WO2020108152A1

WO2020108152A1 - Method, device and electronic equipment for preventing misuse of identity data

Info

Publication number: WO2020108152A1
Application number: PCT/CN2019/111584
Authority: WO
Inventors: 栗志果
Original assignee: 阿里巴巴集团控股有限公司
Priority date: 2018-11-30
Filing date: 2019-10-17
Publication date: 2020-06-04
Also published as: CN110032846A; CN110032846B; TW202022669A

Abstract

Disclosed are a method and device as well as a kind of electronic equipment for preventing the misuse of identity data, applicable to blockchain nodes. The method comprises the following steps: obtaining identity data of a user for performing identity authentication on the user according to the identity data (102); determining an application scope stated by the user for the identity data (104); revoking an intelligent contract, the intelligent contract being used to add on the identity data restrictive information related to the application scope (106).

Description

Method and device for preventing misuse of identity data, and electronic equipment

Technical field

One or more embodiments of this specification relate to the field of blockchain technology, and in particular, to a method and device for preventing misuse of identity data, and electronic equipment.

Background technique

In related technologies, biometrics has been widely used in various scenarios to achieve efficient and accurate identity verification. For example, when a user wishes to use related business functions provided by a website, the website can identify and verify the user by collecting identity data such as the user's face image and based on the corresponding face recognition and other technical means In order to provide related business functions for the verified identity information.

Summary of the invention

In view of this, one or more embodiments of this specification provide a method, device and electronic device for preventing misuse of identity data.

To achieve the above purpose, one or more embodiments of this specification provide technical solutions as follows:

According to a first aspect of one or more embodiments of this specification, a method for preventing misuse of identity data is proposed, which is applied to a blockchain node. The method includes:

Acquiring the user's identity data to authenticate the user according to the identity data;

Determine the applicable scope of the user's declaration of the identity data;

Invoking a smart contract, the smart contract is used to add restriction information related to the applicable scope to the identity data.

According to a second aspect of one or more embodiments of this specification, a device for preventing misuse of identity data is proposed for use in a blockchain node. The device includes:

An obtaining unit, obtaining the user's identity data, so as to authenticate the user according to the identity data;

A determining unit to determine the applicable scope of the user's declaration of the identity data;

A calling unit calls a smart contract, and the smart contract is used to add restriction information related to the applicable scope to the identity data.

According to a third aspect of one or more embodiments of this specification, an electronic device is provided, including:

processor;

Memory for storing processor executable instructions;

Wherein, the processor executes the executable instruction to implement the method as described in the above embodiment.

BRIEF DESCRIPTION

FIG. 1 is a flowchart of a method for preventing misuse of identity data according to an exemplary embodiment.

FIG. 2 is a schematic diagram of a house rental scenario provided by an exemplary embodiment.

FIG. 3 is a schematic diagram of implementing real person authentication provided by an exemplary embodiment.

FIG. 4 is a schematic diagram of an anti-misuse processing for identity data provided by an exemplary embodiment.

FIG. 5 is a schematic structural diagram of an apparatus provided by an exemplary embodiment.

6 is a block diagram of an apparatus provided by an exemplary embodiment.

detailed description

Exemplary embodiments will be described in detail here, examples of which are shown in the drawings. When referring to the drawings below, unless otherwise indicated, the same numerals in different drawings represent the same or similar elements. The implementations described in the following exemplary embodiments do not represent all implementations consistent with one or more embodiments of this specification. Rather, they are merely examples of devices and methods consistent with some aspects of one or more embodiments of this specification as detailed in the appended claims.

It should be noted that in other embodiments, the steps of the corresponding method are not necessarily performed in the order shown and described in this specification. In some other embodiments, the method may include more or fewer steps than described in this specification. In addition, the single step described in this specification may be decomposed into multiple steps for description in other embodiments; and the multiple steps described in this specification may also be combined into a single step in other embodiments. description.

FIG. 1 is a flowchart of a method for preventing misuse of identity data according to an exemplary embodiment. As shown in Figure 1, this method is applied to blockchain nodes and can include the following steps:

Step 102: Obtain the user's identity data to authenticate the user according to the identity data.

In an embodiment, when there is a need to implement identity authentication for a user, the user's identity data can be obtained and identity authentication can be implemented, which is not limited in this specification. For example, the identity data of the user may be obtained when the preset service request initiated by the user has identity restrictions.

In an embodiment, the identity authentication method may include any of the following: face recognition, real person authentication, etc., which is not limited in this specification. When the identity authentication is in the form of face recognition, the acquired identity data may include the face image of the user. When the identity authentication is real person authentication, the acquired identity data may include face images, face videos, certificate images, audio (such as a specific verification code read out by the user, etc.), etc.

In an embodiment, by installing and running a blockchain client on an electronic device, the electronic device can be configured as a blockchain node in the blockchain network, for example, the electronic device can include a server, PC, tablet Various types of computers, mobile phones, etc. In other words, blockchain nodes can be carried on any form of electronic equipment, and this manual does not limit this.

Step 104: Determine the applicable scope of the user's declaration of the identity data.

In an embodiment, the electronic device used by the user may display several alternatives, respectively corresponding to the applicable scope of application; and the user may select one or more alternatives as the application of the declared identity data range.

In one embodiment, user audio, audio information contained in the user video, display content in the user video, etc. may be obtained, and the audio content or video display content may be analyzed to determine the user's application for the identity data declaration range. For example, when the user audio includes "this authentication is only used for XXX business" and so on, it indicates that the user declares that his identity data is only used for this "XXX business".

In step 106, a smart contract is invoked, and the smart contract is used to add restriction information related to the applicable scope to the identity data.

In one embodiment, by adding restriction information related to the scope of application to the identity data, the actual application scenario of the identity data can be compared with the restriction information, and the authenticity of the identity data can be determined if the two are consistent , So as to prevent the identity data from being misused or maliciously used in other scenarios. At the same time, based on the correlation between the identity data and the restriction information, even if the identity data is leaked, the restriction information can still restrict the identity data, which helps to improve the security of the identity data.

In one embodiment, because the content of the smart contract is publicly visible, the operation of adding the restriction information by calling the smart contract can be implemented automatically and efficiently on the one hand, and can avoid the unreliability caused by human participation and ensure loyalty on the other hand Implement the operation of adding restricted information.

In an embodiment, the smart contract may send a processing instruction to the local device or the external device, so that the local device or the external device (which can transmit the identity data and the applicable range of information to the external device) can respond to the processing instruction, thereby identifying the identity Add the corresponding restriction information to the data.

In an embodiment, a smart contract may be used to confirm whether the applicable scope is consistent with the predefined applicable scope in the smart contract. In other words, one or more application scopes can be predefined in the smart contract, and when the application scope declared by the user is consistent with the predefined application scope in the smart contract, the application scope declared by the user can be determined to be valid, and the corresponding can be added accordingly Restricted information; and when the scope of application declared by the user is inconsistent with the predefined scope of application in the smart contract, it indicates that there may be user operation errors or other abnormal conditions, and it can be determined that the scope of application declared by the user is invalid.

In an embodiment, in the case where the blockchain node obtains its identity data based on the preset business request initiated by the user, the smart contract can be used to confirm the business that corresponds to the preset business request Whether the scope is consistent; when the confirmation is consistent, the applicable scope declared by the user can be determined to be valid, and corresponding restriction information can be added accordingly; and when the confirmation is inconsistent, indicating that there may be a user's operation error or other abnormal conditions, the judgment may be determined The application scope declared by the user is invalid.

In an embodiment, the identity data may be visual information, for example, the visual information may include image information, video information, etc., which is not limited in this specification. Accordingly, the restriction information may include: a watermark added to the identity data to characterize the applicable range, that is, a digital watermark or an electronic watermark.

In one embodiment, an identity authentication result may be generated, the identity authentication result includes the identity data and result information, and the identity authentication result and/or the digital summary information of the identity authentication result are recorded in a block Chain, so as to make the data on the blockchain publicly searchable and non-tamperable, so that the identity verification result or its digital summary can be verified from the blockchain at any time in the subsequent process. Among them, by recording the identity authentication result locally on the blockchain node and recording the digital summary information (such as the hash value) of the identity authentication result on the blockchain, based on the unique mapping relationship between the identity authentication result and the digital summary information , You can verify the corresponding identity authentication results based on the digital summary information, and at the same time avoid the public record of identity authentication results (especially identity data and other content) in the blockchain, which helps improve security and privacy.

In an embodiment, a transaction can be issued to the blockchain to record the identity authentication result or its digital summary information on the blockchain. The transfer described in this specification refers to a piece of data that is created by the client of the blockchain and needs to be finally released to the distributed database of the blockchain. Among them, there are transactions in the narrow sense and transactions in the broad sense in the blockchain. A narrowly defined transaction refers to a value transfer issued by the user to the blockchain; for example, in the traditional Bitcoin blockchain network, the transaction can be a transfer initiated by the user in the blockchain. The generalized transaction refers to a piece of business data with business intent published by the user to the blockchain; for example, the operator can build an alliance chain based on actual business needs, relying on the alliance chain to deploy some other types that have nothing to do with value transfer Online business (for example, rental business, vehicle scheduling business, insurance claims business, credit service, medical service, etc.), and in this type of alliance chain, the transaction can be a business with business intent issued by the user in the alliance chain Message or business request.

For ease of understanding, the technical solution of this specification will be described in detail below by taking a house rental scenario as an example. FIG. 2 is a schematic diagram of a house rental scenario provided by an exemplary embodiment. As shown in FIG. 2, assuming that user A uses mobile phone 21 (or other types of electronic devices, this specification does not limit this), the mobile phone 21 can be run through the APP client of the house rental platform or the website that loads the house rental platform To provide user A with a house rental function. In the process of implementing house leasing, the house leasing platform can authenticate user A to facilitate the effective management of user A’s personal identity, timely discover possible risks (such as intercepting risk users, etc.) and ensure subsequent signing The lease agreement and other agreements are true and effective.

In an embodiment, the house rental platform may initiate a call request to a server 22 with real person authentication capability to call the real person authentication service provided by the server 22. Among them, the server 22 may belong to the enterprise of the house rental platform, or the server 22 may belong to the third-party enterprise, which is not limited in this specification. Similarly, the server 22 can also provide a real-person authentication service and an identity data anti-misuse scheme based on this specification to other platforms, which is not limited in this specification.

FIG. 3 is a schematic diagram of implementing real person authentication provided by an exemplary embodiment. As shown in FIG. 3, the mobile phone 21 can collect an image of the user A through the camera module, so that the collected picture or video includes the face image of the user A, the image of the user A holding a valid certificate (such as an ID card), the user A executes the corresponding action image according to the instructions as identity data for user A, and the identity data is uploaded to the server 22 by the mobile phone 21, so that the server 22 can be based on face detection, face recognition, OCR certificate recognition, living body detection A variety of technical means, etc., to implement real person authentication for user A.

After the real person authentication is completed, the server 22 will obtain the relevant identity data of the user A, such as the face image shown on the right side of FIG. 3 or the image of the user A holding a valid certificate mentioned above. At the same time, after completing the real person authentication, the server 22 will also feedback the authentication result to the housing rental platform, and the authentication result usually contains not only the result information of "passed authentication" or "failed authentication", but also the above-mentioned identity data . In other words, both the server 22 and the house rental platform have the opportunity to obtain the user A's identity data, making it possible for the server 22 and the house rental platform to misuse or maliciously steal the user A's identity data and apply it to real person authentication in other scenarios In the process of signing the agreement, etc., it will cause adverse effects.

For this reason, it is necessary to perform anti-misuse processing on user A's identity data to avoid misuse or malicious misappropriation into other scenarios. For example, FIG. 4 is a schematic diagram of an anti-misuse process for identity data provided by an exemplary embodiment. As shown in FIG. 4, in the process of real person authentication, user A can declare the applicable scope of the identity data generated at the time. For example, the server 22 can display the applicable scope confirmation interface to the user A through the mobile phone 21. The applicable scope confirmation interface Contains alternatives corresponding to several predefined application ranges, so that user A can choose from the alternatives or provide a new custom application range, or server 22 does not need to provide an application range confirmation interface, but user A directly declares the corresponding Scope of application.

In the process of declaring the scope of application, the user A can enter text on the mobile phone 21 to form the scope of application in the form of text. Or, user A may issue a voice indicating the applicable range, such as reading the alternatives passed in the applicable range confirmation interface, or user A may organize the voice content by itself. When the applicable scope is in text form, the mobile phone 21 can be directly uploaded to the server 22; when the applicable scope is in voice form, the mobile phone 21 can obtain the corresponding text content through voice recognition, and upload the recognized text content to the server 22, or The mobile phone 21 can directly upload the voice to the server 22 for the server 22 to perform voice recognition and corresponding processing.

A client of the blockchain is configured on the server 22, that is, the server 22 itself belongs to a blockchain node in the blockchain network. Therefore, the server 22 can call a pre-generated smart contract, and the smart contract can check the applicable scope declared by the user A. For example, the smart contract may be pre-defined with several optional application ranges, and the smart contract may compare the application range declared by user A with the above optional application range; when the application range declared by user A does not belong to the optional application range When, you can output the failed test. As another example, the smart contract can separately determine the applicable scope declared by user A and the current business scenario, for example, when the applicable scope declared by user A is "only for house rental", and the identity data is called by the house rental platform to the real person Generated by the authentication service, that is, the current business belongs to the "house rental", smart contract can determine that the scope of application declared by user A matches the current business belongs to the scene; and if the scope of application declared by user A is "only for house rental ", the current business belongs to the scene "house sales", the smart contract can determine that the scope of application declared by the user A does not match the current business belongs to the scene, the smart contract can output failed test.

When the output of the smart contract fails the verification, the server 22 may request the user A to re-state the applicable scope of the identity data; if the output of the smart contract fails the verification within a given number of times (such as 3 times), the server 22 may determine A real person authentication fails, regardless of whether it has actually passed the real person authentication, and the server 22 should delete the user A's identity data and avoid providing the user A's identity data to the house rental platform.

The smart contract can only check the applicable scope declared by user A according to the predefined optional scope; or, the smart contract can only check the applicable scope declared by user A according to the scenario of the current business; or, the smart contract The predefined optional application range and the current business scenario can be considered at the same time. Of course, the actual operation may not be implemented at the same time. For example, the predefined optional application range can be considered first, and then the current business scenario is considered. In short, when the smart contract determines that the scope of application declared by user A passes the test, the smart contract can output a processing instruction for the identity data of user A, thereby adding restriction information related to the scope of declaration of user A to the identity data of user A, such as A digital watermark such as "only for house rental" can be added to the face image shown in FIG. 3, thereby forming a face image shown on the right side of FIG.

By adding restriction information such as a digital watermark to the identity data, when user A's identity data is applied to other scenes, it can be quickly identified based on the digital watermark in the identity data, thereby refusing to process or facilitating retrospectively.

In an embodiment, the server 22 may return a real person authentication result of the identity data to the house rental platform, the authentication result includes the result information and the identity data added with limited information, which can prevent the identity data from being misused by the house rental platform Or malicious misappropriation. The server 22 can also record the authentication result into the blockchain, on the one hand, it can ensure that the authentication result cannot be tampered with, and on the other hand, it is convenient to query the blockchain ledger afterwards to trace the authentication result. Of course, if the data volume of the authentication result is large, the server 22 can generate digital summary information (such as a hash value) of the authentication result, and record the digital summary information into the blockchain, which can also be traced back.

FIG. 5 is a schematic structural diagram of a device provided by an exemplary embodiment. Please refer to FIG. 5. At the hardware level, the device includes a processor 502, an internal bus 504, a network interface 506, a memory 508, and a non-volatile memory 510. Of course, it may include hardware required for other services. The processor 502 reads the corresponding computer program from the non-volatile memory 510 into the memory 508 and then runs it to form a device for preventing misuse of identity data at a logical level. Of course, in addition to the software implementation, one or more embodiments of this specification do not exclude other implementations, such as a logic device or a combination of software and hardware, etc., that is to say, the execution body of the following processing flow is not limited to each The logic unit may also be a hardware or logic device.

Please refer to FIG. 6. In the software implementation, the device for preventing misuse of identity data is applied to a blockchain node. The device may include:

The obtaining unit 61 obtains the user's identity data to authenticate the user according to the identity data;

The determining unit 62 determines the applicable scope of the user's declaration of the identity data;

The calling unit 63 calls a smart contract, and the smart contract is used to add restriction information related to the applicable scope to the identity data.

Optionally, the acquiring unit 61 is specifically configured to: when the preset service request initiated by the user has an identity restriction, acquire the identity data of the user;

Wherein, the smart contract is also used to confirm whether the applicable scope is consistent with the business scope corresponding to the preset business request.

Optionally, the smart contract is also used to confirm whether the applicable scope is consistent with the predefined applicable scope in the smart contract.

Optionally, when the identity data is visual information, the restriction information includes: a watermark added to the identity data to characterize the applicable range.

Optional, also includes:

The generating unit 64 generates an identity authentication result, and the identity authentication result includes the identity data and result information;

The recording unit 65 records the identity authentication result and/or the digital summary information of the identity authentication result on the blockchain.

Optionally, the identity authentication method includes any one of the following: face recognition and real person authentication.

The system, device, module or unit explained in the above embodiments may be specifically implemented by a computer chip or entity, or implemented by a product with a certain function. A typical implementation device is a computer, and the specific form of the computer may be a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email sending and receiving device, and a game control Desk, tablet computer, wearable device, or any combination of these devices.

In a typical configuration, the computer includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include non-permanent memory, random access memory (RAM) and/or non-volatile memory in computer-readable media, such as read only memory (ROM) or flash memory (flash RAM). Memory is an example of computer-readable media.

Computer-readable media, including permanent and non-permanent, removable and non-removable media, can store information by any method or technology. The information may be computer readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, read-only compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, Magnetic tape cassettes, magnetic disk storage, quantum memory, graphene-based storage media or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. As defined in this article, computer-readable media does not include temporary computer-readable media (transitory media), such as modulated data signals and carrier waves.

It should also be noted that the terms "include", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device that includes a series of elements includes not only those elements, but also includes Other elements not explicitly listed, or include elements inherent to this process, method, commodity, or equipment. Without more restrictions, the element defined by the sentence "include one..." does not exclude that there are other identical elements in the process, method, commodity, or equipment that includes the element.

The foregoing describes specific embodiments of the present specification. Other embodiments are within the scope of the following claims. In some cases, the actions or steps recited in the claims may be performed in a different order than in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the particular order shown or sequential order to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

The terminology used in one or more embodiments of this specification is for the purpose of describing particular embodiments only, and is not intended to limit one or more embodiments of this specification. The singular forms "a", "said" and "the" used in one or more embodiments of the present specification and the appended claims are also intended to include the majority forms unless the context clearly indicates other meanings. It should also be understood that the term "and/or" as used herein refers to and includes any or all possible combinations of one or more associated listed items.

It should be understood that although one or more embodiments in this specification may use the terms first, second, third, etc. to describe various information, the information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of one or more embodiments of this specification, the first information may also be referred to as second information, and similarly, the second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when" or "when" or "in response to a determination".

The above are only preferred embodiments of one or more embodiments of this specification, and are not intended to limit one or more embodiments of this specification. Anything within the spirit and principle of one or more embodiments of this specification, Any modifications, equivalent replacements, improvements, etc. made should be included within the scope of protection of one or more embodiments of this specification.

Claims

A method for preventing misuse of identity data is applied to blockchain nodes. The method includes:

Acquiring the user's identity data to authenticate the user according to the identity data;

Determine the applicable scope of the user's declaration of the identity data;

Invoking a smart contract, the smart contract is used to add restriction information related to the applicable scope to the identity data.
According to the method of claim 1, the acquiring the user's identity data includes: when the preset service request initiated by the user has an identity restriction, acquiring the user's identity data;

Wherein, the smart contract is also used to confirm whether the applicable scope is consistent with the business scope corresponding to the preset business request.
According to the method of claim 1, the smart contract is also used to confirm whether the applicable scope is consistent with the predefined applicable scope in the smart contract.
According to the method of claim 1, when the identity data is visual information, the restriction information includes: a watermark added to the identity data to characterize the applicable range.
The method of claim 1, further comprising:

Generating an identity authentication result, where the identity authentication result includes the identity data and result information;

Record the identity authentication result and/or the digital summary information of the identity authentication result on the blockchain.
According to the method of claim 1, the method of identity authentication includes any one of the following: face recognition, real person authentication.
An identity data anti-misuse device applied to a blockchain node. The device includes:

An obtaining unit, obtaining the user's identity data, so as to authenticate the user according to the identity data;

A determining unit to determine the applicable scope of the user's declaration of the identity data;

A calling unit calls a smart contract, and the smart contract is used to add restriction information related to the applicable scope to the identity data.
According to the apparatus of claim 7, the acquiring unit is specifically configured to: when the preset service request initiated by the user has an identity restriction, acquire the identity data of the user;

Wherein, the smart contract is also used to confirm whether the applicable scope is consistent with the business scope corresponding to the preset business request.
According to the apparatus of claim 7, the smart contract is also used to confirm whether the applicable scope is consistent with the predefined applicable scope in the smart contract.
The apparatus according to claim 7, when the identity data is visual information, the restriction information includes: a watermark added to the identity data to characterize the applicable range.
The device according to claim 7, further comprising:

The generating unit generates an identity authentication result, and the identity authentication result includes the identity data and result information;

The recording unit records the identity authentication result and/or the digital summary information of the identity authentication result on the blockchain.
According to the apparatus of claim 7, the identity authentication method includes any one of the following: face recognition and real person authentication.
An electronic device, including:

processor;

Memory for storing processor executable instructions;

Wherein, the processor executes the executable instruction to implement the method according to any one of claims 1-6.