CN112364311B

CN112364311B - Identity management method and device on blockchain

Info

Publication number: CN112364311B
Application number: CN202011246616.9A
Authority: CN
Inventors: 谭人源; 张�荣; 张文静
Original assignee: Shanghai Insurance Exchange Co ltd
Current assignee: Shanghai Insurance Exchange Co ltd
Priority date: 2020-11-10
Filing date: 2020-11-10
Publication date: 2024-01-26
Anticipated expiration: 2040-11-10
Also published as: CN112364311A

Abstract

The application provides a method and a device for managing identities on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the method is applied to the blockchain system and comprises the following steps: receiving a user identity type sent by a client, calling an identity type management intelligent contract, and determining an identification value corresponding to the identity type; returning an identification value corresponding to the identity type to the client; and receiving an identity registration request sent by the client, calling an identity verification management intelligent contract, and registering a mapping relation between an identity hash value of the user and a blockchain account address of the user, wherein the identity registration request carries the identity hash value and the blockchain account address, the identity hash value is obtained by carrying out hash processing on identity information and an identification value input by the user, and the blockchain account address is determined according to the identity hash value. The scheme is beneficial to unified management of the identity information of the user, and can also effectively protect the privacy of the user.

Description

Identity management method and device on blockchain

Technical Field

The present disclosure relates to the field of blockchain technologies, and in particular, to a method and an apparatus for managing identities on a blockchain.

Background

Currently, most authentication services are centralized, and the centralized authentication services provide corresponding data interaction interfaces. The user authentication service requests the user to obtain the authentication result after the user passes the authorization by calling the interface of the authentication service, then the authentication service sends the authorization information to the user of the identity owner, and then the user's identity information is copied and recorded into the system of the user to establish the user model.

However, the centralized manner leads to that most enterprises need to establish a user model when providing external services, which leads to that users need to repeatedly perform complicated registration processes among systems and submit identity verification information for a plurality of times. Moreover, multiple accounts for users result in increased cost of user management of the accounts, and passwords of certain accounts are extremely easy to forget. In addition, the user data between the systems are relatively isolated, and the interaction of the data cannot be directly generated under the condition of not modifying the own system.

In view of the above problems, no effective solution has been proposed at present.

Disclosure of Invention

The embodiment of the application provides a method and a device for managing identities on a blockchain, which are used for solving the problem that centralized identity verification service in the prior art needs repeated registration.

The embodiment of the application provides an identity management method on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the method is applied to the blockchain system and comprises the following steps: receiving a user identity type sent by a client, calling an identity type management intelligent contract, and determining an identification value corresponding to the identity type; returning an identification value corresponding to the identity type to the client; and receiving an identity registration request sent by the client, calling an identity verification management intelligent contract, and registering a mapping relation between an identity hash value of the user and a blockchain account address of the user, wherein the identity registration request carries the identity hash value and the blockchain account address, the identity hash value is obtained by carrying out hash processing on identity information and an identification value input by the user, and the blockchain account address is determined according to the identity hash value.

In one embodiment, after registering the mapping relationship between the identity hash value of the user and the blockchain account address of the user, further comprises: receiving a target intelligent contract calling request sent by a client, wherein the target intelligent contract calling request carries a blockchain account address of a user; invoking an identity verification management intelligent contract to determine whether the blockchain account address is legal; under the condition that the block chain account address is legal, calculating a resource value required by calling the target intelligent contract; the resource data for the resource value is sent to the blockchain account address to enable the user to invoke the target smart contract using the blockchain account address.

In one embodiment, registering a mapping relationship between an identity hash value of a user and a blockchain account address of the user includes: and registering the mapping relation between the identity hash value of the user and the blockchain account address of the user and/or the mapping relation between the blockchain account address of the user and the identity hash value of the user.

The embodiment of the application also provides an identity management method on the blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the method is applied to a client and comprises the following steps: receiving identity types and identity information input by a user; sending the identity type to an identity type management intelligent contract in the blockchain system; receiving an identification value corresponding to the identity type returned by the identity type management intelligent contract; carrying out hash processing on the identity information and the identification value to obtain an identity hash value; determining a block chain account address corresponding to the user according to the identity hash value; and sending an identity registration request to the identity verification management intelligent contract, wherein the identity registration request carries an identity hash value and a blockchain account address, and the identity verification management intelligent contract registers a mapping relation between the identity hash value and the blockchain account address.

In one embodiment, determining the blockchain account address corresponding to the user according to the identity hash value includes: acquiring the current time and a system random number; and determining the block chain account address corresponding to the user according to the identity hash value, the current time and the system random number.

In one embodiment, determining the blockchain account address corresponding to the user based on the identity hash value, the current time, and the system random number includes: taking the identity hash value, the current time and the system random number as random sources to obtain a private key of a blockchain account corresponding to the user; determining a corresponding public key of the blockchain account through a preset cryptographic algorithm based on the private key of the blockchain account; and deducing the block chain account address corresponding to the user according to the block chain account public key.

In one embodiment, after sending the identity hash value and the blockchain account address to the authentication management smart contract deployed in the blockchain system, further comprising: receiving a target intelligent contract calling instruction sent by a user, wherein the target intelligent contract calling instruction is used for calling a target intelligent contract in a blockchain system; and sending a target intelligent contract calling request to a blockchain system, wherein the target intelligent contract calling request comprises a blockchain account address of a user, determining whether the blockchain account is legal by the blockchain system calling identity verification management intelligent contract, calculating a resource value required for calling the target intelligent contract and sending resource data of the resource value to the blockchain account address under the condition that the blockchain account is legal, so that the user can call the target intelligent contract by using the blockchain account address.

The embodiment of the application also provides an identity management method on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the method comprises the following steps: the method comprises the steps that a client receives identity types and identity information input by a user; the client sends the identity type to an identity type management intelligent contract in the blockchain system; the intelligent contract for identity type management determines an identification value corresponding to the identity type and returns the identification value to the client; the client receives the identification value and hashes the identity information and the identification value to obtain an identity hash value; the client determines a block chain account address corresponding to the user according to the identity hash value; the client sends an identity registration request to the identity verification management intelligent contract, wherein the identity registration request carries an identity hash value and a blockchain account address; the authentication management intelligent contract registers a mapping relationship between the identity hash value and the blockchain account address.

The embodiment of the application also provides an identity management device on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the device is positioned in the blockchain system and comprises: the determining module is used for receiving the user identity type sent by the client, calling the identity type management intelligent contract and determining an identification value corresponding to the identity type; the return module is used for returning the identification value corresponding to the identity type to the client; the registration module is used for receiving an identity registration request sent by the client, calling an identity verification management intelligent contract, and registering a mapping relation between an identity hash value of a user and a blockchain account address of the user, wherein the identity registration request carries the identity hash value and the blockchain account address, the identity hash value is obtained by carrying out hash processing on identity information and an identification value input by the user, and the blockchain account address is determined according to the identity hash value.

The embodiment of the application also provides a computer device, which comprises a processor and a memory for storing instructions executable by the processor, wherein the steps of the identity management method on the blockchain described in any embodiment are realized when the instructions are executed by the processor.

Embodiments of the present application also provide a computer readable storage medium having stored thereon computer instructions that when executed implement the steps of the blockchain identity management method described in any of the embodiments above.

In the embodiment of the application, an identity type management intelligent contract and an identity verification management intelligent contract are deployed in a blockchain system, a client can send an identity type to the blockchain system after receiving the identity type and the identity data input by a user, the blockchain system receives the user identity type sent by the client, calls the identity type management intelligent contract, determines an identification value corresponding to the identity type, returns the identification value corresponding to the identity type to the client, hashes the identification value corresponding to the identity type and the identity data to obtain an identity hash value, the client sends an identity registration request carrying the identity hash value and a blockchain account address to the blockchain system, and the blockchain system receives the identity registration request sent by the client, calls the identity verification management intelligent contract, and registers the mapping relation between the identity hash value of the user and the blockchain account address of the user. In the scheme, the mapping relation between the identity hash value of the user and the blockchain account address of the user is uploaded to the blockchain system for registration by calling the identity type management intelligent contract and the identity verification management intelligent contract deployed in the blockchain system, so that unified management of the identity information of the user is facilitated, and the privacy of the user can be effectively protected. The technical problem that the existing centralized identity verification service needs repeated registration is solved through the scheme, and the technical effects of protecting the privacy of the user and being convenient for unified management of the user are achieved.

Drawings

The accompanying drawings are included to provide a further understanding of the application, and are incorporated in and constitute a part of this application. In the drawings:

fig. 1 is a schematic diagram illustrating an application scenario of a block-chaining identity management method in an embodiment of the present application;

FIG. 2 illustrates a flow chart of a method of identity management on a blockchain in an embodiment of the present application;

FIG. 3 illustrates a flow chart of a method of identity management on a blockchain in an embodiment of the present application;

FIG. 4 illustrates a flow chart of a method of identity management on a blockchain in an embodiment of the present application;

FIG. 5 is a schematic diagram of an identity management device on a blockchain in an embodiment of the present application;

FIG. 6 shows a schematic diagram of a computer device in an embodiment of the present application.

Detailed Description

The principles and spirit of the present application will be described below with reference to several exemplary embodiments. It should be understood that these embodiments are presented merely to enable one skilled in the art to better understand and practice the present application and are not intended to limit the scope of the present application in any way. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

Those skilled in the art will appreciate that embodiments of the present application may be implemented as a system, apparatus device, method, or computer program product. Accordingly, the present disclosure may be embodied in the following forms, namely: complete hardware, complete software (including firmware, resident software, micro-code, etc.), or a combination of hardware and software.

In one example of a scenario provided by embodiments of the present disclosure, the blockchain system is either complete or incomplete. The blockchain system has a virtual machine environment for intelligent contract operation. An identity type management smart contract may be deployed in the blockchain system for recording the mapping between common off-chain real world identity type information (such as identity card type and passport type, etc.) and on-chain identification values. The smart contract can be invoked by other smart contracts in the blockchain system to obtain corresponding values on and off the chain of identity types. After the first deployment of the smart contract, the identity type currently required to be supported by the blockchain system and its corresponding identification value are set by the owner of the smart contract (blockchain system administrator) and permanently recorded in the smart contract. An authentication management intelligent contract is deployed in a blockchain system, the intelligent contract is used for registering the mapping relation between hash of identity information outside a user chain and account information on the chain, recording the state of the account information on the user chain for representing whether an account is available or not, and authorizing the user account for calling an authorized intelligent contract item when the item is required to be acquired.

The blockchain system has corresponding application programs, and a user can use the application programs of the blockchain system to conduct an identity registration process. The user may install the application on his own client device. Firstly, a user selects an own identity type under a chain on a client, and an identification value on the chain corresponding to the identity type under the chain can be obtained by calling an identity type management intelligent contract. The user inputs identity information of the corresponding identity type to the client. The client performs data hash processing on the identification value and the identity information corresponding to the identity type to obtain an identity hash value, and the process is irreversible, so that the user identity privacy can be effectively protected. And the client obtains a private key of the blockchain account corresponding to the user by taking the identity hash value, the current time of the accurate millisecond and a system random number as a random source, deduces a corresponding public key through an elliptic curve cryptography algorithm, and pushes the public key to an address again to serve as the blockchain account address of the user in the blockchain system. The client submits the identity hash value and the block chain account address which is just obtained to the identity verification management intelligent contract, and the identity verification management intelligent contract registers the mapping relation between the identity hash value and the block chain account address after acquiring the parameters.

When a user sends a transaction to a target intelligent contract to be called through a client, firstly calling an identity verification management intelligent contract, firstly inquiring whether the blockchain account address of the user is a legal account or not, and then calculating how much resource data the user needs to consume when calling the target intelligent contract. And the intelligent joint date of the identity verification management sends the resource data of the resource value to the blockchain account address corresponding to the user according to the calculated resource value. The user can use the blockchain account address to acquire the target service corresponding to the blockchain by calling the method of the target intelligent contract.

The embodiment of the application provides a method for managing identities on a blockchain. Fig. 1 is a schematic diagram of an application scenario of a block-chaining identity management method in an embodiment of the present application. As shown in fig. 1, a user may input identity type and identity data to a client. The identity type may include various identity types such as identity cards, military officers, drivers' licenses, passports, and the like. The identification data may include various data such as identification numbers, military identification numbers, driver identification numbers, and passport numbers. The client may send the identity type to a prophetic intelligence contract deployed in the blockchain system. The prophetic agent may determine an identification value corresponding to the identity type and return the identification value to the client. The client can hash the identification value corresponding to the identity data and the identity type to obtain an identity hash value. The client can determine a user private key according to the identity hash value, calculate a user public key according to the user private key and a preset cryptographic algorithm, and deduce an account address according to the user public key so as to obtain the blockchain account address. The client sends an identity registration request to an identity verification management intelligent contract deployed in the blockchain system, wherein the identity registration request comprises an identity hash value of a user and a blockchain account address. The authentication management intelligent contract registers a mapping relationship between the identity hash value and the blockchain account address. After the intelligent contract registration is managed by the identity verification, registration result information is returned to the user, if the registration is successful, registration success information is returned, and otherwise registration failure information is returned.

FIG. 2 is a flow chart illustrating a method of block on-chain identity management in one embodiment of the present application. Although the present application provides a method operation step or apparatus structure as shown in the following examples or figures, more or fewer operation steps or module units may be included in the method or apparatus based on routine or non-inventive labor. In the steps or structures where there is no necessary causal relationship logically, the execution order of the steps or the module structure of the apparatus is not limited to the execution order or the module structure shown in the drawings and described in the embodiments of the present application. The described methods or module structures may be implemented sequentially or in parallel (e.g., in a parallel processor or multithreaded environment, or even in a distributed processing environment) in accordance with the embodiments or the method or module structure connection illustrated in the figures when implemented in a practical device or end product application.

Specifically, as shown in fig. 2, the method for managing identity on a blockchain provided in an embodiment of the present application may include the following steps:

step S201, receiving user identity type sent by a client, calling an identity type management intelligent contract, and determining an identification value corresponding to the identity type.

Step S202, the identification value corresponding to the identity type is returned to the client.

The blockchain system is provided with an identity type management intelligent contract and an identity verification management intelligent contract. After receiving the identity type input by the user, the client sends the identity type to the blockchain system, and the blockchain system calls the identity type management intelligent contract deployed therein to determine the identification value corresponding to the identity type. For example, the identity type may include an identity card and a passport, with an identification value of 0 corresponding to the identity card and an identification value of 1 corresponding to the passport. After determining the identification value corresponding to the identity type, the identity type management intelligent contract returns the identification value to the client.

Step S203, receiving an identity registration request sent by a client, calling an identity verification management intelligent contract, and registering a mapping relation between an identity hash value of a user and a blockchain account address of the user.

After receiving the identification value returned by the identity type management intelligent contract, the client hashes the identification value and the identity data input by the user to obtain the identity hash value of the user. The client can determine the account address of the user in the blockchain system, namely the blockchain account address of the user according to the identity hash value of the user. The client may send an identity registration request to the blockchain system. The identity registration request carries an identity hash value and a blockchain account address. The blockchain system invokes an authentication management intelligent contract to register a mapping relationship between the user's identity hash value and the user's blockchain account address. In some embodiments, the authentication management intelligent contract may register a mapping of the user's identity hash value to the user's blockchain account address and/or a mapping of the user's blockchain account address to the user's identity hash value.

In the above-mentioned method for managing identities on a blockchain, the mapping relationship between the user's identity hash value and the user's blockchain account address is uploaded to the blockchain system for registration by calling the identity type management intelligent contract and the identity verification management intelligent contract deployed in the blockchain system, which is favorable for unified management of the user's identity information and also can effectively protect the user privacy.

In some embodiments of the present application, after registering the mapping relationship between the identity hash value of the user and the blockchain account address of the user, the method may further include: receiving a target intelligent contract calling request sent by a client, wherein the target intelligent contract calling request carries a blockchain account address of a user; invoking an identity verification management intelligent contract to determine whether the blockchain account address is legal; under the condition that the block chain account address is legal, calculating a resource value required by calling the target service; the resource data for the resource value is sent to the blockchain account address to enable the user to invoke the target service using the blockchain account address.

After registering the mapping relationship between the user's identity hash value and the user's blockchain account address to the blockchain system by invoking the identity type management smart contract and the identity verification management smart contract, the user may invoke other smart contracts in the blockchain system through the client, thereby invoking other services.

Specifically, the user may send a target smart contract invocation request through the client. The target intelligent contract calling request carries the block chain account address of the user. The authentication management smart contract may determine whether the blockchain account address in the target smart contract invocation request is legitimate. For example, whether the blockchain account address is legitimate may be determined based on historical transaction behavior of the blockchain account. In the case where the authentication management smart contract determines that the blockchain account address is legitimate, the authentication management smart contract calculates a resource value required to invoke the target smart contract.

The target intelligent contract calling request carries identification information corresponding to the target intelligent contract to be called. The authentication management intelligent contract stores a resource data relation table. The resource data relation table records the corresponding relation between the identification information corresponding to the target intelligent contract and the resource value. The authentication management smart contract may determine a resource value required to invoke the target smart contract based on the identification information of the target smart contract. After the authentication management smart contract determines the resource value required to invoke the target smart contract, the resource data of the resource value is sent to the blockchain account address of the user so that the user can invoke the target smart contract using the blockchain address. The resource data may be fuel in a blockchain, and the resource value is a fuel value.

According to the identity management method on the blockchain in the embodiment, whether the blockchain account address of the user is legal or not can be determined through the identity verification management intelligent contract, and the blockchain account address is authorized under the condition that the identity verification management intelligent contract is legal, so that the user can call other intelligent contracts in the blockchain system through the blockchain account address.

The embodiment of the application also provides a method for managing the identity on the blockchain. FIG. 3 is a flow chart illustrating a method of block on-chain identity management in one embodiment of the present application. The blockchain system is provided with an identity type management intelligent contract and an identity verification management intelligent contract. The method for managing identity on blockchain in this embodiment is applied to a client, please refer to fig. 3, and the method may include the following steps.

Step S301, receiving identity type and identity information input by a user.

Step S302, the identity type is sent to an identity type management intelligent contract in the blockchain system.

Step S303, receiving an identification value corresponding to the identity type returned by the identity type management intelligent contract.

Specifically, the client may receive the identity type and identity information entered by the user. The identity type may include various identity types such as identity cards, military officers, drivers' licenses, passports, and the like. The identification data may include various data such as identification numbers, military identification numbers, driver identification numbers, and passport numbers.

After receiving the identity type input by the user, the client can send the identity type to the blockchain system, and the blockchain system invokes the identity type management intelligent contract deployed therein to determine the identification value corresponding to the identity type. For example, the identity type may include an identity card and a passport, with an identification value of 0 corresponding to the identity card and an identification value of 1 corresponding to the passport. After determining the identification value corresponding to the identity type, the identity type management intelligent contract returns the identification value to the client.

Step S304, hash processing is carried out on the identity information and the identification value to obtain an identity hash value.

Step S305, determining the block chain account address corresponding to the user according to the identity hash value.

Step S306, an identity registration request is sent to the authentication management intelligent contract.

After receiving the identification value returned by the identity type management intelligent contract, the client can hash the identity information and the identification value to obtain an identity hash value. The client can determine the account address of the user on the blockchain system according to the identity hash value, namely the blockchain account address corresponding to the user. The client may then send an identity registration request to an authentication management smart contract deployed in the blockchain system. The identity registration request carries an identity hash value and a blockchain account address, and the identity verification management intelligent contract registers a mapping relation between the identity hash value and the blockchain account address. In some embodiments, the authentication management intelligent contract may register a mapping of the user's identity hash value to the user's blockchain account address and/or a mapping of the user's blockchain account address to the user's identity hash value.

In the above-mentioned method for managing identities on a blockchain, the identity type management intelligent contract deployed in the blockchain system is called to obtain the identification value corresponding to the identity type, the identification value and the identity data are hashed to obtain the identity hash value, the blockchain account address of the user is determined according to the identity hash value, and the identity hash value and the blockchain account address are sent to the identity verification management intelligent contract, so that the mapping relationship between the identity hash value of the user and the blockchain account address of the user is uploaded to the blockchain system for registration through the identity verification management intelligent contract, unified management of the identity information of the user is facilitated, and privacy of the user can be effectively protected.

In some embodiments of the present application, determining, according to the identity hash value, the blockchain account address corresponding to the user may include: acquiring the current time and a system random number; and determining the block chain account address corresponding to the user according to the identity hash value, the current time and the system random number. The current time may be a system time of up to milliseconds corresponding to the time of determining the blockchain account address. By the method, the block chain account address is determined according to the current time, the system random number and the identity hash value, so that the uniqueness and the safety of the block chain account address can be ensured.

In some embodiments of the present application, determining the blockchain account address corresponding to the user according to the identity hash value, the current time and the system random number may include: taking the identity hash value, the current time and the system random number as random sources to obtain a private key of a blockchain account corresponding to the user; determining a corresponding public key of the blockchain account through a preset cryptographic algorithm based on the private key of the blockchain account; and deducing the block chain account address corresponding to the user according to the block chain account public key.

Specifically, after the current time and the system random number are obtained, the identity hash value, the current time and the system random number can be used as a random source to obtain a blockchain account private key corresponding to the user. And then, calculating the private key of the blockchain account through a preset cryptographic algorithm to obtain a corresponding public key of the blockchain account. For example, the preset cryptographic algorithm may be an elliptic curve cryptographic algorithm. And deducing the block chain account address corresponding to the user according to the block chain account public key. By the method, the blockchain account address can be determined based on the current time, the system random number and the identity hash value.

In some embodiments of the present application, after sending the identity hash value and the blockchain account address to the authentication management smart contract deployed in the blockchain system, the method may further include: receiving a target intelligent contract calling instruction sent by a user, wherein the target intelligent contract calling instruction is used for calling a target intelligent contract in a blockchain system; and sending a target intelligent contract calling request to a blockchain system, wherein the target intelligent contract calling request comprises a blockchain account address of a user, determining whether the blockchain account is legal by the blockchain system calling identity verification management intelligent contract, calculating a resource value required for calling the target intelligent contract and sending resource data of the resource value to the blockchain account address under the condition that the blockchain account is legal, so that the user can call the target intelligent contract by using the blockchain account address.

Specifically, the user may initiate a target smart contract invocation instruction to the client. The standard intelligent contract calling instruction is used for calling a target intelligent contract in the blockchain system. And the client responds to the call instruction and sends a target intelligent contract call request to the blockchain system. The target intelligent contract calling request carries the block chain account address of the user. An authentication management smart contract may be invoked to determine whether the blockchain account address in the target smart contract invocation request is legitimate. For example, whether the blockchain account address is legitimate may be determined based on historical transaction behavior of the blockchain account. In the case where the authentication management smart contract determines that the blockchain account address is legitimate, the authentication management smart contract calculates a resource value required to invoke the target smart contract.

The target intelligent contract calling request carries identification information corresponding to the target intelligent contract to be called. The authentication management intelligent contract stores a resource data relation table. The resource data relation table records the corresponding relation between the identification information corresponding to the target intelligent contract and the resource value. The authentication management smart contract may determine a resource value required to invoke the target smart contract based on the identification information of the target smart contract. After the authentication management smart contract determines the resource value required to invoke the target smart contract, the resource data of the resource value is sent to the blockchain account address of the user so that the user can invoke the target smart contract using the blockchain address.

The embodiment of the application also provides a method for managing the identity on the blockchain. FIG. 4 is a flow chart illustrating a method of block on-chain identity management in one embodiment of the present application. The blockchain system is provided with an identity type management intelligent contract and an identity verification management intelligent contract. Referring to fig. 4, the method for managing identity on a blockchain in this embodiment may include the following steps.

In step S401, the client receives the identity type and identity information input by the user.

In step S402, the client sends the identity type to the identity type management smart contract in the blockchain system.

In step S403, the identity type management intelligent contract determines an identification value corresponding to the identity type, and returns the identification value to the client.

In step S404, the client receives the identification value, and hashes the identity information and the identification value to obtain an identity hash value.

Step S405, the client determines the block chain account address corresponding to the user according to the identity hash value.

In step S406, the client sends an identity registration request to the authentication management smart contract, where the identity registration request carries an identity hash value and a blockchain account address.

In step S407, the authentication management intelligent contract registers a mapping relationship between the identity hash value and the blockchain account address.

In the above-mentioned method for managing identities on a blockchain, the client obtains the identification value corresponding to the identity type by calling the intelligent contract for managing the identity type deployed in the blockchain system, hashes the identification value and the identity data to obtain an identity hash value, determines the blockchain account address of the user according to the identity hash value, and sends the identity hash value and the blockchain account address to the intelligent contract for managing the identity verification, so that the mapping relationship between the identity hash value of the user and the blockchain account address of the user is uploaded to the blockchain system for registration through the intelligent contract for managing the identity information of the user in a unified manner, and the privacy of the user can be effectively protected.

Based on the same inventive concept, the embodiment of the application also provides an identity management device on a blockchain, which is located in a blockchain system, as described in the following embodiment. Because the principle of the identity management device on the blockchain for solving the problem is similar to that of the identity management method on the blockchain, the implementation of the identity management device on the blockchain can be referred to the implementation of the identity management method on the blockchain, and the repetition is omitted. As used below, the term "unit" or "module" may be a combination of software and/or hardware that implements the intended function. While the means described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and contemplated. FIG. 5 is a block diagram of an embodiment of a blockchain identity management device, as shown in FIG. 5, comprising: the configuration of the determination module 501, the return module 502, and the registration module 503 is described below.

The determining module 501 is configured to receive a user identity type sent by a client, invoke an identity type management intelligent contract, and determine an identification value corresponding to the identity type.

The returning module 502 is configured to return an identification value corresponding to the identity type to the client.

The registration module 503 is configured to receive an identity registration request sent by a client, invoke an identity verification management intelligent contract, and register a mapping relationship between an identity hash value of a user and a blockchain account address of the user, where the identity registration request carries an identity hash value and the blockchain account address, the identity hash value is obtained by performing hash processing on identity information and an identification value input by the user, and the blockchain account address is determined according to the identity hash value.

In some embodiments of the present application, the apparatus further includes a calling module, where the calling module is specifically configured to: after registering a mapping relation between an identity hash value of a user and a blockchain account address of the user, receiving a target intelligent contract calling request sent by a client, wherein the target intelligent contract calling request carries the blockchain account address of the user; invoking an identity verification management intelligent contract to determine whether the blockchain account address is legal; under the condition that the block chain account address is legal, calculating a resource value required by calling the target intelligent contract; the resource data for the resource value is sent to the blockchain account address to enable the user to invoke the target smart contract using the blockchain account address.

In some embodiments of the present application, the registration module is specifically configured to: and registering the mapping relation between the identity hash value of the user and the blockchain account address of the user and/or the mapping relation between the blockchain account address of the user and the identity hash value of the user.

From the above description, it can be seen that the following technical effects are achieved in the embodiments of the present application: the identity type management intelligent contract deployed in the blockchain system is called to obtain an identification value corresponding to the identity type, the identification value and the identity data are subjected to hash processing to obtain an identity hash value, the blockchain account address of the user is determined according to the identity hash value, the identity hash value and the blockchain account address are sent to the identity verification management intelligent contract, so that the mapping relationship between the identity hash value of the user and the blockchain account address of the user is uploaded to the blockchain system for registration through the identity verification management intelligent contract, unified management of the identity information of the user is facilitated, and the privacy of the user can be effectively protected.

The embodiment of the application further provides a computer device, specifically, referring to a schematic diagram of a computer device composition structure of the method for managing identity on a blockchain provided by the embodiment of the application shown in fig. 6, where the computer device specifically may include an input device 61, a processor 62, and a memory 63. Wherein the memory 63 is configured to store processor-executable instructions. The processor 62, when executing the instructions, performs the steps of the method for identity management on a blockchain described in any of the embodiments above.

In this embodiment, the input device may specifically be one of the main apparatuses for exchanging information between the user and the computer system. The input device may include a keyboard, mouse, camera, scanner, light pen, handwriting input board, voice input device, etc.; the input device is used to input raw data and a program for processing these numbers into the computer. The input device may also acquire and receive data transmitted from other modules, units, and devices. The processor may be implemented in any suitable manner. For example, the processor may take the form of, for example, a microprocessor or processor, and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro) processor, logic gates, switches, an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), a programmable logic controller, and an embedded microcontroller, among others. The memory may in particular be a memory device for storing information in modern information technology. The memory may comprise a plurality of levels, and in a digital system, may be memory as long as binary data can be stored; in an integrated circuit, a circuit with a memory function without a physical form is also called a memory, such as a RAM, a FIFO, etc.; in the system, the storage device in physical form is also called a memory, such as a memory bank, a TF card, and the like.

In this embodiment, the specific functions and effects of the computer device may be explained in comparison with other embodiments, and will not be described herein.

The embodiment of the application also provides a computer storage medium based on the identity management method on the blockchain, wherein the computer storage medium stores computer program instructions, and the computer program instructions realize the steps of the identity management method on the blockchain in any embodiment when being executed.

In the present embodiment, the storage medium includes, but is not limited to, a random access Memory (Random Access Memory, RAM), a Read-Only Memory (ROM), a Cache (Cache), a Hard Disk (HDD), or a Memory Card (Memory Card). The memory may be used to store computer program instructions. The network communication unit may be an interface for performing network connection communication, which is set in accordance with a standard prescribed by a communication protocol.

In this embodiment, the functions and effects of the program instructions stored in the computer storage medium may be explained in comparison with other embodiments, and are not described herein.

In accordance with one aspect of the invention, an embodiment of the invention discloses:

A1. An identity management method on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the method is applied to the blockchain system and comprises the following steps:

receiving a user identity type sent by a client, calling the identity type management intelligent contract, and determining an identification value corresponding to the identity type;

returning the identification value corresponding to the identity type to the client;

and receiving an identity registration request sent by a client, calling the identity verification management intelligent contract, and registering a mapping relation between an identity hash value of a user and a blockchain account address of the user, wherein the identity registration request carries the identity hash value and the blockchain account address, the identity hash value is obtained by carrying out hash processing on identity information input by the user and the identification value, and the blockchain account address is determined according to the identity hash value.

A2. The method of clause A1, after registering the mapping relationship between the identity hash value of the user and the blockchain account address of the user, further comprising:

receiving a target intelligent contract calling request sent by a client, wherein the target intelligent contract calling request carries a blockchain account address of a user;

Invoking the identity verification management intelligent contract to determine whether the blockchain account address is legal;

under the condition that the blockchain account address is legal, calculating a resource value required by calling the target intelligent contract;

and sending the resource data of the resource value to the blockchain account address so that a user can call the target intelligent contract by using the blockchain account address.

A3. The method of clause A1, registering a mapping relationship between the identity hash value of the user and the blockchain account address of the user, comprising:

and registering the mapping relation between the identity hash value of the user and the blockchain account address of the user and/or the mapping relation between the blockchain account address of the user and the identity hash value of the user.

B4. An identity management method on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in a blockchain system, and the method is applied to a client and comprises the following steps:

receiving identity types and identity information input by a user;

sending the identity type to an identity type management intelligent contract in the blockchain system;

receiving an identification value corresponding to the identity type returned by the identity type management intelligent contract;

Carrying out hash processing on the identity information and the identification value to obtain an identity hash value;

determining a block chain account address corresponding to the user according to the identity hash value;

and sending an identity registration request to the identity verification management intelligent contract, wherein the identity registration request carries the identity hash value and the blockchain account address, and the identity verification management intelligent contract registers the mapping relation between the identity hash value and the blockchain account address.

B5. The method according to clause B4, determining the blockchain account address corresponding to the user according to the identity hash value, comprising:

acquiring the current time and a system random number;

and determining the block chain account address corresponding to the user according to the identity hash value, the current time and the system random number.

B6. The method according to clause B5, determining the blockchain account address corresponding to the user according to the identity hash value, the current time and the system random number, comprising:

taking the identity hash value, the current time and the system random number as random sources to obtain a block chain account private key corresponding to the user;

Determining a corresponding public key of the blockchain account through a preset cryptographic algorithm based on the private key of the blockchain account;

and deducing the block chain account address corresponding to the user according to the block chain account public key.

B7. The method of clause B4, after sending the identity hash value and the blockchain account address to an authentication management smart contract deployed in the blockchain system, further comprising:

receiving a target intelligent contract calling instruction sent by a user, wherein the target intelligent contract calling instruction is used for calling a target intelligent contract in the blockchain system;

and sending a target intelligent contract calling request to the blockchain system, wherein the target intelligent contract calling request comprises a blockchain account address of the user, the blockchain system calls the identity verification management intelligent contract to determine whether the blockchain account is legal, and under the condition that the blockchain account is legal, calculating a resource value required for calling the target intelligent contract and sending resource data of the resource value to the blockchain account address, so that the user can call the target intelligent contract by using the blockchain account address.

C8. An identity management method on a blockchain, an identity type management intelligent contract and an identity verification management intelligent contract are deployed in a blockchain system, the method comprising:

the method comprises the steps that a client receives identity types and identity information input by a user;

the client sends the identity type to an identity type management intelligent contract in the blockchain system;

the identity type management intelligent contract determines an identification value corresponding to the identity type and returns the identification value to the client;

the client receives the identification value and carries out hash processing on the identity information and the identification value to obtain an identity hash value;

the client determines a blockchain account address corresponding to the user according to the identity hash value;

the client sends an identity registration request to the identity verification management intelligent contract, wherein the identity registration request carries the identity hash value and the blockchain account address;

the authentication management intelligent contract registers a mapping relationship between the identity hash value and the blockchain account address.

D9. An identity management device on a blockchain, a blockchain system having deployed therein an identity type management smart contract and an identity verification management smart contract, the device being located in the blockchain system, comprising:

The determining module is used for receiving the user identity type sent by the client, calling the identity type management intelligent contract and determining an identification value corresponding to the identity type;

the return module is used for returning the identification value corresponding to the identity type to the client;

the registration module is used for receiving an identity registration request sent by a client, calling the identity verification management intelligent contract, and registering a mapping relation between an identity hash value of a user and a blockchain account address of the user, wherein the identity registration request carries the identity hash value and the blockchain account address, the identity hash value is obtained by carrying out hash processing on identity information input by the user and the identification value, and the blockchain account address is determined according to the identity hash value.

D10. The apparatus of clause D9, further comprising a calling module for:

after registering a mapping relation between an identity hash value of a user and a blockchain account address of the user, receiving a target intelligent contract calling request sent by a client, wherein the target intelligent contract calling request carries the blockchain account address of the user;

D11. The apparatus of clause D9, wherein the registration module is specifically configured to:

E12. An identity management device on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, the device is located at a client, and comprises:

the identity information receiving module is used for receiving the identity type and the identity information input by the user;

the identity type sending module is used for sending the identity type to an identity type management intelligent contract in the blockchain system;

the identification value receiving module is used for receiving an identification value corresponding to the identity type returned by the identity type management intelligent contract;

The hash processing module is used for carrying out hash processing on the identity information and the identification value to obtain an identity hash value;

the address determining module is used for determining the block chain account address corresponding to the user according to the identity hash value;

the request sending module is used for sending an identity registration request to the identity verification management intelligent contract, wherein the identity registration request carries the identity hash value and the blockchain account address, and the identity verification management intelligent contract registers the mapping relation between the identity hash value and the blockchain account address.

E13. The apparatus according to clause E12, wherein the address determination module is specifically configured to:

the acquisition unit is used for acquiring the current time and the system random number;

and the determining unit is used for determining the block chain account address corresponding to the user according to the identity hash value, the current time and the system random number.

E14. The apparatus according to clause E13, wherein the determining unit is specifically configured to:

E15. The apparatus of clause E12, further comprising a calling module to:

after the identity hash value and the blockchain account address are sent to an identity verification management intelligent contract deployed in the blockchain system, receiving a target intelligent contract calling instruction sent by a user, wherein the target intelligent contract calling instruction is used for calling the target intelligent contract in the blockchain system;

F16. A computer device comprising a processor and a memory for storing processor-executable instructions which when executed implement the steps of the method of any of clauses A1 to A3.

F17. A computer device comprising a processor and a memory for storing processor-executable instructions which when executed implement the steps of the method of any of clauses B4 to B7.

G18. A computer readable storage medium having stored thereon computer instructions which when executed implement the steps of the method of any of clauses A1 to A3.

G19. A computer readable storage medium having stored thereon computer instructions which when executed implement the steps of the method of any of clauses B4 to B7.

It will be apparent to those skilled in the art that the modules or steps of the embodiments of the application described above may be implemented in a general purpose computing device, they may be concentrated on a single computing device, or distributed across a network of computing devices, they may alternatively be implemented in program code executable by computing devices, so that they may be stored in a storage device for execution by computing devices, and in some cases, the steps shown or described may be performed in a different order than what is shown or described, or they may be separately fabricated into individual integrated circuit modules, or multiple modules or steps of them may be fabricated into a single integrated circuit module. Thus, embodiments of the present application are not limited to any specific combination of hardware and software.

It is to be understood that the above description is intended to be illustrative, and not restrictive. Many embodiments and many applications other than the examples provided will be apparent to those of skill in the art upon reading the above description. The scope of the application should, therefore, be determined not with reference to the above description, but instead should be determined with reference to the appended claims, along with the full scope of equivalents to which such claims are entitled.

The foregoing description is only a preferred embodiment of the present application and is not intended to limit the present application, and various modifications and variations may be made to the embodiment of the present application by those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present application should be included in the protection scope of the present application.

Claims

1. An identity management method on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the method is applied to the blockchain system and comprises the following steps:

2. The method of claim 1, further comprising, after registering the mapping between the user's identity hash value and the user's blockchain account address:

3. The method of claim 1, wherein registering the mapping between the user's identity hash value and the user's blockchain account address comprises:

4. An identity management method on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the method is applied to a client and comprises the following steps:

receiving identity types and identity information input by a user;

5. The method of claim 4, wherein determining the blockchain account address corresponding to the user from the identity hash value comprises:

acquiring the current time and a system random number;

6. The method of claim 5, wherein determining the blockchain account address corresponding to the user based on the identity hash value, the current time, and the system random number comprises:

7. The method of claim 4, further comprising, after sending the identity hash value and the blockchain account address to an authentication management smart contract deployed in the blockchain system:

8. An identity management method on a blockchain, wherein an identity type management intelligent contract and an identity verification management intelligent contract are deployed in the blockchain system, and the method comprises the following steps:

9. An identity management device on a blockchain, wherein an identity type management smart contract and an identity verification management smart contract are deployed in the blockchain system, the device being located in the blockchain system, comprising:

10. The apparatus of claim 9, further comprising a calling module to:

11. The apparatus of claim 9, wherein the registration module is specifically configured to:

12. An identity management device on a blockchain, wherein an identity type management smart contract and an identity verification management smart contract are deployed in the blockchain system, and the device is located at a client and comprises:

13. The apparatus of claim 12, wherein the address determination module is specifically configured to:

14. The apparatus according to claim 13, wherein the determining unit is specifically configured to:

15. The apparatus of claim 12, further comprising a calling module to:

16. A computer device comprising a processor and a memory for storing processor-executable instructions, which when executed by the processor implement the steps of the method of any one of claims 1 to 3.

17. A computer device comprising a processor and a memory for storing processor executable instructions, wherein the processor, when executing the instructions, implements the steps of the method of any one of claims 4 to 7.

18. A computer readable storage medium having stored thereon computer instructions, which when executed, implement the steps of the method of any of claims 1 to 3.

19. A computer readable storage medium having stored thereon computer instructions, which when executed, implement the steps of the method of any of claims 4 to 7.