CN109005186B - Method, system, equipment and storage medium for isolating user identity information - Google Patents
Method, system, equipment and storage medium for isolating user identity information Download PDFInfo
- Publication number
- CN109005186B CN109005186B CN201810950198.8A CN201810950198A CN109005186B CN 109005186 B CN109005186 B CN 109005186B CN 201810950198 A CN201810950198 A CN 201810950198A CN 109005186 B CN109005186 B CN 109005186B
- Authority
- CN
- China
- Prior art keywords
- user
- account
- identity information
- information
- application
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
Abstract
The invention discloses a method, a system, equipment and a storage medium for isolating user identity information, and belongs to the technical field of block chains. The method comprises the following steps: a user generates a public key and a private key through a block chain; storing the public key and the user identity information of the user in a block chain; the blockchain generates a plurality of different account IDs for the same user; the user registers on the application through the account ID; the system, the equipment and the storage medium are used for protecting the privacy of the user and preventing the privacy of the user from being revealed aiming at the problem of user information disclosure.
Description
Technical Field
The present invention relates to the field of block chain technology, and in particular, to a method, system, device, and storage medium for isolating user identity information.
Background
In the internet era, various network applications are in endless, applications App related to real transactions such as car dropping, car hungry, fish leisure, 58 city and the like all require real-name authentication of users, the users usually do not want to disclose privacy information to the applications App due to privacy consideration, and as the data era comes, user data is more and more valuable to application software, however, in order to use application software, the user has to disclose the privacy, and with the government giving higher importance to the security of the application apps, various application apps also have to make the user provide more detailed authentication materials to require real-name authentication of the user, so that the user needs to take pictures on both sides of the identity card to upload the identity card and take pictures on the face to identify the identity card, if the identity card information is used elsewhere by the organization running the application, the user will not know either; the privacy revealed by the user is more and more, the user is more and more dislike, and the contradiction is more and more sharp.
Chinese patent application, publication No.: CN 108063752A; the publication date is as follows: 2018.05.22, respectively; the invention discloses a trusted gene detection and data sharing method based on a block chain and agent re-encryption technology, which is applied to an application system based on an application management layer, a block chain layer and a distributed data storage layer which are sequentially connected. The method establishes a credibility management scheme of a detection mechanism and a hospital based on a block chain technology, and solves the problem that a third-party mechanism gives a detection result at will. Meanwhile, based on a public key encryption scheme, private data of an individual user is protected, so that the individual has complete control right and ownership over own gene data. And finally, a revocable agent re-encryption scheme is realized in the intelligent block chain contract, so that a scientific research institution can acquire genome data after obtaining the authorization of the individual user. The patent is a leakage prevention sharing method for private data, which is oriented to individual users and aims at gene detection, and privacy leakage prevention in an absolute sense cannot be achieved when the gene data is disclosed to a third-party organization.
Disclosure of Invention
1. Technical problem to be solved by the invention
In order to overcome the technical problems, the invention provides a method, a system, equipment and a storage medium for isolating user identity information. The method can protect the privacy of the user and prevent the privacy of the user from being revealed.
2. Technical scheme
In order to solve the problems, the technical scheme provided by the invention is as follows:
a method of isolating user identity information, comprising the steps of:
s1, the user generates a public key and a private key through the blockchain;
the public key and the private key are generated in 2 modes, one mode is that the public key and the private key are randomly generated through a block chain, the other mode is that a block chain operator generates the private key and the public key after carrying out Hash encryption according to personal user identity information such as names, sexes, identity numbers, mobile phone numbers, mailboxes, sounds, facial images, fingerprints, family addresses, residence locations of family ports and the like or collective identity information such as names of enterprises, organizations or units, unified social credit codes, addresses, tax numbers and the like, and if the private key is lost, the private key and the public key can be found back to the block chain operator.
S2, storing the public key and the user identity information of the user in a block chain;
the identity information of the user needs to be authenticated and signed by a third-party authentication organization and then stored in a block chain, the classification of the identity information is different, different third-party authentication organizations are possible, for example, the identity card information needs to be authenticated by a government and public security bureau, the academic information needs to be authenticated by colleges and universities, the bank card asset information may need to be authenticated by banks, the automobile information is authenticated by vehicle management and stored in the block chain according to the classification, because the signature information is a series of numbers, the series of certificate signature information comprises the authentication organization, the block chain account ID of the authenticated user and the encrypted signature information of the real information, the authenticity can be identified through a website of the third-party authentication organization, meanwhile, specific information such as an identity card number, facial information and the like are not leaked, meanwhile, the authenticity of the identity information is also proved, the privacy information of the user is hidden, and the privacy of, so that the private information of the user cannot be stolen or abused. Meanwhile, if necessary, the real information can be acquired by a third-party certification authority under the condition of obtaining the consent of the user.
S3, generating a plurality of different account IDs for the same user by the blockchain;
if a user only has one account ID, the risk that the account ID of the user is attacked can be increased by tracing the transaction behavior or the activity behavior of the account ID on the blockchain, so that the privacy information of the user is easily stolen; one user correspondingly has a plurality of account IDs, the behavior of the user cannot be traced, and further the effect of protecting the privacy information of the user is achieved, so that an attacker cannot determine the user through the behavior of a certain account ID. The number of the account IDs may be set to be generated randomly in the blockchain, or may be set to be generated by a user request, and the generation manner of the account IDs may be to hash the public key of the user for different times, i.e., to generate a plurality of different account IDs.
S4, the user registers with the application by the account ID.
The user does not need to provide sensitive information such as a user identity card and the like for the application, the account ID represents that the privacy information of the user is backed up and authenticated by the blockchain, the privacy information of the user is stored on the blockchain, the blockchain provides the account ID representing that the privacy information of the user is backed up and authenticated to be registered on the application, the applications are not necessarily established on the blockchain, the applications can be software applications independently developed by an operator and can also be applications established based on the blockchain, but each application has a connection interface with the blockchain, a certain trust basis exists for the blockchain, so that the account ID representing the privacy information of the user can be conveniently obtained when the user registers on the corresponding application, and the privacy information of the user is isolated from the application.
Preferably, the user randomly generates a public key and a private key through the blockchain in step S1.
Preferably, the blockchain operator generates the private key and the public key according to the user identity information. The user identity information comprises user identity information such as an identity card number, a mobile phone number, a mailbox, sound, a facial image, a fingerprint, a family address, a place where a house entrance is located and the like, and if a private key is lost, the private key can be found back to a block chain operator.
Preferably, the registration in S4 includes the steps of:
s401, a user sends a verification transaction to a block chain, selects an account ID and private key signature information and sends the account ID and the private key signature information to the block chain;
s402, the block link points verify the account ID and the user signature information, and prove that the account ID belongs to the user and is not used after verification, and the application continues to be registered for use; the authentication is not passed, and the account ID is proved not to be all of the user or used and cannot be registered for use on the application;
and S403, after the verification is passed and the registration is successful, the blockchain records the account ID state as used.
The account ID is prevented from being repeatedly used when a new application is registered next time, the same account ID is prevented from being used by a plurality of applications, the opportunity of tracking the account ID track is created for an attacker, the user is prevented from being attacked, and the privacy of the user can be further protected from being leaked.
A system for isolating user identity information, a method for isolating user identity information according to any of the above, comprising: the public and private key generation module is used for generating a public key and a private key by a user through a block chain; the private information storage module is used for storing the public key and the user identity information generated in the public and private key generation module; the account ID generation module is used for generating a plurality of different account IDs for the users storing the public keys and the user identity information on the block chain; and the application module is used for registering the application account by the user by using the account ID generated by the account ID generation module.
Preferably, the public and private key generation module generates a public key and a private key at random on the block chain according to a request of a user, or generates the private key and the public key according to user identity information.
Preferably, the privacy information keeping module comprises a distributed storage database of a block chain and a private database of a block chain operator.
Preferably, the application module comprises an account ID verification module and a registration module, the account ID verification module is configured to verify whether the account ID belongs to the corresponding user, and verify whether the account ID has been used; and the registration module generates account information of the user on the application according to the account ID.
A device comprising a processor, an input device, an output device and a memory, the processor, the input device, the output device and the memory being interconnected, wherein the memory is adapted to store a computer program comprising program instructions, the processor being configured to invoke the program instructions to perform a method as described above.
A computer-readable storage medium, storing a computer program comprising program instructions, which, when executed by a processor, cause the processor to perform a method as described above.
3. Advantageous effects
Compared with the prior art, the technical scheme provided by the invention has the following beneficial effects:
(1) the invention provides a method for isolating user identity information based on a block chain technology, which can enable a user to enjoy the convenience brought by application without worrying about privacy information leakage by providing only one certifiable block chain account ID for third-party application without any other information;
(2) according to the invention, the privacy information of the user is isolated from the third-party application by utilizing the characteristics of block chain information ciphertext storage, decentralization and non-tampering, the account ID generated by the block chain is used for registering the user on the third-party application, and the third-party application cannot know the privacy information of the user corresponding to the account ID, so that the privacy of the user cannot be actively revealed;
(3) in the method for isolating the user identity information, provided by the invention, a user can generate a plurality of account IDs on a block chain, and different account IDs are used facing different applications, namely the plurality of account IDs of a single user correspond to the applications used by the user one by one, so that the account IDs used by the user are different when the user uses different applications, the behavior of the same account ID of the user on different applications is prevented from being traced and collected, and the possibility of passive leakage of the behavior of the user on different applications is prevented;
(4) according to the method for isolating the user identity information, provided by the invention, when a user registers an application, a verification transaction is sent to the block chain, and the user can register the application for use after the verification is passed, so that the privacy information of the user is not required to be provided for each application, and each application can also quickly acquire the number group of registered users based on the trust of the block chain;
(5) according to the method for isolating the user identity information, the privacy information stored on the block chain by the user is stored on the block chain in a ciphertext mode after Hash, and no private key signature verification of the user exists, so that anyone cannot know the plaintext content of the privacy information, and therefore the user can completely master the personal privacy information, and the privacy information is prevented from being leaked.
Drawings
FIG. 1 is a schematic diagram of the application of the method;
FIG. 2 is one of the flow chart diagrams of the method;
FIG. 3 is a second block flow diagram of the method;
FIG. 4 is a flow diagram of a verification transaction;
FIG. 5 is a system block diagram;
FIG. 6 is a block diagram of an apparatus;
FIG. 7 is one of the schematic views of example 2;
FIG. 8 is a second schematic view of the embodiment 2;
FIG. 9 is a schematic view of example 3;
FIG. 10 is a schematic view of example 7;
FIG. 11 is one of the schematic views of example 8;
FIG. 12 is a second schematic view of the embodiment 8.
Detailed Description
For a further understanding of the present invention, reference will now be made in detail to the embodiments illustrated in the drawings.
Example 1
As shown in fig. 2 and 3, a method for isolating user identity information includes the following steps:
s1, the user generates a public key and a private key through the blockchain;
the public key and the private key are generated in 2 modes, one mode is that the public key and the private key are randomly generated through a block chain, once the private key is lost, the public key and the private key cannot be found, the other mode is that a block chain operator carries out Hash encryption according to personal user identity information (name, gender, identity card number, mobile phone number, mailbox, voice, facial image, fingerprint, family address, residence place of a user and the like, or collective identity information such as the name of an enterprise, an organization or a unit, a unified social credit code, an address, a tax number and the like), then the private key and the public key are generated, and if the private key is lost, the private key can be found back to the block chain operator.
S2, storing the public key and the user identity information of the user in a block chain;
the identity information of the user needs to be authenticated and signed by a third-party authentication organization and then stored in a block chain, the classification of the identity information is different, different third-party authentication organizations are possible, for example, the identity card information needs to be authenticated by a government and public security bureau, the academic information needs to be authenticated by colleges and universities, the bank card asset information may need to be authenticated by banks, the automobile information is authenticated by vehicle management and stored in the block chain according to the classification, because the signature information is a series of numbers, the series of certificate signature information comprises the authentication organization, the block chain account ID of the authenticated user and the encrypted signature information of the real information, the authenticity can be identified through a website of the third-party authentication organization, meanwhile, specific information such as an identity card number, facial information and the like are not leaked, meanwhile, the authenticity of the identity information is also proved, the privacy information of the user is hidden, and the privacy of, so that the private information of the user cannot be stolen or abused. Meanwhile, if necessary, the real information can be acquired by a third-party certification authority under the condition of obtaining the consent of the user.
The public key and user identity information of the user can also be stored in a private database of the blockchain operator, as shown in fig. 3, the user information is more centralized, rather than open and diffused, and authentication is not required for every business application.
S3, generating a plurality of different account IDs for the same user by the blockchain;
if a user only has one account ID, the risk that the account ID of the user is attacked can be increased by tracing the transaction behavior or the activity behavior of the account ID on the blockchain, so that the privacy information of the user is easily stolen; one user correspondingly has a plurality of account IDs, the behavior of the user cannot be traced, and further the effect of protecting the privacy information of the user is achieved, so that an attacker cannot determine the user through the behavior of a certain account ID. The number of the account IDs may be set to be generated randomly in the blockchain, or may be set to be generated by a user request, and the generation manner of the account IDs may be to hash the public key of the user for different times, i.e., to generate a plurality of different account IDs.
S4, the user registers with the application by the account ID.
The user does not need to provide sensitive information such as a user identity card and the like for the application, the account ID represents that the privacy information of the user is backed up and authenticated by the blockchain, the privacy information of the user is stored on the blockchain, the blockchain provides the account ID representing that the privacy information of the user is backed up and authenticated to be registered on the application, the applications are not necessarily established on the blockchain, the applications can be software applications independently developed by an operator and can also be applications established based on the blockchain, but each application has a connection interface with the blockchain, a certain trust basis exists for the blockchain, so that the account ID representing the privacy information of the user can be conveniently obtained when the user registers on the corresponding application, and the privacy information of the user is isolated from the application.
An operator of one application only knows one account ID of a user, and determines that the account ID is backed up and authenticated by a blockchain, and the application can be used for the operation and the use of the operator, but the privacy information of the user cannot be obtained, so that the privacy information of the user cannot be used in other places, the privacy information of the user cannot be revealed, and the problem that the privacy is revealed when the user uses different applications is solved.
Example 2
A method for isolating user identity information is further improved on the basis of embodiment 1, and comprises the following steps:
s1, randomly generating a public key and a private key by the user through the blockchain, as shown in FIG. 7;
s2, storing the public key and the user identity information of the user in a block chain; the block chain such as a private chain and a alliance chain are permission chains, each node participating in the block chain system is permitted, and an unauthorized node cannot access the system. However, if a plurality of authentication nodes with limited number in the permission chain are combined together, identity information of the user can be leaked to cause certain threat, so if the block chain is the permission chain, the public key of the user and the identity information of the user are subjected to Hash encryption and then uploaded to the block chain; if the block chain is a public chain, the Hash encryption can be selectively carried out on the user identity information. As shown in fig. 8.
S3, generating a plurality of different account IDs for the same user by the blockchain;
s4, the user registers with the application by the account ID.
Example 3
A method for isolating user identity information is further improved on the basis of embodiments 1 and 2, and comprises the following steps:
s1, the user generates the private key and the public key according to the user identity information through the blockchain operator, as shown in fig. 9.
If the block chain is a permission chain, the public key of the user and the identity information of the user are subjected to Hash encryption, and then a private key and a public key are generated; if the block chain is a public chain, the Hash encryption can be selectively carried out on the user identity information. The user identity information comprises user identity information such as an identity card number, a mobile phone number, a mailbox, sound, a facial image, a fingerprint, a family address, a place where a house entrance is located and the like, and if a private key is lost, the private key can be found back to a block chain operator.
S2, storing the public key and the user identity information of the user in a block chain; the block chain such as a private chain and a alliance chain are permission chains, each node participating in the block chain system is permitted, and an unauthorized node cannot access the system. However, if a plurality of authentication nodes with limited number in the permission chain are combined together, identity information of the user can be leaked to cause certain threat, so if the block chain is the permission chain, the public key of the user and the identity information of the user are subjected to Hash encryption and then uploaded to the block chain; if the block chain is a public chain, the Hash encryption can be selectively carried out on the user identity information. As shown in fig. 8.
S3, generating a plurality of different account IDs for the same user by the blockchain;
s4, the user registers with the application by the account ID.
Example 4
The method for isolating the user identity information is further improved on the basis of the embodiments 1, 2 and 3, and comprises the following steps:
s1, the user generates a public key and a private key through the blockchain;
s2, storing the public key and the user identity information of the user in a block chain;
s3, generating a plurality of different account IDs for the same user by the blockchain;
s4, the user registers with the application by the account ID.
As shown in fig. 1, 3 and 4, the registration in S4 includes the steps of:
s401, a user sends a verification transaction to a block chain, selects an account ID and private key signature information and sends the account ID and the private key signature information to the block chain;
s402, the block link points verify the account ID and the user signature information, and prove that the account ID belongs to the user and is not used after verification, and the application continues to be registered for use; the authentication is not passed, and the account ID is proved not to be all of the user or used and cannot be registered for use on the application;
and S403, after the verification is passed and the registration is successful, the blockchain records the account ID state as used.
The account ID is prevented from being repeatedly used when a new application is registered next time, the same account ID is prevented from being used by a plurality of applications, the opportunity of tracking the account ID track is created for an attacker, the user is prevented from being attacked, and the privacy of the user can be further protected from being leaked.
The embodiment completely hides the privacy information of the user, and utilizes the advantages of block chain information ciphertext storage, decentralization, distributed storage and non-tampering, the account ID generated by the user through the block chain is in butt joint with the application of the third party, but the application mechanism of the third party cannot acquire the privacy information of the user, so that the leakage of the third party application operator to the privacy information of the user is completely prevented, and meanwhile, the user can normally enjoy the convenience brought by the application mechanism of the third party.
Example 5
As shown in fig. 1 and 5, a system for isolating user identity information according to the method for isolating user identity information in any one of embodiments 1 to 4 includes: the public and private key generation module is used for generating a public key and a private key by a user through a block chain; the private information storage module is used for storing the public key and the user identity information generated in the public and private key generation module; the account ID generation module is used for generating a plurality of different account IDs for the users storing the public keys and the user identity information on the block chain; and the application module is used for registering the application account by the user by using the account ID generated by the account ID generation module.
Example 6
As shown in fig. 1 and 5, a system for isolating user identity information, which is further improved on the basis of embodiment 5, includes: the public and private key generation module is used for generating a public key and a private key by a user through a block chain; the private information storage module is used for storing the public key and the user identity information generated in the public and private key generation module; the account ID generation module is used for generating a plurality of different account IDs for the users storing the public keys and the user identity information on the block chain; and the application module is used for registering the application account by the user by using the account ID generated by the account ID generation module. Further, the public and private key generation module randomly generates a public key and a private key according to a request of a user on the block chain, or generates the private key and the public key according to the identity information of the user. If the block chain is a permission chain, the public key of the user and the identity information of the user are subjected to Hash encryption, and then a private key and a public key are generated; if the block chain is a public chain, the Hash encryption can be selectively carried out on the user identity information. The user identity information comprises user identity information such as an identity card number, a mobile phone number, a mailbox, sound, a facial image, a fingerprint, a family address, a place where a house entrance is located and the like, and if a private key is lost, the private key can be found back to a block chain operator.
Example 7
A system for isolating user identity information is further improved on the basis of embodiments 5 and 6, and comprises: the public and private key generation module is used for generating a public key and a private key by a user through a block chain; the private information storage module is used for storing the public key and the user identity information generated in the public and private key generation module; the account ID generation module is used for generating a plurality of different account IDs for the users storing the public keys and the user identity information on the block chain; and the application module is used for registering the application account by the user by using the account ID generated by the account ID generation module. Further, as shown in fig. 10, the privacy information keeping module includes a distributed storage database of the blockchain and a private database of the blockchain operator. If the user identity information is stored in the private database, Hash encryption is required to be carried out on the user identity information so as to ensure the risk brought by the leakage of the user identity information.
Example 8
A system for isolating user identity information, which is further improved based on the embodiments 5, 6 and 7, and comprises: the public and private key generation module is used for generating a public key and a private key by a user through a block chain; the private information storage module is used for storing the public key and the user identity information generated in the public and private key generation module; the account ID generation module is used for generating a plurality of different account IDs for the users storing the public keys and the user identity information on the block chain; and the application module is used for registering the application account by the user by using the account ID generated by the account ID generation module. Further, as shown in fig. 11 and 12, the application modules include an account ID verification module and a registration module, the account ID verification module is configured to verify whether the account ID belongs to the corresponding user, and verify whether the account ID has been used; and the registration module generates account information of the user on the application according to the account ID.
Example 9
As shown in fig. 6, an apparatus comprises a processor, an input device, an output device, and a memory, the processor, the input device, the output device, and the memory being connected to each other, wherein the memory is configured to store a computer program, the computer program comprising program instructions, and the processor is configured to call the program instructions to perform the method according to any of the embodiments 1-5.
Example 10
A computer-readable storage medium, in which a computer program is stored, the computer program comprising program instructions which, when executed by a processor, cause the processor to carry out the method according to any of the claims 1-5.
Example 11
The embodiment provides a method for isolating real identity information based on a block chain technology, and in the method described in any one of the technical schemes in embodiments 1 to 5, only an account ID of a trusted and certifiable block chain user is provided for a third-party application without any other information, so that the method replaces identity card photographing and acquisition of other information oriented to an application APP, and personal user privacy is protected to a great extent.
Users (including individuals, businesses, institutions, group organizations, and the like); the user information includes, but is not limited to, data such as personal photos, birth certificates, identification numbers, mailboxes, mobile phone numbers, login accounts of a certain website, QQ numbers, contact addresses and the like for individuals; the user information includes, but is not limited to, social unified credit codes, organization codes, business content, external mailboxes, office phones, and other data for an organization such as an enterprise, a business entity, or a group organization.
In order to prove that an account ID is owned by a specific user, a user can send a verification transaction to the blockchain, the account ID is signed by a private key of the user and sent to the blockchain, the blockchain nodes can verify the account ID and user signature information, and the account ID can be proved to belong to the user. Not, this indicates that this account ID is not owned by this user. The application can trust the account ID to be owned by the user. Thus, the user does not need to provide sensitive information such as personal identification cards to the network application.
An individual user randomly generates a private key based on a block chain, and obtains a corresponding public key at the same time; the blockchain company can also generate a unique private key according to the ID of the user, so that the private key of the user can be retrieved to the blockchain operator when the private key of the user is lost.
The user obtains the identity card information of having certified through third party certificate authority, true information such as face collection, provides public key information simultaneously, for example identity card information, face information etc. such a user possesses which data all can be seen from the side, satisfies the demand of different APP's company to the information.
In order to adapt to different network applications, the blockchain generates different account IDs for the same user, so that personal privacy is protected to the maximum extent, for example, the account IDs of the Internet contract vehicles, the account ID of the Taobao merchant and the like.
The user registers own identity information with the application through an account ID generated for the network application. In order to prove that the account ID is owned by the user, the user can send a verification transaction to the blockchain, the account ID is signed by a private key of the user and sent to the blockchain, and the blockchain nodes can verify the account ID and the user signature information, so that the account ID can be proved to belong to the user. Not, this indicates that this account ID is not owned by this user.
The application can trust the account ID to be owned by the user. Thus, the user does not need to provide sensitive information such as personal identification cards to the network application. Through the scheme, the user can only provide the account ID of the user on the block chain to the network application company, and real identity card information does not need to be provided, so that the personal privacy of the user is protected to the maximum extent. And based on the block chain account IDs of different applications, the collection of user information among different applications can be effectively isolated, and the user information is prevented from being tracked and leaked. In addition, if necessary in the future, the passport information may be replaced by the block chain account ID information, and the information is globally used.
The present invention and its embodiments have been described above schematically, without limitation, and what is shown in the drawings is only one of the embodiments of the present invention, and the actual structure is not limited thereto. Therefore, if the person skilled in the art receives the teaching, without departing from the spirit of the invention, the person skilled in the art shall not inventively design the similar structural modes and embodiments to the technical solution, but shall fall within the scope of the invention.
Claims (9)
1. A method of isolating user identity information, comprising the steps of:
s1, the user generates a public key and a private key through the blockchain;
s2, storing the public key and the user identity information of the user in a block chain;
s3, generating a plurality of different account IDs for the same user according to the public key and the user identity information of the user by the blockchain;
s4, the user registers on the application through the account ID, and the method comprises the following steps:
s401, a user sends a verification transaction to a block chain, selects an account ID and private key signature information and sends the account ID and the private key signature information to the block chain;
s402, verifying the account ID and the private key signature information by the block link node, and if the account ID is verified to belong to the user and not used, continuously registering the user on the application through the account ID to form an application account;
if the verification fails, the account ID is proved not to be owned by the user or used, and the user cannot register the application for use through the account ID;
and S403, if the verification is passed and the user successfully registers on the application through the account ID, recording the state of the account ID of the user as used by the blockchain.
2. The method of claim 1, wherein the user randomly generates the public key and the private key through the blockchain in step S1.
3. The method of claim 1, wherein the blockchain generates the private key and the public key based on the user identity information.
4. A system for isolating user identity information, the method for isolating user identity information according to any one of claims 1-3, comprising: the public and private key generation module is used for generating a public key and a private key by a user through a block chain; the private information storage module is used for storing the public key and the user identity information of the user generated in the public and private key generation module; the account ID generation module is used for generating a plurality of different account IDs for the users storing the public keys and the user identity information on the block chain; and the application module is used for registering the application account by the user by using the account ID generated by the account ID generation module.
5. The system as claimed in claim 4, wherein the public and private key generating module randomly generates the public key and the private key on the block chain, or generates the private key and the public key according to the user identity information.
6. The system for isolating user identity information as in claim 4, wherein the privacy information keeping module comprises a blockchain distributed storage database and a blockchain operator private database.
7. The system for isolating user identity information as claimed in claim 4, wherein the application module includes an account ID verification module and a registration module, the account ID verification module is used for verifying whether the account ID belongs to the corresponding user, and verifying whether the account ID has been used; and the registration module generates an application account of the user on the application according to the account ID of the user.
8. A device comprising a processor, an input device, an output device and a memory, the processor, the input device, the output device and the memory being interconnected, wherein the memory is configured to store a computer program comprising program instructions, the processor being configured to invoke the program instructions to perform the method according to any one of claims 1 to 3.
9. A computer-readable storage medium, characterized in that the computer-readable storage medium stores a computer program comprising program instructions that, when executed by a processor, cause the processor to carry out the method according to any one of claims 1-3.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810950198.8A CN109005186B (en) | 2018-08-20 | 2018-08-20 | Method, system, equipment and storage medium for isolating user identity information |
| PCT/CN2019/101605 WO2020038367A1 (en) | 2018-08-20 | 2019-08-20 | Method and system for isolating user identity information, device, and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810950198.8A CN109005186B (en) | 2018-08-20 | 2018-08-20 | Method, system, equipment and storage medium for isolating user identity information |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109005186A CN109005186A (en) | 2018-12-14 |
| CN109005186B true CN109005186B (en) | 2020-12-11 |
Family
ID=64592710
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810950198.8A Active CN109005186B (en) | 2018-08-20 | 2018-08-20 | Method, system, equipment and storage medium for isolating user identity information |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN109005186B (en) |
| WO (1) | WO2020038367A1 (en) |
Families Citing this family (18)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109005186B (en) * | 2018-08-20 | 2020-12-11 | 杭州复杂美科技有限公司 | Method, system, equipment and storage medium for isolating user identity information |
| CN109768865A (en) * | 2019-01-18 | 2019-05-17 | 深圳市威赫科技有限公司 | Block chain upper body part under credible performing environment digitizes realization method and system |
| CN110086608B (en) * | 2019-03-21 | 2022-03-25 | 深圳壹账通智能科技有限公司 | User authentication method, device, computer equipment and computer readable storage medium |
| CN110009352B (en) * | 2019-03-29 | 2021-02-05 | 创新先进技术有限公司 | Method and apparatus for resetting blockchain account key based on biometrics |
| CN110135844B (en) * | 2019-04-28 | 2020-11-24 | 创新先进技术有限公司 | Credit recording and inquiring method and device based on block chain and electronic equipment |
| US11106659B2 (en) | 2019-04-28 | 2021-08-31 | Advanced New Technologies Co., Ltd. | Blockchain-based recording and querying operations |
| CN110601853B (en) * | 2019-09-17 | 2021-05-11 | 腾讯科技（深圳）有限公司 | Block chain private key generation method and equipment |
| CN112733096B (en) * | 2019-10-14 | 2024-02-27 | 深圳市红砖坊技术有限公司 | User registration method, user login method and corresponding device |
| CN111131164A (en) * | 2019-11-27 | 2020-05-08 | 山东爱城市网信息技术有限公司 | Block chain-based digital identity implementation method, equipment and medium |
| CN111193736B (en) * | 2019-12-30 | 2020-12-29 | 江苏恒宝智能系统技术有限公司 | Information authentication method, device, system and storage medium |
| CN110781419B (en) * | 2020-01-02 | 2020-04-28 | 成都四方伟业软件股份有限公司 | Multi-system cooperative use method based on block chain |
| CN111797373B (en) * | 2020-07-08 | 2021-07-20 | 杭州云链趣链数字科技有限公司 | Method, system, computer device and readable storage medium for identity information authentication |
| CN111832001A (en) * | 2020-07-20 | 2020-10-27 | 国家信息中心 | Identity management method and identity management system based on block chain |
| TWI773025B (en) * | 2020-12-16 | 2022-08-01 | 智弘軟體科技股份有限公司 | Processes and method for safe of use, monitoring and management of device accounts in terminal manner |
| CN114640490A (en) * | 2020-12-16 | 2022-06-17 | 智弘软体科技股份有限公司 | Method and architecture for terminal use safety, monitoring and management of equipment account |
| US11533306B2 (en) | 2020-12-16 | 2022-12-20 | Global Wisdom Software Technology CO. LTD. | Processes and method for safe of use, monitoring and management of device accounts in terminal manner |
| CN113256290B (en) * | 2021-05-14 | 2023-04-18 | 杭州链网科技有限公司 | Decentralized encrypted communication and transaction system |
| CN114329610A (en) * | 2021-12-29 | 2022-04-12 | 浙江吉利控股集团有限公司 | Block chain privacy identity protection method, device, storage medium and system |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107483198A (en) * | 2017-09-25 | 2017-12-15 | 中国科学院信息工程研究所 | A kind of block catenary system supervised and method |
| CN108235805A (en) * | 2017-12-29 | 2018-06-29 | 深圳前海达闼云端智能科技有限公司 | Account unifying method and device and storage medium |
| CN108259438A (en) * | 2016-12-29 | 2018-07-06 | 中移(苏州)软件技术有限公司 | A kind of method and apparatus of the certification based on block chain technology |
Family Cites Families (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9967334B2 (en) * | 2015-03-02 | 2018-05-08 | Dell Products Lp | Computing device configuration and management using a secure decentralized transaction ledger |
| US20160379256A1 (en) * | 2015-06-29 | 2016-12-29 | Perk.Com Us Inc. | Method and system for integrating device activity and purchase transaction data to assess and/or predict consumer interest |
| CN105701372B (en) * | 2015-12-18 | 2019-04-09 | 布比（北京）网络技术有限公司 | A kind of building of block chain identity and verification method |
| CN105719185B (en) * | 2016-01-22 | 2019-02-15 | 杭州复杂美科技有限公司 | The data comparison and common recognition method of block chain |
| CN106097073A (en) * | 2016-06-20 | 2016-11-09 | 深圳市淘淘谷信息技术有限公司 | A kind of block chain gives the method for the numeral exclusive ID of account trading process |
| CN106453271B (en) * | 2016-09-21 | 2019-05-03 | 江苏通付盾科技有限公司 | Identity registration method and system, identity identifying method and system |
| CN106411901B (en) * | 2016-10-08 | 2018-01-23 | 北京三未信安科技发展有限公司 | A kind of digital identity mark management method and system |
| CN106529946A (en) * | 2016-11-01 | 2017-03-22 | 北京金股链科技有限公司 | Method for realizing user identity digitalization based on block chain |
| CN106779385A (en) * | 2016-12-07 | 2017-05-31 | 北京信任度科技有限公司 | The method and system of electronic evidence and user identity are fixed using block chain |
| US10498541B2 (en) * | 2017-02-06 | 2019-12-03 | ShocCard, Inc. | Electronic identification verification methods and systems |
| CN106897879A (en) * | 2017-03-06 | 2017-06-27 | 广东工业大学 | Block chain encryption method based on the PKI CLC close algorithms of isomerization polymerization label |
| CN107257336A (en) * | 2017-06-15 | 2017-10-17 | 北京汇通金财信息科技有限公司 | A kind of user authen method and system |
| CN107292181B (en) * | 2017-06-20 | 2020-05-19 | 无锡井通网络科技有限公司 | Database system based on block chain and using method using system |
| CN107196966B (en) * | 2017-07-05 | 2020-04-14 | 北京信任度科技有限公司 | Identity authentication method and system based on block chain multi-party trust |
| CN107240017B (en) * | 2017-07-20 | 2021-08-03 | 捷德(中国)科技有限公司 | Block chain transaction management system and method |
| CN108234478A (en) * | 2017-12-29 | 2018-06-29 | 重庆小犀智能科技有限公司 | A kind of personal credit information share system and method based on block chain |
| CN109005186B (en) * | 2018-08-20 | 2020-12-11 | 杭州复杂美科技有限公司 | Method, system, equipment and storage medium for isolating user identity information |
-
2018
- 2018-08-20 CN CN201810950198.8A patent/CN109005186B/en active Active
-
2019
- 2019-08-20 WO PCT/CN2019/101605 patent/WO2020038367A1/en active Application Filing
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108259438A (en) * | 2016-12-29 | 2018-07-06 | 中移(苏州)软件技术有限公司 | A kind of method and apparatus of the certification based on block chain technology |
| CN107483198A (en) * | 2017-09-25 | 2017-12-15 | 中国科学院信息工程研究所 | A kind of block catenary system supervised and method |
| CN108235805A (en) * | 2017-12-29 | 2018-06-29 | 深圳前海达闼云端智能科技有限公司 | Account unifying method and device and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2020038367A1 (en) | 2020-02-27 |
| CN109005186A (en) | 2018-12-14 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109005186B (en) | Method, system, equipment and storage medium for isolating user identity information | |
| US20220277307A1 (en) | Systems and methods for personal identification and verification | |
| US10810290B2 (en) | Robust method and an apparatus for authenticating a client in non-face-to-face online interactions based on a combination of live biometrics, biographical data, blockchain transactions and signed digital certificates | |
| US10664576B2 (en) | Identity assurance method | |
| CN111552955B (en) | Personal identity authentication method and device based on block chain and IPFS | |
| US11251937B2 (en) | Distributed security mechanism for blockchains and distributed ledgers | |
| WO2020038366A1 (en) | Trust system and construction method therefor, device, and storage medium | |
| KR101268702B1 (en) | Verifying authenticity of voice mail participants in telephony networks | |
| Panda et al. | A blockchain based decentralized authentication framework for resource constrained iot devices | |
| CN108989346A (en) | The effective identity trustship agility of third party based on account concealment authenticates access module | |
| CN110753944A (en) | System and method for blockchain based data management | |
| Dalal et al. | Verification of identity and educational certificates of students using biometric and blockchain | |
| CN116305185A (en) | Data processing method, system and computer readable storage medium | |
| US20220092587A1 (en) | Verification systems for blockchains and distributed ledgers | |
| Rajput et al. | Towards a more secure Aadhaar | |
| CN105743883B (en) | A kind of the identity attribute acquisition methods and device of network application | |
| Rizvi et al. | Protecting financial transactions through networks and point of sales | |
| Panfil | The credential highway: how self-sovereign identity unlocks property rights for the bottom billion | |
| Hariharasudan et al. | A Review on Blockchain Based Identity Management System | |
| Iftekhar et al. | Implementation of blockchain for secured criminal records | |
| Reddy et al. | Framework for privacy preserving credential issuance and verification system using soulbound token | |
| Kumar et al. | Administration of Digital Identities Using Blockchain | |
| Bolgouras et al. | Enabling Qualified Anonymity for Enhanced User Privacy in the Digital Era | |
| CN116781355A (en) | Digital identity management method and device, blockchain platform and electronic equipment | |
| Lleka et al. | Using blockchain technology for ID management: a case study for Albania |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20210421 Address after: Room 408, building 13, Tengfei science and Technology Park, 388 Xinping street, Suzhou Industrial Park, Suzhou area, China (Jiangsu) pilot Free Trade Zone, Suzhou 215123, Jiangsu Province Patentee after: Suzhou Jiaoda Chain Technology Co.,Ltd. Patentee after: HANGZHOU FUZAMEI TECHNOLOGY Co.,Ltd. Address before: 310000 6 floor, 6 building, 90 East Wensanlu Road Software Park, Wensanlu Road, Hangzhou, Zhejiang. Patentee before: HANGZHOU FUZAMEI TECHNOLOGY Co.,Ltd. |