Children voice equipment identity authentication and behavior evidence storage system based on physical block chain

Abstract

The invention discloses a child voice equipment identity right confirmation and behavior evidence storage system based on a physical block chain, and belongs to the field of voice interaction and data security. The system comprises an identity binding and sound fingerprint hash module, a behavior chain generation and local account book recording module, a platform bank main account book module, an expression authority contract control module and a retrieving and transferring control module. The unique right confirmation of the device identity is realized by binding the Hash abstract of the child sound fingerprint with the voice device ID; recording a voice behavior abstract by means of a local and platform double-account-book structure, and constructing a continuous behavior chain; the authority is dynamically verified and expressed through contract logic, and unauthorized calling is prevented; and identity recovery and authority control are supported when the equipment is lost or transferred. The system does not need to collect original voice or biological information, protects the privacy security of children, has the advantages of non-tampering identity, verifiable behavior, controllable expression permission, traceable property right and the like, and is suitable for credible management and secure interaction of children voice equipment.

Description

Technical Field

[0001] This invention relates to the fields of voice interaction technology, blockchain data management and smart contract control, specifically to a system for identity verification and behavior storage of children's voice devices based on a physical blockchain structure. It is applicable to application scenarios such as identity binding, behavior recording, permission management and property retrieval of children's voice interaction devices (such as smart dolls, voice boxes, children's edge intelligence agents, etc.) with voice acquisition and playback capabilities, and belongs to the technical scope of children's smart device security management and trusted social system. Background Technology

[0002] With the rapid development of speech recognition, large language models, and edge computing technologies, children's voice interaction devices are gradually evolving from traditional passive playback terminals into intelligent systems capable of role simulation, semantic understanding, and content re-expression. Especially in children's social contexts, a personification mechanism with "voice as the core identity" has become an important direction for innovation. Based on this, the applicant has proposed several related inventions, forming a complete technological platform foundation.

[0003] For example, in "An Asynchronous Voice Social Method for Children that Supports Mutual Simulation of Role Voices and Re-expression of Content", an asynchronous expression structure based on the voice role identity was proposed to realize a new mode of children's social interaction. In "An Edge Intelligent Agent for Children's Voice Social Interaction and Its Control Mechanism", a terminal intelligent device architecture for carrying voice interaction tasks was designed. In "A Voice Interaction Method for Children that Supports Sequential Expression and Collaborative Reading of Multiple Roles", the voice command-driven role scheduling mechanism and collaborative expression process were further improved.

[0004] However, existing systems still have the following technical challenges in identity management and behavior recording:

[0005] 1. Difficulty in establishing ownership of devices: Children's voice devices lack a unique identification mechanism, making it difficult to distinguish ownership after loss or theft, and also making it impossible to physically retrieve them through the platform.

[0006] 2. Untraceable behavioral data: Existing interaction records are mainly volatile server data, lacking a chain-like evidence structure, making it difficult to prove that a specific voice behavior actually occurred, and also unable to be used for legal or parental supervision purposes.

[0007] 3. High pressure to protect privacy: In scenarios where underage users do not have the conditions for real-name authentication, collecting raw voice and biometric information poses legal and ethical risks, and there is an urgent need to establish a trustworthy interaction chain that does not require plaintext recording of content.

[0008] 4. Lack of restraint mechanism for device abuse: When a device is no longer used by its original user, the system cannot identify whether its expression permissions are legal based on historical behavior, nor can it restrict the occurrence of unauthorized expression.

[0009] To address the aforementioned issues, this invention proposes a system for identity verification and behavior preservation of children's voice devices based on physical blockchain. By constructing a binding mechanism of "device ID + voice fingerprint hash," adopting a two-layer ledger structure combining local ledger and platform main ledger, and introducing expression behavior permission contracts and transfer / retrieval control mechanisms, the system achieves unique identity verification of children's voice devices, immutable behavior paths, intelligent verification of expression permissions, and reliable retrieval of property rights.

[0010] This system not only constitutes the Trust Layer of the aforementioned expression platform, but also has independent deployment value and commercial application prospects. It is an important supplementary path for the trusted edge agent management mechanism in the field of children's voice social interaction. Summary of the Invention

[0011] I. Purpose of the Invention

[0012] This invention aims to solve the technical problems in existing children's voice interaction systems, such as difficulty in confirming the ownership of devices, lack of reliable records of voice behavior, inability to accurately constrain expression permissions, and difficulty in protecting content privacy. It constructs a physical-level blockchain trusted system with the capabilities of "identity binding + behavior storage + permission contract + retrieval control".

[0013] The core objectives of this invention include:

[0014] 1. Achieve unique identity verification for voice devices: By binding the device's unique ID with the child's voice fingerprint hash, ensure that each voice device has an unforgeable user ownership identity. Even if the device is lost, damaged, or transferred, the identity can still be traced and reconfirmed.

[0015] 2. Construct an immutable evidence chain for expressive behavior: Through the collaborative accounting mechanism between the edge ledger and the platform's main ledger, the summary, timing, and execution nodes of each expressive behavior are recorded to form a credible behavior chain structure, achieving verifiability that "the behavior has occurred" without saving the original voice content.

[0016] 3. Provide a multi-contractual constraint-based expression permission control mechanism: Automatic authorization and audit control of expression behavior is achieved through smart contract rules, including: identity verification, role permission judgment, social relationship matching, parental policy compliance, behavior chain continuity verification, etc., to prevent unauthorized expression and device abuse.

[0017] 4. Establish a legal control mechanism for device retrieval and transfer: When a voice device is possessed or lost by another person, the system can restrict, freeze or restore the device's expressive capabilities based on historical identity binding records, behavioral chain trajectories and contract permission status in the ledger, thus protecting the original owner's right to use and property rights.

[0018] 5. Achieve trusted identification while protecting children's privacy: The entire process uses only irreversible hash digests for identity binding and behavior recording. The system does not save the original voice, does not perform semantic analysis, and does not collect any biometric information, thus avoiding the risk of infringing on children's privacy from the underlying design.

[0019] Through the above-mentioned innovative mechanism, this invention establishes a full-cycle management path for children's voice devices, which includes "trusted identity + permission boundaries + verifiable behavior + controllable property rights." It possesses high security, traceability, and compliance, and can be widely applied in fields such as children's voice social platforms, intelligent toy device management systems, and rights confirmation systems for intelligent devices for minors. It has significant social value and commercial application prospects.

[0020] II. Overview of the Invention

[0021] This invention discloses a system for confirming the identity and recording behavior of children's voice devices based on physical blockchain. It aims to achieve reliable control and decentralized evidence recording of children's voice interaction devices in terms of identity confirmation, recording of expression behavior, permission management and device ownership retrieval through irreversible hashing mechanism, blockchain ledger structure and smart permission contract.

[0022] This system is based on an edge intelligent agent device architecture and revolves around the core concept of "voice as identity and behavior as verifiable," constructing five key functional modules, including but not limited to:

[0023] 1. Identity Binding and Voice Fingerprint Hash Module: When a child uses the device for the first time, their voice sample is collected and an irreversible voiceprint hash digest is generated. This digest is bound to the device's unique ID to form a joint identity with on-chain registration capabilities. This does not involve the preservation of the original voice or the processing of semantic content.

[0024] 2. Behavior chain generation and local ledger recording module: Records key information summaries (such as role ID, call time, behavior type, etc.) of each expressed behavior locally on the device in a time-series structure, and constructs them into a chain ledger structure to ensure the continuity, integrity and tamper-proof nature of behavior records.

[0025] 3. Platform Behavior Master Ledger Module: The platform synchronously receives the behavior summaries of the devices and performs consensus accounting to form a platform-level master ledger structure. It can support Byzantine fault tolerance, multi-node synchronization and behavior chain reorganization and recovery, and serve as evidence of behavior in legal or parental supervision scenarios.

[0026] 4. Expression Permission Contract Control Module: The system uses contract logic to dynamically verify the permissions of each expression behavior, judging multiple factors such as identity attribution, legality of role calling, social graph relationship, parental control strategy, and continuity of behavior chain, to decide whether to allow the device to speak or perform tasks, ensuring that "only the person can express themselves and no one else can speak on their behalf".

[0027] 5. Retrieval and Transfer Control Module: When a device is lost, illegally possessed, or formally transferred, the system automatically determines whether the current use is unauthorized based on historical ledger records and access control contracts. It supports operations such as identity restoration, property rights declaration, authorization change, and behavior freezing, realizing the "property rights retrieval" and "legal transfer" of voice devices.

[0028] This invention does not rely on real-name authentication or biometric information collection. Instead, it employs a full-link hash recognition and permission verification mechanism to achieve strong consistency management, weak trust usage, and strong traceability protection for the identity and behavior of voice devices while ensuring children's privacy and security. This constitutes a trusted infrastructure for children's voice social scenarios.

[0029] Furthermore, this system can complement and synergize with the applicant's previous patents on children's voice social platform systems, edge intelligent agent device systems, and role expression methods, jointly constructing a full-stack voice interaction management system covering "identity confirmation → expression control → content generation → behavior tracking → rights protection".

[0030] This invention has broad technical adaptability and commercial transformation potential, and is applicable to multiple sub-scenarios such as smart toys, children's voice terminals, and family companion devices. It can also be embedded into various voice social platforms and IoT management platforms through API interfaces to form a "physical identity blockchain network" with voice devices as the anchor.

[0031] III. Overview of the System's Functional Modules

[0032] (I) Identity Binding and Voice Fingerprint Hash Module

[0033] Function Description: When a child uses a voice device for the first time, the system collects their voice sample and generates a unique voice fingerprint hash (irreversible); this fingerprint is bound to the device ID to form a unique joint identity of "voice + device".

[0034] Features: It does not save the original voice or perform semantic analysis; it is only used for device permission authentication.

[0035] In this invention, the binding process includes the following steps:

[0036] 1. Voice fingerprint extraction and vector modeling

[0037] When a child activates the device for the first time via voice, the system will collect their voice data frames X={x1,x2,…,x...} in real time. n Each frame is a preprocessed spectrogram vector. The system uses a deep neural network model (such as a D-vector or X-vector speaker model) to embed and extract the speaker's fingerprint from the speech sample, generating a unique speech fingerprint vector for each individual.

[0038] 2. Fingerprint hash generation and encryption binding

[0039] The extracted voice fingerprint vector v is not stored directly, but is instead fed as input into a cryptographic hash function (such as SHA-256, BLAKE3, or Keccak) for irreversible digest computation. That is:

[0040] The resulting VoiceID is a unique fingerprint hash identifier for child users. It does not have the ability to reconstruct the original voice content and has extremely high distinguishability between different devices and different users.

[0041] 3. Device ID Acquisition and Confidential Identity Registration

[0042] At the same time, the system obtains the unique hardware ID of the current voice device (such as the MCU programming serial number, embedded module chip UID, or device manufacturing digital certificate).

[0043] Assuming the device ID is DevID, the platform will jointly calculate the registration binding message digest block using VoiceID and DevID:

[0044] The BindID is written into the device's local ledger and simultaneously submitted to the platform's blockchain master ledger as a registration transaction data structure, forming a unique joint identity anchor record.

[0045] 4. Blockchain Evidence Storage Structure

[0046] The platform encapsulates the binding event into a blockchain transaction, including: Transaction type: Identity binding; Hash fingerprint: VoiceID; Device Identifier: DevID; Timestamp: T; Hash digest: BindID; Signature information: Platform signature + Device signature.

[0047] The data is packaged into the current block of the platform's blockchain and participates in the block digest calculation as a Merkle Root, ensuring that the binding information is immutable and traceable.

[0048] 5. Technical Overview: 1) Irreversible identification mechanism: The combination of deep voiceprint vector extraction and one-way hash function ensures that even if the platform obtains the VoiceID, it cannot recover the original voice information, thereby meeting the privacy principle of "minimum collection and irreversibility" in the "Regulations on the Protection of Children's Information Networks"; 2) Unique Joint Identity Binding: Through the joint binding structure of "voice fingerprint hash + device unique ID", it ensures that the device only responds to the voice commands of its registered users, preventing it from being activated or invoked by others with forged commands; 3) Behavioral-level evidence storage path: The binding information is combined with the subsequent expression behavior chain to form a complete closed loop of "identity confirmation → behavior authorization → behavior evidence storage", providing basic identity protection for expression permission management, property rights retrieval and social graph binding; 4) Strong anti-collision and anti-forgery capabilities: Since fingerprints and device IDs jointly participate in the hash digest and are written into the blockchain ledger, any change to either one will prevent the consistent hash from being obtained through reconstruction, thus ensuring system security.

[0049] (ii) Behavior chain generation and local ledger recording module

[0050] This module is used to record each effective expressive behavior of children in edge voice devices in a summary manner, generate immutable, unrecoverable, and structured behavior chain fragments, and form a lightweight ledger (EdgeLedger) on the local device to support subsequent behavior verification, permission judgment and platform evidence storage synchronization.

[0051] This module generates local behavior summary chains through edge computing, without needing to save the original speech or transcribed content. It only retains the behavior metadata and behavior summary hash, forming a local chain-style evidence storage structure that is "content-agnostic but behavior-provable".

[0052] Whenever the device receives a valid voice input command and completes a character expression action, the system generates a behavior chain record according to the following steps:

[0053] 1. Extraction of behavioral metadata structure: Extract key metadata at the time the behavior occurs: Current timestamp T The character number called is R Current device unique ID DevID Voice ID (voice fingerprint hash) for voice control Previous behavior digest hash (if any) H prev The unique event identifier (UUID) for this action (EID)

[0054] 2. Behavior digest hash generation: Based on the above behavioral metadata, construct the behavioral summary structure M:

[0055] Input M into a hash function (such as SHA-256 or Keccak) to generate a behavioral digest hash:

[0056] 3. Local ledger chained writing: Hash the summary of this behavior H curr Compared with the previous summary H prev Logical linked storage is used to form the following structure:

[0057] LocalSig is a device-side signature (such as a signature based on an ECC public-private key pair) to ensure the legitimacy of the behavior's origin. This record is appended to the device's internal local ledger (circular cache or chain structure), forming the following chain structure:

[0058] 4. Synchronization mechanism: This module supports synchronizing local ledger summaries to the platform's main chain ledger via periodic or event-triggered methods for subsequent behavior verification, identity confirmation, retrieval authentication, and other processes.

[0059] Optional synchronization strategies include: Upload a summary after each presentation; Upload in batches after accumulating multiple entries; Upload will resume when the device reconnects to the network.

[0060] 5. Technical Overview: 1) Irreversible digest mechanism: All behavioral chain data is generated into hash digests based on meta-information, without retaining voice content or transcribing text, thus eliminating the risk of content storage of children's chat information; 2) Chain structure ensures integrity of behavior: The digest chain is constructed using the method of "previous hash + timestamp + behavior hash", which ensures that if any record is tampered with, the subsequent chain will break, thus having strong consistency and anti-tampering capabilities. 3) Lightweight edge design: The ledger uses circular storage or linked list compression, which occupies very little storage and can be deployed on embedded MCUs or small voice modules, supporting continuous operation without network access; 4) High controllability of synchronization: The local ledger supports differentiated upload strategies, which not only ensures the integrity of data synchronization, but also allows for control based on network environment or privacy requirements, thereby improving system robustness; 5) Behavior-driven, content-secondary expression perspective: The system only focuses on "who → when → which role was used → what kind of expression behavior was completed", without recording "what was said", thus realizing a behavior-driven, credible evidence storage system for expression.

[0061] (III) Platform Behavior Main Ledger Module

[0062] This module is used to establish a global main ledger for behavioral summaries on the platform side. It receives and stores behavioral chain summary data from edge voice devices (i.e., children's voice devices), enabling trusted evidence storage of behavioral history, attribution verification, behavioral consistency verification, and identity traceability. The platform's main ledger is based on a structured blockchain data structure, combined with time sequence, device ID, and fingerprint hash binding information to complete an "irreversible + tamper-proof + verifiable" behavior recording system.

[0063] The platform ledger module and the local ledger module work together to form a "dual ledger structure," supporting highly reliable applications such as device retrieval, confirmation of rights for expressive behaviors, and verification of cross-device social interactions.

[0064] Function implementation process:

[0065] 1. Behavioral summary synchronization and verification Each time an edge device generates a behavior summary chain record (including H...) curr H prev (T, EID, DevID, VoiceID), the platform will receive data through predefined API interfaces or encrypted communication channels to verify it: Equipment legality (whether it is a registered device); Behavioral chain consistency (whether it matches the historical H_prev); Signature validity (whether the device has been issued); Check if the fingerprint hash is already bound to the device (verify the VoiceID-DevID mapping through the platform's main table).

[0066] 2. Packaging of behavioral summary structure The platform constructs a unified data structure as follows: { "RecordID": UUID, "VoiceID": "hashed value", "DevID": "device UUID", "Role": "Character ID", "Timestamp": T, "EID": "Event Identifier", "H_curr": "...", "H_prev": "...", "DeviceSig": "...", "PlatformSig": "...", "ParentBlockHash": "...", "MerkleProof": "...", } The platform packages every N behavioral summaries into a logical block and uses the hash of all summaries to generate a Merkle tree root as the summary value of that block.

[0067] 3. Blockchain structure maintenance The platform ledger is maintained using a blockchain structure, and each block contains: Block header (containing the hash of the previous block, Merkle Root, timestamp, and block number); Block body (a list of behavior summary records); Platform signature (anti-tamper authentication); Right now:

[0068] The chain structure is as follows:

[0069] 4. Platform Behavior Retrieval and Verification Interface The platform ledger supports the following operation interfaces: Retrieve behavior history by VoiceID; Verify the validity of the expressed behavior based on the device's DevID; Generate user social graphs based on role-based behavior; Generate a user "behavior trajectory summary report" for retrieval or contract authorization verification; Export Merkle Proof for third-party rights confirmation (such as recovery, inheritance, and freezing processes).

[0070] 5. Technical Overview: 1) Behavioral-level trusted evidence storage mechanism: The platform does not store any voice, audio or text content, but only saves the summary chain data uploaded by the device to form a verifiable behavioral chain without touching the semantic expression itself; 2) Chain structure ensures traceability and tamper-proof capability: After all behavior summaries are verified by signature, a blockchain structure is constructed to ensure that any modification to a single record will result in inconsistency of the entire chain, providing a basis for traceability capability and admissibility of judicial evidence; 3) Supports behavioral contract invocation and authorization verification: The platform ledger records serve as the basis for identity verification and behavior confirmation, providing on-chain evidence support in subsequent retrieval, freezing, and role expression authorization; 4) Separation of behavior and identity in expression management: The platform focuses on "whether the behavior occurred" and "who initiated it" rather than "what was said," ensuring that the system complies with the principle of minimizing the information of minors; 5) Multi-source behavioral consistency verification mechanism (BFT-like): The platform can cross-compare multi-terminal summary data such as edge device behavior chain, social doll chain, and parent terminal records to form a lightweight Byzantine fault-tolerant behavior confirmation network, thereby improving fault tolerance.

[0071] (iv) Expression of Rights Contract Control Module

[0072] This module is used to perform permission judgment and decision control on expression requests initiated by edge voice devices based on the platform's smart contract mechanism. The platform dynamically executes access control for expression behaviors based on device registration identity, voice fingerprint hash, role access permissions, parental review policies, and social graph binding relationships, realizing a contractual behavior judgment and permission granting mechanism for children's voice expression behaviors.

[0073] This module is the core of the entire system for deciding whether "content can be executed", "roles can be simulated", and "expressions can be triggered".

[0074] 1. Expressing Request Parsing When a device is about to initiate an expressive action (such as playing character voice lines, voice-changing, or interactive performances in a co-branded theater), the platform parses the uploaded expression request summary structure, including: Current voiceprint hash (VoiceID); Current device ID (DevID); The requested role ID (RoleID); Types of expressive behaviors (such as role reversal, collaborative reading, emotional expression, etc.); Express the trigger timestamp (T); The hash of the last action in the current action chain (H) prev ).

[0075] 2. Contract matching and permission retrieval Upon receiving an expression request from an edge device, the platform immediately invokes the smart contract instance bound to the device and the user to comprehensively determine the legality of the expression. The specific contract verification process includes the following five aspects:

[0076] First, the platform will perform identity verification, which means checking whether the voice fingerprint hash (VoiceID) carried in the request has been bound to the device's unique identifier (DevID) in the platform's main ledger. If the two do not match, it is considered an illegal call.

[0077] Secondly, the platform will perform role-based permission checks to verify whether the role ID invoked in the current request is in the VoiceID user's authorized list. Only roles that have been explicitly granted permissions can be subject to expression control by the user.

[0078] Next, the system will perform social graph binding verification, which means confirming whether the target character or the person being imitated in the request belongs to the current user's social circle through social relationship chains. For example, in the "voice swapping" or "character imitation" expression behavior, the platform will determine whether the character's voice being invoked belongs to the user's friend character pool; otherwise, the operation will be rejected.

[0079] In addition, the platform must also perform a parental control policy matching judgment. This step is mainly used to verify whether the current expression request occurs within the allowed time period set by the parent, whether it belongs to the allowed expression behavior type, and whether it meets other customized expression restrictions. If it does not meet the requirements, the expression will be rejected, or it will have to wait for parental review before it can be executed.

[0080] Finally, the platform will perform behavior chain consistency verification to ensure that the current behavior chain structure has not been tampered with, interrupted, rolled back, or involved in unauthorized calls. The platform will compare the current behavior digest hash with the hash of the previous behavior in the historical chain (H). prev ), and check whether its key fields such as timestamp and instruction path are continuously valid.

[0081] Only when all the above verification items pass will the platform return a "Successful authorization of expression behavior" response signal, allowing the edge device to execute the role expression task. Otherwise, the system will refuse the expression trigger, return an error code and a rejection explanation, and, depending on the circumstances, mark the request as an illegal call attempt and record it in the platform behavior log for subsequent behavior analysis, security control, and compliance traceability.

[0082] 3. Dynamic Contract Structure (Brief Description) Each user / device has an independent expression control contract structure within the platform, containing the following fields: { "VoiceID": "...", "DevID": "...", "RolePermissions": ["Role001", "Role002"], "FriendBindings": ["VoiceID_B", "VoiceID_C"], "ParentPolicy": { "AllowedTimeRange": ["08:00-20:00"], "DisallowedTypes": ["Change to parent role"], "RequireReview": true }, "ContractState": "ACTIVE" } The contract is loaded in real time each time a user expresses themselves, and is used to determine the user's permission.

[0083] 4. Permission granting methods Expression behavior contracts can be updated in the following ways: Parents can modify expression settings (such as enabling / disabling the voice switching function). The platform detects anomalies based on behavioral chain records and automatically downgrades the contract status; After the equipment is recovered / transferred, the contract is re-signed by the new owner. Special roles (such as "theatrical collaboration roles") are subject to one-time temporary authorization only.

[0084] 5. Technical Overview: 1) Contractual Management of Expression Behavior: This invention ensures that any role's invocation behavior must meet the pre-set conditions by constructing an execution path of "expression request → contract matching → permission determination", which has strong control and auditability; 2) Dynamically adjustable permission policies: Contract rules support visual management for parents, role access restrictions, time period expression whitelist settings, etc., which can flexibly adapt to different family needs and supervision intensity; 3) Role simulation permission closed-loop judgment: The system rejects "cross-social boundary role calls". For example, non-friend roles and non-authorized roles are not allowed to call sound resources to prevent social fraud and role abuse; 4) Expression chain consistency verification and unauthorized access interception: The platform can check whether the current behavior is consistent with the historical chain. If a jump call, rollback replacement or forged signature behavior is detected, the expression process will be interrupted immediately. 5) Content retention is disabled by default, and only expressive behavior is controlled: The contract only determines whether an action has occurred and does not involve the storage or analysis of expressive content, ensuring system compliance and the principle of data minimization.

[0085] (v) Retrieval and Transfer Control Module

[0086] This module is used to support the re-establishment of the identity binding relationship between the device and the original or new user in scenarios such as loss, damage, transfer or inheritance of edge voice devices (children's voice devices), and to restore the device's usage rights or change its ownership while ensuring the consistency of the behavior chain and the legality of the expression permissions.

[0087] This module uses a behavior chain verification mechanism, fingerprint hash identity comparison, platform ledger query, and parental authorization confirmation to realize the process of retrieving, inheriting, and re-signing device ownership, ensuring that every device in the system operates under the control of a legitimate user and preventing identity theft, illegal occupation, or role abuse.

[0088] Function implementation process:

[0089] 1. Equipment retrieval mechanism When a child's voice device is lost or damaged, the user (usually a parent) can initiate a retrieval request through the platform. The system will then perform ownership verification and permission restoration according to the following process: The user submits the hash of the device's unique identifier (DevID) and the user's voice fingerprint (VoiceID); The platform queries the binding relationship in the main ledger to confirm whether the device has ever been bound to the VoiceID; The platform retrieves a summary of the behavior chain related to the device to verify whether its expressed behavior matches the VoiceID; If the VoiceID and role usage path in the historical behavior chain are consistent with the current requester, and there are no other valid usage behaviors in the recent period, then the user is considered to be the legitimate original owner; The system generates a "proof of recovery" and allows users to reactivate the device or rebind it to new hardware.

[0090] If a device has been illegally occupied by someone else, the platform can mark the device as "frozen" and prohibit it from triggering any expressive behavior until the ownership dispute is resolved.

[0091] 2. Equipment transfer and inheritance mechanism For scenarios where users voluntarily transfer their voice devices to other children (such as gifts, secondhand transactions, inheritance by relatives, etc.), the platform provides a structured contract re-signing and permission redistribution mechanism, including: The original user initiates a "transfer of authorization" operation on the platform; Specify the new user's voice fingerprint hash (VoiceID_new); The platform verifies whether the behavior chain is in a continuous closed loop state (no expression tasks are being executed). The system will remove the original binding relationship between VoiceID and DevID in the main ledger and update it to VoiceID_new; All expression permission contracts and role call records will be cleared or transferred; If the original user allows, the new user can inherit part of the behavior summary chain (such as for preserving character history or generating childhood memory theaters). Parents must sign a digital confirmation agreement for all transfers, and the platform retains a complete transfer log for subsequent liability audits or dispute resolution.

[0092] 3. Behavior chain attribution verification mechanism In scenarios involving ownership disputes or providing evidence of conduct, the platform can verify device ownership in the following ways: Based on the summary of the behavior chain fragment uploaded by the device, confirm whether it contains long-term usage behavior of a certain VoiceID; Attribution probability scoring is based on role invocation, collaborative interaction records, and social relationship verification paths within the behavioral chain. If multiple users submit retrieval requests, the system can compare their contribution to the behavioral chain, the frequency of initiation, and historical consistency to determine the priority of attribution. All verification operations can generate a visual "behavioral chain traceability map" for parents to view and confirm.

[0093] 4. Technical Overview: 1) Compliant and verifiable property rights retrieval mechanism: The platform uses multi-source data such as voice fingerprint binding records, behavioral chain data, and contract logs to verify the identity of the retrieval, ensuring that the ownership of the device is supported by a chain of evidence and improving the security of device property rights management; 2) Behavior chain-driven attribution determination model: The system does not rely on real-name authentication or biometric information, but only constructs a "behavior attribution trust map" based on on-chain behavior data and hash fingerprints, which avoids the risk of privacy leakage while improving the accuracy of determination; 3) Expression permission freezing and unfreezing mechanism: When there is a dispute over the ownership of the device or it is in the process of being transferred, the platform can prohibit its key operations such as role calling and sound playback through the contract module until the contract relationship is reconfirmed; 4) Controllable inheritance and traceability of authorization: The original user can choose whether to transfer the expression record and whether to allow the retention of the behavior chain. The new user's behavior is regenerated from the new contract, ensuring the cleanliness and isolation of the social expression chain among children; 5) The platform's status as the sole anchor of trust is established: all rights reconstruction processes must be executed through the platform and recorded on the blockchain, ensuring that the platform becomes the core of trust for device ownership confirmation and voice expression authorization, which cannot be bypassed.

[0094] IV. Constructing a physical blockchain-based trusted system for children's voice devices to verify their identity and expressive behavior.

[0095] This invention system, based on three principles—the uniqueness of children's voice expression identity, the verifiability of their behavior, and the invisibility of their content—constructs a closed-loop system for trusted expression management, composed of edge intelligent devices and a collaborative platform. This system, through five highly collaborative modules, completes the entire closed-loop process from identity binding → behavior storage → permission determination → ownership verification, as detailed below:

[0096] 1. Identity Binding and Voice Fingerprint Hash Module This module serves as the system's "starting point mechanism," used to jointly bind the child's voice fingerprint (an irreversible voiceprint feature vector) with the voice device's unique ID upon initial device activation. After extracting the voiceprint using a deep learning model (such as d-vector), the platform performs hash processing to generate an anonymous but unique VoiceID. This VoiceID is then written into the binding record along with the device's DevID and submitted to the platform's main ledger, forming a "voice and object integration" anchoring mechanism for the device's identity.

[0097] Key technical points: irreversible voiceprint digest, unique identity binding, compliance and verification, and device initialization and rights confirmation.

[0098] 2. Behavior chain generation and local ledger recording module Whenever a child issues an expressive command to the device (such as changing roles, saying a sentence, or participating in a theatrical interaction), the system does not retain the original speech or semantic content. Instead, it extracts the meta-information of the behavior (timestamp, role call, behavior event ID, etc.), generates an irreversible behavior digest hash, and writes it sequentially into the device's local lightweight ledger. The behavior chain adopts a chained hash structure, supports edge computing execution, and ensures that even low-power devices have complete behavior recording capabilities.

[0099] Key technical aspects: Invisible content, verifiable behavior, edge accounting, immutability, and embedded operation.

[0100] 3. Platform Behavior Main Ledger Module Local devices periodically or through event-triggered events upload behavioral chain summaries to the platform. The platform maintains a master ledger system based on a blockchain structure, constructing all behavioral summary data into a chain-like block structure to form a global behavioral chain ledger. Each behavioral expression is included in the platform's "behavioral trajectory ledger," which can be used for purposes such as behavioral backtracking, proof of ownership, and contract authorization.

[0101] Key technical aspects: global evidence storage, behavioral chain master ledger, blockchain structure, data immutability, and foundation for judicial admissibility.

[0102] 4. Expression of Rights Contract Control Module Before an action is actually triggered, the platform uses a smart contract mechanism to perform real-time permission checks on the request. The platform will determine the legitimacy of the request based on multiple dimensions, including the bound identity (VoiceID-DevID), role usage permissions, friend social graph, parental control policies, and consistency with the action chain. Only actions that pass all checks will be authorized for execution; those that fail will be rejected and recorded as abnormal attempts.

[0103] Key technical aspects: authorization of expressive behavior, role permission judgment, friend restriction mechanism, consistency verification of behavior chain, and interception of unauthorized access.

[0104] 5. Retrieval and Transfer Control Module When a device is lost, damaged, transferred, or inherited, the platform analyzes the device's historical behavior chain, identity binding records, and voiceprint hash information to verify ownership and facilitate retrieval. Legitimate users can submit an ownership application, and the platform reconstructs the control relationship based on on-chain data. Devices can also be transferred to new users with parental authorization, and the platform automatically resets behavioral permissions and rebinds expression permissions.

[0105] Key technical aspects: property rights recovery, equipment inheritance, behavior ownership verification, freezing and unfreezing mechanisms, and expression of contract re-signing.

[0106] 6. Technology closed loop These five modules constitute a complete "credible expression path chain": Voice binding → Behavior occurrence → Block notarization → Permission judgment → Ownership management Throughout the entire chain: Do not save content; Do not grant access to out-of-bounds permissions; All expressive behaviors have verifiable on-chain records; All devices have verifiable digital sovereignty.

[0107] This not only solves the privacy risks and identity misuse issues of children's voice devices, but also endows each doll with an "unreplicable expressive identity," forming the core infrastructure of a digital property rights system for children's voice social expression.

[0108] V. Terminology Definitions and Identification Boundaries

[0109] To facilitate understanding of the technical solutions involved in this invention and to clarify the boundaries of each module and function, this chapter defines the core terms involved in this invention as follows:

[0110] 1. Children's voice devices The "children's voice device" described in this invention refers to an intelligent terminal device with functions of voice acquisition, sound broadcasting, data storage, and network communication. Its physical form can be a doll, voice box, wearable device, ornament, book, or other object into which a voice module can be embedded, but is not limited to a specific shape. This device primarily serves children's voice expression and social interaction, and is the carrier basis for the behavior chain and identity verification in this invention.

[0111] 2. Edge intelligent agents "Edge agent" refers to a local intelligent processing unit deployed in children's voice devices. It has basic functions such as speech recognition, hash calculation, local ledger generation and permission response control. It can independently complete data processing and behavior recording tasks without cloud collaboration and has the characteristics of low power consumption, customizability and small-scale computing.

[0112] 3. Voice fingerprint hash (VoiceID) "Voice fingerprint hash" refers to an irreversible digital digest generated by processing the feature parameters extracted from a child's natural speech using cryptographic digest algorithms (such as SHA-256, BLAKE3, etc.). This digest does not have the ability to reconstruct the original speech and is only used for identity verification and behavior chain verification. This invention does not store the original speech or perform semantic analysis.

[0113] 4. Device Unique Identifier (DevID) The "device unique identification code" refers to the unique identifier of each voice device registered in the platform's main ledger. It is usually composed of a hardware-level ID, manufacturing serial number, MAC address, or a digital signature generated by the platform, and is used to bind corresponding behavioral data and permission paths in the blockchain system.

[0114] 5. Role ID "Role" refers to the expressive personality or anthropomorphic identity that a child creates for their voice device on the platform. Roles can be bound to voice templates and used to express identity performance or social interaction, and are subject to contractual permission control.

[0115] 6. Behavior Chain "Behavior chain" refers to the chain structure formed by the continuous voice interaction behavior between a child and a voice device, which is hashed and arranged in chronological order. It contains only behavioral metadata (such as timestamp, device code, expression trigger type, etc.) and behavior summary, but does not contain specific content. It is used for identity verification, expression tracing and evidence of behavior ownership.

[0116] VI. Technical Boundary Description and Identification Mechanism Blockade Statement

[0117] To avoid circumventing or misunderstanding this invention, the scope of the identification mechanism and the technical blockade path of this invention are clarified as follows:

[0118] (a) Identifying the limiting boundaries of the signal source 1. The identity recognition mechanism described in this invention uniquely relies on a joint verification path of "voice fingerprint hash" and "device unique identity code"; 2. This invention does not collect or store original audio files, nor does it use other biometric signals such as image recognition, motion recognition, acceleration recognition, or facial recognition; 3. All behavior chains are generated based on triggering events, behavior tags, and encrypted digests. The behavior content itself cannot be restored, nor can the platform know it.

[0119] (ii) Closed characteristics of system behavior paths 1. All behavioral data must be synchronously recorded in both the local ledger and the platform's main ledger to form a dual evidence storage mechanism; 2. All expressive behaviors must be verified by the contract control module before they can be triggered and executed. It is not possible to bypass platform authorization by modifying the local cache or device commands. 3. All behavioral verifications must meet five types of contract conditions: identity verification, role and permission judgment, social graph matching, and consistency between parental control strategies and behavioral chains; 4. All identity and permission information cannot be modified or copied on the local device. Once the platform loses its legitimate synchronization with the main ledger, the right to express is lost.

[0120] (III) Detour Mechanism Blockade Statement To prevent others from circumventing this invention through technical means, the following possible bypass routes are explicitly blocked: Using methods such as device reset, MAC address change, and serial number copying to forge device identity; Using speech synthesis technology to simulate children's voices to bypass identity verification; By exploiting local cache files, the permission judgment logic can be bypassed. By bypassing the platform contract triggering process through local alternative execution; Use platform content data to perform reverse semantic reconstruction or restore voice content; Simulate social binding relationships or forge character commands to trigger expressions.

[0121] Any implementation of the above methods falls within the scope of the identification boundary blocked by this invention and constitutes an infringement of the claims of this invention.

[0122] VII. Beneficial Effects

[0123] This invention provides a system for identity verification and behavior evidence storage of children's voice devices based on a physical blockchain mechanism, which has the following beneficial effects and innovative points:

[0124] 1. Implement a joint rights confirmation mechanism based on device identity and child's voice identity. This invention innovatively and irreversibly binds a child's voice fingerprint hash (VoiceID) with the device's unique identifier (DevID) and registers this binding in the platform's main ledger, thus establishing a one-to-one correspondence between voice identity and physical device. This mechanism does not rely on traditional methods such as biometric information or real-name authentication. While protecting children's privacy, it achieves a strong binding between the device's "identical attributes" and "behavioral permissions," solving the security vulnerability of traditional voice devices that cannot verify "who is using it."

[0125] 2. Introduce a behavioral chain evidence storage mechanism to ensure that children's behavior is verifiable but not spied on. This invention employs a triple structure of hash digest, local ledger, and platform ledger to generate a chain-like behavior chain for children's interactions with devices, achieving a behavior evidence mechanism that ensures "the behavior has occurred, the content is invisible, and the record is verifiable." This chain structure is immutable and traceable, suitable for various scenarios such as expression tracking, property rights arbitration, and parental supervision, while avoiding the platform's storage or analysis of children's voice content, effectively avoiding data compliance and ethical controversies.

[0126] 3. Expressing permissions through smart contracts to build a boundary control system for content generation. The expression permission contract control module proposed in this invention can perform five-fold judgment on all expression requests (identity attribution, role permission, social binding, parental policy, and behavioral chain consistency). Through the platform's embedded smart contract, dynamic judgment and permission scheduling are performed to ensure that every content generation is legally triggered, traceable, and verifiable, preventing risks such as "unauthorized expression" and "impersonation expression" and constructing a trustworthy and controllable content generation boundary system.

[0127] 4. Provide a mechanism for equipment retrieval and authorized transfer, achieving dual protection of "property rights + behavioral rights" for physical objects. In scenarios involving lost or transferred devices, this invention implements multiple control logics, including device ownership verification, usage permission restoration, and behavior chain continuation, through a retrieval and transfer control module. This ensures the separation of device ownership and behavioral permissions. Even if the device is acquired by someone else, without the original identity's authorization, it cannot be re-bound, expressed, or viewed, thus achieving a complete control loop of "transferable devices, undisclosed identities, and undamaged data."

[0128] 5. Avoid storing the original audio and semantic information, greatly improving the level of children's privacy protection. Unlike most existing voice platforms, this invention does not store children's original voice text, semantic content, or voice synthesis records. All system operations are executed based on irreversible hash values ​​and behavior triggering links, which greatly reduces the platform's processing of children's sensitive information and compliance burden. It complies with the requirements of laws and regulations such as the Personal Information Protection Law and the Regulations on the Protection of Children's Personal Information on the Internet, and is applicable to the implementation of children's voice social products worldwide.

[0129] 6. Construct a physical blockchain paradigm to realize the "behavioral memory" and "identity traceability" of intelligent agents. This invention proposes for the first time a "physical blockchain" paradigm for children's edge voice devices. It encrypts and records every expression, interaction, transfer, and retrieval operation of the voice device using a chain structure, achieving traceability and sustainability of device behavior. Even if the device is damaged, replaced, or has been around for a long time, child users can still apply for "behavioral history recovery" through their voiceprint hash, preserving their "childhood memories" and "social trajectory," which has significant emotional and commercial value. Attached Figure Description

[0130] Figure 1 System structure and functional module diagram; Figure 2 Flowchart of identity binding and device registration; Figure 3 Behavior chain generation and local ledger structure diagram; Figure 4 : Flowchart of request expression and smart contract authorization; Figure 5 Platform behavior master ledger chain structure diagram; Figure 6 : Retrieval and Transfer Control Flowchart. Detailed Implementation

[0131] To make the objectives, technical solutions, and beneficial effects of this invention clearer and more explicit, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. This invention is not limited to the specific embodiments described below; any equivalent substitutions or improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

[0132] Example 1: Initial binding of voice device and completion of identity verification

[0133] In this embodiment, the child user Xiaowen receives a new voice doll, and the system prompts her to complete the identity binding operation. Xiaowen says to the device, "Hello, I am Xiaowen."

[0134] The system acquires the speech sample through an edge acquisition module and executes a local voiceprint extraction algorithm (such as MFCC + GMM voiceprint modeling) to generate a corresponding voice fingerprint feature vector. Subsequently, this feature vector is subjected to a SHA-256 hash operation to generate an irreversible VoiceID hash value.

[0135] The VoiceID and the DevID, the unique identifier of the doll device, are submitted to the platform. Identity registration is performed through the platform's main ledger and recorded as: "DevID = X123456789" bound to "VoiceID = VHASH1234…".

[0136] After this, the device can only respond to Xiaowen's voice commands; other children cannot use the device to express themselves. The platform does not save the original voice content, nor does it have the ability to recover the audio, thus achieving an "irreversible + non-transferable + unforgeable" identity verification mechanism.

[0137] Example 2: Generating a Behavior Chain and Recording it in the Local Ledger

[0138] In daily use, Xiaowen used the voice device to leave a message for her friend Xiaowu's doll: "Are you coming to my house to play tomorrow?" This voice action triggered the system to generate a behavior event record.

[0139] The device resolves this behavior into the following structured summary: Initiator's VoiceID: VHASH1234… Target character: Xiao Wu Voice behavior type: Message Timestamp: 2025-07-22T15:21:00 Hash digest: H("Are you coming to my house tomorrow?") → MSGHASH5678… The digest is encapsulated into a new local block and linked to the previous block, forming a chain structure. The block records fields such as timestamp, behavior hash, previous block hash pointer, and device signature.

[0140] Even when the device is offline, the local ledger can still fully preserve the behavior chain, ensuring the continuity and immutability of the behavior chain when it is subsequently uploaded to the platform.

[0141] Example 3: Platform Contract for Permission Verification and Authorization

[0142] One day, Xiaowen tried having her doll read aloud a passage in the voice of her friend Xiaoqiang: "I wish you good luck on your exam!" After receiving the expression request, the system automatically invokes the expression permission contract and verifies it sequentially: 1. Is the current VoiceID a user bound to the device? 2. Do I have permission to access the Xiaoqiang character? (The platform verifies whether the user is a friend on the social graph). 3. Whether it is within a time period permitted by parents; 4. Whether the current action is connected to a previous chain of actions; 5. Does the content of the behavior pose any sensitive risks (predicted by the model and returned with a hint hash)?

[0143] Once all five checks pass, the platform returns an "Authorization Passed" response, and the system completes the expression synthesis and playback. Otherwise, the platform marks this action as a failure event, writes it to the log, but does not perform synthesis, ensuring that the expression permissions remain within the contract's control scope.

[0144] Example 4: Identity Recovery and Property Rights Restoration After Device Loss

[0145] Xiaowen accidentally lost her toy, and her parents initiated a "device retrieval" request through the platform. The system required voice verification: Xiaowen recorded another sentence on her parents' mobile phone.

[0146] The platform executes the same voiceprint extraction and hashing algorithm as before, verifies that the new voice is consistent with the original VoiceID = VHASH1234…, and confirms that the parent account has permission control over the device.

[0147] Platform execution of contract logic: 1. Activate the device loss flag and block the original device permissions; 2. Activate and bind the original VoiceID for the new device (DevID = X999999999); 3. Download the local behavior chain summary from the old device and re-chain it into the new device; 4. All original social connections and expression records have been restored.

[0148] This mechanism can retrieve device ownership and restore behavioral data without any biometric authentication or real-name registration, protecting children's social data and behavioral memories from being leaked or falsified.

[0149] Example 5: Request for Proof of Recall Behavior in Adulthood

[0150] Years later, Xiaowen grew up and applied to revisit her childhood interactions with her dolls and friends. The platform offers a "childhood behavior evidence retrieval" service.

[0151] The system allows the user to re-verify the VoiceID hash through the original account or parental authorization, and extract a summary of all early behavioral chains (excluding the original content) with user authorization.

[0152] The system only outputs the following proof format: Date: 2025-07-22 Target: My friend Xiao Wu Type: Commenting behavior Behavioral hash: MSGHASH5678… Verify signature: SIGN(HASH + timestamp + device ID).

[0153] The entire chain of evidence for the behavior cannot be reconstructed by the platform; it can only prove that "the behavior actually occurred and has not been tampered with." It can be used as recollection data or as evidence to support the history of identity behavior.

[0154] Example 6: Contract Abnormal Blocking Behavior Recording Mechanism

[0155] In this embodiment, Xiaowen's friend Xiaoqiang attempts to illegally access the character expression permissions bound to Xiaowen's device, intending to generate unauthorized content. This behavior may fall into one of the following categories: Use unbound voice to mimic Xiaowen initiating a request; Bypassing expression restrictions through the parent's app; Attempt to activate expression during non-permitted time periods; The requested role is not in the current social graph (e.g., not a friend); Request to interrupt the continuous chain of actions (e.g., there is no traceable proof after the chain is broken).

[0156] The system's permission contract module executes automatic permission verification logic before being invoked: 1. Voice fingerprint hash does not match, authentication failure is returned; 2. The request time does not match the role, resulting in a conflicting return strategy; 3. The current behavioral chain is broken, and the continuity of behavior cannot be confirmed.

[0157] If the contract system refuses to execute, it will generate an abnormal behavior log block for this behavior, with the following structure: Exception type: Unauthorized call Called role: RoleID_ABC123 Requester VoiceID: Simulated Voice Hash VHASH - Simulated Timestamp: 2025-07-22T20:12:00 Reason for rejection: Unbound identity Signature: Platform Rejection Event Signature SIGN_DENY

[0158] This block will be stored independently, without affecting the normal behavior chain, and can be queried by the platform or parents. It supports subsequent statistical analysis and security tracing, realizing a closed loop of behavior governance and risk control.

[0159] Example 7: Cross-Device Behavior Chain Merging Mechanism

[0160] Xiaowen used two voice devices for social interaction within a year (such as replacing the first doll with the second one due to malfunction). Now he wants to merge all his behavioral records into a complete chain in order to trace his childhood social history.

[0161] The system supports a cross-device behavior chain merging mechanism, the process of which is as follows: 1. The user declares, through the original account or identity verification, that the original device DevID_A and the new device DevID_B belong to the same user (verifying that the VoiceID is consistent). 2. The system extracts all chained behavior records from the local ledgers of both devices; 3. Verify the consistency of timestamps and hashes, and the validity of signatures between the two action chains; 4. Perform chain splicing in chronological order (record broken chain marker blocks if breakpoint insertion is required); 5. The merged chain will be uploaded to the blockchain and written to the platform's main ledger, and the role call history will be updated.

[0162] The merged main chain structure is shown below: Block_1 (DevA) → Block_2 (DevA) → Block_3 (Broken Chain Flag) → Block_4 (DevB) → Block_5 (DevB) Each block retains its original device origin, and the merged chain has full signature and verification capabilities to ensure no data forgery or omission, which is convenient for users to preserve memories and also beneficial for behavior auditing and system governance.

[0163] Example 8: Time Blind Box Behavior Recovery Mechanism

[0164] In this embodiment, to enhance user experience and emotional memory recall, the system supports a "time blind box" mechanism: at some point in the future, a child can request the system to "open memories" or "recall the past," which will automatically trigger the recall and reproduction of a certain social behavior chain in the past, without disclosing the original voice content, and only restoring the event-level behavior and role expression records to meet the needs of reminiscing, commemorating, and parent-child interaction.

[0165] Example of application scenarios: Xiaowen has grown up and logged into the platform to request to "review the voice interaction records with Xiaoqiang and Xiaoqian on her 7th birthday", but the platform has no original voice storage, only hashed behavior chains.

[0166] The system performs the following operations: 1. Identity Verification: Verify that the current VoiceID hash matches the identity bound to the device behavior chain from the previous year; 2. Time blind box request verification: Match the time range (e.g., October 20 to October 22, 2023); 3. Behavior chain callback mechanism: The platform's main ledger retrieves chain records within the relevant time period, including role ID, device ID, timestamp, and behavior type (such as "send congratulations", "receive voice message", "tell a story with a different voice", etc.). 4. Behavioral Summary Display: Generate a graphical memory log, without audio, and present it in the following format: On October 20, 2023 at 18:34, Xiaowen used the nickname "Watermelon Boy" to congratulate "Xiaoqian" (emotion: joy). On October 20, 2023 at 19:01, Xiaoqian responded in the form of "Jumping Bear" (content hash verified). On October 20, 2023 at 20:05, Xiaowen and Xiaoqiang sang "Happy Birthday" in turn, playing the roles of Watermelon Boy and Pipi Dragon. Behavior hash verification: Each record can be verified by clicking "Verify Original Chain". The block hash is automatically compared with the evidence stored in the main ledger to confirm that the behavior did occur and has not been tampered with.

[0167] Technical Overview: It does not involve the retention of voice data; It does not violate privacy compliance; Supports emotional blind box-style regression; All content is recovered from the behavior chain and hash digest.

[0168] This mechanism can serve as a core capability support for future social memory services and commemorative cultural and creative products (such as audio theater reviews), and has profound emotional and commercial value.

[0169] Example 9: Application of Contract Unlocking Mechanism in Child Role Authorization

[0170] This embodiment introduces a "expression permission unlocking" mechanism based on smart contracts, used to achieve progressive authorization control over specific roles, expressive content, or interactive behaviors. This mechanism balances children's independent exploration, social guidance, and platform security strategies, and is particularly suitable for application scenarios such as "growth-based unlocking," "limited role usage rights," and "friend interaction levels."

[0171] Application Background: The child, Xiaomi, owns a doll named "Wind Chime Cat," which initially allows her to interact with only two designated friends. However, as her interactions on the platform increase and her voice expression matures, the system can dynamically grant her more expressive abilities through a "contract unlocking mechanism." For example: Unlock interaction permissions with your new friend "Guoguo"; Access to the specific character "Lightning Mouse" has been granted; Advanced expression modes such as "round singing" or "multi-role switching" are allowed.

[0172] Technical process:

[0173] 1. Contract preset strategy: The system is based on user growth curves, behavior chain records, and parental strategies, and pre-sets unlocking conditions (such as the number of times an expression is made, the frequency of interaction, and time limits). Generate the corresponding smart contract (UnlockContract) and bind it to the user's VoiceID's expression permission list.

[0174] 2. Behavior triggering and judgment mechanism: Each verbal expression updates the user's behavior chain. The system automatically checks whether the unlocking conditions set in the contract are met based on the chain of evidence records and the current timestamp.

[0175] 3. Permission unlock response: Once the contract conditions are met, the system writes a "permission unlock event" through the on-chain contract logic and updates the user's permission status in the main ledger. Users can immediately gain new expressive features, such as: "System notification" Congratulations! You have used Wind Chime Cat to tell stories for 10 consecutive days. You can now unlock the "Lightning Mouse" character!

[0176] 4. Unlock the blockchain evidence: The unlock event itself is also written into the behavior chain as a system behavior; This forms a "permission change node" in the chain structure, which can be used for future auditing, verification, and traceability.

[0177] 5. Parental control and termination mechanism: All unlocking actions can be configured with a parental pre-approval mode; Parents can configure policies such as "whether to allow unlocking" and "approval required before it takes effect" to ensure the safety of minors.

[0178] Innovation points: Dynamically link growth paths with expression permissions, giving the system the ability to unlock permissions gradually; All permission changes are solidified through contract logic execution, behavior chain recording, and the main ledger, ensuring high reliability. Encourage positive use and social expansion, and prevent unauthorized access and misuse.

[0179] This embodiment is particularly suitable for building a "children's growth-oriented voice expression space", which integrates the physical blockchain mechanism with the behavior-driven permission structure to create a trust growth path in social expression.

[0180] Example 10: Application of the Behavioral Proof Authorization Mechanism in Property Rights Confirmation and Expression Retrospection

[0181] This embodiment describes a "behavioral proof authorization mechanism" based on behavioral chain evidence storage, which can be used for: Used to retrieve device identity or behavioral records when a child's voice device (such as a toy) is lost or damaged; Used for confirming behavior patterns when parents or users want to see if a certain behavior has occurred; In compliance audits or appeals disputes, it serves as evidence of non-content-based conduct.

[0182] The core of this mechanism is that the system only saves the behavior hash chain and does not save the original content, but can provide rights confirmation and verification services for "the behavior has occurred".

[0183] Application background example: Xiao Ke used the "Courage Bear" voice device to make several interactive statements during the holidays, but the device was lost on the way back to school. The parents hope to find the device and prove that the doll truly belongs to Xiao Ke.

[0184] Meanwhile, Xiao Ke had participated in a "story relay activity" on the platform. The platform wanted to confirm whether she was a valid participant, but for privacy protection, it could not retrieve the original audio content.

[0185] At this point, the platform can complete the process through a "behavioral proof authorization mechanism": Confirmation of ownership of dolls; Providing evidence that the act occurred; It does not involve the exposure of voice content and does not violate user privacy boundaries.

[0186] Technical process:

[0187] 1. Behavioral chain structure encapsulation For each voice expression, the system generates a blockchain structure using VoiceID + DevID + timestamp + behavior digest (content hash) and writes it to the local ledger and the platform's main ledger. The behavior digest does not contain semantic information; it is only a content digest hash (such as a SHA-256 digest).

[0188] 2. Behavioral proof request triggered Parents or users can initiate a "behavior verification application" through the platform. They need to specify the verification scope (such as date range, device ID, etc.) and provide authorization (such as voiceprint verification or guardian confirmation).

[0189] 3. Contract authorization logic judgment The system calls "Prove Authorization Contract" to check: Whether the behavior is actually recorded on the blockchain; Does the current applicant possess a VoiceID or its legal authorization? Does it meet the scope of permissible behavior proof in the parental control strategy?

[0190] 4. Generate supporting documents The system generates a behavioral proof digest in the following format: Behavioral proof number: BPZC-2025-0710-005 Device ID: Dev#A4F1-77C8 User ID (hash): 0x39ef... Time period: July 3, 2025, 12:00 – 14:00 Number of times: 7 List of hash digests: [hash1, hash2, …] Verification method: SHA-256 Signature mechanism: Platform RSA signature

[0191] Meanwhile, the certificate is signed with the platform's signing key, and can only be verified by the platform, ensuring that it cannot be forged.

[0192] 5. Application compatibility Parents can use this to claim lost devices; Users can submit participation credentials during the event; The platform can be used for compliance audits without accessing the specific content; it only verifies that the authentication process actually exists.

[0193] Innovation points: A completely content-free behavior rights confirmation mechanism achieves dual protection of "behavior occurrence" and "privacy protection"; It can form a personal expression history chain during a child's growth process, possessing timestamps, credibility, and immutability; Linking permissions with parents ensures the protection of minors' rights and the security of their expressed data; It addresses the vulnerabilities of traditional voice devices that "cannot be retrieved / authorized / verified," providing "behavioral credentials" for authentic social interaction and expression.

Claims

1. A child voice device identity authentication and behavior evidence system based on a real object blockchain, characterized in that, Comprise the following functional modules: (1) Identity binding and voice fingerprint hashing module: for collecting child voice samples and generating irreversible voice fingerprint hash (VoiceID), binding the VoiceID with the unique identity code (DevID) of the voice device, and registering in the platform main account book to form a unique joint identity; (2) Behavior chain generation and local account record module: for recording behavior events (including voice, role switching, simulation expression, request sending, etc.) in real time during the interaction between children and voice devices, forming a behavior chain (BehaviorChain) through hash digest, and saving in the device local account book; (3) Platform behavior main account book module: for receiving behavior chain digest from the device, and storing it in the form of timestamp, building a chain behavior profile of children and devices, with the characteristics of non-tamperability and traceability; (4) Expression permission contract control module: for receiving expression requests of voice devices, verifying the binding relationship of VoiceID and DevID, role usage permission, social graph relationship, parent control strategy and behavior chain consistency through smart contract, and judging whether to authorize the expression behavior; (5) Find and transfer control module: for verifying the VoiceID ownership relationship in the device loss or replacement scenario, confirming its binding record in the platform account book, and reactivating the device behavior permission according to the behavior chain continuity, or performing authorized transfer under the platform contract rules.

2. The system of claim 1, wherein the voice fingerprint hash generation method adopts at least mel frequency cepstral coefficient (MFCC), voice fingerprint modeling and salted hash algorithm to ensure that VoiceID has anti-collision property and irreversibility.

3. The system of claim 1, wherein the local account book adopts a lightweight blockchain structure to build, including block header, behavior hash, timestamp and previous block chain pointer, with the ability of breakpoint recovery and chain continuation.

4. The system of claim 1, wherein the platform behavior main account book module uses Byzantine fault tolerance mechanism (BFT) to ensure cross-node consistency, and organizes chain behavior digest through Merkle tree structure.

5. The system of claim 1, wherein the expression permission contract control module performs at least the following five verifications on expression requests: VoiceID and DevID binding verification, role permission judgment, social graph binding verification, parent control strategy matching and behavior chain consistency verification.

6. The system of claim 1, wherein the find and transfer control module supports the recovery of device permission by the original VoiceID subject through hash verification after the device is physically lost or damaged, or the irreversible transfer of device behavior permission through platform contract rules.

7. The system of claim 1, wherein the system does not retain the original data and semantic content of children's voice in the process of identity binding, behavior recording and permission judgment, only stores hash digest and behavior event identifier, ensuring that voice privacy is not accessed by the platform.

8. The system of claim 1, wherein the device is in a "silent listening" state by default, without the ability to actively express, role-play, or upload content, until the identity binding or behavior verification process is completed.

9. The system of claim 1, wherein the binding relationship of VoiceID can support multi-device sharing, multi-role expression permission configuration, and limit voice interaction boundaries through social graphs to ensure that expression content is limited to platform- authenticated social relationships.

10. The system of claim 1, wherein the platform supports a user behavior history recovery mechanism, and the VoiceID holder can restore historical expression tracks and identity records based on behavior chain hashes for recall, arbitration, or data continuation after device replacement.

Images