Distributed trusted virtual human identity authentication system and method based on block chain
Through the distributed trusted virtual person identity authentication system based on blockchain, the legal risks and regulatory difficulties of determining and confirming virtual person identity are solved, and the secure storage and verification of virtual person identity is realized, ensuring the authenticity and credibility of identity is ensured.
Patent Information
- Application Number
- CN202411705070.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-26
- Publication Date
- 2025-05-13
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
There are legal risks and regulatory difficulties in determining and confirming the identity of virtual persons, especially in terms of personality and intellectual property infringement and data security.
The distributed trusted virtual person identity authentication system based on blockchain is adopted, and the distributed digital identity system of virtual persons is generated and stored to ensure the authenticity and credibility of their identity through the collaborative work of the distributed digital identity system, the virtual person digital identity registration system and the digital certificate authentication center.
It realizes the secure storage and verification of virtual human identities, ensures the authenticity of the identity, reduces legal risks and regulatory difficulties, and provides a reliable virtual human identity authentication and authorization process.
Smart Images

Figure CN119989324A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of virtual human identity authentication, and in particular to a distributed trusted virtual human identity authentication system and method based on blockchain. Background Art
[0002] Virtual humans refer to those that exist in the non-physical world, are created and used by computer means such as computer graphics, graphics rendering, motion capture, deep learning, and speech synthesis, and have multiple human characteristics, such as appearance, human performance ability, and human interaction ability.
[0003] At present, virtual humans are experiencing rapid industrial upgrading, and relevant departments have issued policies to strongly support it. The development and integration of technologies such as artificial intelligence, virtual reality, and high-precision rendering have made virtual humans more and more anthropomorphic. From image, expression, posture, action, to voice, meaning, and voice, all aspects are gradually approaching the level of real people, which also promotes the rapid development of the virtual human industry. The widespread use of AIGC generation algorithms and the emergence of various multimodal models have accelerated the evolution of virtual humans into real "people". The use scenarios are constantly being unlocked, and virtual idols, e-commerce anchors, virtual customer service, virtual front desk, virtual tour guides, virtual hosts, digital employees and other types of virtual humans are releasing value in multiple fields. In the future, virtual humans are expected to gradually penetrate from corporate image representatives that provide certain corporate services to the C-end, becoming the incarnation of personal digital assets and a symbol of identity in the metaverse. However, the rise of virtual humans also brings legal risks and regulatory difficulties such as personality and intellectual property infringement, data security, etc., and the identification and confirmation of virtual humans will become an indispensable requirement. Summary of the invention
[0004] The purpose of the present invention is to provide a distributed trusted virtual human identity authentication system and method based on blockchain.
[0005] The present invention provides a distributed trusted virtual human identity authentication system based on blockchain, comprising: A distributed digital identity system is used to obtain user entity identity information registration data, verify the user entity identity, and after the user entity identity is verified, create an identity for the virtual person identity corresponding to the user entity, and generate a target virtual person distributed digital identity corresponding to the current user entity identity; A virtual person digital identity registration system, which is used to obtain the target digital identity information when the target virtual person digital identity is created, generate a distributed digital identity of the target virtual person, and store the distributed digital identity of the target virtual person, wherein the target virtual person includes a digital avatar of a natural person and a digital person virtually created based on a digital character image; The digital certificate authentication center is used to respond to the digital identity certificate request of the target virtual person and send the target digital identity certificate corresponding to the target virtual person identity to the distributed digital identity system and the virtual person digital identity registration system respectively according to the target digital identity certificate request.
[0006] Preferably, the distributed digital identity system comprises: The holder entity identity verification module is used to obtain the user entity identity information registration data, perform system registration and user identity authentication through the distributed digital identity system, and verify the user entity identity. The current user types include natural person users and corporate users; A virtual person digital identity creation module is used to perform a digital identity creation operation on the virtual person held by the user after the user's physical identity is verified. The digital identity creation operation includes selecting an identity type, registering identity information, providing descriptive information, and uploading a virtual person model file; A virtual person digital identity generation module is used to request the digital certificate authentication center to generate the distributed digital identity certification data of the target virtual person using the target data obtained when the virtual person digital identity is created. The distributed digital identity certification data of the target virtual person is a digital identity certificate with a DID data structure generated for each virtual person identity based on the distributed digital identity technology, as well as a digital identity sub-credential corresponding to each virtual person model file; The virtual human digital identity notarization module is used to configure the target virtual human's distributed digital identity sub-credential and the target virtual human model file together into an executable file, upload it to the virtual human digital identity registration system through the API interface, obtain the digital identity hash value corresponding to the current model file, and store the hash value for notarization to ensure the authenticity of the virtual human identity.
[0007] Preferably, the distributed digital identity system further comprises: The virtual person digital identity modification and update module is used to modify and update the current virtual person digital identity held by the user through the API interface when modifying the current virtual person digital identity, upload the corresponding certification documents or updated information of the current virtual person digital identity, update the current virtual person digital identity certificate after verifying the certification documents, and store the updated virtual person digital identity certificate in the virtual person digital identity registration system, and issue it to the holder's digital wallet; The virtual human digital identity query and verification module is used to call the current virtual human's digital identity certificate for on-chain verification, and / or obtain the authorized virtual human model file currently in use including the bundled digital identity sub-credential and upload it to the distributed digital identity system for off-chain verification. The hash value of the model file is generated based on the sub-credential information read and compared with the stored hash value to verify the current virtual human identity.
[0008] Preferably, it also includes a virtual human authorization module, which is used to create an authorization letter, verify the physical identities of both parties, and form a smart contract with electronic signatures, and store the evidence on the judicial blockchain. A security lock is generated based on the information in the authorization letter to form a virtual human model SDK containing a security lock, ensuring that only the authorized party can decrypt and use it after identity verification, and that it can only be used within the authorized period.
[0009] Preferably, a virtual human application rights protection module is also included, which is used to conduct network-wide monitoring based on a vector search engine to search for unauthorized virtual human use behavior. When unauthorized virtual human use behavior is monitored, real-time online evidence is collected and stored on the judicial blockchain.
[0010] The present invention also provides a distributed trusted virtual human identity authentication method based on blockchain, which is applicable to the distributed trusted virtual human identity authentication system based on blockchain as described in this embodiment, and includes the following steps: Establish interactive connections between the distributed digital identity system and the digital certificate authentication center and the virtual person digital identity registration system respectively; Obtaining user entity identity information registration data, verifying the user entity identity, and after the user entity identity is verified, creating a digital identity for the virtual person identity corresponding to the user entity, generating a target virtual person identity corresponding to the current user entity identity, and storing the target virtual person identity; Acquire the target virtual person's digital identity information input when the target virtual person's digital identity is created, generate a distributed digital identity of the target virtual person based on a distributed digital identity system, and store the distributed digital identity of the target virtual person, wherein the target virtual person includes a digital avatar of a natural person and a digital person virtually created based on a digital character image; In response to the digital identity certificate request of the target virtual person, the target digital identity certificate corresponding to the target virtual person identity is sent to the distributed digital identity system and the virtual person digital identity registration system respectively according to the target digital identity certificate request.
[0011] Preferably, generating a target virtual person identity corresponding to the current user entity identity includes: Obtain user entity identity information registration data, perform system registration and user identity authentication through the distributed digital identity system, and verify the user entity identity. The current user types include natural person users and corporate users; After the user's physical identity is verified, a digital identity creation operation is performed on the virtual person held by the user, and the digital identity creation operation includes selecting an identity type, registering identity information, providing descriptive information, and uploading a virtual person model file; Obtain the target data input when creating the virtual person's digital identity and request the digital certificate authentication center to generate the distributed digital identity certification data of the target virtual person, wherein the distributed digital identity certification data of the target virtual person is a digital identity certificate of a DID data structure generated for each virtual person identity based on the distributed digital identity technology / model, and a digital identity sub-credential corresponding to each virtual person model file; The distributed digital identity sub-credential of the target virtual person and the virtual person model file are configured as an executable file, uploaded to the virtual person digital identity registration system through the API interface, the digital identity hash value corresponding to the current model file is obtained, and the hash value is stored for evidence to ensure the authenticity of the virtual person's identity.
[0012] Preferably, generating a distributed digital identity of a target virtual person further comprises: When modifying the current virtual person digital identity, the current virtual person digital identity held by the user is modified and updated through the API interface, the corresponding certification documents or updated information of the current virtual person digital identity are uploaded, and the current virtual person digital identity certificate is updated after verifying the certification documents, and the updated virtual person digital identity certificate is stored in the virtual person digital identity registration system and issued to the holder's digital wallet; Call the current virtual person's digital identity certificate for on-chain verification, and / or obtain the authorized virtual person model file currently in use including the bundled digital identity sub-credential and upload it to the distributed digital identity system for off-chain verification. Generate a hash value of the model file based on the sub-credential information, and compare it with the stored hash value to verify the current virtual person's identity.
[0013] The present invention also provides an electronic device, comprising: A memory, the memory being used to store a processing program; A processor, when executing the processing program, implements the distributed trusted virtual human identity authentication method based on blockchain as described in this embodiment.
[0014] The present invention also provides a readable storage medium, on which a processing program is stored. When the processing program is executed by a processor, the distributed trusted virtual human identity authentication method based on blockchain as described in this embodiment is implemented.
[0015] With respect to the prior art, the present invention has the following beneficial effects: The distributed trusted virtual human identity authentication system based on blockchain provided by the present invention selects appropriate blockchain platforms and tools, builds a stable distributed system, generates digital identity credentials with DID data structure, and realizes the secure storage and verification of virtual human identity; based on the development and deployment of smart contracts, it can realize the automated identity authentication and authorization process of virtual human on blockchain; it also has certain professional capabilities in privacy protection and data security to ensure the identity information of virtual human and user privacy.
[0016] The present invention establishes an interactive connection between the distributed digital identity system and the digital certificate authentication center and the virtual person digital identity registration system, obtains the user entity identity information, verifies it, and registers the corresponding virtual person digital identity after passing the verification. Based on the registration information, the virtual person's DID (distributed identifier) and related digital identity proof data are generated, the generated identity proof data is configured as an executable file, and uploaded through the API, and the digital identity hash value is obtained and stored to ensure the authenticity of the identity. BRIEF DESCRIPTION OF THE DRAWINGS
[0017] Figure 1 This is a block diagram of a distributed trusted virtual human identity authentication system based on blockchain in an embodiment of the present invention; Figure 2 This is an example diagram of the holder entity identity verification module process in an embodiment of the present invention; Figure 3 An example diagram of a process for creating a distributed digital identity of a virtual person in an embodiment of the present invention; Figure 4 This is a diagram showing an example of a virtual human image configuration in a virtual human digital identity registration module in an embodiment of the present invention; Figure 5 This is an example diagram of the process of ownership review in the virtual person digital identity registration module in an embodiment of the present invention; Figure 6 This is an example diagram of the flow of a virtual person digital identity modification and update module in an embodiment of the present invention; Figure 7 This is an example diagram of the virtual human digital identity query and verification module process in an embodiment of the present invention; Figure 8 This is an example diagram of the overall architecture of the virtual human rights protection module in an embodiment of the present invention; Fig. 9 This is an example diagram of a vector database architecture in an embodiment of the present invention; Fig.10 The figure is a flowchart of a distributed trusted virtual human identity authentication method based on blockchain in an embodiment of the present invention. DETAILED DESCRIPTION
[0018] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0019] like Figure 1 As shown, the present invention provides a distributed and trusted virtual human identity authentication system based on blockchain, which combines distributed digital identity technology to build a registration, issuance, and management platform for distributed digital identities and verifiable credentials that comply with W3C standard specifications. It provides a unified, self-explanatory, and highly portable distributed identity identification for virtual humans created based on natural person images and completely virtual digital humans owned by individual and corporate users. It also supports verifiable credential management in multiple scenarios, effectively solving the problems of virtual human identity determination and right confirmation. Based on distributed digital identity technology, the secure storage and verification of virtual human identity information on the blockchain is realized. The system will provide functions such as identity registration, authentication and verification, distributed identity management, and open interfaces to ensure that the identity of virtual humans is authentic and trustworthy, and provide safe and reliable virtual human identity authentication and related services for users in multiple fields. The system architecture is designed as follows: the distributed digital identity system is used to obtain the user entity identity information registration data, verify the user entity identity, and after the user entity identity is verified, create a digital identity for the virtual person corresponding to the user entity, and generate a target virtual person distributed digital identity corresponding to the current user entity identity; the virtual person digital identity registration system is used to obtain the target digital identity information when the target virtual person's digital identity is created, generate a distributed digital identity of the target virtual person, and store the distributed digital identity of the target virtual person. The target virtual person includes a digital avatar of a natural person and a digital person virtually created based on a digital character image; the digital certificate authentication center is used to respond to the digital identity credential request of the target virtual person, and send the target digital identity credential corresponding to the target virtual person identity to the distributed digital identity system and the virtual person digital identity registration system respectively according to the target digital identity credential request.
[0020] The core of this implementation is that virtual people are a combination of computer graphics, computer vision and artificial intelligence technologies, with human-like 2D or 3D images, actions and expressions. After algorithm training in image, sound, action and other aspects, they are driven by real people or computers and presented on multimodal output devices. They have the ability to think, express, learn and make intelligent decisions, and can have autonomous dialogues and behavioral interactions with humans or other virtual people. They can be used as virtual assistants, digital avatars, digital employees, virtual idols, etc., and are widely used in many fields. At present, ordinary accounts are accounts registered by users on various online platforms (such as social media, forums, games, etc.). They usually do not need to have human-like images and are completely managed and controlled by real individuals. They are mainly used for individuals to publish content and participate in discussions on digital platforms, as shown in Table 1.
[0021] Table 1 Comparison between virtual people and ordinary accounts The identity of an ordinary account can usually be equated with the digital identity of the real natural person who owns the account, and the content and comments posted on the network platform are also equivalent to those posted by the natural person himself. The identity of a virtual person is divided into several different situations according to the type of virtual person. Generally speaking, virtual people, that is, digital virtual people, include two categories. One is the digital avatar of a corresponding real natural person, and the other is a virtual person that is completely virtual and has no corresponding real natural person. For the digital avatar of a natural person, the identity of the virtual person is basically equivalent to the digital identity of the real natural person. For a completely virtual digital person, its identity is also a virtual creation. This type of virtual person identity includes the image of the virtual person, the fictional character's age, personality, trained professional skills (such as legal consultation, customer service, companion chat, psychological counseling, etc.), and professional experience (such as participating in live broadcasts, brand endorsements, providing consulting services, etc.). The problems solved by the virtual person identity authentication adopted in this embodiment are as follows: 1. Digital avatars of natural persons: using technical means to illegally steal the image of real natural persons, create virtual people for live broadcasts, endorsements and other commercial activities and make profits from them; or generate and spread false, vulgar, malicious behavior and speech, and damage the public interest. 2. Digital people created by virtual creations: stealing the image of virtual people, such as virtual idols or virtual IPs with high recognition and reputation, to conduct commercial activities and make illegal profits. 3. In addition to the legal issues caused by the above image theft, the distributed digital identity (DID) technology based on blockchain has a unique role in protecting the personal information and privacy of virtual people. Distributed digital identity is a decentralized identity authentication. Users keep their own identity information and, when necessary, present it to various platforms or verification parties for confirmation in a minimized manner, selectively disclose certain attributes, and protect privacy and security. For example, a virtual digital avatar of a real person has professional skills in recitation or hosting that are very close to his or her own after being trained by a large AI model. When a virtual event requires the use of his or her skills for performance or hosting, distributed digital identity technology allows the virtual person to only disclose his or her skills without disclosing the ID card information of the corresponding real person for verification. For another example, a virtual entertainment space requires users who are over 18 years old to log in and experience it with their virtual digital avatar. Distributed digital identity technology allows users to only disclose that they are over 18 years old, without having to present complete identity information and disclose more personal privacy information including name, specific age, ID number, etc.
[0022] In the distributed digital identity system of this embodiment, the identification and verification of distributed digital identities are based on the circulation of verifiable credentials. The basic participants of the distributed identity system can be roughly divided into the following categories. (1) Credential holder: Credential holders can be various entities such as natural persons, companies and other institutions, or even objects. They have one or more digital credentials and can generate and issue new credentials based on them. The holder can interact with the issuer and verifier through the user agent. (2) Credential issuer: The credential issuer is also an entity that confirms the statements about one or more subjects, and then creates verifiable credentials based on these statements and sends them to the holder. Such as companies, non-governmental organizations, industry associations, governments and individuals. (3) Credential subject: The subject is the entity corresponding to the statement. The subject can be a person, an animal, or an object. In many cases, the holder of the verifiable credential is the subject itself, but in some cases it is not. For example, a parent (holder) may hold the credential of a child (subject), and a pet owner (holder) may hold the credential of his pet (subject). This means that the credential held by the credential holder is not necessarily his own, which corresponds to the real world. (4) Credential Verifier: A credential verifier is also an entity that receives and processes one or more credentials, such as an employer, security personnel, and website. (5) Data Registry. A data registry is a system that is used to create and verify the infrastructure of distributed identifiers, keys, and other related data. For example, a data registry can be a trusted database, a distributed database, a government identification database, and a distributed ledger. In an ecosystem, multiple types of registries can be used simultaneously. Verifiable Credential Circulation Model: The workflow based on the verifiable credential model is as follows: First, the credential issuer issues one or more verifiable credentials based on the identity holder's request for signature; second, the identity holder saves the verifiable credentials in a credential repository such as a digital wallet in the form of an APP, a cloud service, etc.; third, the identity holder submits the credentials to the verifier for verification based on the verifier's needs; finally, the credential verifier can confirm the relationship between the credential and the submitter by searching the identity registry without connecting to the credential issuer, and verify the true source of the attribute statement. In the distributed digital identity model, separating the generation and maintenance of identity identifiers from the generation, storage, and use of identity attribute claims will help build a modular, flexible, and competitive identity service ecosystem.
[0023] In this embodiment, the distributed digital identity system includes: a holder entity identity verification module, which is used to obtain user entity identity information registration data, and the distributed digital identity system verifies the user entity identity. The current user types include natural person users and corporate users; the holder entity identity verification module adopted in this embodiment supports users to register and log in to the system by email or mobile phone number; natural person identity verification: the system allows users to authenticate their identities by uploading ID card photos, face recognition, mobile phone verification codes, etc. to ensure the accuracy of identity information; legal person identity verification: supports enterprises to verify the legal person identity through business license verification and other methods.
[0024] See also Figure 2 As shown, the specific process in the holder entity identity verification module adopted in this embodiment is as follows: a natural person or legal person user first registers a system account by email or SMS, and after logging in, registers the system and authenticates the user identity through various login methods such as face recognition, uploading ID recognition, SMS verification code, business license verification, etc. 1. Natural person identity verification: Users authenticate their identities by uploading ID card photos, face recognition, mobile phone verification codes, etc. to ensure the accuracy of identity information; 2. Legal person entity verification: Enterprises verify the identity of legal person entities by uploading business licenses, etc.; 3. Verification information refinement: Not limited to basic information, it can also support users to upload additional information and verify, such as occupation, education, assets, etc., to meet the needs of different business scenarios.
[0025] The virtual person identity creation module is used to perform identity creation operations on the virtual person held by the user after the user's physical identity is verified. The identity creation operation includes selecting the identity type, registering identity information, providing descriptive information and uploading the virtual person model file; the virtual person identity creation module used in this embodiment creates the identity of the virtual person held by the user after the physical identity is authenticated, including selecting the identity type, registering identity information, providing descriptive information, uploading the virtual person model file, etc. The virtual person type includes two types: natural person digital avatars and virtually created digital people. A virtual person identity can correspond to multiple virtual person model files of different images and formats. The system has the function of automatically reviewing the content appropriateness of the identity information, descriptive information, and uploaded image files provided by the user.
[0026] A natural person's digital avatar refers to a virtual person that is based on a specific natural person and can be identified as the natural person. It is created by the natural person himself or by an enterprise that has an authorization relationship with the natural person such as portrait rights. The basic information of a natural person's digital avatar, such as name, gender, date of birth, etc., is filled in by default by the system based on the information verified by the entity's identity and cannot be modified. Users can fill in additional information such as occupation, education, assets, personal achievements, etc., and can upload documents such as occupation certificates, education certificates, and asset certificates to verify and authenticate the supplemented information. A natural person's digital avatar only supports the person uploading a virtual person model file. If a natural person is associated with multiple digital avatars with different images, multiple digital avatars and virtual person model files of different file formats corresponding to each digital avatar can be uploaded, and descriptive information can be provided for different digital avatars, including but not limited to their respective image characteristics, usage differences, validity periods, etc.
[0027] Virtually created digital human beings refer to completely fictitious digital human beings that are close to human visual appearance and are created by individuals or enterprises that own the intellectual property rights of the virtual human beings. Figure 4 As shown, the owner of the virtually created digital person (natural person or legal person) uploads the virtual person model file and provides the description information of the virtual person, including the name, age, occupation, preferences, etc. of the virtual person, where the "virtual person identity holder" is the natural person or legal person user, which is filled in by default and cannot be modified. Users can also upload the copyright information of the virtually created digital person, as well as the relevant process information of the creation of the virtual person, including but not limited to the original design draft, model intermediate draft, texture intermediate draft, etc. Different file formats corresponding to the same image must be uploaded together.
[0028] The creation examples of the above two methods are as follows, see Figure 3 As shown: 1. I create a digital avatar of a natural person a) The individual user who holds the virtual person provides descriptive information such as the name, image characteristics, purpose, occupation, and education of the virtual person to be created, and uploads the image files of the virtual person such as pictures and models. The platform automatically verifies whether the hash of the uploaded image file is repeated with the existing database or copyright library file. If it is repeated, the virtual person cannot be created; b) The individual user who holds the virtual person initiates the electronic signing process to commit to the compliant use of the portrait right; c) After completing the electronic signing, submit the application for digital identity creation, and the platform's virtual person identity creation review service will conduct an audit on the consistency of the physical identity, compliant use commitment, image and content compliance, etc.
[0029] 2. Others (corporate users only) create a digital avatar of a natural person a) The corporate user who is the holder of the virtual person provides descriptive information of the virtual person to be created and uploads the image files of the virtual person such as pictures and models; b) The corporate user who is the holder of the virtual person provides the name, ID number, mobile phone number and other information of the prototype natural person; c) The corporate user who is the holder of the virtual person initiates the electronic signing process, and the prototype natural person confirms the image and feature description of the virtual person after real-name identity verification, and commits to the compliance of the use of portrait rights; d) After completing the electronic signing, the application for virtual person identity creation is submitted, and the platform's virtual person identity creation review service conducts an audit on the consistency of the entity identity, compliance commitment, image and content compliance, etc.
[0030] 3. Virtual creation of digital humans a) The virtual person holder user provides descriptive information such as the name and image characteristics of the virtual person to be created and uploads the virtual person's image files such as pictures and models. The platform automatically verifies whether the hash of the uploaded image file is repeated with the existing database or copyright library file. If it is repeated, the virtual person holder user cannot be created; b) The virtual person holder user initiates the electronic signing process to commit to the originality of the virtual image and the compliant use of intellectual property rights; c) After completing the electronic signing, submit an application for virtual person identity creation, and the platform's virtual person identity creation review service will conduct an audit on the consistency of the entity identity, compliant use commitment, image and content compliance, etc.
[0031] This example also requires an ownership review. For virtually created digital people, additional ownership reviews are required, including asset reviews and copyright reviews, to confirm that the copyright of the work is legal and valid. 1. Asset review. The owner of the virtual person submits the asset information of the evidence, including the core elements of asset ownership, the core elements of authorization, etc., and the platform reviews the relevant information. 2. Copyright review. The system opens the interface with the intellectual property chain and builds a copyright duplicate review service, which can automatically compare the newly uploaded content with the content in the existing database to identify similarities and potential infringements. i. When the work already has ownership proof materials, directly review the ownership proof materials submitted by the copyright owner, the "Certificate of Voluntary Registration of Works" or other valid ownership certificates or blockchain valid confirmation and evidence certificates. ii. Works without ownership proof need to apply for work confirmation and evidence through the interface between the system and the intellectual property chain. After the confirmation is successful, the copyright is obtained and the copyright is synchronously stored in the intellectual property chain. The materials and information required to apply for confirmation of work rights are as follows: a. Title of work; b. Category of work; c. Copyright owner; d. Name or title of author (the copyright owner is the same as the author, so fill in the copyright owner’s name or title directly); e. Nature of creation of the work; f. Copyright owner’s identity information, such as company: business license; individual: ID card; g. Method of obtaining rights; h. Method of ownership of rights and its description; i. Status of rights ownership and its description; j. All materials must be submitted with a voluntary registration rights guarantee for the work, see Figure 5As shown. In this way, the virtual person identity creation module adopted in this embodiment supports users to create digital identities of virtual people, including selecting identity types such as two modes of natural person digital avatar and virtual creation of digital people, registering identity information, providing descriptive information, etc.; supports users to upload virtual person model files, and one virtual person digital identity can correspond to multiple virtual person model files with different images and formats; for the digital avatar of a natural person, supports users to submit additional information and verify the additional information, such as the occupation, education, and assets of the natural person; for the virtual creation of digital people, supports users to upload copyright information and the creation process files and other materials of the virtual creation of digital people; the system has the function of automatically reviewing the content appropriateness of the uploaded model files and descriptive information.
[0032] The virtual person digital identity generation module is used to provide the target data when creating the virtual person digital identity and request the digital certificate authentication center to generate the distributed digital identity certification data of the target virtual person. The distributed digital identity certification data of the target virtual person is based on the distributed digital identity technology / model to generate a digital identity certificate of the DID data structure for each virtual person identity, as well as a digital identity sub-credential corresponding to each virtual person model file; after the platform passes the review, it requests the digital certificate authentication center to generate a distributed digital identity (Decentralized Identity, DID). The digital certificate authentication center generates a digital identity certificate of the DID data structure for each virtual person based on the distributed digital identity system, as well as a digital identity sub-credential corresponding to each virtual person's picture and model file. After the distributed digital identity is generated, a trusted virtual person identity certificate is generated and issued for the virtual person holder user, including the certificate number, holder, DID, transaction hash, issuance time, digital identity issuing authority, and digital signature information of the judicial appraisal agency. In this implementation, according to the W3C definition, a distributed identifier (DID) is a new type of verifiable "self-sovereign" digital identity identifier that can operate verifiable, distributed digital identities - a DID can identify any subject such as a person, organization, thing, data model, abstract entity, etc. The new identifier is designed to enable the subject of the DID to prove control over it, and its acquisition does not rely on any centralized registry, identity service provider or certificate authority. A DID is a uniform resource descriptor (URI) consisting of three parts: (1) a fixed-format prefix Scheme: "did:" (2) an identifier DID Method for the DID method; (3) a globally unique identifier generated by the DID method and the specification. As a URL, a DID associates the owner of the DID with a DID document, allowing external parties to interact with the subject in a trusted manner. A DID document can contain cryptographic material, verification methods, or service endpoints. This information in the document provides a set of mechanisms that enable the owner of the DID to prove control over the DID. Service endpoints enable external parties to interact with the DID subject in a trusted manner. A DID document may contain semantics about the subject it identifies. As a globally unique identifier, DID does not require a central registration authority because it is registered through distributed ledger technology (DLT) or other forms of distributed networks. DID documents consist of a set of attributes, which are key / value pairs (attribute name and attribute value). DID documents contain metadata related to DIDs. They describe verification methods (such as public keys) and services related to DID subjects. DID documents are serialized according to a specific syntax. The DID itself is also the value of the "id" attribute in the syntax. The attributes in the DID document can be updated through specific operations, which are described and implemented by specific DID methods.A DID document is a set of data that describes the DID subject and also contains mechanisms such as public keys and biometrics that the DID subject can use to authenticate itself and prove that it is associated with this DID. DID documents can also contain other properties or claims that describe the subject. These documents are graph-based data structures, usually represented by JSON-LD, but can also be represented by other compatible graph-based data formats.
[0033] According to the virtual person identity information, descriptive information, and uploaded virtual person model files registered by the user in the digital identity creation module, the digital certificate authentication center generates a distributed digital identity of the virtual person based on the virtual person digital identity registration system, including a digital identity certificate and sub-credentials. A virtual person digital identity corresponds to a virtual person digital identity certificate, and each model file of the virtual person corresponds to a digital identity sub-credential.
[0034] The digital identity certificate of the virtual person is stored in the judicial blockchain and is also saved in the electronic wallet / account of the natural person or legal person user, that is, the holder of the virtual person's digital identity. It mainly includes the following information: Certificate metadata: information such as the issuer of the digital identity, date of issuance, validity period of the identity, identity type, etc.; Certificate statement: instructions and description of the virtual person's identity, such as name, gender, date of birth, occupation, abilities and specialties, etc., as well as the mapping relationship between the digital identity certificate and multiple sub-certificates; Certificate proof: the issuer's proof, that is, the digital signature of the digital certificate authentication center, which ensures that this digital identity can be verified.
[0035] The digital identity sub-credential corresponding to each model file of the virtual person is bundled with the model file and stored in the judicial blockchain. The digital identity sub-credential mainly contains the following information: credential: the complete content of the digital identity credential, including metadata, declaration, and proof content; sub-credential declaration: the description and description of the model file corresponding to the sub-credential, such as image description, file format, actions contained, and the scope of use, time limit, application scenario, etc. of the model file; sub-credential proof: the proof of the issuer, that is, the digital signature of the digital certificate authentication center, which ensures that this digital identity sub-credential can be verified.
[0036] In this way, the system should open an interface with the digital certificate authentication center. After the user passes the identity verification and requests to generate a digital identity, the digital certificate authentication center will generate a digital identity certificate with a DID data structure for each virtual human identity based on the distributed digital identity system, as well as a digital identity sub-certificate corresponding to each virtual human model file; the virtual human digital identity certificate should contain the following information: the issuer of the digital identity, the date of issuance, the validity period of the identity, the identity type and other information; the description and description of the virtual human identity, such as name, gender, date of birth, occupation, abilities and specialties, and the mapping relationship between the digital identity certificate and multiple sub-certificates; the issuer's certificate, that is, the digital signature of the digital certificate authentication center, ensures that this DID digital identity can be verified; the digital identity sub-certificate of each virtual human model file should include the complete content of the digital identity certificate and the description and description of the model file corresponding to the sub-certificate, such as image description, file format, actions contained, as well as the scope of use of the model file, time limit, application scenario, etc.
[0037] The virtual person digital identity evidence module is used to configure the distributed digital identity certification data of the target virtual person and the virtual person model file together as an executable file, upload it to the virtual person digital identity registration system through the API interface, obtain the digital identity hash value corresponding to the current model file, and store the hash value for evidence to ensure the authenticity and credibility of the virtual person's identity. In this embodiment, the system uses the interface to store the virtual person's digital identity certificate in the judicial chain and distributes it to the wallet / account of a natural person or legal person user, which is saved by the user (natural person or legal person) himself. The system supports bundling each digital identity sub-credential with its corresponding virtual person model file; the system should open an interface with the virtual person digital identity registration system, and support connecting the bundled files to the judicial blockchain, and the judicial blockchain generates a unique hash value and stores it on the chain. At the same time as the virtual person identity certificate is generated, the public part of the virtual person holder information, description information, and image file that have been approved will be stored on the chain after privacy calculation according to the privacy protection design. If the virtual person's image file needs to be downloaded and exported after being stored, it must be embedded with a digital watermark by the digital watermark service. The embedded content of the digital watermark is the number or transaction hash of the trusted virtual person identity certificate.
[0038] The distributed digital identity system used in this embodiment also includes: The virtual person digital identity modification and update module is used to modify the current virtual person digital identity. When modifying the current virtual person digital identity, it modifies and updates the current virtual person digital identity held by the user through the API interface, uploads the corresponding certification documents or updated information of the current virtual person digital identity, updates the current virtual person digital identity certificate after verifying the certification documents, and stores the updated virtual person digital identity certificate in the virtual person digital identity registration system and issues it to the holder's digital wallet; when the user modifies and updates the content of the virtual person digital identity certificate held by him, such as supplementing or updating the occupation, education, and assets of a natural person, or supplementing and updating the descriptive information of a virtually created digital person, he needs to enter the virtual person digital identity management platform after verifying the real person identity of the holder, select the virtual person digital identity that needs to be modified or updated, upload the corresponding certification documents or updated information content, and the system background verifies the certification documents and completes the content appropriateness review before updating the virtual person digital identity certificate. The updated virtual person digital identity certificate is stored in the judicial blockchain and is issued to the holder's digital wallet at the same time, which is saved by the holder. The sub-certificate corresponding to the virtual person digital identity certificate is automatically updated, see Figure 6 As shown, when a user modifies and updates one or more virtual human model files corresponding to the virtual human digital identity he holds, he needs to upload a new virtual human model file and provide new descriptive information after verifying the real identity of the holder. After the system background completes the content appropriateness review, it generates a new digital identity sub-credential for the new virtual human model file, and bundles the new sub-credential with the new virtual human model file and connects it to the judicial blockchain. The judicial blockchain generates the digital identity hash value corresponding to the model file and stores the hash value for evidence. In this way, the system supports users to modify and update the declaration content of the virtual person digital identity certificate they hold, including but not limited to supplementing or updating the occupation, education, assets of a natural person, or supplementing and updating the descriptive information of a virtually created digital person, etc., and verifies the authenticity of the certification documents uploaded by the user or the updated information content; the declaration content of the virtual person digital identity certificate is modified and updated, and the system generates a new virtual person digital identity certificate after verification. The system supports automatic update of the digital identity certificate content of all sub-certificates; the system supports users to modify and update the virtual person model file corresponding to the virtual person digital identity they hold, and generate a new digital identity sub-certificate for the new virtual person model file; the system supports bundling the new sub-certificate with the new virtual person model file and connecting it to the judicial chain for hash value storage.
[0039] The virtual person digital identity query and verification module is used to call the current virtual person's digital identity certificate for on-chain verification, and / or obtain the authorized virtual person model file currently in use, including the bundled digital identity sub-credential, and upload it to the virtual person digital identity registration system for off-chain verification. The hash value of the model file is generated based on the sub-credential information, and is compared with the hash value of the stored certificate to verify the current virtual person's identity. The virtual person digital identity query and verification module provides services such as digital identity authentication, inspection and permission management of virtual people, and supports different types of users to query and verify their digital identities during the interaction with virtual people, so as to determine the virtual person's identity information and copyright information and other relevant information such as the authorized use period. Supports both on-chain and off-chain verification and query. When a virtual person provides services on the chain, users or institutions that need to verify the identity of the virtual person can directly call the virtual person's digital identity certificate to verify the virtual person's identity. When a virtual person provides services off-chain, the verifier uploads the virtual person model file that it is authorized to use, including the bundled digital identity sub-credential, to the distributed digital identity. The system automatically reads the digital identity sub-credential information and queries the virtual person's digital identity based on the sub-credential information. At the same time, it generates a hash value for the virtual person model file and compares it with the stored hash value to verify the virtual person's identity. Figure 6 shown.
[0040] In this way, the virtual person provides services on the chain, and the system supports the verifier to directly call the virtual person's digital identity certificate and verify the virtual person's identity on the judicial chain; the system supports the verifier to verify outside the chain, that is, the verifier uploads the virtual person's digital identity sub-certificate and the corresponding virtual person model file to the system, and the system automatically reads the sub-certificate information contained in the virtual person model file and queries the virtual person's digital identity based on the sub-certificate information; the system supports generating the hash value of the virtual person model file uploaded by the verifier and comparing it with the stored hash value to verify the legitimacy of the virtual person's identity.
[0041] The technical specifications of the distributed trusted virtual human identity authentication system based on blockchain in this embodiment are analyzed as follows: 1. The use of blockchain trusted support platform should meet but not be limited to: licensed alliance chain, with independent intellectual property rights; with corresponding qualifications and operation records; with large file storage capacity, digital data circulation capacity, on-chain / off-chain data consistency capacity; should have the ability to ensure that government departments implement supervision; should have a trusted carrier that provides open service capabilities for the platform, etc. 2. Use distributed storage: Distributed storage requires that data has a certain fault tolerance when synchronizing nodes in all networks, and the failure of some node ledgers will not affect the entire network; distributed ledgers should uniformly control write permissions, and unauthorized nodes are not allowed to write to the ledger; the database used by the distributed ledger should support multiple relational and non-relational databases, and each node should support the use of different database technologies for the convenience of implementation. In order to facilitate implementation, it is recommended to use an open source database; the distributed ledger should comply with the provisions of Appendix A in GB / T 22239-2019 to meet the third-level security requirements. 3. Use of signature algorithm: The signature algorithm used by the blockchain technology platform should comply with the provisions of laws and regulations and the relevant requirements of national and industry standards related to cryptography; according to the needs of different application scenarios, it is advisable to support both the application layer and the blockchain system for signing and verification; data signing and verification should be based on the third-level and above cryptographic modules that comply with GM / T 0054 or hardware cryptographic products approved by the national cryptographic management department; for transnational nodes, it is advisable to find a transnational identity authentication agency that is acceptable to all parties. 4. Authenticity: The digital signature of the sender should be able to correspond to the actual organization or individual to ensure the authenticity of the business. If necessary, the real-name system should be ensured by connecting to the digital certificate authentication center to issue a digital certificate to the sender; 5. Data integrity: The digital signature information should be transmitted synchronously with the original text of the transmission and should not be separated to ensure the integrity of the data transmission; data should be encrypted using encryption technology during transmission instead of plain text transmission, such as using TLS encryption technology. 6. Verification mechanism: The signature algorithm and verification mechanism used by the blockchain system should be uniformly disclosed to users or provide a unified SDK for users to verify the signature; the verification mechanism should be able to verify the identity of the data sender and the integrity of the data at the same time. 7. Encryption algorithm: The blockchain platform should adopt a hybrid encryption mechanism that combines symmetric and asymmetric encryption. The encryption algorithm should support the commercial encryption algorithm issued by the National Cryptography Administration, and should preferably support international general algorithms. If data needs to be encrypted at the application layer, the blockchain system should be able to verify the integrity of the encrypted message. Encryption should be based on a level 3 or above cryptographic module that complies with GM / T 0054 or a hardware cryptographic product approved by the national cryptographic management department.8. Hash algorithm: The hash algorithm used should be able to quickly calculate and verify transactions, and it is impossible to reverse the original text within a limited time; the hash algorithm used should make it difficult to find two plaintexts with different contents so that their hash values are consistent; the hash algorithm used should be sensitive to input, and the hash value generated will be very different if the original input information is modified a little. 9. Random number technology: Random numbers should use strong pseudo-random numbers to ensure their randomness and unpredictability and prevent random numbers from being cracked. 10. Communication protocol: The communication protocol used by the blockchain system can ensure the security of the information transmission channel of the blockchain system and should have authentication and encryption capabilities. If the TLS / SSL protocol is used, the transmission channel should take measures to prevent common network attacks and contain no public vulnerabilities. If an authentication mechanism such as CA is used to ensure the identity of both ends of the communication, at least one end needs to be authenticated. The negotiation of the protocol should be secure and reliable. The key negotiation is invisible to the listener and any authenticated connection, and the attacker cannot modify the negotiation information. With the support of the communication protocol, the network link between the blockchain nodes should be confidential and reliable. The data transmission of the link should select an encryption algorithm with sufficient strength and use a message authentication mechanism. The communication protocol used by the blockchain system should have reliability at the transmission level, including the connection method, information sending and receiving timing, etc. For example, if a transmission protocol with a reliability mechanism such as TCP is used, if an unreliable communication protocol such as UDP is used, the platform should provide an upper layer reliability guarantee mechanism to ensure the integrity and accuracy of the transmitted information. The communication protocol used by the blockchain system should be scalable, and the scalability should be considered when designing the information unit structure. For example, when using the underlying network protocol, support for new generation network architectures such as IPV6 can be considered to ensure the flexibility of platform deployment and future development. 11. Authorization management: The blockchain system should be able to specify and implement permission restrictions in various scenarios in the network, and restrict the various capabilities of the connected blockchain nodes and user entities for various scenarios; Blockchain nodes should take measures to implement identity authentication and permission control, such as using digital certificate mechanisms; Blockchain nodes should be able to implement permission verification based on identity certificates for different resources. 12. Service control: Blockchain nodes should support dynamic execution of operations such as adding, deleting, modifying, upgrading, and rolling back without affecting normal business operations; Blockchain nodes should support automated deployment. Security requirements met: Meet the requirements of GB / T 22239-2019; have data encryption, system user authentication, and role-based audit capabilities; support multiple identity authentication mechanisms, such as username / password, digital certificates, etc.; support the classification of user access control permissions, identification and management of user access permissions, and support data encryption processing of relevant user identity information data.
[0042] The distributed trusted virtual person identity authentication system based on blockchain adopted in this implementation also includes a virtual person authorization module, which is used to create an authorization book, verify the physical identities of both parties, and form a smart contract through electronic signature, and store it on the judicial blockchain. A security lock is generated based on the information in the authorization book to form a virtual person model SDK containing a security lock, ensuring that only the authorized party can decrypt and use it after identity verification, and it can only be used within the authorized use period. Before authorization, after the virtual person identity verifier user registers, logs in, and completes the physical identity authentication, he can request to verify the digital identity of the virtual person by entering the certificate number or uploading the virtual person image file (picture, 3D model), and then the two or more parties authorized to use the virtual person use the distributed digital identity to conduct transactions. The role of the platform authorization transaction service is to complete the virtual person authorization transaction while protecting the identity privacy, transaction privacy, and fund security of both parties. The specific steps of authorization are as follows: 1. The virtual person holder user needs to complete the trusted digital identity creation process of the intended authorized transaction virtual person on the platform and obtain the digital identity certificate; the intended authorized transaction user needs to complete the registration and physical identity authentication on the platform. 2. The virtual person holder initiates the authorization transaction process, revises the authorization contract template provided by the platform, supplements the transaction terms information and shares it with the intended authorized transaction user. After both parties confirm the content of the authorization contract, they complete the electronic signing and submit it to the platform authorization transaction service; 3. The platform authorization transaction service will track the transaction status of both parties, update the authorization status of the virtual person, and upload the transaction information and signed authorization contract of both parties to the judicial blockchain for evidence storage; 4. At the same time, relevant transaction vouchers are generated, which include the virtual person's trusted digital certificate number, the identities of both parties to the transaction, the transaction time, the transaction period, and the digital signature of the authorized transaction service subject. The virtual person who obtains the trusted digital identity in this module can be authorized for external use by its owner after physical verification. If the virtual person who obtains the trusted digital identity is a digital avatar of a natural person, the natural person himself shall be authorized for external use after physical verification. If the virtual person who obtains the trusted digital identity is a virtual creation of digital people, the virtual person owner can be authorized for external use after physical verification.
[0043] The virtual person owner selects the virtual person model that needs to be authorized for external use and initiates the authorization business flow. The specific process includes: 1. The virtual person owner selects a template in the system to create a "Trusted Virtual Person Authorization Letter", fills in the authorized user, authorized scope of use, authorized use method, authorized use period and other requirements and detailed description information, and sends it to the authorized user; 2. After the authorized user completes the entity identity verification, he / she fills in the complete information in the "Trusted Virtual Person Authorization Letter"; 3. After both parties confirm the content of the "Trusted Virtual Person Authorization Letter", they electronically sign and seal to form an authorization letter smart contract, and store it in the judicial blockchain. 4. The system automatically generates a security lock for the virtual person model based on the use period, method and related content listed in the "Trusted Virtual Person Authorization Letter", and forms a virtual person model SDK containing the security lock. The SDK can only be decrypted and used by the designated authorized user after the entity identity verification, and can only be used within the authorized use period. 5. According to the virtual person model reception method agreed in the "Trusted Virtual Person Authorization Letter", the system sends the trusted virtual person model SDK to the authorized user.
[0044] The distributed trusted virtual human identity authentication system based on blockchain adopted in this embodiment also includes a virtual human rights protection module, which is used to monitor the entire network based on a vector search engine to search for unauthorized use of virtual humans. When unauthorized use of virtual humans is monitored, evidence is collected online in real time and stored on the judicial blockchain. This module is based on tools and technologies such as content recognition, web crawlers, digital fingerprints, and vector search. The system monitors infringements in the entire network 24 hours a day to monitor infringements in the use of virtual humans. After discovering the unauthorized use of virtual humans, the source and user of the infringement can be quickly located. The scope, time, and frequency of monitoring can be flexibly customized, especially for content violation identification for malicious use such as pornography. For the infringements discovered by monitoring or the malicious use identified, this system can collect evidence online in real time. The evidence collection content includes the time, location, platform and user involved in the infringement, as well as related screenshots, links, etc. At the same time, evidence is automatically stored in the judicial blockchain as evidence and basis for subsequent legal means to protect rights.
[0045] If the holder of a virtual person finds that there is an infringement on the virtual person he owns, he shall apply for fixed evidence through the rights protection and evidence storage service of the platform for subsequent rights protection. The specific steps are as follows: 1. The holder of the virtual person provides the holder's physical identity and the virtual person's trusted digital identity certificate to the rights protection and evidence storage service, and entrusts the rights protection and evidence storage service to monitor the infringement of the designated virtual person image; 2. The holder of the virtual person provides the holder's physical identity, the virtual person's trusted digital identity certificate, and relevant evidence of the infringement to the rights protection and evidence storage service of the platform, so that the rights protection and evidence storage service can verify whether it constitutes infringement or potential infringement; 3. For the virtual person image file embedded with a digital watermark for authorized use and circulation, the rights protection and evidence storage service requests the digital watermark service to verify whether the corresponding trusted virtual person digital identity certificate matches the source of the virtual person image file to determine whether there is infringement; 4. The rights protection and evidence storage service stores the confirmed evidence documents related to the infringement and the infringement situation, and generates relevant infringement evidence certificates; the infringement evidence certificate contains the number of the trusted virtual person digital identity certificate, the name of the virtual person, the holder of the virtual person, the time of the infringement, the specific situation, and the digital signature information of the rights protection and evidence storage service entity.
[0046] The virtual human rights protection module used in this embodiment uses a vector search engine to integrate model services, model supervision platform and small sample retraining module, and builds a search capability engine oriented to business needs based on vector search capability support. By accessing specific websites, apps, or video surveillance in specific areas for intelligent model analysis, a vector database is obtained. For actual needs such as infringement monitoring and search, a quick search tool is provided to help quickly discover abnormal events.
[0047] As shown in Figure 8, the overall architecture of the vector search engine used in this embodiment can be divided into a data layer, a platform layer, and an application layer. The data layer stores the vector data and the corresponding structured data obtained by processing unstructured data accessed by the model service platform, and reuses the vector database of the lake warehouse. The platform layer includes a model service platform, a model supervision platform, and a small sample retraining module, which provide the vector search engine with platform-side model parsing, small sample retraining and other capabilities. The model supervision platform ensures that the model service is normal and efficient. The basic search platform is the application interface of the vector search engine, providing various types of search interactions. With the help of the small sample retraining module capabilities on the platform side, model retraining interactions and applications are provided. The vector database is a database that supports approximate vector search and supports efficient analysis of billions of structured data and vector data. Intelligent applications obtain vector representations by parsing unstructured data, and then obtain perception and cognitive results to assist decision-making. The vector database provides a unified vector storage and retrieval environment for various intelligent applications, improves the efficiency of vector analysis applications, and accelerates the construction of intelligent applications. Among them, the vector database is a database that supports approximate vector search and supports efficient analysis of billions of structured data and vector data. Intelligent applications obtain vector representations by analyzing and processing unstructured data, and then obtain perception and cognitive results to assist decision-making. The vector database provides a unified vector storage and retrieval environment for various intelligent applications, improves the efficiency of vector analysis applications, and accelerates the construction of intelligent applications. Fig. 9As shown in the figure, the vector database adopts a storage and computing separation design. The bottom layer is an object storage layer, which supports the storage service of the cloud platform or the locally deployed distributed storage service. As the main storage service, it provides data backup storage, cold data storage and other functions. Above the object storage layer is the computing layer, which contains multiple distributed computing clusters, which are mainly responsible for the analysis and execution of query statements, index calculation, and cache management. Computing nodes are divided into different types according to their functions, including query nodes, index management nodes, etc. The computing layer contains a cache of hot data to improve the read and write efficiency of queries. In addition to the computing layer and storage layer, this product also includes a main management service, which provides functions such as permission management, resource management, database metadata management, and distributed database analysis optimization. The main functions of the virtual human rights protection module are: 1. High-reliability cluster architecture: Data slicing: The database automatically divides the source data into multiple slices, each slice consists of a group of replicas for fault tolerance, and the cluster writes these slices to different nodes at the same time according to the rules to maximize the cluster write performance. Linear expansion: Supports flexible addition of nodes and smooth expansion. The database can easily add new servers to the cluster, supporting vertical (performance) and horizontal (backup) expansion. Supports smooth expansion, and cluster expansion will not affect the original data. 2. Flexible and diverse usage methods: JDBC, ODBC: Supports JDBC, ODBC connections, which can easily connect to various mainstream visualization platforms and BI tools; supports SQL query language, and provides a variety of advanced functions; supports multiple connections and permission management, and can configure connection account passwords, data read and write permissions, resource load and quotas; supports automatic load balancing of multiple connections, and automatically distributes connections evenly to each database node. Command line Client: Provides interactive mode and batch mode, in which parameter transfer, configuration changes, script execution, batch query and other operations can be performed. Cluster management: Supports installation, configuration and management functions under the command line, can dynamically add and delete cluster nodes, change database configuration parameters, start and stop database services, and dynamically update and upgrade versions. Database monitoring: Real-time monitoring includes various indicators such as resources, slow queries, errors and timeout responses; SQL operations, support displaying information of all tables and columns in the database, and provide full life cycle operation guarantees including database management, user management, cluster monitoring, cluster management, and replica monitoring. 3. High-performance data import: Multi-node import: Supports parallel writing using multiple Inserts, and each node independently manages local data blocks to maximize cluster writing performance. Automatic data balancing: Using advanced Hash random algorithm, automatically balance the data distribution within each node to ensure that the disk usage of each node is relatively balanced.Asynchronous copy of replicas: supports multiple replica backups, and can maintain the same data on different nodes. If the current node fails, it will automatically switch to the backup replica to provide services; when the data in the replica changes, the system will synchronize to other replicas in an asynchronous manner to ensure the final consistency of all replica data. 4. Extreme online analysis performance: Data compression: provides two compression algorithms, LZ4 and ZSTD. The default LZ4 provides the fastest speed, which is suitable for lightweight compression and fast decompression scenarios; ZSTD guarantees a faster speed and provides a higher compression ratio, which is suitable for scenarios with high compression requirements. Vectorized execution: Using vectorized execution technology, unlike the traditional tuple-based execution mode where unnecessary data will occupy a large amount of CPU cache, vectorized execution can quickly skip unnecessary data and only load the required column data into the CPU cache, thereby making better use of CPU resources and having higher throughput for large queries. 5. Support high concurrency: Multi-concurrency query: Using the MPP cluster architecture, each node can process query requests. Under the same circumstances, a single node can process more than 100 short query requests per second, and the concurrent query performance of the database increases linearly with the cluster size. Concurrent read and write: With the MPP cluster architecture, each node can process query requests. Under the same circumstances, a single node can process more than 100 short query requests per second. The concurrent query performance of the database increases linearly with the cluster size. 6. Hybrid data processing capabilities: Vector import function: Supports the import of mixed data of vectors and structured data. Vector index building function: In order to speed up the speed of vector search, it supports the function of building vector indexes. Supports a variety of common vector indexes, such as FLAT, IVFFLAT, IVFPQ, HNSW, etc. Vector approximate search function: Provides vector approximate search function and corresponding SQL statement extensions. Supports two primitives, namely distance and batch_distance. Among them, distance is used for searching a single vector, and batch_distance is used for batch searching of multiple vectors. Hybrid query function: Provides the function of mixed query of vector search and other structured data columns, including merged query of distance or batch_distance results and other column data, conditional filtering based on other column data, etc.
[0048] The key technologies adopted by the system of this embodiment are: 1. Distributed digital identity technology: Distributed digital identity is a way to implement self-determined identity. Distributed digital identity advocates using distributed infrastructure to change the centralized application user digital identity model, so that everyone has the right to obtain and control their own digital identity. This identity system can safely store elements of user digital identity and protect privacy, and fundamentally solve the privacy problem by returning data ownership to users and requiring data use to be authorized by users. In recent years, multiple standard organizations and open source communities have jointly promoted and formulated a series of technical standards and protocols related to distributed digital identity, and gradually improved the technology stack of distributed digital identity. These mainly include: Distributed Identity Identifier (DID) and Verifiable Credentials (VC) specifications formulated by the W3C organization; Distributed Key Management System (DKMS) promoted by Hyperledger; Distributed Identity Authentication (DIDComm) protocol promoted by the DIF Foundation. 2. Distributed ledger: Distributed identity redefines the way people control and share their personal information, enabling people to control their own identity. In a distributed digital identity system, the verifiable data registry can adopt centralized or distributed databases, distributed ledger technology (DLT) and other technical solutions. According to the definition of W3C, a distributed ledger is a database that shares, replicates and synchronizes data among network members. According to the specification definition of the People's Bank of China, a distributed ledger refers to an asset database that can be jointly governed and shared in a network composed of multiple sites, different geographical locations or multiple institutions. Distributed ledger technology is an infrastructure and computing paradigm formed by the high integration of multiple core technology systems such as cryptographic algorithms, consensus mechanisms, peer-to-peer communication protocols, and distributed storage. The distributed characteristics and consensus algorithms of blockchain technology make it the mainstream technology for implementing distributed ledgers. Blockchain is a tamper-proof, shared digital ledger used to record transactions in public or private peer-to-peer networks. The ledger is distributed to all member nodes in the network, and in the sequential chain of blocks linked by hash algorithms, the historical transactions between peer nodes in the network are permanently recorded. 3. Decentralized Identifiers (DIDs): Decentralized Public Key Infrastructure (DPKI) is a more secure PKI system based on blockchain that does not rely on third parties. In DPKI, the blockchain acts as a distributed key storage that protects read data to prevent MITM attacks and minimizes the role of third parties - blockchain trust is established and maintained based on consensus protocols that effectively prevent bad behavior in the blockchain and limit its role, ensuring that no third party can compromise the integrity and security of the entire system.The DKMS architecture generally consists of three logical layers: the first is the basic DID layer, which consists of DIDs registered and resolved through the blockchain; the second is the cloud computing layer, which consists of server-side agents and wallets that provide a way to communicate and mediate between the DID layer and the edge layer; the third is the edge layer, which consists of local devices, agents, and wallets used directly by identity owners to generate and store most private keys and perform most key management operations. 4. Verifiable Credential Technology: DIDs and DID documents themselves do not carry any personally identifiable information (PII). Binding a DID to an entity in the real world (such as a person or company) so that this entity has a certificate corresponding to the DID requires a verifiable credential (VC). 4. Verifiable Credentials: A verifiable credential (VC) is a statement made by an issuer or a collection of multiple statements. The credential can include an identifier and metadata used to describe the credential attributes, such as the issuer, expiration date and time, pictures, public keys for verification purposes, revocation lists, etc. These metadata can be signed by the issuer. A verifiable credential is a set of immutable statements and metadata that can be cryptographically proven to be the issuer of the credential. Verifiable Presentation: Consists of expression metadata, credential combination, and previous proof by the holder. The holder of a verifiable credential can assemble verifiable credentials from different issuers into a single structure to form a Verifiable Presentation, which can then be shared with verifiers to prove that they possess certain characteristics or attributes. Verifiable Presentations can be used to combine credentials and demonstrate the authenticity of the verifiable credentials. They can only be generated by cryptographic calculations by the credential holder. The data in a verifiable presentation is usually about the same subject, but there is no limit on the number of subjects or issuers in the data. Aggregating information from multiple verifiable credentials is a typical use of verifiable presentations. Verifiable presentations are tamper-proof and are encoded in a way that can be cryptographically verified to trust the identity of the provider of the verifiable presentation. Some types of verifiable presentations (based on zero-knowledge proofs) may contain data synthesized from multiple original verifiable credentials, but not the original verifiable credentials. The main design purpose of the verifiable presentation scheme is to enhance privacy protection. Based on the verifiable representation of anonymous credentials, entities can only submit specific attributes in the credential information for verification. 5. Blockchain technology: Blockchain is a bookkeeping technology that is jointly maintained by multiple parties, uses cryptography to ensure transmission and access security, and can achieve consistent data storage, difficult to tamper with, and prevent denial. Typical blockchains store data in a block-chain structure.As a new computing paradigm and collaboration model that establishes trust at low cost in an untrustworthy competitive environment, blockchain, with its unique trust-building mechanism, is changing the application scenarios and operating rules of many industries. It is one of the indispensable technologies for the future development of the digital economy and the construction of a new trust system. Blockchain is a comprehensive technology, and its technical components can be divided into three categories according to their importance: core technology, extended technology, and supporting technology. Core technology refers to the technology that a complete blockchain system must include, including cryptographic algorithms, peer-to-peer networks, consensus mechanisms, smart contracts, and distributed ledgers; extended technology refers to related technologies that further expand the service capabilities of blockchain, including scalability, interoperability, collaborative governance, security and privacy; supporting technology refers to related technologies that enhance the security of blockchain systems and optimize the user experience, including system security, operation and maintenance deployment, and infrastructure. VI: Cryptographic algorithms: Information security and cryptography technology are the cornerstones of the entire information technology. In blockchain, a large number of modern information security and cryptography technical achievements are also used, mainly including: hash algorithms, symmetric encryption, asymmetric encryption, digital signatures, digital certificates, homomorphic encryption, zero-knowledge proofs, etc. Integrity (anti-tampering): Blockchain uses cryptographic hash algorithm technology to ensure that the integrity of the blockchain ledger is not destroyed. Hash algorithm can map binary data into a shorter string and has input-sensitive characteristics. Once the input binary data is slightly tampered, the string obtained after the hash operation will change greatly. In addition, excellent hash algorithms also have conflict avoidance characteristics. Different binary data are input and the hash result string is different. Blockchain uses the input-sensitive and conflict-avoidance characteristics of the hash algorithm to generate a hash value containing the previous block in each block and generate the Merkle root hash value of the verified transaction in the block. Once some blocks of the entire blockchain are tampered with, it is impossible to get the same hash value as before the tampering, so as to ensure that the blockchain can be quickly identified when it is tampered, and ultimately ensure the integrity of the blockchain (anti-tampering). Confidentiality: Encryption and decryption technology can be divided into two categories from the technical structure: one is symmetric encryption and the other is asymmetric encryption. The encryption and decryption keys of symmetric encryption are the same; and the encryption and decryption keys of asymmetric encryption are different, one is called a public key and the other is called a private key. Data encrypted by a public key can only be decrypted by the corresponding private key, and vice versa. Blockchain, especially consortium blockchain, requires TLS (Transport Layer Security) encrypted communication technology to ensure the security of transmitted data during the entire network transmission process. TLS encrypted communication is the perfect combination of asymmetric encryption technology and symmetric encryption technology: the communicating parties use asymmetric encryption technology to negotiate and generate symmetric keys, and then use the generated symmetric keys as working keys to complete data encryption and decryption, thereby taking advantage of the advantages of asymmetric encryption that does not require both parties to share keys and symmetric encryption that has fast computing speed.Identity authentication: Simple TLS encrypted communication can only ensure the confidentiality and integrity of the data transmission process, but cannot guarantee the trustworthiness of the communication peer (man-in-the-middle attack). Therefore, it is necessary to introduce a digital certificate mechanism to verify the identity of the communication peer and then ensure the correctness of the peer's public key. Digital certificates are generally issued by authoritative institutions. One side of the communication holds the public key of the authoritative root CA (Certification Authority) to verify whether the communication peer's certificate is trusted by itself (that is, whether the certificate is issued by itself) and confirm the identity of the peer based on the content of the certificate. After confirming the identity of the peer, the public key in the peer certificate is taken out to complete the asymmetric encryption process. In addition, the latest research results of modern cryptography, including homomorphic encryption and zero-knowledge proof, are also applied in the blockchain to maximize the privacy protection capability when the blockchain distributed ledger is open. Peer-to-peer network (P2P for short), also known as peer-to-peer blockchain network, is an Internet system without a central server and relying on user groups (peers) to exchange information. Its role is to reduce the nodes in the previous network transmission to reduce the risk of data loss. Different from the central network system with a central server, each user end of the peer-to-peer network is both a node and a server. Any node cannot directly find other nodes and must rely on its user group to exchange information. Peer-to-peer networks can be divided into unstructured networks, structured networks, and hybrid networks according to the network structure. Unstructured networks are robust and highly decentralized, but they have serious communication redundancy and are prone to network storms, such as classic Gossip networks. Structured networks sacrifice decentralization and maintain network topology according to certain strategies to improve communication efficiency, such as DHT-like (Distributed Hash Table) networks. Hybrid networks, as a compromise, take into account both communication efficiency and decentralization. With the expansion of the scale of blockchain networks, hybrid networks have gradually become the mainstream solution in the industry due to the need for efficient communication strategies and network governance. Consensus mechanism: The consensus of distributed systems needs to rely on reliable consensus algorithms. Consensus algorithms usually solve the problem of which node in a distributed system initiates a proposal and how other nodes reach a consensus on the proposal. According to the difference between traditional distributed systems and blockchain systems, consensus algorithms are divided into consensus algorithms between trusted nodes and consensus algorithms between untrusted nodes. The former has been deeply studied and widely used in popular distributed systems, among which Paxos and Raft and their corresponding variants are the most famous. The latter has not been widely used until the rapid development of blockchain technology in recent years.According to different application scenarios, the latter is divided into consensus algorithms suitable for public chains represented by algorithms such as PoW (Proof of Work) and PoS (Proof of Stake) and consensus algorithms suitable for alliance chains or private chains represented by PBFT (PracticalByzantine Fault Tolerance) and its variants. Smart contract: A smart contract is a computer protocol designed to disseminate, verify or execute contracts in an information-based manner. Smart contracts allow trusted transactions without a third party. These transactions are traceable and irreversible. Its purpose is to provide security that is superior to traditional contract methods and reduce other transaction costs associated with contracts. Smart contracts can be divided into two categories based on whether they are Turing complete or not, namely Turing complete and non-Turing complete. Common reasons that affect the realization of Turing completeness include: loop or recursion restrictions, inability to implement arrays or more complex data structures, etc. Turing-complete smart contracts have strong adaptability and can program business operations with more complex logic, but there is a possibility of falling into an infinite loop. In contrast, although Turing-incomplete smart contracts cannot perform complex logical operations, they are simpler, more efficient and more secure. Distributed ledger: Distributed ledger technology DLT (Distributed Ledger Technology) is essentially a decentralized data storage technology that can share, synchronize and replicate data in a network consisting of multiple network nodes, multiple physical addresses or multiple organizations. Compared with traditional distributed storage systems, distributed ledger technology has two main different characteristics: traditional distributed storage systems implement data management mechanisms controlled by a central node or an authoritative organization, while distributed ledgers are often based on certain consensus rules and use multi-party decision-making and joint maintenance methods to store and replicate data. Traditional distributed storage systems break down the data in the system into several fragments and then store them in a distributed system. In a distributed ledger, each node has an independent and complete copy of the data. The nodes do not interfere with each other and have equal authority. The final consistency of data storage is achieved through periodic or event-driven consensus between each other. Since each node in the distributed ledger technology maintains a complete set of data copies, any modification of the data by any single node or a few clusters cannot affect the majority of global copies.
[0049] Based on the same inventive concept, the present invention provides a distributed trusted virtual human identity authentication method based on blockchain, which is applicable to the distributed trusted virtual human identity authentication system based on blockchain provided in the above embodiment, and includes the following steps, see Fig.10 As shown: S1: Establish interactive connections between the distributed digital identity system and the digital certificate authentication center and the virtual person digital identity registration system respectively; S2: Obtain the user entity identity information registration data, verify the user entity identity, and after the user entity identity is verified, create a digital identity for the virtual person identity corresponding to the user entity, generate a target virtual person identity corresponding to the current user entity identity, and store the target virtual person identity; S3: Generate a distributed digital identity of the target virtual person based on the target digital identity registration information obtained during digital identity registration, and the target virtual person includes a digital avatar of a natural person and a digital person virtually created based on a digitized character image; S4: In response to the digital identity credential request of the target virtual person, send the target digital identity credential corresponding to the target virtual person identity to the distributed digital identity system and the virtual person digital identity registration system respectively according to the target digital identity credential request.
[0050] In step S2, generating the target virtual person identity corresponding to the current user entity identity includes: S21: obtaining the user entity identity information registration data, and the distributed digital identity system verifies the user entity identity. The current user type includes natural person users and corporate users; S22: after the user entity identity is verified, performing a digital identity creation operation on the virtual person identity held by the user, and the digital identity creation operation includes selecting the identity type, registering identity information, providing descriptive information and uploading the virtual person model file; S23: obtaining the target data input when creating the digital identity and requesting the digital certificate authentication center to generate the distributed digital identity certification data of the target virtual person, the distributed digital identity certification data of the target virtual person is based on the digital identity certificate generated by the virtual person digital identity registration system for each virtual person identity. The digital identity sub-certificate corresponding to each virtual person model file; S24: configuring the distributed digital identity certification data of the target virtual person and the virtual person model file together as an executable file, uploading it to the virtual person digital identity registration system through the API interface, obtaining the digital identity hash value corresponding to the current model file, and storing the hash value for evidence to ensure the authenticity and credibility of the virtual person identity.
[0051] In step S2, the generation of the distributed digital identity of the target virtual person also includes: S25: when modifying the current virtual person's digital identity, modify and update the current virtual person's digital identity held by the user through the API interface, upload the corresponding certification document or updated information of the current virtual person's digital identity, and update the current virtual person's digital identity certificate after verifying the certification document, and store the updated virtual person's digital identity certificate in the virtual person's digital identity registration system, and issue it to the holder's digital wallet; S26: call the current virtual person's digital identity certificate for on-chain verification, and / or, obtain the authorized virtual person model file currently in use, including the bundled digital identity sub-certificate, and upload it to the virtual person digital identity registration system for off-chain verification, and read the sub-certificate information and generate the hash value of the model file, and compare it with the stored hash value to verify the current virtual person's identity. The implementation method of the above embodiment is the same as the principle described in the system of embodiment 1, and will not be repeated here.
[0052] In some embodiments of the present application, an electronic device is also provided. The electronic device includes a memory and a processor, wherein the memory is used to store a processing program, and the processor executes the processing program according to instructions. When the processor executes the processing program, the distributed trusted virtual human identity authentication method based on blockchain in the above-mentioned embodiment is implemented.
[0053] In some embodiments of the present application, a readable storage medium is also provided, which can be a non-volatile readable storage medium or a volatile readable storage medium. The readable storage medium stores instructions, and when the instructions are executed on a computer, an electronic device including the readable storage medium executes the aforementioned distributed trusted virtual human identity authentication method based on blockchain.
[0054] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.
Claims
1. A distributed trusted virtual human identity authentication system based on blockchain, characterized in that: include: A distributed digital identity system is used to obtain user entity identity information registration data, verify the user entity identity, and after the user entity identity is verified, create an identity for the virtual person identity corresponding to the user entity, and generate a distributed digital identity of the target virtual person corresponding to the current user entity identity; A virtual person digital identity registration system, used to confirm the target digital identity information obtained when the distributed digital identity of the target virtual person is created, store the distributed digital identity of the target virtual person, and record the distributed digital identity of the target virtual person, wherein the target virtual person includes a digital avatar of a natural person and a digital person virtually created based on a digital character image; The digital certificate authentication center is used to respond to the digital identity certificate request of the target virtual person and send the target digital identity certificate corresponding to the target virtual person identity to the distributed digital identity system and the virtual person digital identity registration system respectively according to the target digital identity certificate request.
2. The distributed trusted virtual human identity authentication system based on blockchain as claimed in claim 1, characterized in that: The distributed digital identity system comprises: The holder entity identity verification module is used to obtain the user entity identity information registration data, perform system registration and user identity authentication through the distributed digital identity system, and verify the user entity identity. The current user types include natural person users and corporate users; A virtual person digital identity creation module is used to perform identity creation operations on the virtual person held by the user after the user's physical identity is verified. The digital identity creation operation includes selecting the identity type, registering identity information, providing descriptive information and uploading the virtual person model file; A virtual person digital identity generation module is used to obtain the target data input when creating the virtual person digital identity and request the digital certificate authentication center to generate the distributed digital identity certification data of the target virtual person. The distributed digital identity certification data of the target virtual person is a digital identity certificate that generates a DID data structure for each virtual person identity based on the distributed digital identity technology / model, and a digital identity sub-credential corresponding to each virtual person model file; The virtual human digital identity notarization module is used to configure the target virtual human's distributed digital identity sub-credential and the target virtual human model file together into an executable file, upload it to the virtual human digital identity registration system through the API interface, obtain the digital identity hash value corresponding to the current model file, and store the hash value for notarization to ensure the authenticity of the virtual human identity.
3. The distributed trusted virtual human identity authentication system based on blockchain as claimed in claim 1, characterized in that: The distributed digital identity system further comprises: The virtual person digital identity modification and update module is used to modify and update the current virtual person digital identity held by the user through the API interface when modifying the current virtual person digital identity, upload the corresponding certification documents or updated information of the current virtual person digital identity, update the current virtual person digital identity certificate after verifying the certification documents, and store the updated virtual person digital identity certificate in the virtual person digital identity registration system, and issue it to the holder's digital wallet; The virtual human digital identity query and verification module is used to call the current virtual human's digital identity certificate for on-chain verification, and / or obtain the authorized virtual human model file currently in use including the bundled digital identity sub-credential and upload it to the distributed digital identity system for off-chain verification. The hash value of the model file is generated based on the sub-credential information read and compared with the stored hash value to verify the current virtual human identity.
4. The distributed trusted virtual human identity authentication system based on blockchain as claimed in claim 2, characterized in that: It also includes a virtual human authorization module, which is used to create an authorization letter, verify the physical identities of both parties, and form a smart contract with an electronic signature, and store evidence on the judicial blockchain. It also generates a security lock based on the information in the authorization letter to form a virtual human model SDK that includes a security lock, ensuring that only the authorized party can decrypt and use it after identity verification, and that it can only be used within the authorized period.
5. The distributed trusted virtual human identity authentication system based on blockchain as claimed in claim 1, characterized in that: It also includes a virtual human rights protection module, which is used to monitor the entire network based on a vector search engine to search for unauthorized use of virtual humans. When unauthorized use of virtual humans is monitored, evidence is collected online in real time and stored on the judicial blockchain.
6. A distributed trusted virtual human identity authentication method based on blockchain, applicable to the distributed trusted virtual human identity authentication system based on blockchain as claimed in any one of claims 1 to 5, characterized in that: The steps include: Establish interactive connections between the distributed digital identity system and the digital certificate authentication center and the virtual person digital identity registration system respectively; Obtain the user entity identity information registration data, verify the user entity identity, and after the user entity identity is verified, create a digital identity for the virtual person identity corresponding to the user entity, and generate a distributed digital identity of the target virtual person corresponding to the current user entity identity; Confirming the target digital identity information input when creating the distributed digital identity of the target virtual person, and storing the distributed digital identity of the target virtual person, wherein the target virtual person includes the digital avatar of the natural person and the digital person virtually created based on the digitized character image; In response to the digital identity certificate request of the target virtual person, the target digital identity certificate corresponding to the target virtual person identity is sent to the distributed digital identity system and the virtual person digital identity registration system respectively according to the target digital identity certificate request, and the target virtual person identity is recorded.
7. The distributed trusted virtual human identity authentication method based on blockchain as claimed in claim 6 is characterized in that: Generating the target virtual person identity corresponding to the current user entity identity includes: Obtain user entity identity information registration data, perform system registration and user identity authentication through the distributed digital identity system, and verify the user entity identity. The current user types include natural person users and corporate users; After the user's physical identity is verified, a digital identity creation operation is performed on the virtual person held by the user, and the digital identity creation operation includes selecting an identity type, registering identity information, providing descriptive information, and uploading a virtual person model file; Obtain the target data input when creating the virtual person's digital identity and request the digital certificate authentication center to generate the distributed digital identity certification data of the target virtual person, wherein the distributed digital identity certification data of the target virtual person is a digital identity certificate of a DID data structure generated for each virtual person identity based on the distributed digital identity technology / model, and a digital identity sub-credential corresponding to each virtual person model file; The distributed digital identity sub-credential of the target virtual person and the virtual person model file are configured as an executable file, uploaded to the virtual person digital identity registration system through the API interface, the digital identity hash value corresponding to the current model file is obtained, and the hash value is stored for evidence to ensure the authenticity of the virtual person's identity.
8. The distributed trusted virtual human identity authentication method based on blockchain as claimed in claim 6 is characterized in that: Generating the distributed digital identity of the target virtual person also includes: When modifying the current virtual person digital identity, the current virtual person digital identity held by the user is modified and updated through the API interface, the corresponding certification documents or updated information of the current virtual person digital identity are uploaded, and the current virtual person digital identity certificate is updated after verifying the certification documents, and the updated virtual person digital identity certificate is stored in the virtual person digital identity registration system and issued to the holder's digital wallet; Call the current virtual person's digital identity certificate for on-chain verification, and / or obtain the authorized virtual person model file currently in use including the bundled digital identity sub-credential and upload it to the distributed digital identity system for off-chain verification. Generate a hash value of the model file based on the sub-credential information, and compare it with the stored hash value to verify the current virtual person's identity.
9. An electronic device, characterized in that: include: A memory, the memory being used to store a processing program; A processor, wherein when executing the processing program, the processor implements the distributed trusted virtual human identity authentication method based on blockchain as described in any one of claims 6 to 8.
10. A readable storage medium, characterized in that: The readable storage medium stores a processing program, and when the processing program is executed by the processor, the distributed trusted virtual human identity authentication method based on blockchain as described in any one of claims 6 to 8 is implemented.
Citation Information
Cited By
AI digital content copyright storage method and device based on block chain and medium
CN120493220A
Intelligent inspection method and system for network live broadcast goods carrying
CN120769117A
Information storage method and device, storage medium and electronic equipment
CN121256765A
Information storage method, device, storage medium and electronic equipment
CN121256765B
Data contract-oriented strategy real-time compiling and consistency hot deployment method and system
CN121635903A