CN110661779B - Block chain network-based electronic certificate management method, system, device and medium - Google Patents
Block chain network-based electronic certificate management method, system, device and medium Download PDFInfo
- Publication number
- CN110661779B CN110661779B CN201910752361.4A CN201910752361A CN110661779B CN 110661779 B CN110661779 B CN 110661779B CN 201910752361 A CN201910752361 A CN 201910752361A CN 110661779 B CN110661779 B CN 110661779B
- Authority
- CN
- China
- Prior art keywords
- node
- target user
- user operation
- verification
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The present disclosure provides an electronic certificate management method based on a blockchain network, where the blockchain network includes a user operation node, an authorization verification node, and a storage node, and the method includes: a target user operation node broadcasts an operation request for operating electronic certificate information to the blockchain network, wherein the operation request comprises identity information of the target user operation node; the authorization verification node acquires the identity information and verifies the identity information to obtain a verification result; if the verification result is a verification passing result, the authorization verification node endows the corresponding operation authority to the target user operation node; and the target user operation node operates the electronic certificate information in the storage node according to the corresponding operation authority. The disclosure also provides an electronic certificate management system based on the block chain network, a computer device and a computer readable storage medium.
Description
Technical Field
The invention relates to the technical field of computers, in particular to an electronic certificate management method and system based on a block chain network, computer equipment and a computer readable storage medium.
Background
Conventional certificate handling procedures are often cumbersome, such as when a user wants to sign his/her mouth from a boss to a workplace, the user needs to return to the boss to handle removal procedures and then to the workplace to handle immigration procedures, and may also need to repeatedly run between multiple departments at the site while the boss handles removal procedures or while the workplace handles immigration procedures.
In the process of implementing the inventive concept, the inventors found that at least the following defects exist in the related art: the existing certificate handling procedures need to consume a great deal of time and energy of users, and the handling process is very complicated.
Disclosure of Invention
The invention aims to provide an electronic certificate management method, an electronic certificate management system, computer equipment and a computer readable storage medium based on a block chain network, which are used for solving the defects that in the prior art, certificate handling procedures need to consume a large amount of time and energy of users and the handling process is very complicated.
One aspect of the present disclosure provides an electronic certificate management method based on a blockchain network, where the blockchain network includes a user operation node, an authorization verification node, and a storage node, the method including: a target user operation node broadcasts an operation request for operating electronic certificate information to the block chain network, wherein the operation request comprises identity information of the target user operation node; the authorization verification node acquires the identity information and verifies the identity information to obtain a verification result; if the verification result is a verification passing result, the authorization verification node endows the corresponding operation authority to the target user operation node; and the target user operation node operates the electronic certificate information in the storage node according to the corresponding operation authority.
According to an embodiment of the present disclosure, the block chain network further includes a master user node, and if the verification result is a verification passing result, the authorization verification node assigns a corresponding operation authority to the target user operation node, including: if the verification result is a verification passing result, the authorization verification node sends the corresponding operation authority to the master user node; and if the master user node returns an operation permission instruction to the authorization verification node, the authorization verification node endows the corresponding operation authority of the target user operation node.
According to an embodiment of the present disclosure, after the target user operation node operates the electronic certificate information in the storage node based on the corresponding operation authority, the method for managing an electronic certificate based on a blockchain network further includes: the target user operation node broadcasts operation completion information to the block chain network; and the storage node stores the operation completion information.
According to an embodiment of the present disclosure, the method for managing electronic certificates based on a blockchain network further includes: and other user operation nodes in the block chain network determine the user operation node for executing the next operation according to the operation completion information.
According to an embodiment of the present disclosure, the method for managing electronic certificates based on a blockchain network further includes: and if the verification result is a verification failure result, the authorization verification node returns an operation prohibition instruction to the target user operation node and broadcasts the verification failure result to the block chain network.
Another aspect of the present disclosure also provides an electronic certificate management system based on a blockchain network, where the blockchain network includes a user operation node, an authorization verification node, and a storage node, and the system includes: a broadcast request module, configured to broadcast, by a target user operation node, an operation request for operating electronic certificate information to the block chain network, where the operation request includes identity information of the target user operation node; the identity authentication module is used for the authorization authentication node to acquire the identity information and authenticate the identity information to obtain an authentication result; the authorization verification node is used for verifying the authorization of the target user operation node according to the authorization information; and the information operation module is used for operating the electronic certificate information in the storage node by the target user operation node according to the corresponding operation authority.
According to an embodiment of the present disclosure, the block chain network further includes a master user node, and the right assignment module includes: a sending result unit, configured to send, by the authorization and verification node, the corresponding operation right to the primary user node when the verification result is a verification passing result; and the authority endowing unit is used for endowing the corresponding operation authority of the target user operation node to the authorization verification node under the condition that the master user node returns an operation permission instruction to the authorization verification node.
According to an embodiment of the present disclosure, the electronic certificate management system based on a blockchain network further includes: a broadcast information module, configured to broadcast, by the target user operation node, operation completion information to the block chain network after the target user operation node operates the electronic certificate information in the storage node based on the corresponding operation authority; and the information storage module is used for storing the operation completion information by the storage node.
According to an embodiment of the present disclosure, the electronic certificate management system based on a blockchain network further includes: and the node determining module is used for determining the node for executing the next operation by other user operation nodes in the block chain network according to the operation completion information.
According to an embodiment of the present disclosure, the electronic certificate management system based on a blockchain network further includes: and the return instruction module is used for returning an operation prohibition instruction to the target user operation node by the authorization verification node and broadcasting the verification failure result to the block chain network under the condition that the verification result is the verification failure result.
Yet another aspect of the present disclosure provides a computer device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the method for block chain network-based electronic certificate management as described in any one of the above.
Yet another aspect of the present disclosure provides a computer-readable storage medium, on which a computer program is stored, wherein the computer program is used for implementing the steps of the method for managing electronic certificates based on a blockchain network as described in any one of the above when being executed by a processor.
The electronic certificate management method based on the blockchain network broadcasts an operation request for operating electronic certificate information to the blockchain network through a target user operation node in the blockchain network, the operation request comprises identity information of the target user operation node, then an authorization verification node in the blockchain network acquires the identity information and verifies the identity information, for example, the identity information is verified through data of a public security system, when the verification result is a verification passing result, the authorization verification node can endow corresponding operation authorities, such as access authority, change authority and the like, of the target user operation node, and further, the target user operation node can operate the electronic certificate information in a storage node according to the operation authorities. According to the embodiment of the disclosure, the electronic certificate information is stored in the block chain network, and each node can execute corresponding operation according to corresponding operation authority, so that a user does not need to rush through various places to deliver materials, that is, the embodiment of the disclosure avoids the defects that in the prior art, certificate handling procedures need to consume a large amount of time and energy of the user and the handling procedures are very complicated, and achieves the technical effects of simplifying the procedures, saving a large amount of time of the user and improving the certificate handling efficiency.
Drawings
Fig. 1 schematically illustrates a flow diagram of a method of blockchain network based electronic certificate management in accordance with an embodiment of the present disclosure;
fig. 2 schematically illustrates a block diagram of a blockchain network based electronic credential management system in accordance with an embodiment of the present disclosure;
fig. 3 schematically illustrates a hardware architecture diagram of a computer device suitable for implementing a blockchain network-based electronic certificate management method according to an embodiment of the present disclosure.
Detailed Description
In order to make the objects, technical solutions and advantages of the present disclosure more clearly understood, the present disclosure is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the disclosure and are not intended to limit the disclosure. All other embodiments, which can be derived by a person skilled in the art from the embodiments disclosed herein without making any creative effort, shall fall within the protection scope of the present disclosure.
The electronic certificate management method based on the block chain network broadcasts an operation request for operating electronic certificate information to the block chain network through a target user operation node in the block chain network, the operation request comprises identity information of the target user operation node, then an authorization verification node in the block chain network acquires the identity information and verifies the identity information, for example, the identity information is verified through data of a public security system, when the verification result is a verification passing result, the authorization verification node can endow corresponding operation authorities of the target user operation node, for example, access authority, change authority and the like, and further, the target user operation node can operate the electronic certificate information in a storage node according to the operation authority. According to the embodiment of the disclosure, the electronic certificate information is stored in the block chain network, and each node can execute corresponding operation according to corresponding operation authority, so that a user does not need to rush through various places to deliver materials, that is, the embodiment of the disclosure avoids the defects that in the prior art, certificate handling procedures need to consume a large amount of time and energy of the user and the handling procedures are very complicated, and achieves the technical effects of simplifying the procedures, saving a large amount of time of the user and improving the certificate handling efficiency.
Fig. 1 schematically illustrates a flow diagram of a method of blockchain network based electronic certificate management in accordance with an embodiment of the present disclosure.
As shown in fig. 1, the electronic certificate management method based on the blockchain network may include steps S101 to S104, where the blockchain network includes a user operation node, an authorization verification node, and a storage node, specifically:
step S101, a target user operation node broadcasts an operation request for operating electronic certificate information to the blockchain network, wherein the operation request comprises identity information of the target user operation node.
In embodiments of the present disclosure, the user operation nodes may include a plurality, and each user operation node may represent a government agency handling electronic certificates; the authorization verification node can be used for verifying the identity of the user operation node and granting corresponding operation authority to the user operation node after the identity verification is passed; the storage node can include a plurality of, can store electronic certificate information in each storage node.
According to embodiments of the present disclosure, operations may include, but are not limited to, approval operations, access operations, modification operations, and the like; for the approval mechanism, the access operation and the approval operation can be enjoyed; for the transaction facility, access operations, change operations, and the like may be enjoyed.
According to embodiments of the present disclosure, a target user operational node may characterize a government agency in the current link. For example, in an approval link, a target user node may characterize an approval mechanism; in the transaction link, the target user node may characterize the transaction mechanism.
Step S102, the authorization verification node obtains the identity information and verifies the identity information to obtain a verification result.
In the embodiment of the disclosure, in order to prevent information leakage of the transacting user, the identity of each user operation node requesting to operate the electronic certificate information needs to be verified, for example, whether the target user node belongs to a relevant government agency transacting electronic certificates.
According to the embodiment of the disclosure, after the authorization verification node acquires the identity information, the identity information can be sent to the public security organization, and the public security organization returns the verification result. The verification result may include a verification pass result or a verification fail result.
Step S103, if the verification result is a verification passing result, the authorization verification node endows the corresponding operation authority to the target user operation node.
In the embodiment of the present disclosure, if the verification result is a verification passing result, the authorization verification node may grant a corresponding operation authority to the target user operation node, where the corresponding operation authority may be determined according to the operation request sent by the target user operation node.
For example, if the operation request is a request for examining and approving the electronic certificate information, the corresponding operation authority may be that the target user operation node is allowed to access and examine the electronic certificate information. If the operation request is to request to transact the electronic certificate information, the corresponding operation authority can be to allow the target user operation node to access and change the electronic certificate information.
Optionally, the authorization verification node may send the corresponding operation authority to all user operation nodes in a public chain manner, and at this time, any user operation node in the blockchain network may operate the electronic certificate information.
Preferably, the authorization verification node may send the corresponding operation authority to the target user operation node in a private chain manner, and at this time, only the target user operation node in the block chain network operates the electronic certificate information.
As an optional embodiment, the block chain network further includes a primary user node, and if the verification result is a verification passing result, the authorizing and verifying node assigns a corresponding operation authority to the target user operation node, including: if the verification result is a verification passing result, the authorization verification node sends the corresponding operation authority to the master user node; and if the master user node returns an operation permission instruction to the authorization verification node, the authorization verification node endows the corresponding operation authority of the target user operation node.
According to the embodiment of the disclosure, the master user node may be used to represent the authenticated user, in order to enable the authorization of each step to be known and allowed by the authenticated user, under the condition that the verification result is the verification passing result, the authorization verification node may send the corresponding operation authority which is intended to be given to the target user operation node to the master user node for approval, and after the master user node returns the operation allowing instruction to the authorization verification node, the authorization verification node will give the corresponding operation authority to the target user operation node.
And step S104, the target user operation node operates the electronic certificate information in the storage node according to the corresponding operation authority.
In the embodiment of the disclosure, after the target user operation node acquires the corresponding operation authority, the electronic certificate information stored in the storage node can be operated.
As an optional embodiment, after the target user operation node operates the electronic certificate information in the storage node based on the corresponding operation authority, the method for managing electronic certificates based on the blockchain network further includes: the target user operation node broadcasts operation completion information to the block chain network; and the storage node stores the operation completion information.
In the embodiment of the present disclosure, after the target user operation node completes the corresponding operation, the blockchain network may broadcast operation completion information, which may include an operation result, a timestamp, and the like. For example, if the operation is an approval link, the operation completion information may include an approval completion result, an approval completion timestamp, and the like; if the operation is a certificate handling link, the operation completion information may include a certificate handling completion result, a certificate handling completion timestamp, and the like.
According to the embodiments of the present disclosure, the storage node may store the operation completion information after receiving the broadcast, and since the embodiments of the present disclosure may include a plurality of storage nodes, the operation completion information may be stored in each storage node to prevent the operation completion information from being tampered.
As an optional embodiment, the method for managing electronic certificates based on a blockchain network further includes: and other user operation nodes in the block chain network determine a user operation node for executing the next operation according to the operation completion information.
In the embodiment of the present disclosure, after the target user operation node broadcasts the operation completion information, other user operation nodes in the blockchain network may determine, according to the operation completion information, a user operation node that executes a next operation link, and in the next operation link, the user operation node that executes the next operation link may be used as the target user operation node.
For example, in the current link, the target user operation node is an approval mechanism, after approval is completed, the approval mechanism broadcasts approval completion information in the blockchain network, at this time, in addition to the target user operation node, the plurality of user operation nodes in the blockchain network further include a first certificate handling node and a second certificate handling node, where the first certificate handling node is a node for executing a next operation link, and after the approval mechanism broadcasts the approval completion information in the blockchain network, the first certificate handling node knows that it can execute the certificate handling link, and then the first certificate handling node can serve as the target user operation node in the next link.
As an optional embodiment, the method for managing electronic certificates based on a blockchain network further includes: and if the verification result is a verification failure result, the authorization verification node returns an operation prohibition instruction to the target user operation node and broadcasts the verification failure result to the block chain network.
In the embodiment of the present disclosure, if the identity authentication of the target user operation node is not passed, the authorization authentication node may directly return an operation prohibition instruction to the target user operation node without notifying the master user node, so as to prohibit the target user operation node from performing subsequent operations.
Further, the authorized authentication node may also broadcast the authentication failure result to the blockchain network, so that the nodes in the blockchain network can help memorize that the identity of the target user operation node is not passed.
Optionally, if the number of times that the identity of the same target user operation node is not verified reaches a preset threshold, the authorized verification node may mark the target user operation node to indicate that the target user operation node may be a dangerous node. Further, if the target user operation node sends the operation request again and the identity of the target user operation node is still not verified, the system may remove the target user operation node and no longer allow the target user operation node to access the blockchain network.
It should be noted that any data transmitted in the blockchain network is encrypted, and the encryption algorithm may include, but is not limited to, a symmetric encryption algorithm, an asymmetric encryption algorithm, a hash algorithm, a digital signature, and the like. Preferably, to increase the security and privacy of the data, the data being transmitted in the blockchain network may be encrypted using an asymmetric encryption algorithm.
The electronic certificate management method based on the blockchain network broadcasts an operation request for operating electronic certificate information to the blockchain network through a target user operation node in the blockchain network, the operation request comprises identity information of the target user operation node, then an authorization verification node in the blockchain network acquires the identity information and verifies the identity information, for example, the identity information is verified through data of a public security system, when the verification result is a verification passing result, the authorization verification node can endow corresponding operation authorities, such as access authority, change authority and the like, of the target user operation node, and further, the target user operation node can operate the electronic certificate information in a storage node according to the operation authorities. According to the embodiment of the disclosure, the electronic certificate information is stored in the block chain network, and each node can execute corresponding operation according to corresponding operation authority, so that a user does not need to send materials through running waves in various places, that is, the embodiment of the disclosure avoids the defects that in the prior art, a large amount of time and energy of the user are consumed in certificate handling procedures, and the certificate handling procedures are very complicated, and achieves the technical effects of simplifying the procedure procedures, saving a large amount of time of the user, and improving the certificate handling efficiency.
Fig. 2 schematically illustrates a block diagram of a blockchain network based electronic certificate management system in accordance with an embodiment of the present disclosure.
As shown in fig. 2, the system 200 for managing electronic certificates based on a blockchain network may include a broadcast request module 210, an identity verification module 220, a permission granting module 230 and an information operation module 240, wherein:
the broadcast request module 210 is configured to broadcast, by a target user operation node, an operation request for operating electronic certificate information to the blockchain network, where the operation request includes identity information of the target user operation node.
The identity authentication module 220 is configured to obtain the identity information and authenticate the identity information by the authorization authentication node to obtain an authentication result.
The authority giving module 230 is configured to, when the verification result is a verification passing result, give the corresponding operation authority to the target user operation node by the authorization verification node.
The information operation module 240 is configured to operate the electronic certificate information in the storage node by the target user operation node according to the corresponding operation authority.
According to the electronic certificate management system based on the blockchain network, an operation request for operating electronic certificate information is broadcast to the blockchain network through a target user operation node in the blockchain network, the operation request comprises identity information of the target user operation node, then an authorization verification node in the blockchain network obtains the identity information and verifies the identity information, for example, the identity information is verified through data of a public security system, when the verification result is a verification passing result, the authorization verification node can endow corresponding operation authorities, such as access authority, change authority and the like, to the target user operation node, and further, the target user operation node can operate the electronic certificate information in a storage node according to the operation authority. According to the embodiment of the disclosure, the electronic certificate information is stored in the block chain network, and each node can execute corresponding operation according to corresponding operation authority, so that a user does not need to rush through various places to deliver materials, that is, the embodiment of the disclosure avoids the defects that in the prior art, certificate handling procedures need to consume a large amount of time and energy of the user and the handling procedures are very complicated, and achieves the technical effects of simplifying the procedures, saving a large amount of time of the user and improving the certificate handling efficiency.
As an optional embodiment, the block chain network further includes a primary user node, and the right granting module includes: a sending result unit, configured to send, by the authorization verification node, the corresponding operation permission to the master user node when the verification result is a verification passing result; and the authority endowing unit is used for endowing the corresponding operation authority of the target user operation node to the authorization verification node under the condition that the master user node returns an operation permission instruction to the authorization verification node.
As an optional embodiment, the system for managing electronic certificates based on a blockchain network further includes: the broadcast information module is used for broadcasting operation completion information to the blockchain network by the target user operation node after the target user operation node operates the electronic certificate information in the storage node based on the corresponding operation authority; and the information storage module is used for storing the operation completion information by the storage node.
As an optional embodiment, the system for managing electronic certificates based on a blockchain network further includes: and the node determining module is used for determining the node for executing the next operation by other user operation nodes in the block chain network according to the operation completion information.
As an optional embodiment, the system for managing electronic certificates based on a blockchain network further includes: and the return instruction module is used for returning an operation prohibition instruction to the target user operation node by the authorization verification node and broadcasting the verification failure result to the blockchain network under the condition that the verification result is the verification failure result.
Fig. 3 schematically illustrates a hardware architecture diagram of a computer device suitable for implementing a blockchain network-based electronic certificate management method according to an embodiment of the present disclosure. In the present embodiment, the computer device 300 is a device capable of automatically performing numerical calculation and/or information processing in accordance with a command set or stored in advance. For example, the server may be a smart phone, a tablet computer, a notebook computer, a desktop computer, a rack server, a blade server, a tower server, or a cabinet server (including an independent server or a server cluster composed of multiple servers). As shown in FIG. 3, computer device 300 includes at least, but is not limited to: memory 310, processor 320, network interface 330 may be communicatively linked to each other via a system bus. Wherein:
the memory 310 includes at least one type of computer-readable storage medium including flash memory, hard disks, multimedia cards, card-type memory (e.g., SD or DX memory, etc.), random Access Memory (RAM), static Random Access Memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic memory, magnetic disks, optical disks, etc. In some embodiments, the storage 310 may be an internal storage module of the computer device 300, such as a hard disk or a memory of the computer device 300. In other embodiments, the memory 310 may also be an external storage device of the computer device 300, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), or the like, provided on the computer device 300. Of course, the memory 310 may also include both internal and external memory modules of the computer device 300. In this embodiment, the memory 310 is generally used for storing an operating system and various application software installed in the computer device 300, such as program codes of the electronic certificate management method based on the blockchain network. In addition, the memory 310 may also be used to temporarily store various types of data that have been output or are to be output.
Processor 320 may be a Central Processing Unit (CPU), controller, microcontroller, microprocessor, or other data Processing chip in some embodiments. The processor 320 generally serves to control the overall operation of the computer device 300, such as to perform control and processing related to data interaction or communication with the computer device 300. In this embodiment, the processor 320 is used to execute program codes stored in the memory 310 or process data.
The network interface 330 may include a wireless network interface or a wired network interface, with the network interface 330 generally being used to establish communication links between the computer device 300 and other computer devices. For example, the network interface 330 is used to connect the computer device 300 to an external terminal via a network, establish a data transmission channel and a communication link between the computer device 300 and the external terminal, and the like. The network may be a wireless or wired network such as an Intranet (Intranet), the Internet (Internet), a Global System of Mobile communication (GSM), wideband Code Division Multiple Access (WCDMA), a 4G network, a 5G network, bluetooth (Bluetooth), or Wi-Fi.
It should be noted that fig. 3 only shows a computer device with components 310-330, but it should be understood that not all of the shown components are required to be implemented, and that more or fewer components may be implemented instead.
In this embodiment, the method for managing electronic certificates based on a blockchain network stored in the memory 310 can be further divided into one or more program modules and executed by one or more processors (in this embodiment, the processor 320) to complete the present invention.
The present embodiment also provides a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements the steps of the method for block chain network-based electronic certificate management in an embodiment.
In this embodiment, the computer-readable storage medium includes a flash memory, a hard disk, a multimedia card, a card type memory (e.g., SD or DX memory, etc.), a Random Access Memory (RAM), a Static Random Access Memory (SRAM), a Read Only Memory (ROM), an Electrically Erasable Programmable Read Only Memory (EEPROM), a Programmable Read Only Memory (PROM), a magnetic memory, a magnetic disk, an optical disk, and the like. In some embodiments, the computer readable storage medium may be an internal storage unit of the computer device, such as a hard disk or a memory of the computer device. In other embodiments, the computer-readable storage medium may be an external storage device of the computer device, such as a plug-in hard disk provided on the computer device, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), and the like. Of course, the computer-readable storage medium may also include both internal and external storage devices of the computer device. In this embodiment, the computer-readable storage medium is generally used to store an operating system and various types of application software installed in a computer device, for example, the program codes of the electronic certificate management method based on the blockchain network in the embodiment, and the like. Further, the computer-readable storage medium may also be used to temporarily store various types of data that have been output or are to be output.
It will be apparent to those skilled in the art that the modules or steps of the embodiments of the invention described above may be implemented by a general purpose computing device, they may be centralized on a single computing device or distributed across a network of multiple computing devices, and alternatively, they may be implemented by program code executable by a computing device, such that they may be stored in a storage device and executed by a computing device, and in some cases, the steps shown or described may be performed in an order different than that described herein, or they may be separately fabricated into individual integrated circuit modules, or multiple ones of them may be fabricated into a single integrated circuit module. Thus, embodiments of the invention are not limited to any specific combination of hardware and software.
The above description is only a preferred embodiment of the present invention, and not intended to limit the scope of the present invention, and all modifications of equivalent structures and equivalent processes, which are made by using the contents of the present specification and the accompanying drawings, or directly or indirectly applied to other related technical fields, are included in the scope of the present invention.
Claims (7)
1. An electronic certificate management method based on a block chain network is characterized in that the block chain network comprises a user operation node, an authorization verification node, a main user node and a storage node, wherein the main user node is used for representing a certificate handling user, and the method comprises the following steps:
a target user operation node broadcasts an operation request for operating electronic certificate information to the block chain network, wherein the operation request comprises identity information of the target user operation node; the operation is a change operation;
the authorization verification node acquires the identity information and verifies the identity information to obtain a verification result;
if the verification result is a verification passing result, the authorization verification node sends the corresponding operation authority to the master user node, and if the master user node returns an operation allowing instruction to the authorization verification node, the authorization verification node gives the corresponding operation authority to the target user operation node; if the verification result is a verification failure result, the authorization verification node returns an operation prohibition instruction to the target user operation node, and broadcasts the verification failure result to the blockchain network;
the target user operation node operates the electronic certificate information in the storage node according to the corresponding operation authority;
if the number of times that the identity of the same target user operation node is not verified reaches a preset threshold value, the authorization verification node marks the target user operation node to indicate that the target user operation node is possibly a dangerous node; and if the target user operation node sends the operation request again and the identity of the target user operation node is still not verified, removing the target user operation node from the block chain network, and not allowing the target user operation node to access the block chain network any more.
2. The method of claim 1, wherein after the target user operation node operates the electronic credential information in the storage node based on the corresponding operation authority, the method further comprises:
the target user operation node broadcasts operation completion information to the block chain network;
and the storage node stores the operation completion information.
3. The method of claim 1, further comprising:
and other user operation nodes in the block chain network determine a user operation node for executing the next operation according to the operation completion information.
4. An electronic certificate management system based on a block chain network, which is characterized in that the block chain network comprises a user operation node, an authorization verification node, a main user node and a storage node, wherein the main user node is used for representing certificate handling users, and the system comprises:
a broadcast request module, configured to broadcast, by a target user operation node, an operation request for operating electronic certificate information to the blockchain network, where the operation request includes identity information of the target user operation node; the operation comprises a change operation;
the identity authentication module is used for the authorization authentication node to acquire the identity information and authenticate the identity information to obtain an authentication result;
the authorization verification node is used for sending corresponding operation authority to the master user node under the condition that the verification result is a verification passing result, and endowing corresponding operation authority to the target user operation node by the authorization verification node under the condition that the master user node returns an operation allowing instruction to the authorization verification node; if the verification result is a verification failure result, the authorization verification node returns an operation prohibition instruction to the target user operation node, and broadcasts the verification failure result to the blockchain network;
the information operation module is used for operating the electronic certificate information in the storage node by the target user operation node according to the corresponding operation authority;
the system is further configured to: if the number of times that the identity of the same target user operation node is not verified reaches a preset threshold value, marking the target user operation node through the authorization verification node to indicate that the target user operation node is possibly a dangerous node; and if the target user operation node sends the operation request again and the identity of the target user operation node is still not verified, removing the target user operation node from the block chain network, and not allowing the target user operation node to access the block chain network any more.
5. The system of claim 4, further comprising:
the broadcast information module is used for broadcasting operation completion information to the block chain network by the target user operation node after the target user operation node operates the electronic certificate information in the storage node based on the corresponding operation authority;
and the information storage module is used for storing the operation completion information by the storage node.
6. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor is adapted to carry out the steps of the method according to any of claims 1 to 3 when executing the computer program.
7. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, is adapted to carry out the steps of the method of any one of claims 1 to 3.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910752361.4A CN110661779B (en) | 2019-08-15 | 2019-08-15 | Block chain network-based electronic certificate management method, system, device and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910752361.4A CN110661779B (en) | 2019-08-15 | 2019-08-15 | Block chain network-based electronic certificate management method, system, device and medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110661779A CN110661779A (en) | 2020-01-07 |
| CN110661779B true CN110661779B (en) | 2023-03-21 |
Family
ID=69037493
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910752361.4A Active CN110661779B (en) | 2019-08-15 | 2019-08-15 | Block chain network-based electronic certificate management method, system, device and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110661779B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111523152B (en) * | 2020-05-11 | 2021-08-03 | 毕红伟 | Block chain-based electronic certificate management method, management network and electronic equipment |
| CN112214789A (en) * | 2020-09-03 | 2021-01-12 | 长沙通诺信息科技有限责任公司 | Ethical data processing method, block chain network and electronic equipment |
| CN113177196A (en) * | 2021-04-29 | 2021-07-27 | 广东粤信智能科技有限公司 | Block chain-based data standard verification method, storage medium and system |
| CN113177234A (en) * | 2021-04-29 | 2021-07-27 | 中国工商银行股份有限公司 | Gray scale switch switching method and device |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109587154A (en) * | 2018-12-14 | 2019-04-05 | 金蝶软件（中国）有限公司 | Digital identity verification method, device, computer equipment and storage medium |
| CN110109930A (en) * | 2019-05-15 | 2019-08-09 | 山东省计算中心（国家超级计算济南中心） | Government data storage, querying method and system based on block chain duplex structure |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108876374B (en) * | 2018-06-29 | 2020-10-16 | 全链通有限公司 | Block chain network identity document authentication method and system |
| CN108876375B (en) * | 2018-06-29 | 2020-09-08 | 全链通有限公司 | Block chain real name participation method and system |
| CN109857769A (en) * | 2019-01-09 | 2019-06-07 | 平安科技（深圳）有限公司 | Drive slip control method, system, equipment and storage medium based on block chain |
-
2019
- 2019-08-15 CN CN201910752361.4A patent/CN110661779B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109587154A (en) * | 2018-12-14 | 2019-04-05 | 金蝶软件（中国）有限公司 | Digital identity verification method, device, computer equipment and storage medium |
| CN110109930A (en) * | 2019-05-15 | 2019-08-09 | 山东省计算中心（国家超级计算济南中心） | Government data storage, querying method and system based on block chain duplex structure |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110661779A (en) | 2020-01-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110661779B (en) | Block chain network-based electronic certificate management method, system, device and medium | |
| CN111756753B (en) | Authority verification method and system | |
| CN109951489B (en) | Digital identity authentication method, equipment, device, system and storage medium | |
| US10776786B2 (en) | Method for creating, registering, revoking authentication information and server using the same | |
| CN110377239B (en) | Data signature method, device, server, system and storage medium | |
| US10341109B2 (en) | Controlling exposure of sensitive data and operation using process bound security tokens in cloud computing environment | |
| US9037849B2 (en) | System and method for managing network access based on a history of a certificate | |
| CN110768968A (en) | Authorization method, device, equipment and system based on verifiable statement | |
| WO2020181809A1 (en) | Data processing method and system based on interface checking, and computer device | |
| US9565211B2 (en) | Managing exchanges of sensitive data | |
| CN109086578A (en) | A kind of method that soft ware authorization uses, equipment and storage medium | |
| CN110084600B (en) | Processing and verifying method, device, equipment and medium for resolution transaction request | |
| CN111914293A (en) | Data access authority verification method and device, computer equipment and storage medium | |
| CN110708162B (en) | Resource acquisition method and device, computer readable medium and electronic equipment | |
| CN113472774A (en) | Account login-free method, system, device and computer readable storage medium | |
| CN112235301B (en) | Access right verification method and device and electronic equipment | |
| CN116980230B (en) | Information security protection method and device | |
| CN111953634B (en) | Access control method and device for terminal equipment, computer equipment and storage medium | |
| CN110011796B (en) | Certificate updating method and device, computer equipment and storage medium | |
| CN110266653A (en) | A kind of method for authenticating, system and terminal device | |
| US11714627B2 (en) | Tokenized mobile device update systems and methods | |
| CN112948866A (en) | Data processing method, device and equipment and readable storage medium | |
| US20140090032A1 (en) | System and method for real time secure image based key generation using partial polygons assembled into a master composite image | |
| CN116527330A (en) | System login method and device, storage medium and electronic equipment | |
| US11803539B2 (en) | Method of improving efficiency of updating data as to rules stored in block chain, electronic device, and computer readable storage medium applying the method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |