Identity recognition system based on block chain

Abstract

The invention discloses an identity recognition system based on a block chain, relates to the technical field of information recognition, and solves the technical problems that after an applicant replaces an access device or resets the device, a private key and a unique sequence may be lost, the identity of the applicant cannot be verified and recognized, and management of the identity of the applicant is not facilitated. According to the method, identity information of users is collected, and the users are classified to obtain types of the users; constructing a corresponding block chain based on the type of the user; the identity information of the user is numbered according to the type of the user, and an identity label is obtained; storing the identity information of the user and the corresponding identity label in a corresponding block chain in an encrypted manner; acquiring verification information of the to-be-authenticated user, and determining the type of the to-be-authenticated user according to the verification information; verifying the identity information of the user according to the type of the to-be-authenticated user; allowing access of the user based on the verification result; the identity of the user can be managed, and the security of identity information is guaranteed.

Description

Technical Field

[0001] The present invention belongs to the field of information identification and relates to identity identification technology, specifically an identity identification system based on blockchain. Background Art

[0002] Identity recognition refers to the process of determining the identity of a person by analyzing and judging certain features provided by the person to be identified. Identity recognition technology is widely used in security verification, data management, financial services, traffic management, education, the Internet and other fields. Blockchain technology adopts a decentralized storage method, and identity information no longer relies on a single server or centralized database. This structure makes it difficult for attackers to obtain complete identity information even if a node is attacked, thereby reducing the risk of data leakage. Once the data on the blockchain is written, it is difficult to be modified or deleted, ensuring the authenticity and integrity of the identity information. In the blockchain identity recognition system, users can control their own identity information and choose which information to share with specific trusted objects, which not only protects user privacy but also reduces the risk of identity theft.

[0003] The prior art (invention patent application with publication number CN112328997A) discloses a trusted identity identification method based on blockchain, which includes: collecting the identity and biometric information of the applicant and performing real-name authentication; generating an asymmetric key pair from the real-name authentication information according to an asymmetric cryptographic algorithm, the asymmetric key pair including a public key and a private key; using the asymmetric cryptographic algorithm, the public key, and the real-name authentication information as a set of identity identification data, respectively copying the set of data to be uploaded into multiple sets of identity identification data, and respectively copying the set of data to be uploaded into multiple sets of identity identification data, and configuring the same unique serial number for each set; uploading the multiple sets of identity identification data configured with unique serial numbers to different nodes of the blockchain in a dispersed manner, and sending the private key and the unique serial number to the applicant for storage, so as to achieve trusted identification of the applicant; the prior art stores the applicant's information on different nodes of the blockchain, and sends the private key and the unique sequence to the applicant for storage; however, when the applicant changes the access device or resets the device, the private key and the unique sequence may be lost, resulting in the inability to verify and identify the applicant's identity, which is not conducive to the management of the applicant's identity.

[0004] The present invention provides an identity recognition system based on blockchain to solve the above technical problems. Summary of the invention

[0005] The present invention aims to solve at least one of the technical problems existing in the prior art; to this end, the present invention proposes an identity recognition system based on blockchain, which is used to solve the technical problem that the prior art stores the applicant's information on different nodes of the blockchain, and sends the private key and unique sequence to the applicant for storage; however, when the applicant changes the access device or resets the device, the private key and unique sequence may be lost, resulting in the inability to verify and identify the applicant's identity, which is not conducive to the management of the applicant's identity.

[0006] To achieve the above-mentioned purpose, the first aspect of the present invention provides an identity recognition system based on blockchain, comprising: an identity storage module, and an identity collection module and an identity recognition module connected thereto;

[0007] Identity collection module: used to collect user identity information through several channels;

[0008] Identity storage module: used to classify users according to their identity information to obtain user types; build corresponding blockchains based on user types; number user identity information according to user types to obtain identity identifiers; encrypt and store user identity information and corresponding identity identifiers in corresponding blockchains;

[0009] Identity recognition module: used to obtain the verification information of the user to be authenticated, determine the type of the user to be authenticated based on the verification information; verify the user's identity information based on the type of the user to be authenticated; and allow the user access based on the verification result.

[0010] Preferably, classifying users according to their identity information to obtain user types includes:

[0011] Retrieving the user's identity information; wherein the user's identity information includes: account number, password, real-name information and face information; determining the type of account according to the user's real-name information; wherein the type of account includes: internal account and access account;

[0012] Obtain the preset account level of the access account; classify access users with the same account level into the same type; wherein the account level includes ordinary account, member account and senior member account.

[0013] It should be noted that the account levels are ranked from low to high as follows: ordinary account, member account, senior member account and internal account; the level of the internal account is higher than the level of the access account.

[0014] The present invention classifies users according to their identity information, which can provide a basis for the subsequent construction of a blockchain, and classifying users is conducive to the management of their identity information.

[0015] Preferably, the construction of a corresponding blockchain based on the type of user includes:

[0016] Retrieve the user type; sort and number the user types according to the level to obtain the corresponding type identification; count the number of user types; construct the corresponding number of blockchains according to the number of user types;

[0017] Assign the corresponding type identifier to the corresponding blockchain to obtain the blockchain number; integrate several blockchains to obtain the identity blockchain.

[0018] It should be noted that the user type level is set manually, and the user types are sorted in descending order and numbered.

[0019] The present invention numbers user types according to their levels to obtain corresponding type identifiers; constructs a corresponding number of blockchains according to the number of types, and assigns type identifiers to the blockchains; integrates several blockchains to obtain an identity blockchain; and can classify and store user identity information, which is beneficial to ensuring the security and reliability of user identity information.

[0020] Preferably, the step of numbering the user's identity information according to the user's type to obtain the identity identifier includes:

[0021] Retrieving identity information of users of the same type, sorting the users in alphabetical order of their names according to the real-name information in the identity information, and obtaining a sorting table of users of several types;

[0022] Determine the first n digits of identity codes of several types of users according to the set type codes, and improve the identity codes of users according to the sorting tables of several types of users; integrate the identity information of users into identity sequences; assign the identity codes to the identity sequences to obtain the identity identifiers of users.

[0023] It should be noted that the user's identity is updated regularly. When the account level of the accessing user changes, the user's identity is updated in time. When a new user joins, the new user is directly placed at the end of the user ranking table and the new user's identity information is numbered.

[0024] The present invention sets a partial identity code of a user according to the type of the user, sorts users of the same type to obtain a user sorting table of several types, improves the identity code of the user according to the user sorting table of several types, and assigns the identity code to an integrated identity sequence to obtain the identity identification of the user; the identity information of the user can be numbered, which is conducive to the management of the identity information of the user and the accurate positioning of the identity information of the user.

[0025] Preferably, the step of encrypting and storing the user's identity information and the corresponding identity identifier in the corresponding blockchain includes:

[0026] Retrieve the user's identity information and stored blockchain to obtain the encryption algorithm library; randomly select an encryption algorithm from the encryption algorithm library; match the encryption algorithm to several types of blockchains;

[0027] The identity information corresponding to the blockchain is encrypted according to the corresponding encryption algorithm, and the encrypted identity information is stored in the corresponding blockchain.

[0028] It should be noted that when selecting an encryption algorithm, each type of blockchain corresponds to a different encryption algorithm, so the number of selected encryption algorithms is the same as the number of blockchains.

[0029] The present invention randomly selects an encryption algorithm to encrypt the identity information in the corresponding blockchain according to the type of blockchain, and then stores the encrypted identity information in the corresponding blockchain. It can manage the identity information of different types of users differently, which is beneficial to ensuring the security of user identity information.

[0030] Preferably, determining the type of the user to be authenticated according to the verification information includes:

[0031] Retrieve the user's verification information; wherein the data type of the verification information is consistent with the identity information; extract the account number in the verification information;

[0032] The account number in the verification information is encrypted according to different types of encryption algorithms to obtain several verification keys; the several verification keys are matched with the keys corresponding to the accounts in several blockchains to obtain keys consistent with the verification keys; the type of blockchain where the key is located is used as the type of user.

[0033] The present invention encrypts the account number in the verification information according to the encryption algorithm of several blockchains, matches the encrypted verification key with the key corresponding to the account number in the blockchain, and obtains the type of user; this lays the foundation for the subsequent determination of the user's identity information and can accurately locate the user's identity information.

[0034] Preferably, verifying the identity information of the user according to the type of the user to be authenticated includes:

[0035] Retrieve the type of user to be authenticated; retrieve the blockchain corresponding to the user type; extract the identity identifier whose key is consistent with the verification key from the blockchain; decrypt the corresponding identity information according to the identity identifier to obtain the stored identity information;

[0036] Retrieve the user's verification information and compare the verification information with the identity information; determine whether the sub-data of the verification information and the sub-data of the identity information are the same; if yes, mark the verification result as successful; if not, mark the verification result as failed.

[0037] The present invention obtains the identity identifier of the key of the account that matches the verification key; decrypts the corresponding identity information according to the identity identifier to obtain the stored identity information; compares the verification information with the identity information to obtain the verification result; and can verify the identity of the user, which is beneficial to ensure that the information of the accessing person has been reviewed and avoid malicious access by others.

[0038] Preferably, allowing the user to access based on the verification result includes:

[0039] Retrieve the verification result and determine whether the verification result is successful; if yes, determine the scope of user access according to the user type; if no, do not allow the user to access and count the number of verification failures;

[0040] Count the number of user identity authentication failures within the set time period and determine whether the number is greater than the threshold; if yes, freeze the corresponding account; if no, continue to count the number of authentication failures.

[0041] The present invention permits user access based on the verification result. When the verification result is successful, the scope of access is determined according to the type of user; otherwise, the number of times the user account verification fails is counted; when the number of verification failures is greater than a threshold, the user's account is frozen; this can prevent others from maliciously logging into the user's account to maliciously access information, which is beneficial to ensuring the security of access to information.

[0042] Compared with the prior art, the present invention has the following beneficial effects:

[0043] 1. The present invention classifies users according to their identity information, which can provide a basis for the subsequent construction of a blockchain, and classifies users, which is conducive to managing the identity information of users; according to the level of the user type, the user type is numbered to obtain a corresponding type identifier; a corresponding number of blockchains are constructed according to the number of types, and the type identifier is assigned to the blockchain; several blockchains are integrated to obtain an identity blockchain; the identity information of users can be classified and stored, which is conducive to ensuring the security and reliability of the user identity information; according to the user type, a partial identity code of the user is set, and users of the same type are sorted to obtain several types of user sorting tables, and the identity code of the user is improved according to the several types of user sorting tables, and the identity code is assigned to the integrated identity sequence to obtain the user's identity identifier; the identity information of the user can be numbered, which is conducive to managing the identity information of the user and accurately locating the identity information of the user; according to the type of blockchain, an encryption algorithm is randomly selected to encrypt the identity information in the corresponding blockchain, and the encrypted identity information is stored in the corresponding blockchain, which can manage the identity information of different types of users differently, which is conducive to ensuring the security of the user identity information.

[0044] 2. The present invention encrypts the account number in the verification information according to the encryption algorithm of several blockchains, matches the encrypted verification key with the key corresponding to the account number in the blockchain, and obtains the type of user; lays the foundation for the subsequent determination of the user's identity information, and can accurately locate the user's identity information; obtains the identity identifier of the key of the account number that matches the verification key; decrypts the corresponding identity information according to the identity identifier to obtain the stored identity information; compares the verification information with the identity information to obtain the verification result; can verify the identity of the user, which is conducive to ensuring that the information of the access personnel has been reviewed and avoiding malicious access by others; authorizes the user's access according to the verification result, and when the verification result is successful, determines the scope of access according to the user type; otherwise, counts the number of times the user account verification fails; when the number of times the verification fails is greater than the number threshold, the user's account is frozen; can avoid others maliciously logging in to access the user's account to maliciously access information, which is conducive to ensuring the security of access information. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0046] Figure 1 It is a schematic diagram of the overall steps of the present invention;

[0047] Figure 2 A schematic diagram of the steps for constructing a blockchain according to the present invention;

[0048] Figure 3 A schematic diagram of the steps of encrypting and storing identity information of the present invention;

[0049] Figure 4 It is a schematic diagram of the user identity authentication steps of the present invention. DETAILED DESCRIPTION

[0050] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0051] See also Figure 1 , the first aspect of the present invention provides an identity recognition system based on blockchain, including: an identity storage module, and an identity collection module and an identity recognition module connected thereto;

[0052] Identity collection module: used to collect user identity information through several channels;

[0053] Identity storage module: used to classify users according to their identity information to obtain user types; build corresponding blockchains based on user types; number user identity information according to user types to obtain identity identifiers; encrypt and store user identity information and corresponding identity identifiers in corresponding blockchains;

[0054] Identity recognition module: used to obtain the verification information of the user to be authenticated, determine the type of the user to be authenticated based on the verification information; verify the user's identity information based on the type of the user to be authenticated; and allow the user access based on the verification result.

[0055] See also Figure 2 , collect user identity information through several channels; wherein the user identity information includes: account number, password, real-name information and face information; determine the type of account based on the user's real-name information; wherein the account types include: internal account and access account; obtain the preset account level of the access account; classify access users with the same account level into the same type; wherein the account levels include ordinary account, member account and senior member account.

[0056] It should be noted that the user's identity information is generally filled in by the user himself, and the facial information is collected by the user himself. Several channels include the user himself and websites permitted by law. When obtaining the user's identity information, the user's identity information is obtained with the user's consent.

[0057] Retrieve the user type; sort and number the user types according to the level to obtain the corresponding type identification; count the number of user types; construct a corresponding number of blockchains according to the number of user types; assign the corresponding type identification to the corresponding blockchain to obtain the blockchain number; integrate several blockchains to obtain the identity blockchain.

[0058] For example: Assuming that the identity information of four users is currently collected, the account type of user A is determined to be an internal account based on the user's real-name information, and the account types of user B, user C, and user D are access accounts; the account levels of user B, user C, and user D are obtained as member account, ordinary account, and member account respectively; user B and user C are classified into the same type, and the account level is set according to the user's identity authority.

[0059] According to the user type, the users are sorted and numbered according to the level, and the corresponding type identification is 01 user A, 02 user C and user B, 03 user C; according to the number of user types, three blockchains are constructed, corresponding to internal accounts, member accounts and ordinary accounts respectively.

[0060] See also Figure 3 , retrieve the identity information of users of the same type, sort the users in alphabetical order of their names according to the real-name information in the identity information, and obtain a user sorting table of several types; determine the first n identity codes of several types of users according to the set type codes, and improve the identity codes of the users according to the user sorting tables of several types; integrate the identity information of the users into an identity sequence; assign the identity code to the identity sequence, and obtain the identity identifier of the user.

[0061] For example: suppose user B and user D are encoded, and the real-name information of user B and user D is sorted in the order of pinyin letters, and the user sorting table of the member account is obtained as user B and user D; according to the set type code, the first 4 digits of user B and user D are determined to be FWHY; according to the user sorting table, the user's identity code is improved, and the identity code of user B is FWHY01, and the identity code of user D is FWHY02; the information of user B and user D is respectively integrated to obtain the identity sequence, and the identity code is assigned to the identity sequence to obtain the user's identity identification.

[0062] Retrieve the user's identity information and stored blockchain to obtain an encryption algorithm library; randomly select an encryption algorithm from the encryption algorithm library; match the encryption algorithm to several types of blockchains; encrypt the identity information corresponding to the blockchain according to the corresponding encryption algorithm, and store the encrypted identity information in the corresponding blockchain.

[0063] For example: suppose the identities of four users are encrypted, and the encryption algorithm library is obtained. Blockchain 01 uses encryption algorithm C, blockchain 02 uses encryption algorithm H, and blockchain 03 uses encryption algorithm G; then the identity information of user A is encrypted with encryption algorithm C and stored on blockchain 01; the identity information of user B and user D is encrypted with encryption algorithm H and stored on blockchain 02; the identity information of user C is encrypted with encryption algorithm G and stored on blockchain 03.

[0064] See also Figure 4 , obtain verification information of the user to be authenticated, wherein the data type of the verification information is consistent with the identity information; extract the account number in the verification information; encrypt the account number in the verification information according to different types of encryption algorithms to obtain several verification keys; match the several verification keys with the keys corresponding to the accounts in several blockchains to obtain keys consistent with the verification keys; and use the type of the blockchain where the key is located as the type of the user.

[0065] For example: Assuming that the verification information of user 1 and user 2 is obtained, the account in the verification information is encrypted using encryption algorithms C, H, and G to obtain three verification keys; the three verification keys are matched with the keys corresponding to the accounts in the three blockchains to obtain keys consistent with the verification keys; the type of user 1 is a member user, and the type of user 2 is an internal user.

[0066] Retrieve the type of user to be authenticated; retrieve the blockchain corresponding to the user type; extract an identity identifier whose key is consistent with the verification key from the blockchain; decrypt the corresponding identity information according to the identity identifier to obtain the stored identity information; retrieve the user's verification information, and compare the verification information with the identity information; determine whether the sub-data of the verification information and the sub-data of the identity information are the same; if yes, mark the verification result as successful; if not, mark the verification result as failed.

[0067] Retrieve the verification result to determine whether the verification result is successful; if yes, determine the scope of user access based on the user type; if no, do not allow the user to access, and count the number of verification failures; count the number of user identity authentication failures within the set time period, and determine whether the number is greater than the number threshold; if yes, freeze the corresponding account; if no, continue to count the number of verification failures.

[0068] For example: suppose that the verification information of user 1 and user 2 is verified, and the identity identifier of user 1 is FWHY02; the identity identifier of user 2 is NBZH01; then the verification information of user 1 is verified with the decrypted identity information of user D, and the verification information of user 2 is verified with the decrypted identity information of user A; the verification result of user 2 is successful, user 2 is an internal account, and user 2 can access all information.

[0069] If user 1 fails the first verification and fails 4 times within 5 minutes, exceeding the threshold of 3 times, the account of user 1 will be frozen and unfrozen after the set time period of 12 hours.

[0070] The working principle of the present invention is as follows: the present invention collects the identity information of users through several channels; classifies the users according to their identity information to obtain the types of users; builds a corresponding blockchain based on the types of users; numbers the identity information of users according to the types of users to obtain identity identifiers; encrypts and stores the identity information of users and the corresponding identity identifiers in the corresponding blockchain; obtains the verification information of the user to be authenticated, and determines the type of the user to be authenticated according to the verification information; verifies the identity information of the user according to the type of the user to be authenticated; and allows the user's access based on the verification result.

[0071] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. Blockchain-based identity recognition system, including: The identity storage module, and the identity collection module and identity recognition module connected thereto are characterized in that: Identity collection module: used to collect user identity information through several channels; Identity storage module: used to classify users according to their identity information to obtain user types; build corresponding blockchains based on user types; number user identity information according to user types to obtain identity identifiers; encrypt and store user identity information and corresponding identity identifiers in corresponding blockchains; Identity recognition module: used to obtain the verification information of the user to be authenticated, determine the type of the user to be authenticated based on the verification information; verify the user's identity information based on the type of the user to be authenticated; and allow the user access based on the verification result.

2. The blockchain-based identity recognition system according to claim 1, characterized in that: The user is classified according to the user's identity information to obtain the user type, including: Retrieving the user's identity information; wherein the user's identity information includes: account number, password, real-name information and face information; determining the type of account according to the user's real-name information; wherein the type of account includes: internal account and access account; Obtain the preset account level of the access account; classify access users with the same account level into the same type; wherein the account level includes ordinary account, member account and senior member account.

3. The blockchain-based identity recognition system according to claim 2 is characterized in that: The method of constructing a corresponding blockchain based on the user type includes: Retrieve the user type; sort and number the user types according to the level to obtain the corresponding type identification; count the number of user types; construct the corresponding number of blockchains according to the number of user types; Assign the corresponding type identifier to the corresponding blockchain to obtain the blockchain number; integrate several blockchains to obtain the identity blockchain.

4. The blockchain-based identity recognition system according to claim 1, characterized in that: The step of numbering the user's identity information according to the user's type to obtain the identity identifier includes: Retrieving identity information of users of the same type, sorting the users in alphabetical order of their names according to the real-name information in the identity information, and obtaining a sorting table of users of several types; Determine the first n digits of identity codes of several types of users according to the set type codes, and improve the identity codes of users according to the sorting tables of several types of users; integrate the identity information of users into identity sequences; assign the identity codes to the identity sequences to obtain the identity identifiers of users.

5. The blockchain-based identity recognition system according to claim 1, characterized in that: The step of encrypting and storing the user's identity information and the corresponding identity identifier in the corresponding blockchain includes: Retrieve the user's identity information and stored blockchain to obtain the encryption algorithm library; randomly select an encryption algorithm from the encryption algorithm library; match the encryption algorithm to several types of blockchains; The identity information corresponding to the blockchain is encrypted according to the corresponding encryption algorithm, and the encrypted identity information is stored in the corresponding blockchain.

6. The blockchain-based identity recognition system according to claim 5, characterized in that: Determining the type of the user to be authenticated according to the verification information includes: Retrieve the user's verification information; wherein the data type of the verification information is consistent with the identity information; extract the account number in the verification information; The account number in the verification information is encrypted according to different types of encryption algorithms to obtain several verification keys; the several verification keys are matched with the keys corresponding to the accounts in several blockchains to obtain keys consistent with the verification keys; the type of blockchain where the key is located is used as the type of user.

7. The blockchain-based identity recognition system according to claim 1, characterized in that: The verifying of the user's identity information according to the type of the user to be authenticated includes: Retrieve the type of user to be authenticated; retrieve the blockchain corresponding to the user type; extract the identity identifier whose key is consistent with the verification key from the blockchain; decrypt the corresponding identity information according to the identity identifier to obtain the stored identity information; Retrieve the user's verification information and compare the verification information with the identity information; determine whether the sub-data of the verification information and the sub-data of the identity information are the same; if yes, mark the verification result as successful; if not, mark the verification result as failed.

8. The blockchain-based identity recognition system according to claim 7, characterized in that: The user's access is allowed based on the verification result, including: Retrieve the verification result and determine whether the verification result is successful; if yes, determine the scope of user access according to the user type; if no, do not allow the user to access and count the number of verification failures; Count the number of user identity authentication failures within the set time period and determine whether the number is greater than the threshold; if yes, freeze the corresponding account; if no, continue to count the number of authentication failures.

Images