CN111401672B - A legality verification method, equipment and system based on blockchain - Google Patents
A legality verification method, equipment and system based on blockchain Download PDFInfo
- Publication number
- CN111401672B CN111401672B CN201910001598.9A CN201910001598A CN111401672B CN 111401672 B CN111401672 B CN 111401672B CN 201910001598 A CN201910001598 A CN 201910001598A CN 111401672 B CN111401672 B CN 111401672B
- Authority
- CN
- China
- Prior art keywords
- identity information
- verification
- equipment
- information matching
- equipment identity
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000012795 verification Methods 0.000 title claims abstract description 263
- 238000000034 method Methods 0.000 title claims abstract description 40
- 238000012954 risk control Methods 0.000 claims description 13
- 238000012545 processing Methods 0.000 claims description 10
- 238000004891 communication Methods 0.000 claims description 4
- 238000005516 engineering process Methods 0.000 abstract description 7
- 238000010586 diagram Methods 0.000 description 11
- 230000006870 function Effects 0.000 description 8
- 238000004590 computer program Methods 0.000 description 7
- 238000012986 modification Methods 0.000 description 5
- 230000004048 modification Effects 0.000 description 5
- 238000011438 discrete method Methods 0.000 description 1
- 238000009434 installation Methods 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000002093 peripheral effect Effects 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q10/00—Administration; Management
- G06Q10/06—Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
- G06Q10/063—Operations research, analysis or management
- G06Q10/0635—Risk analysis of enterprise or organisation activities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
- G06Q20/4014—Identity check for transactions
Landscapes
- Business, Economics & Management (AREA)
- Engineering & Computer Science (AREA)
- Human Resources & Organizations (AREA)
- Strategic Management (AREA)
- Physics & Mathematics (AREA)
- Accounting & Taxation (AREA)
- Economics (AREA)
- Entrepreneurship & Innovation (AREA)
- Theoretical Computer Science (AREA)
- General Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- Educational Administration (AREA)
- Tourism & Hospitality (AREA)
- Quality & Reliability (AREA)
- Operations Research (AREA)
- Marketing (AREA)
- Game Theory and Decision Science (AREA)
- Computer Security & Cryptography (AREA)
- Development Economics (AREA)
- Finance (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
本发明公开了一种区块链技术，尤其涉及一种基于区块链的合法性校验方法、设备及系统，用以提高校验，降低校验时延。该方法为：各个用户设备会在闲时将自身的设备身份信息上传至交易安全链，校验设备会在闲时从交易安全链上下载用户设备上传的设备身份信息进行合法性校验，并将获得的设备身份信息匹配标识上传至交易安全链，与其他校验设备进行共享，同时也下载其他校验设备上传的设备身份信息匹配标识，这样，校验设备在接收到用户设备发送的业务使用请求后，可以迅速根据已获得的设备身份信息匹配标识完成用户设备的再次校验，从而快速提供相关的服务内容，进而有效提升了用户体验。
The invention discloses a blockchain technology, and in particular relates to a blockchain-based legality verification method, equipment and system to improve verification and reduce verification delay. The method is: each user device will upload its own device identity information to the transaction security chain when it is idle, and the verification device will download the device identity information uploaded by the user device from the transaction security chain when it is idle for legality verification, and Upload the obtained device identity information matching identifier to the transaction security chain and share it with other verification devices. At the same time, it also downloads the device identity information matching identifier uploaded by other verification devices. In this way, the verification device receives the business sent by the user device. After using the request, the user device can be quickly verified based on the obtained device identity information matching identification, thereby quickly providing relevant service content, thereby effectively improving the user experience.
Description
技术领域Technical field
本发明涉及区块链技术，尤其涉及一种基于区块链的合法性校验方法、设备及系统。The present invention relates to blockchain technology, and in particular, to a legality verification method, equipment and system based on blockchain.
背景技术Background technique
现有技术下，用户终端在使用业务系统提供的服务时，需要通过业务系统的合法性校验，才能使用所请求的业务。Under the existing technology, when a user terminal uses services provided by a business system, it needs to pass the legality check of the business system before it can use the requested business.
参阅图1所示，已有的传统方式下，用户设备会将自身的设备特征信息提供给设备信息服务端，由设备信息服务端生成相应的用于合法性校验的设备身份信息，再将设备的合法性校验信息发往风险控制系统，风险控制系统根据设备身份信息判断用户设备的风险等级。当业务系统接收到用户设备的业务使用请求时，会从风险控制系统获取用户设备的风险等级，从而根据风险等级对用户设备进行合法性校验。As shown in Figure 1, in the existing traditional method, the user device will provide its own device characteristic information to the device information server, and the device information server will generate the corresponding device identity information for legality verification, and then The legality verification information of the device is sent to the risk control system, and the risk control system determines the risk level of the user's device based on the device identity information. When the business system receives the service usage request of the user equipment, it will obtain the risk level of the user equipment from the risk control system, and then perform legality verification on the user equipment based on the risk level.
然而，采用上述传统方式，业务系统每次需要通过网络从风险控制系统查询用于合法性校验的风险等级等相关信息，校验效率低且时延较长，会严重降低用户体验。However, using the above traditional method, the business system needs to query the risk level and other related information for legality verification from the risk control system through the network every time. The verification efficiency is low and the delay is long, which will seriously reduce the user experience.
区别于上述传统方式，业务系统还可以采用脱机验证方式，即采用红外技术或近距离无线通讯技术(Near Field Communication，NFC)等技术直接从用户设备获取相关的设备身份信息进行合法性校验。然而，采用脱机验证方式，其安全实现成本高，且安全级别较低，用户身份信息存在随时泄露的风险，并且无法做到设备身份信息的实时更新和同步，只能基于历史信息进行校验。Different from the above traditional methods, the business system can also adopt an offline verification method, that is, using infrared technology or Near Field Communication (NFC) and other technologies to directly obtain relevant device identity information from the user device for legality verification. . However, the offline verification method has high security implementation costs and a low security level. There is a risk of user identity information being leaked at any time, and device identity information cannot be updated and synchronized in real time, and verification can only be based on historical information. .
有鉴于此，需要设计一种新的合法性校验方法以克服上述缺陷。In view of this, a new legality verification method needs to be designed to overcome the above shortcomings.
发明内容Contents of the invention
本发明的目的是提供一种基于区块链的合法性校验方法、设备和系统，用以提高校验效率，降低校验时延。The purpose of the present invention is to provide a blockchain-based legitimacy verification method, equipment and system to improve verification efficiency and reduce verification delay.
本发明实施例提供的具体技术方案如下：The specific technical solutions provided by the embodiments of the present invention are as follows:
一种基于区块链的合法性校验方法，包括：A blockchain-based legitimacy verification method, including:
校验设备在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息；When the verification device is not occupied for business, it downloads the device identity information of the user device that meets the set conditions from the transaction security chain;
校验设备对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链；The verification device performs legality verification on the obtained device identity information of each user device, generates a corresponding device identity information matching identifier, saves the obtained device identity information matching identifier, and uploads it to the transaction security chain;
校验设备在非业务占用期间，从交易安全链下载其他校验设备上传的设备身份信息匹配标识并进行保存；When the verification device is not occupied for business, it downloads the device identity information matching identifier uploaded by other verification devices from the transaction security chain and saves it;
校验设备接收到目标用户设备发送的业务使用请求时，在确定本地保存有所述目标用户设备对应的设备身份信息匹配标识时，判定所述目标用户设备通过合法性校验，并基本所述设备身份信息匹配标识提供相应的业务服务。When the verification device receives the service usage request sent by the target user equipment, and determines that the device identity information corresponding to the target user equipment is stored locally and matches the identification, it determines that the target user equipment passes the legality verification, and basically performs the above steps. The device identity information matches the identifier to provide corresponding business services.
可选的，校验设备在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息之前，进一步包括：Optionally, before the verification device downloads the device identity information of the user device that meets the set conditions from the transaction security chain during the non-business occupation period, it further includes:
校验设备确定本地以及所述交易安全链上，不存在其他校验设备对应所述设备身份信息上传的相应的设备身份信息匹配标识。The verification device determines that there is no corresponding device identity information matching identifier uploaded by other verification devices corresponding to the device identity information locally and on the transaction security chain.
可选的，校验设备在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息，包括：Optionally, the verification device downloads the device identity information of user devices that meet the set conditions from the transaction security chain during non-business occupation, including:
校验设备在非业务占用期间，从交易安全链下载符合以下设定条件之一或任意组合的用户设备的设备身份信息：When the verification device is not occupied for business, the device identity information of the user device that meets one or any combination of the following set conditions is downloaded from the transaction security chain:
时间范围设定条件；Time range setting conditions;
地理位置范围设定条件；Geographical location range setting conditions;
业务范围设定条件。Business scope setting conditions.
可选的，校验设备对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链，包括：Optionally, the verification device performs legality verification on the obtained device identity information of each user device, generates a corresponding device identity information matching identifier, saves the obtained device identity information matching identifier, and uploads it to the transaction security chain, including:
校验设备根据从业务系统获取的业务校验规则，结合从风险控制系获取的各个用户设备的风险等级，对获得的各个用户设备的设备身份信息进行合法性校验，确定通过校验时，生成相应的设备身份信息匹配标识，其中，所述设备身份信息匹配标识用于表征所述用户设备对应的风险等级以及业务内容；The verification device performs legality verification on the obtained device identity information of each user device based on the business verification rules obtained from the business system and the risk level of each user device obtained from the risk control system. When it is determined that the verification is passed, Generate a corresponding device identity information matching identifier, where the device identity information matching identifier is used to characterize the risk level and business content corresponding to the user equipment;
校验设备将获得的设备身份信息匹配标识保存在本地，以及，在非业务占用期间，上传至交易安全链。The verification device stores the obtained device identity information matching identifier locally, and uploads it to the transaction security chain during non-business occupation.
可选的，进一步包括：Optional further includes:
校验设备在生成相应的设备身份信息匹配标识之后，删除已下载的用户设备的设备身份信息。After the verification device generates the corresponding device identity information matching identifier, it deletes the downloaded device identity information of the user device.
可选的，进一步包括：Optional further includes:
校验设备定期从交易安全链上重新获取符合设定条件的用户设备的设备身份信息，并对重新获取的各个用户设备进行合法性校验，获得相应的设备身份信息匹配标识，以及定期从交易安全链上重新获取其他校验设备最新上传的设备身份信息匹配标识。The verification device regularly re-obtains the device identity information of user equipment that meets the set conditions from the transaction security chain, performs legality verification on each re-obtained user equipment, obtains the corresponding device identity information matching identification, and regularly obtains the device identity information from the transaction Re-obtain the latest device identity information matching identifier uploaded by other verification devices on the security chain.
一种基于区块链的合法性校验设备，包括：A blockchain-based legality verification device, including:
第一下载单元，用于校验设备在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息；The first download unit is used to verify that the device downloads the device identity information of the user device that meets the set conditions from the transaction security chain during the non-business occupation period;
校验单元，用于对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链；The verification unit is used to perform legality verification on the obtained device identity information of each user device, generate a corresponding device identity information matching identifier, save the obtained device identity information matching identifier, and upload it to the transaction security chain ;
第二下载单元，用于在非业务占用期间，从交易安全链下载其他校验设备上传的设备身份信息匹配标识并进行保存；The second download unit is used to download the device identity information matching identification uploaded by other verification devices from the transaction security chain during non-business occupation and save it;
处理单元，用于接收到目标用户设备发送的业务使用请求时，在确定本地保存有所述目标用户设备对应的设备身份信息匹配标识时，判定所述目标用户设备通过合法性校验，并基于所述设备身份信息匹配标识相应的业务服务。The processing unit is configured to, when receiving the service usage request sent by the target user equipment, determine that the device identity information matching identifier corresponding to the target user equipment is stored locally, determine that the target user equipment passes the legality check, and based on The device identity information matches and identifies the corresponding business service.
可选的，在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息之前，所述第一下载单元进一步用于：Optionally, during the non-business occupation period, before downloading the device identity information of the user equipment that meets the set conditions from the transaction security chain, the first download unit is further used to:
确定本地以及所述交易安全链上，不存在其他校验设备对应所述设备身份信息上传的相应的设备身份信息匹配标识。It is determined that there is no corresponding device identity information matching identifier uploaded by other verification devices corresponding to the device identity information locally and on the transaction security chain.
可选的，在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息时，所述第一下载单元用于：Optionally, during non-business occupation, when downloading the device identity information of user equipment that meets the set conditions from the transaction security chain, the first download unit is used to:
在非业务占用期间，从交易安全链下载符合以下设定条件之一或任意组合的用户设备的设备身份信息：During non-business occupation, download the device identity information of user devices that meet one or any combination of the following set conditions from the transaction security chain:
时间范围设定条件；Time range setting conditions;
地理位置范围设定条件；Geographical location range setting conditions;
业务范围设定条件。Business scope setting conditions.
可选的，对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链，所述校验单元用于：Optionally, perform legality verification on the obtained device identity information of each user device, generate a corresponding device identity information matching identifier, save and upload the obtained device identity information matching identifier to the transaction security chain, so The above verification unit is used for:
根据从业务系统获取的业务校验规则，结合从风险控制系获取的各个用户设备的风险等级，对获得的各个用户设备的设备身份信息进行合法性校验，确定通过校验时，生成相应的设备身份信息匹配标识，其中，所述设备身份信息匹配标识用于表征所述用户设备对应的风险等级以及业务内容；According to the business verification rules obtained from the business system and combined with the risk level of each user equipment obtained from the risk control system, the obtained equipment identity information of each user equipment is verified for legality. When it is determined that the verification passes, the corresponding A device identity information matching identifier, wherein the device identity information matching identifier is used to characterize the risk level and business content corresponding to the user equipment;
将获得的设备身份信息匹配标识保存在本地，以及，在非业务占用期间，上传至交易安全链。The obtained device identity information matching identification is stored locally, and uploaded to the transaction security chain during non-business occupation.
可选的，所述校验单元进一步用于：Optionally, the verification unit is further used for:
在生成相应的设备身份信息匹配标识之后，删除已下载的用户设备的设备身份信息。After the corresponding device identity matching identifier is generated, the downloaded device identity information of the user device is deleted.
可选的，所述校验单元进一步用于：Optionally, the verification unit is further used for:
定期从交易安全链上重新获取符合设定条件的用户设备的设备身份信息，并对重新获取的各个用户设备进行合法性校验，获得相应的设备身份信息匹配标识，以及定期从交易安全链上重新获取其他校验设备最新上传的设备身份信息匹配标识。Regularly re-obtain the device identity information of user equipment that meets the set conditions from the transaction security chain, conduct legality verification on each re-obtained user equipment, obtain the corresponding device identity information matching identification, and regularly retrieve the device identity information from the transaction security chain Re-obtain the latest device identity information matching identifier uploaded by other verification devices.
一种存储介质，保存有用于实现基于区块链的合法性校验的方法有程序，所述程序被处理器运行时，执行以下步骤：A storage medium that stores a program for implementing a blockchain-based legality verification method. When the program is run by a processor, the following steps are performed:
在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息；During non-business occupation, download the device identity information of user devices that meet the set conditions from the transaction security chain;
对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链；Perform legality verification on the obtained device identity information of each user device, generate corresponding device identity information matching identifiers, save and upload the obtained device identity information matching identifiers to the transaction security chain;
在非业务占用期间，从交易安全链下载其他校验设备上传的设备身份信息匹配标识并进行保存；During non-business occupation, download the device identity information matching identifier uploaded by other verification devices from the transaction security chain and save it;
接收到目标用户设备发送的业务使用请求时，在确定本地保存有所述目标用户设备对应的设备身份信息匹配标识时，判定所述目标用户设备通过合法性校验，并基本所述设备身份信息匹配标识提供相应的业务服务。When receiving the service usage request sent by the target user equipment, and when it is determined that the device identity information corresponding to the target user equipment is stored locally and matches the identification, it is determined that the target user equipment has passed the legality check, and the device identity information is basically stored Matching identifiers provide corresponding business services.
一种通信装置，包括一个或多个处理器；以及一个或多个计算机可读介质，所述可读介质上存储有指令，所述指令被所述一个或多个处理器执行时，使得所述装置执行如上述任一项方法。A communication device, including one or more processors; and one or more computer-readable media, instructions stored on the readable medium, which when executed by the one or more processors, cause the The device performs any one of the above methods.
一种基于区块链的合法性校验系统，至少包括交易安全链和若干校验设备，其中，A blockchain-based legality verification system, which at least includes a transaction security chain and several verification devices, among which,
交易安全链，用于保存用户设备上传的设备身份信息，以及保存各个校验设备上传的设备身份信息匹配标识；The transaction security chain is used to save the device identity information uploaded by the user's device, as well as the matching identification of the device identity information uploaded by each verification device;
校验设备，用于在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息，对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链，以及在非业务占用期间，从交易安全链下载其他校验设备上传的设备身份信息匹配标识并进行保存，在接收到目标用户设备发送的业务使用请求时，在确定本地保存有所述目标用户设备对应的设备身份信息匹配标识时，判定所述目标用户设备通过合法性校验，并基本所述设备身份信息匹配标识提供相应的业务服务。Verification equipment is used to download the device identity information of user equipment that meets the set conditions from the transaction security chain during non-business occupation, perform legality verification on the obtained equipment identity information of each user equipment, and generate the corresponding device identity. information matching identifier, save and upload the obtained device identity information matching identifier to the transaction security chain, and during the non-business occupation period, download the device identity information matching identifier uploaded by other verification devices from the transaction security chain and save it , when receiving the service usage request sent by the target user equipment, and when it is determined that the device identity information corresponding to the target user equipment is stored locally and matches the identification, it is determined that the target user equipment passes the legality check, and the equipment is basically Identity information matches the identity to provide corresponding business services.
本发明实施例中，各个用户设备会在闲时将自身的设备身份信息上传至交易安全链，校验设备会在闲时从交易安全链上下载用户设备上传的设备身份信息进行合法性校验，并将获得的设备身份信息匹配标识上传至交易安全链，与其他校验设备进行共享，同时也下载其他校验设备上传的设备身份信息匹配标识，可见，用户设备的设备身份信息只需要经过一次合法性校验，系统内的各个校验设备便可以均获得相应的设备身份信息匹配标识，这样，校验设备在接收到用户设备发送的业务使用请求后，可以迅速根据已获得的设备身份信息匹配标识完成用户设备的再次校验，从而快速提供相关的服务内容，进而有效提升了用户体验。In the embodiment of the present invention, each user device will upload its own device identity information to the transaction security chain in its free time, and the verification device will download the device identity information uploaded by the user device from the transaction security chain in its free time for legality verification. , and upload the obtained device identity information matching identifier to the transaction security chain to share it with other verification devices. At the same time, it also downloads the device identity information matching identifier uploaded by other verification devices. It can be seen that the device identity information of the user device only needs to go through After one legality verification, each verification device in the system can obtain the corresponding device identity information matching identifier. In this way, after receiving the service usage request sent by the user device, the verification device can quickly obtain the device identity according to the obtained The information matching identification completes the re-verification of the user equipment, thereby quickly providing relevant service content, thereby effectively improving the user experience.
附图说明Description of the drawings
图1为已有技术下交易系统工作原理示意图；Figure 1 is a schematic diagram of the working principle of the trading system under the existing technology;
图2为本发明实施例中交易系统工作原理示意图；Figure 2 is a schematic diagram of the working principle of the trading system in the embodiment of the present invention;
图3为本发明实施例中基于区块链对用户设备进行合法性校验概述流程示意图；Figure 3 is a schematic flowchart illustrating an overview of the legality verification of user equipment based on blockchain in an embodiment of the present invention;
图4为本发明实施例中基于区块链对用户设备进行合法性校验详细流程示意图；Figure 4 is a schematic diagram of the detailed process of verifying the legality of user equipment based on blockchain in an embodiment of the present invention;
图5为本发明实施例中校验设备功能结构示意图。Figure 5 is a schematic functional structure diagram of the verification device in the embodiment of the present invention.
具体实施方式Detailed ways
下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本发明一部分实施例，并不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of the present invention.
参阅图2所示，本发明实施例中，交易系统内至少设置有若干校验设备、若干用户设备和交易安全链，Referring to Figure 2, in the embodiment of the present invention, the transaction system is provided with at least a number of verification devices, a number of user devices and transaction security chains.
用户设备，即是用户使用的终端，用于根据用户指示请求使用种类业务。User equipment, that is, the terminal used by the user, is used to request types of services according to user instructions.
如图2所示，用户设备通常与设备信息服务端相连接，设备信息服务器端会基于用户设备的设备特征信息(如，设备编号、设备标识码等等)，生成相应的设备身份信息，再将设备身份信息返回给用户设备，用户设备将自身的设备身份信息保存在本地的区块链认证存储模块中，并在会在非业务占用期间(即闲时)将自身的设备身份信息上传至交易安全链。As shown in Figure 2, the user device is usually connected to the device information server. The device information server will generate corresponding device identity information based on the device feature information of the user device (such as device number, device identification code, etc.), and then Return the device identity information to the user device. The user device saves its own device identity information in the local blockchain authentication storage module, and uploads its own device identity information to Transaction security chain.
交易安全链，可选的，可以采用分布式服务器集群的形式实现，交易安全链上的数据可以在交易系统内共享。The transaction security chain, optionally, can be implemented in the form of a distributed server cluster, and the data on the transaction security chain can be shared within the trading system.
校验设备，可以在用户设备现场请求使用业务时，对用户设备进行合法性校验，也可以在非业务占用期间(即闲时)，从交易安全链上下载用户设备上传的设备身份信息，并在本地进行离线的合法性校验。The verification equipment can perform legality verification on the user equipment when the user equipment requests to use the service on site, and can also download the device identity information uploaded by the user equipment from the transaction security chain during non-business occupation (i.e., idle time). And perform offline legality verification locally.
如图1所示，校验设备通常与业务系统和风险控制系统相连接，业务系统会将交易规则预先通知校验设备，而风险控制系统会预先将用于合法性校验的各个用户设备的风险等级通知校验设备，校验设备会将交易规则、风险等级和校验规则保存在本地的区块链认证校验模块中。As shown in Figure 1, the verification equipment is usually connected to the business system and the risk control system. The business system will notify the verification equipment in advance of the transaction rules, and the risk control system will advance the data of each user equipment used for legality verification. The risk level notifies the verification device, and the verification device will save the transaction rules, risk level and verification rules in the local blockchain certification verification module.
所谓校验设备，可选的，可以采用闸机、POS机、收银设备、自助机等等实现，校验设备即是能够在用户设备现场请求使用某种业务时，提供合法性校验的判断依据的设备。The so-called verification equipment is optional and can be implemented by gates, POS machines, cash register equipment, self-service machines, etc. The verification equipment is able to provide legality verification judgments when the user equipment requests the use of a certain business on site. based equipment.
基于上述系统架构，参阅图3所示，本发明实施例中，基于区块链对用户设备进行合法性校验的概述流程如下：Based on the above system architecture, as shown in Figure 3, in the embodiment of the present invention, the overview process of verifying the legality of user equipment based on blockchain is as follows:
步骤300：校验设备在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息。Step 300: When the verification device is not occupied for business, download the device identity information of the user device that meets the set conditions from the transaction security chain.
通常情况下，校验设备下载一用户设备的设备身份信息之前，需要先判断本地以及交易安全链上是否已经存在了相应的设备身份信息匹配标识，若是，则说明已经有其他校验设备对上述一用户设备执行了合法性校验，那么，此时检验设备只需要直接下载相应的设备身份信息匹配标识即可，否则，校验设备才会从交易安全链上下载用户设备的设备身份信息。Normally, before the verification device downloads the device identity information of a user device, it needs to first determine whether the corresponding device identity information matching identifier already exists locally and on the transaction security chain. If so, it means that other verification devices have already matched the above. If a user device performs legality verification, then the verification device only needs to directly download the corresponding device identity information matching identifier. Otherwise, the verification device will download the device identity information of the user device from the transaction security chain.
进一步地，校验设备所使用的上述设定条件，可以由管理人员预先设置，可以是时间范围设定条件，例如，三天内上传的设备身份信息；也可以地理位置范围设定条件，例如，北京市范围内上传的设备身份信息；还可以是业务范围设定条件，例如，能够接入4G网络的用户设备上传的设备身份信息，等等，当然也可以是上述几种设定条件的任意组合，进一步地，上述几种限定条件只是设定条件的一些举例，实际应用中还可以根据应用环境灵活配置，在此不再赘述。Furthermore, the above-mentioned setting conditions used for verifying the device can be set in advance by the administrator, and can be a time range setting condition, for example, device identity information uploaded within three days; it can also be a geographical location range setting condition, for example, Device identity information uploaded within the scope of Beijing; it can also be business scope setting conditions, for example, device identity information uploaded by user devices that can access the 4G network, etc., of course, it can also be any of the above setting conditions Combination, further, the above-mentioned several limiting conditions are just some examples of setting conditions. In actual applications, they can also be flexibly configured according to the application environment, and will not be described again here.
步骤310：校验设备对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识上传进行保存以及上传至所述交易安全链。Step 310: The verification device performs legality verification on the obtained device identity information of each user device, generates corresponding device identity information matching identifiers, and uploads the obtained device identity information matching identifiers for storage and uploading to the transaction security chain.
具体的，校验设备可以根据从业务系统获取的业务校验规则，结合从风险控制系获取的各个用户设备的风险等级，对获得的各个用户设备的设备身份信息进行合法性校验，确定通过校验时，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识保存在本地，所述设备身份信息匹配标识用于表征所述用户设备对应的风险等级以及业务内容；以及，在非业务占用期间，校验设备会将上述设备身份信息匹配标识上传至交易安全链。Specifically, the verification device can perform legality verification on the obtained device identity information of each user device based on the business verification rules obtained from the business system and combined with the risk level of each user device obtained from the risk control system, and determine whether the device has passed During verification, generate a corresponding device identity information matching identifier, and store the obtained device identity information matching identifier locally. The device identity information matching identifier is used to characterize the risk level and business content corresponding to the user equipment; and, During the non-business occupation period, the verification device will upload the matching identification of the above device identity information to the transaction security chain.
其中，所谓的业务校验规则，可选的，可以用于配置不同的服务等级，譬如：不同的VIP服务、不同的场次服务、不同等级的个性化服务等等的业务校验规则。Among them, the so-called business verification rules are optional and can be used to configure different service levels, such as business verification rules for different VIP services, different session services, different levels of personalized services, etc.
本发明实施例中，由于各个校验设备可以将业务校验规则，风险等级保存在本地，因此，在非业务占用期间，无需连接互联网，校验设备可以随时实现离线的安全校验，快速、高效而安全。In the embodiment of the present invention, since each verification device can store business verification rules and risk levels locally, there is no need to connect to the Internet during non-business occupation periods, and the verification device can implement offline security verification at any time, quickly and Efficient and safe.
同时，在进行校验之后，可选的，校验设备可以在本地删除各个用户设备的设备身份信息，只保设备身份信息匹配标识，这样，可以令校验设备免去在本地保存最高级安全信息的功能，只针对支撑交易安全链的服务器集群进行安全成本投入即可，大大降低了安全实现成本，同时提高了数据安全性和可用性。At the same time, after verification, the verification device can optionally delete the device identity information of each user device locally, and only ensure that the device identity information matches the identification. In this way, the verification device can avoid having to store the highest level of security locally. For the information function, only the security cost investment is required for the server cluster supporting the transaction security chain, which greatly reduces the cost of security implementation and improves data security and availability.
步骤320：校验设备在非业务占用期间，从交易安全链下载其他校验设备上传的设备身份信息匹配标识并进行保存。Step 320: When the verification device is not occupied for business, it downloads the device identity information matching identifier uploaded by other verification devices from the transaction security chain and saves it.
具体的，交易安全链上的所有信息都是在各个校验设备之间共享的，任意一个校验设备都可以随时可以下载所需要的用户设备的设备身份信息，以及下载所需要的设备身份信息匹配标识。Specifically, all information on the transaction security chain is shared between various verification devices. Any verification device can download the required device identity information of the user device at any time, as well as download the required device identity information. Match ID.
步骤330：校验设备接收到目标用户设备发送的业务使用请求时，在确定本地保存有所述目标用户设备对应的设备身份信息匹配标识时，判定所述目标用户设备通过合法性校验，并基于所述设备身份信息匹配标识提供相应的业务服务。Step 330: When the verification device receives the service usage request sent by the target user equipment, and determines that the device identity information corresponding to the target user equipment is stored locally and matches the identification, it determines that the target user equipment passes the legality verification, and Provide corresponding business services based on the matching identification of the device identity information.
这样，由于设备身份信息只保存的交易安全链上，因此，外围系统无法获知其具体内容，并且校验设备发送请求使用请求后，校验设备进行合法性校验时，是采用黑盒判断原则进行的，即直接根据有无设备身份信息匹配标识来确定用户设备是否能够具有合法的业务使用权限，这样大大保护了用户设备的交易安全，避免了信息泄露。In this way, since the device identity information is only saved in the transaction security chain, the peripheral system cannot know its specific content, and after the verification device sends a request for use, the verification device uses the black box judgment principle when performing legality verification. This is done by directly determining whether the user device has legal business usage rights based on whether the device identity information matches the identifier. This greatly protects the transaction security of the user device and avoids information leakage.
进一步地，本发明实施例中，校验设备需要定期从交易安全链上重新获取符合设定条件的用户设备的设备身份信息，并对重新获取的各个用户设备进行合法性校验，获得相应的设备身份信息匹配标识，以及定期从交易安全链上重新获取其他校验设备最新上传的设备身份信息匹配标识。Further, in the embodiment of the present invention, the verification device needs to regularly re-obtain the device identity information of the user equipment that meets the set conditions from the transaction security chain, and perform legality verification on each re-obtained user equipment to obtain the corresponding The device identity information matching identifier, and the latest device identity information matching identifier uploaded by other verification devices are regularly re-obtained from the transaction security chain.
这样，可以保证本地保存的设备身份信息匹配标识的实时性，从而确保用户设备的交易安全性。In this way, the real-time matching identification of the locally saved device identity information can be ensured, thereby ensuring the transaction security of the user's device.
基于上述实施例，参阅图4所示，下面以校验设备A和校验设备B为例，对上述实施例作出进一步详细说明。Based on the above embodiment, referring to FIG. 4 , the above embodiment will be further described in detail below, taking verification device A and verification device B as examples.
步骤401：校验设备A获取风险控制系统预先配置的各个用户设备的风险等级。Step 401: Verification device A obtains the risk level of each user device preconfigured by the risk control system.
步骤402：校验设备A获取业务系统预先配置的各个用户设备的业务校验规则。Step 402: Verification device A obtains the service verification rules of each user equipment pre-configured by the service system.
步骤403：设备信息服务端采用用户设备x的设备相关信息，生成设备身份信息x，并将设备身份信息x发往用户设备x。Step 403: The device information server uses the device-related information of user device x to generate device identity information x, and sends the device identity information x to user device x.
步骤404：用户设备x在本地的区块链认证存储模块中保存设备身份信息x。Step 404: User device x saves device identity information x in the local blockchain authentication storage module.
步骤405：用户设备x在闲时将设备身份信息x上传至交易安全链。Step 405: User device x uploads device identity information x to the transaction security chain when it is idle.
步骤406：校验设备A在闲时从交易安全链下载设备身份信息x，并保存在本地的区块链认证校验模块中。Step 406: Verification device A downloads the device identity information x from the transaction security chain when it is idle, and saves it in the local blockchain authentication verification module.
步骤407：校验设备A基于已获取的业务校验规则和风险等级对设备身份信息x进行校验，判定设备身份信息x对应的风险等级和业务内容，生成相应的设备身份信息匹配标识x。Step 407: Verification device A verifies the device identity information x based on the acquired business verification rules and risk levels, determines the risk level and business content corresponding to the device identity information x, and generates the corresponding device identity information matching identifier x.
传统的校验设备并不具备上述功能，本发明实施例中，由于在校验设备中增设了区块链认证校验模块，因此，可以预先保存业务校验规则、风险等级，因此，可以离线方式，在校验设备本地完成对设备身份信息的校验。Traditional verification equipment does not have the above functions. In the embodiment of the present invention, since a blockchain authentication verification module is added to the verification equipment, business verification rules and risk levels can be saved in advance, so it can be offline In this way, the verification of device identity information is completed locally on the verification device.
在此，传统的设备校验标识并不具备该功能，我们这里的设备由于具备了该认证模块，所以可以通过该模块进行现在安装更新等操作。Here, the traditional device verification identification does not have this function. Since our device has this authentication module, we can use this module to perform current installation and update operations.
步骤408：校验设备A通知用户设备x已通过校验。Step 408: Verification device A notifies the user that device x has passed verification.
步骤409：校验设备A在闲时将设备身份信息匹配标识x上传至交易安全链。Step 409: Verification device A uploads the device identity information matching identifier x to the transaction security chain when it is idle.
步骤410：校验设备B在闲时下载设备身份信息匹配标识x，并保存在本地的区块链认证校验模块中。Step 410: Verification device B downloads the device identity information matching identifier x when it is free, and saves it in the local blockchain authentication verification module.
传统的校验设备并不具有上述功能，本发明实施例中，由于在校验设备中增设了区块链认证校验模块，因此，可以预先保存设备身份信息匹配标识x，从而在后续业务服务中能够提供快速校验功能。Traditional verification equipment does not have the above functions. In the embodiment of the present invention, since a blockchain authentication verification module is added to the verification equipment, the device identity information matching identification x can be saved in advance, so that in subsequent business services It can provide quick verification function.
步骤411：校验设备B在接收到用户设备x发送的业务使用请求时，通过设备身份信息匹配标识x对用户设备x再次进行校验，确认通过校验时，快速安全提供相应的业务服务。Step 411: When the verification device B receives the service usage request sent by the user device x, it verifies the user device x again through the device identity information matching identifier x. When it is confirmed that the verification passes, the corresponding business service is quickly and securely provided.
具体的，校验设备A和校验设备B可以相距很远，系统中只要校验设备A从交易安全链上获取到用户设备x的设备身份信息并完成合法性校验，生成并上传相应的设备身份信息匹配标识x，校验设备B便可以随时从交易安全链上共享设备身份匹配标识x，从而在用户设备x接近校验设备B，并请求通过校验设备B使用某种业务时，校验设备B可以迅速完成合法性校验，并快速安全地提供相应的业务服务。Specifically, verification device A and verification device B can be far apart. In the system, as long as verification device A obtains the device identity information of user device x from the transaction security chain and completes legality verification, generates and uploads the corresponding If the device identity information matches the identifier x, the verification device B can share the device identity matching identifier x from the transaction security chain at any time. Therefore, when the user device Verification device B can quickly complete legality verification and provide corresponding business services quickly and safely.
这样，用户设备x只需要在系统内完成一次合法性校验，整个系统便可以共享校验结果，无需多次校验，从而有效缩短了校验效率，提升了服务速度，进而提升了用户体验。In this way, user device .
例如，当用户购买了年票或者多场馆通票，业务系统会提前将年票的业务校验规则或多场馆通票的业务校验规则配置同步到校验设备A，当校验设备A确定用户的年票或多场馆通票通过合法性校验后，将校验结果通过交易安全链发布至全网的校验终端，那么，用户下次再使用年票通过校验设备B时，校验设备B便无需再进行检索校验。当然，业务校验规则可以配置多种，可以是单一规则也可以是组合规则等等。For example, when a user purchases an annual pass or a multi-venue pass, the business system will synchronize the business verification rules of the annual pass or the business verification rules configuration of the multi-venue pass to verification device A in advance. When verification device A determines the user's After the annual pass or multi-venue pass passes the legality verification, the verification result will be released to the verification terminal of the entire network through the transaction security chain. Then, the next time the user uses the annual pass to pass the verification device B, the verification device B There is no need to perform retrieval verification. Of course, a variety of business verification rules can be configured, which can be a single rule or a combination of rules, etc.
当然，根据业务校验规则的不同，校验设备也有可能根据用户设备的业务使用请求，对用户设备进行部分合法性验证(如，次卡验证)，在此不再赘述。Of course, depending on the service verification rules, the verification device may also perform partial legality verification (such as secondary card verification) on the user equipment according to the service usage request of the user equipment, which will not be described again here.
基于上述实施例，参阅图5所示，本发明实施例中，校验设备至少包括第一下载单元50，校验单元51，第二下载单元52和处理单元53，其中，Based on the above embodiments, as shown in Figure 5, in the embodiment of the present invention, the verification device at least includes a first download unit 50, a verification unit 51, a second download unit 52 and a processing unit 53, where,
第一下载单元50，用于校验设备在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息；The first download unit 50 is used to verify that the device downloads the device identity information of the user device that meets the set conditions from the transaction security chain during the non-business occupation period;
校验单元51，用于对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链；The verification unit 51 is used to perform legality verification on the obtained device identity information of each user device, generate a corresponding device identity information matching identifier, save the obtained device identity information matching identifier, and upload it to the transaction security chain;
第二下载单元52，用于在非业务占用期间，从交易安全链下载其他校验设备上传的设备身份信息匹配标识并进行保存；The second download unit 52 is used to download the device identity information matching identification uploaded by other verification devices from the transaction security chain during non-business occupation and save it;
处理单元53，用于接收到目标用户设备发送的业务使用请求时，在确定本地保存有所述目标用户设备对应的设备身份信息匹配标识时，判定所述目标用户设备通过合法性校验，并基于所述设备身份信息匹配标识相应的业务服务。The processing unit 53 is configured to, when receiving a service usage request sent by the target user equipment, determine that the device identity information matching identifier corresponding to the target user equipment is stored locally, determine that the target user equipment passes the legality check, and Match and identify corresponding business services based on the device identity information.
可选的，在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息之前，所述第一下载单元50进一步用于：Optionally, during the non-business occupation period, before downloading the device identity information of the user equipment that meets the set conditions from the transaction security chain, the first download unit 50 is further used to:
确定本地以及所述交易安全链上，不存在其他校验设备对应所述设备身份信息上传的相应的设备身份信息匹配标识。It is determined that there is no corresponding device identity information matching identifier uploaded by other verification devices corresponding to the device identity information locally and on the transaction security chain.
可选的，在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息时，所述第一下载单元50用于：Optionally, during non-business occupation, when downloading the device identity information of user equipment that meets the set conditions from the transaction security chain, the first download unit 50 is used to:
在非业务占用期间，从交易安全链下载符合以下设定条件之一或任意组合的用户设备的设备身份信息：During non-business occupation, download the device identity information of user devices that meet one or any combination of the following set conditions from the transaction security chain:
时间范围设定条件；Time range setting conditions;
地理位置范围设定条件；Geographical location range setting conditions;
业务范围设定条件。Business scope setting conditions.
可选的，对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链，所述校验单元51用于：Optionally, perform legality verification on the obtained device identity information of each user device, generate a corresponding device identity information matching identifier, save and upload the obtained device identity information matching identifier to the transaction security chain, so The verification unit 51 is used for:
根据从业务系统获取的业务校验规则，结合从风险控制系获取的各个用户设备的风险等级，对获得的各个用户设备的设备身份信息进行合法性校验，确定通过校验时，生成相应的设备身份信息匹配标识，其中，所述设备身份信息匹配标识用于表征所述用户设备对应的风险等级以及业务内容；According to the business verification rules obtained from the business system and combined with the risk level of each user equipment obtained from the risk control system, the obtained equipment identity information of each user equipment is verified for legality. When it is determined that the verification passes, the corresponding A device identity information matching identifier, wherein the device identity information matching identifier is used to characterize the risk level and business content corresponding to the user equipment;
将获得的设备身份信息匹配标识保存在本地，以及，在非业务占用期间，上传至交易安全链。The obtained device identity information matching identification is stored locally, and uploaded to the transaction security chain during non-business occupation.
可选的，所述校验单元51进一步用于：Optionally, the verification unit 51 is further used to:
在生成相应的设备身份信息匹配标识之后，删除已下载的用户设备的设备身份信息。After the corresponding device identity matching identifier is generated, the downloaded device identity information of the user device is deleted.
可选的，所述校验单元51进一步用于：Optionally, the verification unit 51 is further used to:
定期从交易安全链上重新获取符合设定条件的用户设备的设备身份信息，并对重新获取的各个用户设备进行合法性校验，获得相应的设备身份信息匹配标识，以及定期从交易安全链上重新获取其他校验设备最新上传的设备身份信息匹配标识。Regularly re-obtain the device identity information of user equipment that meets the set conditions from the transaction security chain, conduct legality verification on each re-obtained user equipment, obtain the corresponding device identity information matching identification, and regularly retrieve the device identity information from the transaction security chain Re-obtain the latest device identity information matching identifier uploaded by other verification devices.
基于同一发明构思，本发明实施例提供一种存储介质，保存有用于实现基于区块链的合法性校验的方法有程序，所述程序被处理器运行时，执行以下步骤：Based on the same inventive concept, embodiments of the present invention provide a storage medium that stores a program for implementing a method for implementing blockchain-based legality verification. When the program is run by a processor, the following steps are performed:
在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息；During non-business occupation, download the device identity information of user devices that meet the set conditions from the transaction security chain;
对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链；Perform legality verification on the obtained device identity information of each user device, generate corresponding device identity information matching identifiers, save and upload the obtained device identity information matching identifiers to the transaction security chain;
在非业务占用期间，从交易安全链下载其他校验设备上传的设备身份信息匹配标识并进行保存；During non-business occupation, download the device identity information matching identifier uploaded by other verification devices from the transaction security chain and save it;
接收到目标用户设备发送的业务使用请求时，在确定本地保存有所述目标用户设备对应的设备身份信息匹配标识时，判定所述目标用户设备通过合法性校验，并基本所述设备身份信息匹配标识提供相应的业务服务。When receiving the service usage request sent by the target user equipment, and when it is determined that the device identity information corresponding to the target user equipment is stored locally and matches the identification, it is determined that the target user equipment has passed the legality check, and the device identity information is basically stored Matching identifiers provide corresponding business services.
基于同一发明构思，本发明实施例提供一种通信装置，包括一个或多个处理器；以及一个或多个计算机可读介质，所述可读介质上存储有指令，所述指令被所述一个或多个处理器执行时，使得所述装置执行如权利要求1至6中任一项所述的方法。Based on the same inventive concept, embodiments of the present invention provide a communication device, including one or more processors; and one or more computer-readable media, with instructions stored on the readable media, and the instructions are processed by the one When executed by or multiple processors, the device is caused to execute the method according to any one of claims 1 to 6.
基于同一发明构思，本发明实施例提供一种基于区块链的合法性校验系统，其特征在于，至少包括交易安全链和若干校验设备，其中，Based on the same inventive concept, embodiments of the present invention provide a blockchain-based legality verification system, which is characterized by at least including a transaction security chain and several verification devices, wherein,
交易安全链，用于保存用户设备上传的设备身份信息，以及保存各个校验设备上传的设备身份信息匹配标识；The transaction security chain is used to save the device identity information uploaded by the user's device, as well as the matching identification of the device identity information uploaded by each verification device;
校验设备，用于在非业务占用期间，从交易安全链下载符合设定条件的用户设备的设备身份信息，对获得的各个用户设备的设备身份信息进行合法性校验，生成相应的设备身份信息匹配标识，并将获得的设备身份信息匹配标识进行保存以及上传至所述交易安全链，以及在非业务占用期间，从交易安全链下载其他校验设备上传的设备身份信息匹配标识并进行保存，在接收到目标用户设备发送的业务使用请求时，在确定本地保存有所述目标用户设备对应的设备身份信息匹配标识时，判定所述目标用户设备通过合法性校验，并基本所述设备身份信息匹配标识提供相应的业务服务。Verification equipment is used to download the device identity information of user equipment that meets the set conditions from the transaction security chain during non-business occupation, perform legality verification on the obtained equipment identity information of each user equipment, and generate the corresponding device identity. information matching identifier, save and upload the obtained device identity information matching identifier to the transaction security chain, and during the non-business occupation period, download the device identity information matching identifier uploaded by other verification devices from the transaction security chain and save it , when receiving the service usage request sent by the target user equipment, and when it is determined that the device identity information corresponding to the target user equipment is stored locally and matches the identification, it is determined that the target user equipment passes the legality check, and the equipment is basically Identity information matches the identity to provide corresponding business services.
综上所述，本发明实施例中，各个用户设备会在闲时将自身的设备身份信息上传至交易安全链，校验设备会在闲时从交易安全链上下载用户设备上传的设备身份信息进行合法性校验，并将获得的设备身份信息匹配标识上传至交易安全链，与其他校验设备进行共享，同时也下载其他校验设备上传的设备身份信息匹配标识，可见，用户设备的设备身份信息只需要经过一次合法性校验，系统内的各个校验设备便可以均获得相应的设备身份信息匹配标识，这样，校验设备在接收到用户设备发送的业务使用请求后，可以迅速根据已获得的设备身份信息匹配标识完成用户设备的再次校验，从而快速提供相关的服务内容，进而有效提升了用户体验。To sum up, in the embodiment of the present invention, each user device will upload its own device identity information to the transaction security chain in its free time, and the verification device will download the device identity information uploaded by the user device from the transaction security chain in its free time. Perform legality verification and upload the obtained device identity information matching identifier to the transaction security chain to share it with other verification devices. At the same time, it also downloads the device identity information matching identifier uploaded by other verification devices. It can be seen that the device identity information of the user device The identity information only needs to be verified once for legality, and each verification device in the system can obtain the corresponding device identity information matching identifier. In this way, after receiving the service usage request sent by the user device, the verification device can quickly perform the verification according to the request. The obtained device identity information matches the identification to complete the re-verification of the user device, thereby quickly providing relevant service content, thereby effectively improving the user experience.
进一步地，不同于传统方式下的批量下载方式，本发明实施例中，各个校验设备在闲时采用离散方式获取用户设备的设备身份信息，这样，可以保障业务交易的实时性，不耽误业务处理，并且，设备身份信息通过校验后，相应的设备身份信息校验标识上传至交易安全链，即通过区块链实现了分布式安全存储，避免了集中式存储可能带来的泄露风险交易安全。Further, unlike the batch download method in the traditional method, in the embodiment of the present invention, each verification device uses a discrete method to obtain the device identity information of the user equipment during idle time. In this way, the real-time nature of business transactions can be guaranteed without delaying the business. Processing, and after the device identity information passes the verification, the corresponding device identity information verification identification is uploaded to the transaction security chain, that is, distributed secure storage is realized through the blockchain, avoiding the leakage risks that may be brought about by centralized storage transactions Safety.
同时，业务系统提前配置了业务校验规则，风险控制系统提前配置了风险等级和校验规则，并上传至校验设备，而校验设备可以在获得用户身份信息后，在本地采用离线方式迅速针对用户设备进行合法性校验，同时通过交易安全链在各个校验设备之间实现校验结果的共享，那么，当校验设备在近场场景下接收到用户设备的业务使用请求时，无需连接互联网进行检索校验过程，而是直接匹配已获得的校验结果，即可以直接完成当前的业务流程。At the same time, the business system has configured business verification rules in advance, and the risk control system has configured risk levels and verification rules in advance and uploaded them to the verification device. The verification device can quickly use offline methods locally after obtaining the user identity information. Perform legality verification on user equipment and share verification results between verification devices through the transaction security chain. Then, when the verification equipment receives a service usage request from the user equipment in a near-field scenario, there is no need to Connect to the Internet to perform the retrieval and verification process, but directly match the obtained verification results, that is, you can directly complete the current business process.
另一方面，本发明实施例中，用户设备的安全信息仅存在本地，不会公开开放给外部平台，保证了用户设备隐私性，避免了现有各种方案给用户造成的额垃圾信息，广告推送等烦恼。On the other hand, in the embodiment of the present invention, the security information of the user equipment is only stored locally and will not be publicly opened to external platforms, ensuring the privacy of the user equipment and avoiding the amount of junk information and advertisements caused to users by various existing solutions. Troubles such as push.
本领域内的技术人员应明白，本发明的实施例可提供为方法、系统、或计算机程序产品。因此，本发明可采用完全硬件实施例、完全软件实施例、或结合软件和硬件方面的实施例的形式。而且，本发明可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质(包括但不限于磁盘存储器、CD-ROM、光学存储器等)上实施的计算机程序产品的形式。Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Thus, the invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.
本发明是参照根据本发明实施例的方法、设备(系统)、和计算机程序产品的流程图和/或方框图来描述的。应理解可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。The invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each process and/or block in the flowchart illustrations and/or block diagrams, and combinations of processes and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine, such that the instructions executed by the processor of the computer or other programmable data processing device produce a use A device for realizing the functions specified in one process or multiple processes of the flowchart and/or one block or multiple blocks of the block diagram.
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能。These computer program instructions may also be stored in a computer-readable memory that causes a computer or other programmable data processing apparatus to operate in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction means, the instructions The device implements the functions specified in a process or processes of the flowchart and/or a block or blocks of the block diagram.
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的步骤。These computer program instructions may also be loaded onto a computer or other programmable data processing device, causing a series of operating steps to be performed on the computer or other programmable device to produce computer-implemented processing, thereby executing on the computer or other programmable device. Instructions provide steps for implementing the functions specified in a process or processes of a flowchart diagram and/or a block or blocks of a block diagram.
尽管已描述了本发明的优选实施例，但本领域内的技术人员一旦得知了基本创造性概念，则可对这些实施例作出另外的变更和修改。所以，所附权利要求意欲解释为包括优选实施例以及落入本发明范围的所有变更和修改。Although the preferred embodiments of the present invention have been described, those skilled in the art will be able to make additional changes and modifications to these embodiments once the basic inventive concepts are apparent. Therefore, it is intended that the appended claims be construed to include the preferred embodiments and all changes and modifications that fall within the scope of the invention.
显然，本领域的技术人员可以对本发明实施例进行各种改动和变型而不脱离本发明实施例的精神和范围。这样，倘若本发明实施例的这些修改和变型属于本发明权利要求及其等同技术的范围之内，则本发明也意图包含这些改动和变型在内。Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present invention without departing from the spirit and scope of the embodiments of the present invention. In this way, if these modifications and variations of the embodiments of the present invention fall within the scope of the claims of the present invention and equivalent technologies, the present invention is also intended to include these modifications and variations.
Claims (9)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910001598.9A CN111401672B (en) | 2019-01-02 | 2019-01-02 | A legality verification method, equipment and system based on blockchain |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910001598.9A CN111401672B (en) | 2019-01-02 | 2019-01-02 | A legality verification method, equipment and system based on blockchain |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111401672A CN111401672A (en) | 2020-07-10 |
| CN111401672B true CN111401672B (en) | 2023-11-28 |
Family
ID=71428288
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910001598.9A Active CN111401672B (en) | 2019-01-02 | 2019-01-02 | A legality verification method, equipment and system based on blockchain |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111401672B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112566126B (en) * | 2020-12-02 | 2022-04-26 | 支付宝(杭州)信息技术有限公司 | Method, device and equipment for connecting equipment |
Citations (29)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1197248A (en) * | 1996-09-25 | 1998-10-28 | 中国工商银行福建省分行 | Numeral signature method |
| CN104322089A (en) * | 2012-05-23 | 2015-01-28 | 诺基亚公司 | A key derivation method and apparatus for local access under control of a cellular network |
| WO2015158173A1 (en) * | 2014-04-18 | 2015-10-22 | 天地融科技股份有限公司 | Agreement key-based data processing method |
| CN105654297A (en) * | 2015-12-29 | 2016-06-08 | 飞天诚信科技股份有限公司 | Terminal-to-terminal interaction method and transaction terminal |
| CN106021964A (en) * | 2016-06-30 | 2016-10-12 | 安徽易联众信息技术有限公司 | Intelligent medical information management system |
| CN106357627A (en) * | 2016-08-30 | 2017-01-25 | 李明 | Method and system for reading resident identification card information and terminal |
| GB201701423D0 (en) * | 2017-01-29 | 2017-03-15 | Cabrera Fernandez Florencio | Blockchain zero checksum trading system |
| US9635000B1 (en) * | 2016-05-25 | 2017-04-25 | Sead Muftic | Blockchain identity management system based on public identities ledger |
| WO2018010211A1 (en) * | 2016-07-13 | 2018-01-18 | 山西特信环宇信息技术有限公司 | Currency transaction application platform and method |
| WO2018032372A1 (en) * | 2016-08-13 | 2018-02-22 | 深圳市樊溪电子有限公司 | Trusted power grid transaction platform based on block chain technology |
| CN107862527A (en) * | 2017-10-27 | 2018-03-30 | 深圳市金立通信设备有限公司 | A kind of method of payment, terminal and server |
| CN107886388A (en) * | 2017-09-22 | 2018-04-06 | 杭州云象网络技术有限公司 | The traffic trip credit and safety service platform and its operation method of multicenter are realized based on alliance's chain |
| CN107977564A (en) * | 2016-10-21 | 2018-05-01 | 中国移动通信有限公司研究院 | A kind of transaction authentication processing method, certificate server, terminal and traction equipment |
| CN108090761A (en) * | 2017-11-10 | 2018-05-29 | 杭州云象网络技术有限公司 | Block chain token method of payment based on credible two-dimension code |
| CN108242999A (en) * | 2017-10-26 | 2018-07-03 | 招商银行股份有限公司 | Key escrow method, equipment and computer readable storage medium |
| CN108270789A (en) * | 2018-01-24 | 2018-07-10 | 平安科技（深圳）有限公司 | Internetbank activating method, equipment, system and computer readable storage medium |
| CN108337093A (en) * | 2017-12-26 | 2018-07-27 | 福建联迪商用设备有限公司 | POS terminal personal identification method, POS terminal and server |
| CN108335026A (en) * | 2018-01-24 | 2018-07-27 | 平安科技（深圳）有限公司 | Bank password information changes implementation method, equipment, system and storage medium |
| CN108335105A (en) * | 2018-01-18 | 2018-07-27 | 中国建设银行股份有限公司 | Data processing method and relevant device |
| CN108520307A (en) * | 2018-03-31 | 2018-09-11 | 深圳慧通商务有限公司 | Data processing method and relevant apparatus |
| WO2018161807A1 (en) * | 2017-03-06 | 2018-09-13 | 华为技术有限公司 | User identity verification method and apparatus |
| WO2018177190A1 (en) * | 2017-03-28 | 2018-10-04 | 上海瑞麒维网络科技有限公司 | Method and device for synchronizing blockchain data |
| CN108766020A (en) * | 2018-06-04 | 2018-11-06 | 深圳拍物联科技有限公司 | A kind of parking stall sharing method and system based on block chain |
| CN108805650A (en) * | 2018-04-27 | 2018-11-13 | 深圳市元征科技股份有限公司 | A kind of order matching process and server |
| CN108833330A (en) * | 2018-04-08 | 2018-11-16 | 浙江商业职业技术学院 | A kind of rural area electronic commerce data authentication approach |
| CN109040060A (en) * | 2018-08-01 | 2018-12-18 | 广州杰赛科技股份有限公司 | Terminal-Matching and system, computer equipment |
| CN109067543A (en) * | 2018-07-24 | 2018-12-21 | 腾讯科技（深圳）有限公司 | Digital certificate management method, device, computer equipment and storage medium |
| CN109087101A (en) * | 2018-08-07 | 2018-12-25 | 北京三快在线科技有限公司 | Transaction method of calibration, device, storage medium and electronic equipment |
| CN109118765A (en) * | 2018-09-04 | 2019-01-01 | 京东方科技集团股份有限公司 | Break in traffic rules and regulations recording method and device based on block chain |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102377759B (en) * | 2010-08-25 | 2014-10-08 | 中国移动通信有限公司 | Service processing system, user identity identification method and related devices |
| CN102546580A (en) * | 2011-01-04 | 2012-07-04 | 中国移动通信有限公司 | Method, system and device for updating user password |
| CN104751032A (en) * | 2013-12-31 | 2015-07-01 | 腾讯科技（深圳）有限公司 | Authentication method and authentication device |
| US10469492B2 (en) * | 2015-10-15 | 2019-11-05 | Id.Me, Inc. | Systems and methods for secure online credential authentication |
| US10115068B2 (en) * | 2017-01-24 | 2018-10-30 | Accenture Global Solutions Limited | Secure product identification and verification |
| US20180315145A1 (en) * | 2017-05-01 | 2018-11-01 | International Business Machines Corporation | Managing school systems on a blockchain |
-
2019
- 2019-01-02 CN CN201910001598.9A patent/CN111401672B/en active Active
Patent Citations (29)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1197248A (en) * | 1996-09-25 | 1998-10-28 | 中国工商银行福建省分行 | Numeral signature method |
| CN104322089A (en) * | 2012-05-23 | 2015-01-28 | 诺基亚公司 | A key derivation method and apparatus for local access under control of a cellular network |
| WO2015158173A1 (en) * | 2014-04-18 | 2015-10-22 | 天地融科技股份有限公司 | Agreement key-based data processing method |
| CN105654297A (en) * | 2015-12-29 | 2016-06-08 | 飞天诚信科技股份有限公司 | Terminal-to-terminal interaction method and transaction terminal |
| US9635000B1 (en) * | 2016-05-25 | 2017-04-25 | Sead Muftic | Blockchain identity management system based on public identities ledger |
| CN106021964A (en) * | 2016-06-30 | 2016-10-12 | 安徽易联众信息技术有限公司 | Intelligent medical information management system |
| WO2018010211A1 (en) * | 2016-07-13 | 2018-01-18 | 山西特信环宇信息技术有限公司 | Currency transaction application platform and method |
| WO2018032372A1 (en) * | 2016-08-13 | 2018-02-22 | 深圳市樊溪电子有限公司 | Trusted power grid transaction platform based on block chain technology |
| CN106357627A (en) * | 2016-08-30 | 2017-01-25 | 李明 | Method and system for reading resident identification card information and terminal |
| CN107977564A (en) * | 2016-10-21 | 2018-05-01 | 中国移动通信有限公司研究院 | A kind of transaction authentication processing method, certificate server, terminal and traction equipment |
| GB201701423D0 (en) * | 2017-01-29 | 2017-03-15 | Cabrera Fernandez Florencio | Blockchain zero checksum trading system |
| WO2018161807A1 (en) * | 2017-03-06 | 2018-09-13 | 华为技术有限公司 | User identity verification method and apparatus |
| WO2018177190A1 (en) * | 2017-03-28 | 2018-10-04 | 上海瑞麒维网络科技有限公司 | Method and device for synchronizing blockchain data |
| CN107886388A (en) * | 2017-09-22 | 2018-04-06 | 杭州云象网络技术有限公司 | The traffic trip credit and safety service platform and its operation method of multicenter are realized based on alliance's chain |
| CN108242999A (en) * | 2017-10-26 | 2018-07-03 | 招商银行股份有限公司 | Key escrow method, equipment and computer readable storage medium |
| CN107862527A (en) * | 2017-10-27 | 2018-03-30 | 深圳市金立通信设备有限公司 | A kind of method of payment, terminal and server |
| CN108090761A (en) * | 2017-11-10 | 2018-05-29 | 杭州云象网络技术有限公司 | Block chain token method of payment based on credible two-dimension code |
| CN108337093A (en) * | 2017-12-26 | 2018-07-27 | 福建联迪商用设备有限公司 | POS terminal personal identification method, POS terminal and server |
| CN108335105A (en) * | 2018-01-18 | 2018-07-27 | 中国建设银行股份有限公司 | Data processing method and relevant device |
| CN108335026A (en) * | 2018-01-24 | 2018-07-27 | 平安科技（深圳）有限公司 | Bank password information changes implementation method, equipment, system and storage medium |
| CN108270789A (en) * | 2018-01-24 | 2018-07-10 | 平安科技（深圳）有限公司 | Internetbank activating method, equipment, system and computer readable storage medium |
| CN108520307A (en) * | 2018-03-31 | 2018-09-11 | 深圳慧通商务有限公司 | Data processing method and relevant apparatus |
| CN108833330A (en) * | 2018-04-08 | 2018-11-16 | 浙江商业职业技术学院 | A kind of rural area electronic commerce data authentication approach |
| CN108805650A (en) * | 2018-04-27 | 2018-11-13 | 深圳市元征科技股份有限公司 | A kind of order matching process and server |
| CN108766020A (en) * | 2018-06-04 | 2018-11-06 | 深圳拍物联科技有限公司 | A kind of parking stall sharing method and system based on block chain |
| CN109067543A (en) * | 2018-07-24 | 2018-12-21 | 腾讯科技（深圳）有限公司 | Digital certificate management method, device, computer equipment and storage medium |
| CN109040060A (en) * | 2018-08-01 | 2018-12-18 | 广州杰赛科技股份有限公司 | Terminal-Matching and system, computer equipment |
| CN109087101A (en) * | 2018-08-07 | 2018-12-25 | 北京三快在线科技有限公司 | Transaction method of calibration, device, storage medium and electronic equipment |
| CN109118765A (en) * | 2018-09-04 | 2019-01-01 | 京东方科技集团股份有限公司 | Break in traffic rules and regulations recording method and device based on block chain |
Non-Patent Citations (5)
| Title |
|---|
| 一种基于手机APP的用户实名信息快速采集及校验的方法;马永波;;品牌(下半月)(第04期);全文 * |
| 复杂通信环境下多社交网络用户身份识别研究;胡石;章毅;许乐灵;陈心怡;陈芳;;淮海工学院学报(人文社会科学版)(第09期);全文 * |
| 数据交换系统中数据处理技术研究与应用;任开银;孔震;林峰;;电力信息化(第01期);全文 * |
| 李东星.基于区块链的网络实体身份认证技术研究.《中国优秀硕士学位论文全文库》.2018,123-128. * |
| 胡石 ; 章毅 ; 许乐灵 ; 陈心怡 ; 陈芳 ; .复杂通信环境下多社交网络用户身份识别研究.淮海工学院学报(人文社会科学版).(第09期),3-9. * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111401672A (en) | 2020-07-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108305072B (en) | Method, apparatus, and computer storage medium for deploying a blockchain network | |
| US11443293B2 (en) | Secure network accessing method for POS terminal, and system thereof | |
| CN103875211B (en) | A kind of internet account number management method, manager, server and system | |
| CN110895603B (en) | Multi-system account information integration method and device | |
| CN110958119A (en) | Identity verification method and device | |
| CN109088909B (en) | Service gray level publishing method and device based on merchant type | |
| EP3306904A1 (en) | Automatic recharging system, method and server | |
| CN110677453A (en) | ZooKeeper-based distributed lock service implementation method, device, equipment and storage medium | |
| CN112527912A (en) | Data processing method and device based on block chain network and computer equipment | |
| CN110661779B (en) | Block chain network-based electronic certificate management method, system, device and medium | |
| CN108846671B (en) | Online secure transaction method and system based on block chain | |
| CN111814131B (en) | Method and device for equipment registration and configuration management | |
| CN110598479B (en) | A data processing method, device and computer readable storage medium | |
| CN111401672B (en) | A legality verification method, equipment and system based on blockchain | |
| CN113986578A (en) | Message checking method and first equipment | |
| CN113141404A (en) | Intelligent gateway and data sharing system | |
| US11777742B2 (en) | Network device authentication | |
| CN109348472B (en) | An OTA upgrade method and system based on single-point push | |
| CN106936643B (en) | Equipment linkage method and terminal equipment | |
| CN116761168A (en) | Method, system and electronic equipment for distributing network slices | |
| CN111309801A (en) | Method and device for fragmenting alliance chain | |
| CN115525677A (en) | Data caching method and device, computer equipment and storage medium | |
| JP2023521901A (en) | Mobile application forgery/falsification detection method, computer program, computer-readable recording medium and computer device using user identifier and signature collection | |
| CN117040929B (en) | Access processing method, device, equipment, medium and program product | |
| CN113055412B (en) | Sample collection method, apparatus, system, computer device, and readable storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |