WO2020073546A1

WO2020073546A1 - Processing method for digital certificate and related apparatus

Info

Publication number: WO2020073546A1
Application number: PCT/CN2019/070234
Authority: WO
Inventors: 陆陈一帆; 霍云; 冯承勇
Original assignee: 深圳壹账通智能科技有限公司
Priority date: 2018-10-09
Filing date: 2019-01-03
Publication date: 2020-04-16
Also published as: CN109547206B; CN109547206A; SG11201913856UA

Abstract

Disclosed are a processing method for a digital certificate, and an apparatus. The method comprising: a CA of a first participant of a blockchain network recording a public key of the CA of the first participant in the blockchain network; when the CA of the first participant receives a certificate authorization request of any user, confirming, according to user identity information carried in the certificate authorization request, whether the user is a user of the CA of the first participant; if so, acquiring a public key of the user from the certificate authorization request, and acquiring, according to a ring signature certificate issuing rule, public keys of CAs of any N second participants from the blockchain network, wherein N is equal to the set number of public keys in the ring signature certificate issuing rule; and the CA of the first participant performing, according to the public key and a private key of the CA of the first participant and public keys of CAs of the N second participants, ring signature on the user identity information and the public key of the user and generating a digital certificate, and sending same to the user. Using the embodiments of the present application can improve the identity privacy of an issuer of a digital certificate.

Description

Digital certificate processing method and related device

This application requires the priority of the Chinese patent application filed on October 9, 2018 with the Chinese Patent Office, application number 201811175201.X, and the application name as "Digital Certificate Processing Method and Related Devices", the entire contents of which are incorporated by reference in In this application.

Technical field

This application relates to the field of blockchain technology, in particular to a digital certificate processing method and related devices.

Background technique

At present, many alliance chain applications have begun to introduce digital certificate authorities (Certificate Authorities, CA) to issue digital certificates for participants on the blockchain. Since many participants (such as most banks) have their own CA, they will require that they can issue digital certificates for their customers through their own CA. For example, Bank A has its own CA (such as CA-A), Bank B has its own CA (such as CA-B), Bank C has its own CA (such as CA-C), etc. Each bank can use its own CA issues digital certificates for its customers. In the alliance chain network, any participant such as Bank A, Bank B, and Bank C will recognize the digital certificate issued by the CA of other participants to its customers. However, since all the participants on the alliance chain can also use a customer's digital certificate to determine which customer's client of the customer, for example, Bank B can determine the bank of the enterprise through the issuer of an enterprise's digital certificate. customer of. For example, the digital certificate of the enterprise is issued by Bank A, and Bank B can determine that the enterprise is a customer of Bank A and so on. At present, this method of issuing digital certificates on the alliance chain leads to the fact that the transaction information of the alliance chain transaction is completely open to all parties on the alliance chain. The identity of the two parties of the transaction is exposed, it is difficult to meet the transaction needs of each party, and the applicability is poor. .

Summary of the invention

The embodiments of the present application provide a digital certificate processing method and related device, which can realize the anonymous issuance of the digital certificate, enhance the identity privacy of the issuer of the digital certificate, and have strong applicability.

In a first aspect, an embodiment of the present application provides a digital certificate issuance method. The above method is applicable to a digital certificate issuer. The above method includes:

The certificate authority CA of the first party in the blockchain network records the CA public key of the first party in the blockchain network, and the first party is the issuer of the digital certificate in the blockchain network At least one CA public key of the second party is also recorded in the above-mentioned blockchain network, and the above-mentioned second party is a party other than the above-mentioned second party in the above-mentioned blockchain network;

When the CA of the first participant receives a certificate authorization request from any user, it determines whether the user is a user of the CA of the first participant according to the user identity information carried in the certificate authorization request;

If the issuer's CA confirms that the user is a user of the first participant's CA, it obtains the user's public key from the certificate authorization request, and according to the preset ring signature certificate issuance rules, from the block Obtain any N public CA keys of the above-mentioned second parties from the chain network, where N is equal to the number of public keys set in the above ring signing certificate issuance rules;

The CA of the issuer performs a ring signature on the user identity information and public key of the user and forms a digital certificate based on the public key and private key of the CA of the first participant and the CA public keys of the N second participants And send the above digital certificate to the above users.

In a second aspect, an embodiment of the present application provides a digital certificate verification method. The above method is applicable to a digital certificate verification party. The above method includes:

When the verifier obtains any signature transaction in the blockchain network, the verifier obtains the digital certificate of the initiator of the signature transaction; the initiator of the signature transaction may be one of the participants in the blockchain network, The above-mentioned blockchain network records the CA public key of the certification authority of each participant, including the initiator of the above transaction;

The verifier obtains the public key information of the ring signature of the digital certificate from the digital certificate based on the preset ring signing certificate issuance rule, and determines all the public keys corresponding to the ring signature of the digital certificate according to the public key information. All the public keys corresponding to the signatures are the CA public keys of multiple participants in the blockchain network, and the number of public keys corresponding to the ring signature is equal to the number of public keys set in the rules for issuing the ring signature certificate;

The verifier verifies the signature of the signed transaction based on all public keys corresponding to the ring signature.

In a third aspect, an embodiment of the present application provides a digital certificate issuance device. The above device is suitable for a certificate issuing authority CA of a digital certificate issuer. The above device includes:

The recording unit is used to record the CA public key of the first party into the blockchain network, the first party is the issuer of the digital certificate in the blockchain network, and the blockchain network also records At least one CA public key of a second participant, the second participant is a participant other than the first participant in the blockchain network;

The confirmation unit is configured to confirm whether the user is a user of the CA of the first participant according to the user identity information carried in the certificate authorization request when receiving a certificate authorization request from any user;

The obtaining unit is configured to obtain the public key of the user from the certificate authorization request when the confirmation unit confirms that the user is the user of the CA of the first participant, and according to the preset ring signing certificate issuance rules, from Obtain any N public CA keys of the above-mentioned second parties from the above-mentioned blockchain network, where N is equal to the number of public keys set in the above-mentioned ring signature certificate issuance rules;

An issuance unit for performing ring signature on the user identity information and public key of the user and forming a digital certificate based on the public key and private key of the CA of the first party and the CA public keys of the N second parties And send the above digital certificate to the above users.

According to a fourth aspect, an embodiment of the present application provides a digital certificate verification device. The above device is suitable for a digital certificate verification party. The above device includes:

The obtaining unit is used to obtain the digital certificate of the initiator of the above-mentioned signature transaction when obtaining any signature transaction in the blockchain network; the initiator of the above-mentioned signature transaction may be one of the participants in the above-mentioned blockchain network, The above-mentioned blockchain network records the CA public key of the certification authority of each participant, including the initiator of the above transaction;

A determining unit, configured to acquire the public key information of the ring signature of the digital certificate from the digital certificate based on preset ring signature certificate issuance rules, and determine all public keys corresponding to the ring signature of the digital certificate based on the public key information, All public keys corresponding to the ring signature are the CA public keys of multiple participants in the blockchain network, and the number of public keys corresponding to the ring signature is equal to the number of public keys set in the rules for issuing the ring signature certificate;

The verification unit is configured to verify the signature of the signature transaction based on all public keys corresponding to the ring signature determined by the determination unit.

According to a fifth aspect, an embodiment of the present application provides a terminal, the terminal includes a processor, a memory, and / or a transceiver, and the processor, the memory, and / or the transceiver are connected to each other, wherein the memory is used to store a computer program, The computer program includes program instructions, and the processor and / or transceiver is configured to call the program instructions to perform the method provided in the first aspect and any possible implementation manner of the first aspect, or the second aspect. And the method provided in any possible implementation manner of the second aspect.

According to a sixth aspect, an embodiment of the present application provides a computer-readable storage medium, where the computer-readable storage medium stores a computer program, and the computer program includes program instructions, which when executed by a processor causes the processor to execute The method provided by the foregoing first aspect and any possible implementation manner of the first aspect, or the foregoing second aspect and any possible implementation manner of the second aspect.

Based on the embodiments of the present application, unconditional anonymity of any participant as a digital certificate issuer can be realized, and the digital certificate issuer can anonymously issue digital certificates to its users, which can avoid the identity leakage of the digital certificate issuer and avoid blocks The other participants in the chain network are informed of the issuer of the digital certificate, which can enhance the identity privacy of the issuer of the digital certificate, ensure the privacy of the transaction information of the issuer of the digital certificate, and have strong applicability.

BRIEF DESCRIPTION

In order to more clearly explain the technical solutions of the embodiments of the present application, the drawings required in the description of the embodiments will be briefly introduced below.

FIG. 1 is a schematic diagram of a general process of digital certificate issuance provided by an embodiment of the present application;

2 is a schematic flowchart of a method for processing a digital certificate provided by an embodiment of the present application;

3 is a schematic structural diagram of a digital certificate issuance device provided by an embodiment of the present application;

4 is a schematic structural diagram of a digital certificate verification device provided by an embodiment of the present application;

5 is a schematic structural diagram of a terminal provided by an embodiment of the present application;

6 is another schematic structural diagram of a terminal provided by an embodiment of the present application.

detailed description

The technical solutions in the embodiments of the present application will be described clearly and completely with reference to the drawings in the embodiments of the present application.

The processing method of the digital certificate provided in the embodiment of the present application (including the method of issuing the digital certificate and the verification method of the digital certificate, for convenience of description, hereinafter referred to as the method provided in the embodiment of the present application) and related devices can be applied to banks, insurance, securities , Business associations, group companies, upstream and downstream enterprises and other business transactions and / or enterprise information processing and other application scenarios, specific can be determined according to the actual application scenarios, no restrictions are made here. Optionally, the above-mentioned institutions such as banks, insurance, securities, business associations, group enterprises, and upstream and downstream enterprises can serve as multiple participants in the same alliance chain network. Optionally, the above banks, insurance, securities, business associations, group companies, and upstream and downstream enterprises can also have their own alliance chain network. In the above banks, insurance, securities, business associations, group enterprises, and upstream and downstream enterprises, etc. In their respective alliance chain networks, customers and / or employees of various institutions may be participants in the alliance chain network, which can be determined according to actual application scenarios, and no limitation is made here. For the convenience of description, the following will take the above banks, insurance, securities, business associations, group companies and upstream and downstream enterprises and other institutions as examples of multiple participants in the same alliance chain network. In order to facilitate understanding, the alliance chain and digital certificate involved in the method provided in the embodiments of the present application will be briefly described below.

1. Alliance Chain

Blockchain was born in the era of mobile Internet. The above-mentioned banks, insurance, securities, business associations, group companies and upstream and downstream enterprises are generally IT-based and Internet-based organizations and / or institutions. The processing efficiency of notarization, settlement and clearing business and value exchange in the industrial chain of the institutional circle is very helpful. However, the processing performance, privacy protection, and compliance of traditional blockchains (such as public chains) cannot meet the business needs of these institutions. The use of public chains to handle notarization, settlement and settlement services, or value exchange services will subvert these. The organization's existing business model and inherent benefits are at greater risk. Therefore, based on the business needs of the above institutions, a blockchain system with better privacy protection, the alliance chain, came into being. The alliance chain only targets members of a certain group and limited third parties, and internally designates multiple pre-selected nodes as bookkeepers. The generation of each block is determined jointly by all pre-selected nodes, and other access nodes can participate in transactions , But just ask about the billing process, other third parties can make limited queries through the application programming interface (API) opened by the alliance chain. With the access mechanism, the transaction performance between the various parties in the alliance chain network can be improved, and the privacy is stronger.

2. Digital Certificate

Digital certificate is a string of numbers used to identify the identity information of each communication party in Internet communication. The emergence of digital certificate provides a way for Internet communication to verify the identity of each communication party's communication entity on the Internet. A digital certificate is not a digital ID card, but a stamp or seal (or a signature added to each communication entity's digital ID card) affixed to each communication entity's digital ID card by the identity authentication agencies of each communication entity. The digital certificate is issued by an authority, CA, and can be used on the Internet to identify the identity of each communication entity. A digital certificate is a file digitally signed by a CA, which contains the holder information of the public key (public key for short) and the file of the public key. The simplest digital certificate can contain a public key, the name of the holder of the public key and the digital signature of the certificate authority, and the digital certificate is only valid for a specific period of time.

A digital certificate is an authoritative electronic document. It can be issued by an authoritative and impartial third-party organization, that is, a CA (such as a CA company in various places in China), or an enterprise-level CA (such as CA-A of Bank A ) To issue. Digital certificates can be used to: send secure e-mails, visit secure sites, online securities transactions, online bidding and procurement, online offices, online insurance, online taxation, online contracting and online banking and other secure electronic transaction processing and secure electronic transaction signatures. There are many numbers and English stored in the digital certificate. When the digital certificate is used for identity authentication, it will randomly generate a 128-bit identity code. Each digital certificate can generate a corresponding number, but it is impossible for the same number every time, thereby ensuring data The confidentiality of transmission is equivalent to generating a complex password. The digital certificate binds the public key and the true identity of the public key holder. It is similar to the resident ID card in real life. The difference is that the digital certificate is no longer a paper certificate, but a piece of digital certificate. Owner's identity information and electronic data issued by the certification center can be more easily and flexibly used in e-commerce and e-government.

Referring to FIG. 1, FIG. 1 is a schematic diagram of a general process of digital certificate issuance provided by an embodiment of the present application. The digital certificate issuance process provided by the embodiment of the present application generally includes the following steps S11 and S12:

S11. The user sends a certificate authorization request to the organization's CA.

In some feasible implementation manners, when a user (such as a customer of a bank, insurance, or enterprise) requests a transaction with an organization (such as a bank, insurance, or enterprise, etc.), it can first generate its own key pair. The pair includes the public key and the private key, and transmits the public key and some user identity information to the organization's CA by sending a certificate authorization request to the organization's CA. In other words, the certificate authorization request sent by the user to the organization's CA may include part of the user's identity information and the user's public key to request the organization's CA to sign the user's user identity information and public key and issue a digital certificate.

S12, the organization's CA verifies the user's identity and issues a digital certificate.

In some feasible implementation manners, the institution that the user requests to sign the transaction can verify the identity of the user through the institution's CA. When the organization's CA verifies the user's identity (that is, the user is its own customer), it can determine the user identity information included in the certificate authorization request sent by the user to confirm that the certificate authorization request is indeed sent by its own customer (ie, user). Come. When the organization's CA confirms that the certificate authorization request is sent by the user, it sends a digital certificate to the user. The digital certificate contains the user's user identity information and the user's public key, as well as the organization's CA's signature information. The user can use the digital certificate issued by the organization's CA to sign the relevant transaction. Digital certificates issued by CAs of various institutions to their customers are issued by independent certificate issuing institutions (ie CAs) of each institution. Digital certificates are different, each certificate can provide different levels of credibility, and each customer user (ie, user) of each institution can obtain their own digital certificate from the CA of each institution.

Digital certificates use a public key system, which uses a pair of matching keys for digital signature and verification. Each user sets a specific private key (that is, a private key) known only to himself, and based on the private key, digital signatures of transaction information for transactions with institutions can be performed. At the same time, the user can set a corresponding public key (that is, the public key) and disclose it by himself, shared by a group of users, and used for signature verification of transaction information. Public key technology solves the management problem of key issuance. Users can publicly hold the public key they hold while retaining the private key they hold. The user can also use his own private key to process the transaction information. Since the private key is owned only by himself, a file that cannot be generated by others is generated, and a digital signature is formed. The use of digital signatures can ensure that the transaction information is sent by the sender's own signature, and the sender cannot deny or be difficult to deny. At the same time, it can also ensure that the transaction information has not been modified since the sender signed it until the receiver received it. The document is a real document, which ensures that the transaction information cannot be tampered with.

Based on the characteristics of the aforementioned alliance chain and the characteristics of digital certificates, embodiments of the present application provide a digital certificate processing method and related device based on distributed digital certificates, including a digital certificate issuance method and device, and a digital certificate verification method And device, which can issue digital certificates to customers of any participant in the alliance chain network, and can determine all public keys corresponding to the ring signature of the digital certificate based on the digital certificate of the initiator of any signed transaction to be based on the digital certificate All public keys corresponding to the ring signature verify the transaction signature. The CAs of each participant in the alliance chain can issue digital certificates with their own customers based on the digital certificate issuance method provided in this embodiment of the present application, to realize the CA of any participant as the signer (that is, the issuer of the digital certificate) Unconditional anonymity, which can avoid the leakage of the identity of the CA of the digital certificate issuer and prevent other participants in the alliance chain network from learning the customer information of the CA of the digital certificate issuer, thereby ensuring the transaction information of the digital certificate issuer. The privacy guarantees the security of the issuer's customer information and is more applicable. For details, please refer to the implementation methods provided in the following embodiments. Specifically, the method provided in the embodiment of the present application can record the public keys of all CAs in the alliance chain network that can be recognized as participants (or non-participants) through the alliance chain network (for example, the CA-A of Bank A and the CA of Bank B -B, ...). When any organization's CA wants to issue a digital certificate for one of its customers (or user instructions), the organization's CA will issue a digital certificate to the customer with a ring signature (traditionally, the CA uses its own private key pair The digital certificate issued to its customers to sign), so that the third party can not judge which organization's CA issued the digital certificate. In other words, other third parties cannot judge which customer of the CA of the authorized participant in the alliance chain network, so that the digital certificate of each authorized participant's CA can be sent anonymously, thereby protecting each of the alliance chain network. The CA of the recognized participant issues the privacy of the digital certificate for its customers, which can improve the identity privacy of the CA of the issuer of the digital certificate, thereby enhancing the applicability of the issuing method of the data certificate.

2 is a schematic flowchart of a digital certificate processing method provided in an embodiment of the present application. Referring to FIG. 2, the CA of any participant included in the alliance chain network uses ring signatures to issue digital certificate signatures to its customers and any verification party to verify any signature transaction for implementation. Please refer to the following steps S21 to S24 The implementation provided. For the convenience of description, the following will take the implementation of the CA of any participant to issue digital certificates for its customers (or users) as an example, where any of the participants can be the issuer (that is, the first participant) is Examples. In other words, the issuer here refers to any participant in the alliance chain network that needs to issue a digital certificate for its own users. Correspondingly, any organization that verifies the digital certificate can use the verification party as an example to explain. It is determined according to the actual application scenario, and is not limited here.

S21, the issuer's CA records its public key into the blockchain network.

In some feasible implementation manners, the CA (or the participant CA for short) of any recognized participant (referred to as the participant hereinafter for convenience) in the alliance chain network (that is, the blockchain network) generates a public key and a The private key, and can record its own information (that is, the participant CA) and the public key to the alliance chain network through Smart Crypto Contract (SCC). For example, for multiple banks that are recognized, each bank ’s CA can generate a public key and a private key, and the public key generated by each bank ’s CA can be disclosed by each bank ’s CA itself and is fed by the consortium chain network. Record the public key of each bank's CA (that is, the public key of each bank's CA). The private key of each bank's CA is known by each bank's CA. In other words, assuming that the issuer is one of the participants in the alliance chain network (assuming it is the first participant), the issuer is recorded in the alliance chain network (for ease of description, the issuer of the digital certificate in the blockchain network The first participant can be used as an example to illustrate the public key of the CA (or CA public key for short), and also records other parties other than the issuer (for convenience of description, in addition to digital certificates in the blockchain network Any participant other than the issuer can use the second participant as an example to illustrate the CA public key.

It can be understood that the CA public keys of each participant here are recorded in the alliance chain network, so any participant in the alliance chain can know the CA public keys of other participants in the alliance chain network. The CA in any participant (such as the first participant, that is, the issuer) needs to be its own customer (the customer of the issuer's CA, and also the customer of the issuer. For the convenience of description, the following is the customer of the issuer's CA For example, when signing a digital certificate, you can use the ring signature method to obtain the CA public key of one or more participants from the alliance chain network, and combine your own public key and private key (that is, the issuer's CA's public key and private key) issue digital certificates for their customers. For details, please refer to the following steps.

S22. When the CA of the issuer receives a certificate authorization request from any user, it determines whether the user is his own according to the user identity information carried in the certificate authorization request.

In some feasible implementation manners, when any user (such as any customer of Bank A) requests a transaction with an institution (such as Bank A), the bank ’s CA (for convenience of description, the issuer ’s The CA is described as an example of the CA of Bank A). The method of sending a certificate authorization request (or authentication request) transmits the public key and user identity information to the CA of the issuer. In other words, the certificate authorization request sent by the user to the issuer's CA may include the user's identity information and the user's public key to request the issuer's CA to sign the user's user identity information and public key and issue a digital certificate to user. The issuer's CA can verify the user's identity based on the user identity information included in the certificate authorization request (that is, verify whether the user is its own customer), that is, the issuer's CA can perform the user identity information included in the certificate authorization request sent by the user Confirm to confirm that the certificate authorization request is indeed sent by its own client. After the issuer's CA determines that the user sending the certificate authorization request is its own user (that is, the user of the issuer's CA, that is, the user of the first participant's CA), it can issue a digital certificate to the user.

S23, if the issuer's CA confirms that the above user is its own user, it obtains the user's public key from the certificate authorization request, and obtains any other N number from the blockchain network according to the preset ring signing certificate issuance rules The CA public key of the participant.

In some feasible implementation manners, the ring signature certificate issuance rules of each participant (that is, the rules for issuing digital certificates by means of ring signature) can be formulated by the CAs of each participant, and each CA of the participant can be based on its own needs , Arbitrarily choose one or more (for convenience of description can be assumed to be N) third-party public key, combined with its own public key and private key to complete the ring signature. Here, for any CA of any participant in any alliance chain network, the N third-party public keys arbitrarily selected may be CAs of any N participants in the alliance chain network except the participant The CA public key recorded in the alliance chain network. In other words, in the rules for issuing ring signature certificates issued by any participant, the number of public keys used by the participant's CA to issue digital certificates to its users can be set by the participant's CA. Optionally, the CAs of the various parties in the alliance chain network can jointly formulate the ring signature certificate issuance rules and write them into the alliance chain network, including but not limited to the number of public keys and specifications required for ring signatures. Network range settings, no restrictions here.

Optionally, in some feasible implementation manners, the ring signature certificate issuance rules formulated by each participant can be written into the alliance chain network, including but not limited to the number of public keys and specifications required for ring signature (that is, the X509 format The specifications of the digital certificate, such as the digital certificate format (X509) and / or the preset field in X509 used to record the public key information of the ring signature, can be set in advance within the scope of the alliance chain network. For example, the CA of each participant in the alliance chain network (such as the issuer's CA) uses ring signatures to sign the number of public keys required for its users to issue digital certificates, and the specification of X509 format digital certificates (or It is called the ring signature certificate issuance specification), etc., which can be set in the range of the alliance chain network in advance, which can help the verifier to verify and verify the transactions in the alliance chain network based on the above specifications and other information. Among them, the preset fields used to record the public key information of the ring signature in the above X509 include but are not limited to the issuer label field and / or the extension field in the digital certificate format, which can be determined according to the actual application scenario, without limitation .

Optionally, the above X509 includes an extension field (Extension), which can be used to record all public keys corresponding to the ring signature of the digital certificate (such as the CA public keys of N parties corresponding to the ring signature), and / or Public key information such as the identification of all public keys corresponding to the ring signature (such as the CA public keys of the N participants corresponding to the ring signature). The verifier determines all public keys corresponding to the ring signature based on all the public keys recorded in the extension field included in the above X509, and / or the identification of all public keys searches the corresponding public key from the alliance chain network to correspond based on the ring signature All of the public keys of the verify the signature of the transaction.

Optionally, in some feasible implementation manners, the consortium chain network may also divide the CA public keys of the participants in the consortium chain network into different public key groups, and a group identifier may be formulated for each public key group. Among them, the group identifier of each group can help the verifier to find the public key group corresponding to the ring signature (for convenience of description, the target group can be used as an example for illustration), and then the public key in the public key group corresponding to the ring signature can be determined The public key corresponding to the ring signature, so that the information of the CA to which each public key belongs can be obtained. The verifier determines the public key information of the ring signature based on the extension field of X509 above, where the public key information of the ring signature includes the group identification, and then can be recorded from the alliance chain network based on the group identifier included in the digital certificate. The target group is determined from each public key group, so that all public keys included in the target group can be determined as all public keys corresponding to the ring signature, and the transaction signature can be verified based on all the public keys corresponding to the ring signature.

S24. The issuer's CA performs ring signature on the user's user identity information and public key and forms a digital certificate based on its public key, private key, and any other N participants' CA public keys, and sends the digital certificate to the user.

Wherein, N is equal to the number of public keys set in the ring signing certificate issuance rule preset in the above step S23.

In some feasible implementation manners, when the CA of any participant in the alliance chain network (ie, issuer, such as Bank A) is ready to issue digital certificates to its own customers (ie, users, such as Enterprise 1), the issuer The CA will use its own public key and private key (such as the public key and private key of the bank A's CA), as well as the CA public keys of any other multiple parties in the alliance chain network (such as the CA public keys of other banks, assuming It is N public keys. It can be understood that the CA public keys of the above multiple parties are recorded in the alliance chain network.) Sign the identity information and public key of enterprise 1 and form a digital certificate. Set the field to carry the public key information of the ring signature of the digital certificate. For example, suppose that the CA of Bank A receives a certificate authorization request from its customer (assuming that the customer is m), which includes some user identity information and the public key that the user needs to be verified. After Bank A ’s CA verifies the identity of the user corresponding to the user identity information carried in the certificate authorization request and confirms that m is indeed its own customer, Bank A ’s CA can use the CA public keys of N ring members in the consortium chain and Bank A The CA's own public key and private key are used as input to generate a signature R for the client m's public key and identity information application. The CA of Bank A can issue the digital certificate signed by the above R to the customer (the certificate contains the basic information of the customer and the public key of the customer), and the customer can use the digital certificate issued by the CA of Bank A to sign the transaction.

In some feasible implementation manners, the CA of the issuer in the alliance chain network issues digital certificates to its customers in the traditional X509 format, and the issued digital certificates conform to the ITU-TX.509 international standard. It should be noted that the issue of digital certificates here uses X509, but the label of the issuer (Issuer) in X509 is no longer the name of an organization, but the blockchain network corresponding to the CA of the certificate issuer (such as the alliance Chain network). Here, it is assumed that the label of the certificate issuer CA in X509 is a field in X509, and the identifier of the blockchain network corresponding to the certificate issuer's CA is recorded in this field. For convenience of description, this field can be assumed as The issuer labels the field. In other words, the issuer label field in X509 can be any field in X509 used to record the identity of the blockchain network corresponding to the CA of the certificate issuer, which can be determined according to the actual application scenario, without limitation .

Optionally, the public key indication information corresponding to the CA of the certificate issuer is recorded in the label of the certificate issuer (Issuer) in X509. Wherein, the public key indication information includes but is not limited to: all public key information corresponding to the ring signature of the digital certificate, and identifiers of all public keys corresponding to the ring signature of the digital certificate. In other words, the public key indication information corresponding to the CA of the certificate issuer may be recorded in the labeling field of the issuer of X509, and the public key indication information includes but is not limited to: all public key information corresponding to the ring signature of the digital certificate, The identifiers of all public keys corresponding to the ring signature of the digital certificate are not limited here.

Optionally, the public key information corresponding to the CA of the certificate issuer may be recorded in the Extension field of X509. Wherein, the above public key information includes but is not limited to: all public keys corresponding to the ring signature of the digital certificate, and identifiers of all public keys corresponding to the ring signature of the digital certificate. Optionally, the public key group identifier corresponding to the ring signature of the digital certificate can be recorded in the extension field of X509. The public key group identifier is used to indicate the group of the public key corresponding to the ring signature of the digital certificate to help the digital The verifier of the certificate finds the public key corresponding to the ring signature based on the group to which the public key belongs.

Optionally, in some feasible implementation manners, if there are ring signature certificate issuance rules formulated in the alliance chain network (such as unified formulation, or agreement), the X509 extension field does not need more records, which can be based on The actual application scenario is determined, and is not limited here.

S25. When the verifier obtains any signed transaction in the blockchain network, the verifier obtains the digital certificate of the initiator of the above transaction, and obtains the ring signature public key from the digital certificate based on the preset ring signature certificate signing rules Information, and determine all public keys corresponding to the ring signature based on the above public key information, and verify the signature of the transaction based on all public keys corresponding to the ring signature.

In some feasible implementation manners, the verifier can be any organization here, and is not limited herein. The following uses any participant in the alliance chain network as an example for description, without specific restrictions. The above ring signing certificate issuance rules are recorded in the blockchain network. The ring signing certificate issuance rules include the number of ring signature public keys and ring signing certificate issuance specifications. The ring signing certificate issuance specifications include digital certificate format X509 for recording rings The preset field of the signed public key information. The public key information included in the above digital certificate includes the identification of the blockchain network included in the preset field of the digital certificate format X509, the CA public keys of all parties corresponding to the ring signature of the digital certificate, and / or the digital certificate Identification of the CA public keys of all parties corresponding to the ring signature. Wherein, the above-mentioned preset fields include an issuer label field and / or an extension field. Optionally, if the CA public keys of each participant recorded in the alliance chain network are multiple groups, and one group corresponds to a group identifier, the above public key information may include the group identifier included in the digital certificate, the group The identifier is used to determine the target group included in the blockchain network to determine the CA public keys of all parties corresponding to the ring signature of the digital certificate based on the public key included in the target group. For details, refer to the operation mode of the verifier corresponding to the signature of the digital certificate in step S24 above, which is not limited herein.

In some feasible implementation manners, when any signature transaction is received in the alliance chain network, when the verifier in the alliance chain network obtains the signature transaction, the digital certificate of the initiator of the signature transaction may be obtained. The format of the data certificate is X509, and the verifier can find all the public keys corresponding to the ring signature of the initiator's digital certificate from the alliance chain network through the identifier written in X509. In other words, when the verifier verifies the signature of any signed transaction, all identifiers corresponding to the ring signature of the digital certificate can be found from the consortium chain network through the identifier written in X509 when the initiator of the transaction issued the digital certificate Public key. Optionally, the verifier can also find the public key information written in the label of the issuer (Issuer) of X509 (such as the public key information included in the label field of the issuer in X509) through the digital certificate of the transaction initiator. The key information includes but is not limited to all public keys corresponding to the ring signature of the digital certificate, and / or identifiers of all public keys corresponding to the ring signature of the digital certificate. Optionally, the verifier can also find the public key information written in the extension field of X509 through the digital certificate of the transaction initiator. The public key information includes but is not limited to all public keys corresponding to the ring signature of the digital certificate, and / or The identifier of all public keys corresponding to the ring signature of the digital certificate. Optionally, the verifier can also find the public key group identifier written in the extension field of x509 through the digital certificate of the transaction initiator, and find it from each public key group included in the alliance chain network based on the public key group identifier The group to which the public key corresponding to the ring signature of the digital certificate belongs, and then all the public keys corresponding to the ring signature of the digital certificate can be determined based on the found group to which the public key belongs. In a specific implementation, the method by which the verifier finds the public key corresponding to the ring signature can be determined according to the information in X509, and no limitation is made here. After the verifier finds all the public keys corresponding to the ring signature of the digital certificate of the transaction initiator, it can verify the signature of the transaction based on all the public keys found. The specific verification process is not limited here. In other words, the public key information of the ring signature of the digital certificate is specifically carried and / or indicated by what kind of information in the digital certificate, which is not limited herein. In other words, the public key information of the ring signature of the digital certificate is specifically carried and / or indicated by any field in the digital certificate format (X509), and is not limited herein. For details, refer to the operation mode of the verifier corresponding to the signature of the digital certificate in step S24 above, which is not limited herein.

It can be seen from the above that the ring signature of the digital certificate is realized based on the method provided in the embodiment of the present application, and the unconditional anonymity of the issuer of the digital certificate can be achieved. For the verifier, the issuer is completely anonymous. Based on the method provided by the embodiment of the present application, the ring signature of the digital certificate includes but is not limited to the following security attributes:

1) Unconditional anonymity. Even if the attacker illegally obtains the private keys of all possible signers, the probability that the true signer can be determined does not exceed 1 / n, where n is the number of ring members (that is, possible signers);

2) Unforgeability. Without knowing the private key of any ring member, even if the attacker can obtain the signature of any user from a random oracle who generates the ring signature, the probability of successfully forging the legal signature of the user can be almost ignored;

3) Ring signatures have good characteristics. Unconditional anonymity of signers can be achieved, signers can freely specify their own anonymity range, and the main function of group signatures can be achieved without the need for trusted third parties or group administrators.

In the embodiment of the present application, the ring signature certificate issuance rules established by the CA of the digital certificate issuer to issue digital certificates to the users of the CA of the issuer can ensure that any other than the CA of the digital issuer can participate The party cannot determine which party's CA issued the digital certificate. That is to say, the CA of any participant in the alliance chain network except the CA of the issuer of the digital certificate cannot determine which recipient of the digital certificate is a customer of the CA of the participant in the alliance chain, so that the alliance can be realized The CAs of each participant in the chain sign the privacy of digital certificates for their users, so that the CAs of each participant can send digital certificates anonymously to their users, ensuring the privacy of the identity of the CA of the issuer of the digital certificate and enhancing each of the alliance chain network The information security of the transaction between the CA of the participant and its users can meet the more business needs of each participant in the alliance chain network, and the applicability is stronger.

Referring to FIG. 3, it is a schematic structural diagram of a digital certificate issuing apparatus provided by an embodiment of the present application. The digital certificate issuance device is suitable for the issuer of the digital certificate, and may be any participant in the alliance chain network that needs to issue a digital certificate for its own users, and no limitation is made here. The digital certificate issuing device may include:

The recording unit 31 is used to record the CA public key of the first party into the blockchain network, the first party is the issuer of the digital certificate in the blockchain network, and the blockchain network also records The CA public key of at least one second party is obtained, and the second party is a party other than the first party in the blockchain network.

The confirmation unit 32 is configured to confirm whether the user is a user of the CA of the first participant according to the user identity information carried in the certificate authorization request when receiving a certificate authorization request from any user.

The obtaining unit 33 is configured to obtain the public key of the user from the certificate authorization request when the confirmation unit 32 confirms that the user is a user of the CA of the first participant, and according to a preset ring signing certificate issuance rule Obtain any other N public CA public keys of the above-mentioned second parties from the above-mentioned blockchain network, where N is equal to the number of public keys set in the above-mentioned ring signing certificate issuance rules.

The signing unit 34 is configured to perform ring signature on the user identity information and public key of the user and form a digital certificate based on the public key and private key of the CA of the first participant and the CA public keys of the N second participants And send the digital certificate to the user.

In some feasible implementation manners, the above-mentioned ring signature certificate issuance rules are formulated by the above-mentioned first party's CA, or jointly formulated by the above-mentioned blockchain network's CA of each participant; the above-mentioned ring signature certificate issuance rules are recorded In the above-mentioned blockchain network.

In some feasible implementation manners, the above-mentioned ring signature certificate issuance rules also include specifications composed of X509 digital certificates; the above-mentioned X509 includes preset fields for recording public key information of the ring signature;

The above issuance unit 34 is used to:

Based on the above specifications, the public key and private key of the first party CA and the N public keys of the second party CA are used to perform ring signature on the user identity information and public key of the user and form a digital certificate. The preset field of the digital certificate carries the public key information of the ring signature of the digital certificate.

In some feasible implementation manners, the X509 includes an issuer label field, and the issuer label field includes a blockchain network identifier corresponding to the CA of the first party and / or a ring signature public key of the digital certificate information;

Wherein, the public key information includes the CA public keys of the N second parties corresponding to the ring signature of the digital certificate, and / or the identifiers of the CA public keys of the N second parties corresponding to the ring signature .

In some feasible implementation manners, the preset field includes the extension field in the X509, and the public key information of the ring signature carried in the extension field includes the N of the second parties corresponding to the ring signature of the digital certificate The public key of the CA, and / or the identifiers of the CA public keys of the above N second parties corresponding to the ring signature.

In some feasible implementation manners, the CA public keys of each participant recorded in the above-mentioned blockchain network are divided into multiple groups, and one group corresponds to one group identifier;

The preset field includes the extension field in the X509, and the public key information of the ring signature carried in the extension field includes a group identifier, and the group identifier is used to indicate the N number of the second parties corresponding to the ring signature The grouping of the CA public key of the CA helps the verifier of the digital certificate to find the CA public keys of the N second parties based on the grouping of the CA public keys of the N second parties.

In a specific implementation, a digital certificate issuing apparatus that is a digital certificate issuer may execute the implementation provided by the steps in the foregoing embodiments through its built-in functional units. Optionally, the recording unit 31 is used to implement the implementation provided by step S21 in the foregoing embodiment. For details, refer to the operation performed by the digital certificate issuing device in step S21, and no limitation is made here. The confirmation unit 32 is used to execute the implementation provided in step S22 in the above embodiment. For details, refer to the operation performed by the digital certificate issuing device in step S22, and no limitation is made here. The obtaining unit 33 is used to execute the implementation provided in step S23 in the above embodiment. For details, refer to the operation performed by the digital certificate issuing device in step S23, and no limitation is made here. The above-mentioned issuance unit 34 is used to execute the implementation provided in step S24 in the above embodiment. For details, refer to the operation performed by the digital certificate issuance device in step S24, and no limitation is made here.

In the embodiment of the present application, the CA of the issuer of the digital certificate may formulate the rules for issuing the ring signature certificate, including the number of public keys required for the ring signature and the specifications for issuing the ring signature certificate. The ring signature certificate issuance rules established by the CA of the digital certificate issuer to issue digital certificates to users of the CA of the issuer can ensure that the CA of any participant other than the CA of the digital certificate cannot judge the digital certificate Is issued by the CA of which party. That is to say, the CA of any participant in the alliance chain network except the CA of the issuer of the digital certificate cannot determine which recipient of the digital certificate is a customer of the CA of the participant in the alliance chain, so that the alliance can be realized The CA of each participant in the chain issues the privacy of the digital certificate for its users, so that the CA of each participant can send the digital certificate anonymously to its users, to ensure the identity privacy of the CA of the issuer of the digital certificate, and enhance each of the alliance chain network The information security of the transaction between the CA of the participant and its users can meet the more business needs of each participant in the alliance chain network, and the applicability is stronger.

4 is a schematic structural diagram of a digital certificate verification device provided by an embodiment of the present application. The verification device of the digital certificate is suitable for the verifier of the digital certificate, and is not limited here. The digital certificate issuing device may include:

The obtaining unit 41 is used to obtain the digital certificate of the initiator of the above-mentioned signed transaction when obtaining any signed transaction in the blockchain network. The initiator of the above-mentioned signed transaction may be one of the participants in the above-mentioned blockchain network In the above-mentioned blockchain network, the public key of the certification authority CA of each participant including the initiator of the above transaction is recorded.

The determining unit 42 is configured to acquire the public key information of the ring signature of the digital certificate from the digital certificate based on the preset ring signing certificate issuance rule, and determine all the public keys corresponding to the ring signature of the digital certificate according to the public key information All public keys corresponding to the ring signature are the CA public keys of multiple participants in the blockchain network, and the number of public keys corresponding to the ring signature is equal to the number of public keys set in the rules for issuing the ring signature certificate.

The verification unit 43 is configured to verify the signature of the signature transaction based on all public keys corresponding to the ring signature determined by the determination unit 42.

In some feasible implementation manners, the above-mentioned ring signature certificate issuance rules are recorded in the above-mentioned blockchain network, and the above-mentioned ring signature certificate issuance rules also include specifications composed of X509 digital certificates; The preset field of the signed public key information;

The above public key information includes the identification of the blockchain network included in the above preset fields, and / or the CA public keys of all parties corresponding to the ring signature of the digital certificate, and / or the CA public keys of all the above parties Logo

Wherein, the above-mentioned preset fields include an issuer label field and / or an extension field.

The CA public keys of the above parties recorded in the blockchain network are divided into multiple groups, and each group corresponds to a group identifier;

The public key information includes the group identifier included in the preset field, and the group identifier is used to determine the target group included in the blockchain network to determine the number based on the CA public key included in the target group The CA public keys of all parties corresponding to the ring signature of the certificate.

In a specific implementation, the above digital certificate issuing device as a verifier can execute the implementation manners performed by the verifier in the foregoing embodiments through various built-in functional units, including but not limited to the verification manner in the implementation manner provided in step S25 For the operations performed, reference may be made to the implementation manners provided in the foregoing steps, and details are not described herein again.

In the embodiment of the present application, the verifier can determine the number of public keys required for the ring signature and the ring signing certificate issuance specifications according to the ring signature certificate issuance rules formulated by each participant in the alliance chain network, and can be based on the The CA public key of each participant determines all public keys corresponding to the ring signature of the digital certificate. All public keys corresponding to ring signatures are used to verify the transaction initiated by the digital certificate holder. The operation is simple. The verification of the transaction also enhances the privacy of the CA identity of the issuer of the digital certificate, which can meet more participation. The business needs of the party are more applicable.

Referring to FIG. 5, FIG. 5 is a schematic structural diagram of a terminal provided by an embodiment of the present application. The terminal is suitable for the issuer of digital certificates. The issuer can be any participant in the alliance chain network that needs to issue digital certificates for its users. The specific can be determined according to the actual application scenario, and no restrictions are made here.

As shown in FIG. 5, the terminal in this embodiment may include: one or more processors 501, a memory 502, and one or more transceivers 503. The processor 501, the memory 502, and the transceiver 503 are connected through a bus 504. The memory 502 is used to store a computer program, and the computer program includes program instructions. The processor 501 and the transceiver 503 are used to execute the program instructions stored in the memory 502. The processor 501 and the transceiver 503 are configured to call the program instructions to perform the following operations:

The transceiver 503 is used to send and record the CA public key of the first party to the blockchain network. The first party is the issuer of the digital certificate in the blockchain network. The CA public key of at least one second participant is recorded, and the second participant is a participant other than the second participant in the blockchain network.

The processor 501 is configured to confirm whether the user is the user of the CA of the first participant according to the user identity information carried in the certificate authorization request when the transceiver 503 receives the certificate authorization request of any user; The user is the user of the CA of the first party, and then obtains the public key of the user from the certificate authorization request, and obtains any N number from the blockchain network according to the preset ring signing certificate issuance rules For the CA public key of the above-mentioned second party, where N is equal to the number of public keys set in the above-mentioned ring signing certificate issuance rules.

The processor 501 is further configured to perform ring signature on the user identity information and public key of the user based on the public key and private key of the CA of the first party and the CA public keys of the N second parties and form a number certificate.

The transceiver 503 is also used to send the digital certificate to the user.

The above processor 501 is used for:

In some feasible implementation manners, the processor 501 may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSPs), and dedicated integrations. Circuit (application specific integrated circuit, ASIC), ready-made programmable gate array (field-programmable gate array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

The memory 502 may include a read-only memory and a random access memory, and provide instructions and data to the processor 501 and the transceiver 503. A portion of the memory 502 may also include non-volatile random access memory. For example, the memory 502 may also store device type information.

In some feasible implementation manners, the above-mentioned terminal may perform the operations performed by the CA of the issuer in the implementation provided by the steps in the above-mentioned embodiments through the various functional modules of its built-in processor 501 and transceiver 503, specifically Please refer to the implementation provided by the above steps, which will not be repeated here.

In the embodiment of the present application, a terminal that is a digital certificate issuer CA can formulate a ring signature certificate issuance rule, including the number of public keys required for ring signature and ring signature certificate issuance specifications, etc. The ring signature certificate issuance rules established by the CA of the digital certificate issuer to issue digital certificates to users of the CA of the issuer can ensure that the CA of any participant other than the CA of the digital certificate cannot judge the digital certificate Is issued by the CA of which party. That is to say, the CA of any participant in the alliance chain network except the CA of the issuer of the digital certificate cannot determine which recipient of the digital certificate is a customer of the CA of the participant in the alliance chain, so that the alliance can be realized The CA of each participant in the chain issues the privacy of the digital certificate for its users, so that the CA of each participant can send the digital certificate anonymously to its users, to ensure the identity privacy of the CA of the issuer of the digital certificate, and enhance each of the alliance chain network The information security of the transaction between the CA of the participant and its users can meet the more business needs of each participant in the alliance chain network, and the applicability is stronger.

Referring to FIG. 6, FIG. 6 is another schematic structural diagram of a terminal provided by an embodiment of the present application. The terminal is suitable for the verifier of digital certificates. As shown in FIG. 6, the terminal in this embodiment may include: one or more processors 601 and a memory 602. The processor 601 and the memory 602 are connected through a bus 603. The memory 602 is used to store a computer program, and the computer program includes program instructions, and the processor 601 is used to execute the program instructions stored in the memory 602. The above processor 601 is configured to call the program instruction to perform the following operations:

When the verifier obtains any signature transaction in the blockchain network, it obtains the digital certificate of the initiator of the signature transaction. The initiator of the signature transaction may be one of the participants in the blockchain network. The public key of the certification authority CA of each participant including the initiator of the above transaction is recorded in the chain network;

Obtain the public key information of the ring signature of the digital certificate from the digital certificate based on the preset ring signature certificate issuance rule, and determine all the public keys corresponding to the ring signature of the digital certificate according to the public key information. All public keys are the CA public keys of multiple participants in the blockchain network, and the number of participants in the multiple participants is equal to the number of public keys set in the rules for issuing ring signature certificates;

The signature of the above signature transaction is verified according to all public keys corresponding to the above ring signature.

In some feasible implementation manners, the above-mentioned terminal may perform the operations performed by the verifier in the implementation manners provided by the various steps in the foregoing embodiments through various functional devices such as its built-in processor 601. The implementation provided will not be repeated here.

In the embodiment of the present application, as the terminal of the digital certificate verifier, the number of public keys required for the ring signature and the issuance specifications of the ring signature certificate can be determined according to the ring signature certificate issuance rules established by the CAs of the participants in the alliance chain network All public keys corresponding to the ring signature of the digital certificate can be determined based on the CA public keys of each participant recorded in the alliance chain network. All public keys corresponding to ring signatures implement transaction verification initiated by digital certificate holders. The operation is simple. Completing transaction verification also enhances the identity privacy of the CA of the issuer of the digital certificate, which can satisfy more participants. Business requirements are more applicable.

Embodiments of the present application also provide a computer-readable storage medium that stores a computer program, and the computer program includes program instructions, which are executed by a processor to implement the method provided in each step in FIG. 2 For details, please refer to the implementation provided by the above steps, which will not be repeated here.

The above-mentioned computer-readable storage medium may be the digital certificate issuing apparatus provided in any of the foregoing embodiments or the internal storage unit of the above-mentioned terminal, such as a hard disk or a memory of an electronic device. The computer-readable storage medium may also be an external storage device of the electronic device, such as a plug-in hard disk equipped on the electronic device, a smart memory card (smart media card, SMC), a secure digital (SD) card Flash card (flash card), etc. Further, the computer-readable storage medium may also include both an internal storage unit of the electronic device and an external storage device. The computer-readable storage medium is used to store the computer program and other programs and data required by the electronic device. The computer-readable storage medium can also be used to temporarily store data that has been or will be output.

The terms "comprising" and "having" in the claims and specification and drawings of this application and any variations thereof are intended to cover non-exclusive inclusion. Reference herein to "embodiments" means that specific features, structures, or characteristics described in connection with the embodiments may be included in at least one embodiment of the present application. The display of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. The term "and / or" used in the specification of the present application and the appended claims refers to any and all possible combinations of one or more of the associated listed items and includes these combinations.

Claims

A digital certificate issuance method, characterized in that the method is suitable for a digital certificate issuer, the method includes:

The certificate authority CA of the first participant of the blockchain network records the public key of the CA of the first participant to the blockchain network, and the first participant is the digital certificate of the blockchain network. Issuer, the blockchain public network also records at least one CA public key of the second participant, the second participant is a participant in the blockchain network other than the first participant ;

When the CA of the first party receives a certificate authorization request from any user, it determines whether the user is a target user according to the user identity information carried in the certificate authorization request, and the target user is the first The user of the CA of the participant;

If the CA of the first participant confirms that the user is the target user, the public key of the user is obtained from the certificate authorization request, and according to the preset ring signing certificate issuance rules, from the block Obtain any N public CA keys of the second participant in the chain network, where N is equal to the number of public keys set in the ring signing certificate issuance rules;

The CA of the first participant performs the user identity information and the public key of the user according to the public key and private key of the CA of the first participant and the N CA public keys of the second participant The ring signs and forms a digital certificate, and sends the digital certificate to the user.
The method according to claim 1, characterized in that the ring signature certificate issuance rules are formulated by the CA of the first participant or jointly formulated by the CAs of the participants in the blockchain network; The ring signature certificate issuance rules are recorded in the blockchain network.
The method according to claim 2, wherein the ring signing certificate issuance rule further includes a specification composed of X509 digital certificates; the X509 includes a preset field for recording public key information of the ring signature ;

The CA of the first participant signs the user identity information and public key of the user according to the public key and private key of the CA of the first participant and the CA public keys of the N second participants And form a digital certificate including:

Based on the specification, the first party ’s CA uses the public key and private key of the first party ’s CA and the N second party ’s CA public keys to identify the user of the user The information and the public key are ring-signed and form a digital certificate, and the preset field of the digital certificate carries the public key information of the ring signature of the digital certificate.
The method according to claim 3, wherein the X509 includes an issuer label field, and the issuer label field includes a blockchain network identifier and / or all corresponding to the CA of the first party The public key information of the ring signature of the digital certificate;

Wherein, the public key information includes the CA public keys of the N second parties corresponding to the ring signature of the digital certificate, and / or the N second participations corresponding to the ring signature The ID of the party's CA public key.
The method according to claim 3, wherein the preset field includes an extension field in the X509, and the public key information of the ring signature carried in the extension field includes the ring signature of the digital certificate Corresponding to the N public CA public keys of the second participants, and / or identifiers of the N public CA public keys of the second participants corresponding to the ring signature.
The method according to claim 3, wherein the CA public keys of each participant recorded in the blockchain network are divided into multiple groups, and one group corresponds to one group identifier;

The preset field includes an extension field in the X509, and the public key information of the ring signature carried in the extension field includes a group identifier, and the group identifier is used to indicate the corresponding to the ring signature N belonging groups of the CA public keys of the second participants to help the verifier of the digital certificate find the N said groups based on the belonging groups of the N public CAs of the second parties The CA public key of the second participant.
A digital certificate verification method, characterized in that the method is suitable for a digital certificate verifier, and the method includes:

When the verifier obtains any signed transaction in the blockchain network, the verifier obtains the digital certificate of the initiator of the signed transaction;

The verifier obtains the public key information of the ring signature of the digital certificate from the digital certificate based on a preset ring signing certificate issuance rule, and determines all corresponding to the ring signature of the digital certificate according to the public key information Public key, all public keys corresponding to the ring signature are the CA public keys of multiple participants in the blockchain network, and the number of public keys corresponding to the ring signature is equal to that set in the rules for issuing the ring signature certificate The number of fixed public keys;

The verifier verifies the signature of the signed transaction based on all public keys corresponding to the ring signature.
The method according to claim 7, characterized in that the ring signing certificate issuance rules are recorded in the blockchain network, and the ring signing certificate issuance rules also include specifications composed of X509 digital certificates; The X509 includes a preset field for recording public key information of the ring signature;

The public key information includes the identification of the blockchain network included in the preset field, and / or the CA public keys of all parties corresponding to the ring signature of the digital certificate, and / or the CAs of all parties Public key identification;

Wherein, the preset field includes an issuer label field and / or an extension field.
The method according to claim 7, characterized in that the ring signing certificate issuance rules are recorded in the blockchain network, and the ring signing certificate issuance rules also include specifications composed of X509 digital certificates; The X509 includes a preset field for recording public key information of the ring signature;

The CA public keys of the various parties recorded in the blockchain network are divided into multiple groups, and one group corresponds to one group identifier;

The public key information includes a packet identifier included in the preset field, and the packet identifier is used to determine a target packet included in the blockchain network to be based on the CA included in the target packet The public key determines the CA public keys of all parties corresponding to the ring signature of the digital certificate.
A digital certificate issuing device, characterized in that the device is suitable for a certificate issuing authority CA of a digital certificate issuer, and the device includes:

The recording unit is used to record the CA public key of the first party into the blockchain network, the first party is the issuer of the digital certificate in the blockchain network, and the blockchain network also Recorded the CA public key of at least one second participant, the second participant is a participant other than the first participant in the blockchain network;

A confirmation unit, configured to confirm whether the user is a user of the CA of the first participant according to the user identity information carried in the certificate authorization request when receiving a certificate authorization request from any user;

An obtaining unit, configured to obtain the public key of the user from the certificate authorization request when the confirmation unit confirms that the user is a user of the CA of the first participant, and sign according to a preset ring Certificate issuance rules, obtaining any N public CA keys of the second party from the blockchain network, where N is equal to the number of public keys set in the ring signature certificate issuance rules;

An issuance unit for ring-signing the user identity information and public key of the user based on the public key and private key of the first party's CA and the N public keys of the second party Form a digital certificate and send the digital certificate to the user.
The device according to claim 10, characterized in that the ring signature certificate issuance rules are formulated by the CA of the first participant or jointly formulated by the CAs of the participants in the blockchain network; The ring signature certificate issuance rules are recorded in the blockchain network.
The apparatus according to claim 11, wherein the ring signing certificate issuance rule further includes a specification composed of X509 digital certificates; the X509 includes a preset field for recording public key information of the ring signature ;

The issuance unit is used for:

Based on the specification, use the public key and private key of the first party's CA and the N public keys of the second party to sign the user's user identity information and public key in a ring and sign A digital certificate is formed, and the preset field of the digital certificate carries the public key information of the ring signature of the digital certificate.
The apparatus according to claim 12, wherein the X509 includes an issuer label field, and the issuer label field includes a blockchain network identifier and / or all corresponding to the CA of the first party The public key information of the ring signature of the digital certificate;

Wherein, the public key information includes the CA public keys of the N second parties corresponding to the ring signature of the digital certificate, and / or the N second participations corresponding to the ring signature The ID of the party's CA public key.
The device according to claim 12, wherein the preset field includes an extension field in the X509, and the public key information of the ring signature carried in the extension field includes the ring signature of the digital certificate Corresponding to the N public CA public keys of the second participants, and / or identifiers of the N public CA public keys of the second participants corresponding to the ring signature.
The device according to claim 12, wherein the CA public keys of each participant recorded in the blockchain network are divided into multiple groups, and one group corresponds to one group identifier;

The preset field includes an extension field in the X509, and the public key information of the ring signature carried in the extension field includes a group identifier, and the group identifier is used to indicate the corresponding to the ring signature N belonging groups of the CA public keys of the second participants to help the verifier of the digital certificate find the N said groups based on the belonging groups of the N public CAs of the second parties The CA public key of the second participant.
A digital certificate verification device, characterized in that the device is suitable for a digital certificate verifier, and the device includes:

The obtaining unit is used to obtain the digital certificate of the initiator of the transaction when obtaining any signed transaction in the blockchain network;

A determining unit, configured to obtain the public key information of the ring signature of the digital certificate from the digital certificate based on a preset ring signing certificate issuance rule, and determine the ring signature corresponding to the digital certificate according to the public key information All public keys, all public keys corresponding to the ring signature are the CA public keys of multiple participants in the blockchain network, and the number of public keys corresponding to the ring signature is equal to that in the ring signing certificate issuance rules The set number of public keys;

The verification unit is configured to verify the signature of the transaction based on all public keys corresponding to the ring signature determined by the determination unit.
The device according to claim 16, characterized in that the ring signing certificate issuance rules are recorded in the blockchain network, and the ring signing certificate issuance rules further include specifications composed of X509 digital certificates; The X509 includes a preset field for recording public key information of the ring signature;

The public key information includes the identification of the blockchain network included in the preset field, and / or the CA public keys of all parties corresponding to the ring signature of the digital certificate, and / or the CAs of all parties Public key identification;

Wherein, the preset field includes an issuer label field and / or an extension field.
The device according to claim 16, characterized in that the ring signing certificate issuance rules are recorded in the blockchain network, and the ring signing certificate issuance rules further include specifications composed of X509 digital certificates; The X509 includes a preset field for recording public key information of the ring signature;

The CA public keys of the various parties recorded in the blockchain network are divided into multiple groups, and one group corresponds to one group identifier;

The public key information includes a packet identifier included in the preset field, and the packet identifier is used to determine a target packet included in the blockchain network to be based on the CA included in the target packet The public key determines the CA public keys of all parties corresponding to the ring signature of the digital certificate.
A terminal is characterized by comprising a processor and a memory, wherein the processor, transceiver and memory are connected to each other, wherein the memory is used to store a computer program, and the computer program includes program instructions, and the processor and The transceiver is configured to call the program instructions to perform the method according to any one of claims 1-6, or the method according to any one of claims 7-9.
A computer-readable storage medium, characterized in that the computer-readable storage medium stores a computer program, and the computer program includes program instructions, which when executed by a processor cause the processor to execute as rights The method according to any one of claims 1 to 6, or the method according to any one of claims 7 to 9.