that: Applied to a server, the method comprises: Receiving an anonymous identity authentication request initiated by a third-party device, the anonymous identity authentication request including a first anonymous identity tag and at least one verification item, the first anonymous identity tag is generated by the user device in response to an identity tag generation operation of the user according to a master identity key, the master identity key is generated by the server and stored in the user device, the server includes multiple master identity keys and user privacy information corresponding to each master key information; Acquire a verification result of the verification item according to the first anonymous identity mark; The verification result is sent to the third-party device.

8. The method according to claim 7, characterized in that The obtaining of the verification result of the verification item according to the first anonymous identity mark comprises: Determine a first target master identity key corresponding to the first anonymous identity token from the master identity key set; In a case where the first target master identity key is included in the master identity key set, determining a verification result of the verification item according to target privacy information corresponding to the first target master identity key; or When the first target master identity key is not included in the master identity key combination, it is determined that the verification result is that the first anonymous identity token is illegal.

9. The method according to claim 7, characterized in that: The anonymous identity authentication request further includes at least one candidate anonymous identity mark, the verification item includes anonymous identity verification, and obtaining the verification result of the verification item according to the first anonymous identity mark includes: Determine a first target master identity key of a target user corresponding to the first anonymous identity token from a set of master identity keys; Determine, from the master identity key set, a candidate master identity key corresponding to each candidate anonymous identity token; In a case where the master identity key set does not include the first target master identity key or any of the candidate anonymous identity tokens, determining that the verification result is that the anonymous identity token is illegal; In a case where the master identity key combination includes the first target master identity key and the candidate anonymous identity marker, a target candidate anonymous identity marker is determined from the candidate anonymous identity markers, the candidate master identity key corresponding to the target candidate anonymous identity marker is the same as the first target master identity key, a set consisting of the target candidate anonymous identity markers is used as a verification result of the anonymous identity identity verification, and in a case where the target candidate anonymous identity marker is not included in the candidate anonymous identity markers, the verification result is determined to be a verification failure.

10. The method according to any one of claims 7 to 9, characterized in that Before receiving the anonymous identity authentication request initiated by the third-party device, the method further includes: receiving a user registration request from a user, wherein the user registration request includes the user's private information; In response to the management user's approval of the user registration request, generating a master identity key of the user; The master identity key is saved in the user device, and the master identity key is associated with the user's private information and saved in the server.

11. The method according to claim 10, characterized in that After saving the master identity key in the user device, the method further includes: Receiving a data query request initiated by a user device; Sending a randomly generated character string to the user device so that the user device digitally signs the character string according to the stored master identity key; receiving a digital signature sent by the user equipment, and determining a second target primary identity key corresponding to the user equipment according to the digital signature and the character string; Obtain and display the privacy information corresponding to the second target master identity key.

12. An anonymous identity authentication device, characterized in that: Applied to a user device, the user device including a master identity key of the user, including: an acquisition module, configured to acquire a first anonymous identity mark of a user, wherein the first anonymous identity mark is generated according to the master identity key in response to an identity mark generation operation of the user, the master identity key is generated by a server and stored in the user device, and the privacy information of the user is stored in the server; A verification module is used to perform anonymous identity verification according to the first anonymous identity mark.

13. An anonymous identity authentication device, characterized in that: Applicable to servers, including: A receiving module, configured to receive an anonymous identity authentication request initiated by a third-party device, wherein the anonymous identity authentication request includes a first anonymous identity tag and at least one verification item, wherein the first anonymous identity tag is generated by the user device in response to an identity tag generation operation of the user according to a master identity key, wherein the master identity key is generated by the server and stored in the user device, and wherein the server includes a plurality of master identity keys and user privacy information corresponding to each master key information; A verification module, configured to obtain a verification result of the verification item according to the first anonymous identity mark; A sending module is used to send the verification result to the third-party device.

14. A user equipment, comprising: processor; as well as A memory arranged to store computer executable instructions, wherein when the executable instructions are executed, the processor is used to perform the steps of the anonymous identity authentication method according to any one of claims 1 to 6.

15. A server, comprising: processor; as well as A memory arranged to store computer executable instructions, which, when executed, use the processor to perform the steps of the anonymous identity authentication method according to any one of claims 7 to 11.

16. A computer-readable storage medium storing one or more programs, which, when executed by an electronic device including multiple applications, enable the electronic device to perform the steps of the anonymous identity authentication method described in any one of claims 1-6; or, which, when executed by an electronic device including multiple applications, enable the electronic device to perform the anonymous identity authentication method described in any one of claims 7-11.

Images