WO2020223918A1

WO2020223918A1 - Temporary identity authentication method, apparatus and system

Info

Publication number: WO2020223918A1
Application number: PCT/CN2019/085941
Authority: WO
Inventors: 唐虹刚; 孙立林
Original assignee: 云图有限公司
Priority date: 2019-05-08
Filing date: 2019-05-08
Publication date: 2020-11-12

Abstract

Disclosed are a temporary identity authentication method, apparatus and system. The method comprises: acquiring subject matter usage request data, wherein the subject matter usage request data comprises a contract number corresponding to a subject matter; acquiring, according to the contract number, a public key corresponding to the contract number and a first private key fragment of a lessor, wherein a private key and the public key corresponding to the contract number are generated when the lessor signs a lease, and the private key is divided into at least two pieces, the pieces comprising the first private key fragment, which is used by the lessor to perform signing, and a second private key fragment, which is used by a lessee to perform signing; on the basis of the first private key fragment and the second private key fragment, jointly signing the subject matter usage request data by means of secure multi-party calculation; and using the public key to verify the signed subject matter usage request data, and when signature verification is passed, opening a usage permission. By using the various embodiments of the description, the temporary right to use a subject matter of a user can be quickly, simply and securely confirmed.

Description

Temporary identity authentication method, device and system

Technical field

The present invention relates to the technical field of computer data processing, and in particular, to a method, device and system for temporary identity authentication.

Background technique

Traditionally, the use of rented objects such as apartments and cars is often carried out by sending passwords remotely, or by delivering in person, mailing keys or door cards. With the gradual separation of ownership and use rights, and the rapid development of shared economy such as shared car rentals and shared apartments, these traditional methods have the problem of low efficiency. In addition, the key or door card is inconvenient and easy to be stolen. The SMS password also faces potential risks such as theft of the password, which may lead to theft of items in the apartment. How to more conveniently and safely carry out the right to use the subject matter and confirm the identity has become an urgent technical problem to be solved.

Summary of the invention

The purpose of the embodiments of this specification is to provide a temporary identity authentication method, device and system, which can quickly, simply and safely confirm the user's temporary use right of the subject matter.

This manual provides a temporary identity authentication method, device and system which are implemented in the following ways:

A temporary identity authentication method, including:

Obtain subject matter use request data, where the subject matter use request data includes the contract number corresponding to the subject matter;

Obtain the public key corresponding to the contract number and the lessor’s first private key fragment according to the contract number, wherein the private key and public key corresponding to the contract number are generated by the lessor when the lease is signed, and the private The key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the second private key fragment used by the lessee for signing;

Perform a joint signature on the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment;

The public key is used to verify the signed subject matter use request data, and when the signature verification is passed, the use right is opened.

In another embodiment of the method provided in this specification, the obtaining the public key corresponding to the contract number and the first private key fragment of the lessor according to the contract number includes:

Obtain the public key corresponding to the contract number and the lessor’s first private key fragment from the blockchain according to the contract number, wherein the public key corresponding to the contract number and the lessor’s first private key fragment It is stored in the blockchain by the lessor based on the contract number in advance.

In another embodiment of the method provided in this specification, the obtaining the subject matter use request data includes:

Obtain the two-dimensional code information of the target use request, the two-dimensional code information is generated by the lessor based on the public key and the contract lease information when the lease is signed;

Decoding the two-dimensional code information to obtain contract lease information, and generate subject matter use request data according to the contract lease information;

Correspondingly, the obtaining the public key corresponding to the contract number according to the contract number includes obtaining the public key corresponding to the contract number from the data obtained after decoding the two-dimensional code information.

In another embodiment of the method provided in this specification, the method further includes:

When the signature verification is passed, obtain the contract lease information corresponding to the contract number according to the contract number;

The use right verification is performed on the subject matter use request data according to the contract lease information, and correspondingly, the use right is opened after the use right verification is passed.

The signed subject matter use request data and the verification result are stored in the blockchain based on the contract number.

On the other hand, the embodiment of this specification also provides a temporary identity authentication device, the device includes:

The first data acquisition module is configured to acquire subject matter use request data, where the subject matter use request data includes the contract number corresponding to the subject matter;

The second data acquisition module is used to acquire the public key corresponding to the contract number and the lessor’s first private key fragments according to the contract number, wherein the private key and public key corresponding to the contract number are shared by the lessor Generated when the lease is signed, the private key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the second private key fragment used by the lessee for signing;

The first data signature module is configured to jointly sign the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment;

The first data verification module is configured to verify the signed subject matter use request data by using the public key;

The first permission opening module is used to open the usage permission when the signature verification is passed.

On the other hand, the embodiments of this specification also provide a temporary identity authentication device, which includes a processor and a memory for storing executable instructions of the processor. The steps of the method.

On the other hand, the embodiment of this specification also provides a temporary identity authentication method, including:

The first client sends the subject matter use request data to the first rental terminal, where the subject matter use request data includes the contract number corresponding to the subject matter;

The first rental terminal receives the subject matter use request data, and obtains the public key corresponding to the contract number and the first private key fragment of the lessor from the blockchain according to the contract number, wherein,

The private key and public key corresponding to the contract number are generated by the first lessor when the lease is signed. The private key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the lessee For the signed second private key segment, the public key and the first private key segment are pre-stored in the blockchain by the lessor based on the contract number, and the second private key segment is stored in the first client End in

The first client and the first renter jointly sign the subject matter use request data through a multi-party security algorithm based on the first private key fragment and the second private key fragment;

The first rental end uses the public key to verify the signed subject matter use request data, and when the signature verification is passed, it issues an open use permission instruction to the first subject matter end, so that the first subject matter end is open for use Permissions.

On the other hand, the embodiment of this specification also provides a rental terminal, the rental terminal includes:

A data receiving module for receiving subject matter use request data, where the subject matter use request data includes the contract number corresponding to the subject matter;

The data retrieval module is used to retrieve the public key corresponding to the contract number and the first private key segment of the lessor from the blockchain according to the contract number, wherein,

The private key and public key corresponding to the contract number are generated by the first lessor when the lease is signed. The private key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the lessee For the second private key segment of the signature, the public key and the first private key segment are pre-stored in the blockchain by the lessor based on the contract number;

The second data signature module is configured to jointly sign the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment;

The second data verification module is configured to use the public key to verify the signed subject matter use request data;

The instruction sending module is used to issue an open use permission instruction to the subject end when the signature verification is passed.

On the other hand, the embodiment of this specification also provides a client, the client includes a SIM card and/or TEE, and a data sending module, wherein the SIM card and/or TEE is used to store the second Private key fragmentation;

The data sending module is configured to send subject matter use request data, the subject matter use request data including the contract number corresponding to the subject matter, so that the lessor can receive the subject matter use request data, and obtain all data according to the contract number. The public key corresponding to the contract number and the lessor’s first private key fragment, and the use of the subject matter through secure multi-party calculation based on the lessor’s first private key fragment and the lessee’s second private key fragment The request data is jointly signed, and the signed subject matter use request data is verified by using the public key. When the signature verification is passed, the use authority is opened.

On the other hand, the embodiment of the present specification also provides a temporary identity authentication system, the system includes a first client, a first object terminal, a first rental terminal, and a blockchain, wherein,

The first client is used to store the second private key fragments of the lessee, and send the subject matter use request data to the first renter, the subject matter use request data including the contract number corresponding to the subject matter;

The first rental terminal is used to receive the subject matter use request data, and is also used to retrieve the public key corresponding to the contract number and the first private key of the lessor from the blockchain according to the contract number. Based on the lessee’s second private key shard and the lessor’s first private key shard to jointly sign the subject matter use request data through secure multi-party computing, and use the public key to sign the subject matter Use the requested data for verification, and when the signature verification is passed, issue an open-use permission instruction to the first subject;

The first subject end is used to receive and respond to the open use permission instruction sent by the first rental end;

The blockchain is used to store contract lease information, public key and lessor’s first private key fragments, signed subject matter use request data, and verification results based on the contract number.

The second object terminal obtains the QR code information displayed by the second client, and the QR code information is generated by the lessor based on the contract lease information and the public key when the lease is signed;

Wherein, the contract lease information and the corresponding private key and public key are generated by the lessor when the lease is signed, and the private key is divided into at least two pieces, including the first private key segment used by the lessor for signing and the lease The second private key fragment used by the party for signing, the first private key fragment is stored on the first subject end, and the second private key fragment is stored on the second client;

The second object terminal decodes the two-dimensional code information, obtains contract lease information and a public key, and generates object use request data according to the contract lease information;

Obtaining, by the second object terminal, the first private key fragment corresponding to the contract number according to the contract number in the contract lease information;

The second subject end and the second client use a multi-party security algorithm to jointly sign the subject use request data based on the first private key fragment and the second private key fragment;

The second subject end uses the public key to verify the signed subject use request data, and when the signature verification is passed, the use right is opened.

On the other hand, the embodiments of this specification also provide a target end, the target end includes;

The decoding module is used to obtain the two-dimensional code information displayed by the second client, decode the two-dimensional code information, obtain contract lease information and public key, and generate subject matter use request data according to the contract lease information;

The third data acquisition module is configured to acquire the first private key fragment of the lessor corresponding to the contract number according to the contract number;

The third data signature module is used to jointly sign the subject matter use request data through a multi-party security algorithm based on the lessor’s first private key fragment and the lessee’s second private key fragment;

The third data verification module is configured to use the public key to verify the signed subject matter use request data;

The second permission opening module is used to open the usage permission when the signature verification is passed.

On the other hand, the embodiments of this specification also provide a client, the client includes a SIM card and/or TEE, a data storage module, and a data display module, wherein:

The SIM card and/or TEE is used to store the second private key fragments of the lessee;

The data storage module is used to store the QR code information generated from the public key and the contract lease information;

The data display module is used to display the two-dimensional code information, so that the lessor can decode the two-dimensional code information to obtain the public key and contract lease information, and generate a subject matter use request based on the contract lease information Data, and, according to the contract number in the contract lease information to obtain the lessor’s first private key fragment, based on the lessor’s first private key fragment and the lessee’s second private key fragment, the multi-party security algorithm The subject matter uses the request data for joint signature, and the public key is used to verify the signed subject matter use request data. When the signature verification is passed, the use authority is opened.

On the other hand, the embodiment of this specification also provides a temporary identity authentication system, the system includes a second client, a second subject end, a second rental end, and a blockchain, wherein,

The second client is used to store the second private key fragments of the lessee and the QR code information generated from the public key and the contract lease information;

The second subject end is used to obtain the two-dimensional code information displayed by the second client, decode the two-dimensional code information to obtain the public key and contract lease information, and generate the use of the subject matter according to the contract lease information Request data, and obtain the lessor’s first private key segment based on the contract number in the contract lease information. Based on the lessor’s first private key segment and the lessee’s second private key segment, the multi-party security algorithms The subject matter use request data is jointly signed, the public key is used to verify the signed subject matter use request data, and when the signature verification is passed, the use authority is opened;

The second rental terminal is used to receive the signed subject matter use request data and the verification result sent by the second subject matter terminal, and store the signed subject matter use request data and the verification result in the contract number based on the contract number. In the blockchain;

The blockchain is used to store contract lease information, signed subject matter use request data, and verification results based on the contract number.

The temporary identity authentication method, device, and system provided in one or more embodiments of this specification can automatically generate a public key and a private key after the lessor and the lessee reach an agreement, and divide the private key into at least two pieces. The party and the lessee each hold a private key. When the lessee uses the subject matter, the use request data can be jointly signed based on the lessee's second private key fragment and the lessor's first private key fragment through secure multi-party computing. Then, the public key is used to verify the correctness of the signature to verify the identity of the lessee and the right to use the subject matter. When the signature is verified, the subject matter develops the use right to the lessee. Using the various embodiments of this specification, by using a secure multi-party calculation of the joint signature, the user's right to temporarily use the subject matter can be quickly, simply and safely confirmed.

Description of the drawings

In order to more clearly explain the technical solutions in the embodiments of this specification or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments described in this specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative labor. In the attached picture:

FIG. 1 is a schematic flowchart of an embodiment of a temporary identity authentication method provided in this specification;

Figure 2 is a schematic diagram of the temporary identity authentication registration phase in an embodiment provided in this specification;

Fig. 3 is a schematic diagram of a temporary identity authentication use phase in another embodiment provided in this specification;

4 is a schematic flowchart of another embodiment of a temporary identity authentication method provided in this specification;

FIG. 5 is a schematic diagram of the temporary identity authentication registration stage in another embodiment provided in this specification;

FIG. 6 is a schematic diagram of a temporary identity authentication use phase in another embodiment provided in this specification;

FIG. 7 is a schematic flowchart of another embodiment of a temporary identity authentication method provided in this specification;

8 is a schematic diagram of the module structure of an embodiment of a temporary identity authentication device provided in this specification;

Fig. 9 is a schematic structural diagram of a server according to an exemplary embodiment of the present specification;

Figure 10 is a schematic structural diagram of a temporary identity authentication system in another embodiment provided in this specification;

Fig. 11 is a schematic structural diagram of a temporary identity authentication system in another embodiment provided in this specification.

Detailed ways

In order to enable those skilled in the art to better understand the technical solutions in this specification, the following will make clear and complete the technical solutions in one or more embodiments of this specification in conjunction with the drawings in one or more embodiments of this specification. It is obvious that the described embodiments are only a part of the embodiments in the specification, rather than all the embodiments. Based on one or more embodiments of the specification, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of the embodiment scheme of this specification.

Correspondingly, the embodiment of this specification provides a temporary identity authentication method, which can automatically generate a public key and a private key after an agreement is reached between the lessor and the lessee, and divide the private key into at least two pieces. Each party holds a private key. When the lessee uses the subject matter, the use request data can be jointly signed based on the lessee's second private key fragment and the lessor's first private key fragment through secure multi-party computing. Then, the public key is used to verify the correctness of the signature to verify the identity of the lessee and the right to use the subject matter. When the signature is verified, the subject matter develops the use right to the lessee. Using the various embodiments of this specification, by using a secure multi-party calculation of the joint signature, the user's right to temporarily use the subject matter can be quickly, simply and safely confirmed.

In the embodiments of this specification, the lessor may refer to the party that leases the subject matter to be leased among the two parties to the lease, and the lessee may refer to the party that leases the subject matter to be leased among the two parties to the lease. The subject matter may refer to the object to which the lessor and the lessee corresponding to the contract lease are directed together. The subject matter may refer to one or more types of leased properties, or one or more specific leased properties. . For example, for shared car rental, it can refer to all cars provided by the lessor, one or more models that meet certain requirements, or one or more specific cars. Make a limit. It can be determined by the lessor and/or lessee at the time of registration.

The client can include the terminal equipment of the lessee, for example, it can be a smart device such as a mobile phone, a computer, and a smart watch. The rental end may include the system, service period, or other terminal equipment corresponding to the lessor. The subject end may include smart devices corresponding to the subject to be rented, such as door locks for shared cars, shared apartments, or other smart control devices.

Before the lessee uses the subject matter for the first time, the lessor and the lessee may reach a certain use agreement in advance for the use of the subject matter. For example, in application scenarios corresponding to the sharing economy, such as shared cars and shared apartments, the lessee can register for the first use. In some implementations, the lessor may also require the lessee to perform identity information verification such as ID verification and biometric information verification in advance. After the verification is passed, further use registration is performed, such as entering the subject matter to be leased, the lease period, the use authority, etc.

In some implementations, during the registration process, the lessor system can also generate a corresponding private key and public key. The private key can be divided into at least two parts, one part stored in the lessor and the other part stored in the lessee. After the registration is completed, contract lease information can be generated, and each contract lease information can correspond to a contract number. The contract number can be used to identify the lease information, private key, public key, and later use record data, etc., to improve the accuracy and simplicity of authorization verification and data query during the entire use process. Correspondingly, the contract lease information may include the contract number, the lessor, the identity of the lessee, the rental period, the rental subject matter, the use authority, etc.

After completing the registration, the lessee can associate its corresponding private key fragment with the contract number and save it in a safe area. In some implementations, the lessee may slice its private key into the SIM card (Subscriber Identification Module, user identification card) of its terminal device or the TEE (Trust Execution Environment) of the CPU (Central Processing Unit), trusted execution environment ), or split into smaller pieces and store them in the SIM card and TEE respectively. The lessor may associate the private key segment corresponding to the lessor with the contract number and store it in the lessor's system.

In some embodiments, the public key and the contract lease information may also be associated with the contract number and stored in the lessor’s system together with the lessor’s private key fragments. In an embodiment of this specification, the public key, the private key fragment of the lessor, and the contract lease information may be associated with the contract number and uploaded by the lessor to the blockchain for storage.

In other embodiments, the public key and the contract lease information may also be stored in the terminal device of the lessee after being associated with the contract number by the lessee. In an embodiment of this specification, the public key and the contract lease information can be converted into a QR code and sent to the lessee, and the lessee will save it in its corresponding terminal device. Accordingly, when the lessee uses the subject matter, it can Directly use the QR code scanning to start identity verification, which improves the simplicity of starting identity verification.

After completing registration, private key distribution, and data storage, the lessee can initiate a use request when using the subject matter, and use the subject matter after the right to use and identity verification are passed. Correspondingly, FIG. 1 shows a schematic flowchart of a temporary identity authentication method provided in this specification. As shown in Figure 1, in an embodiment of the temporary identity authentication method provided in this specification, the method may include:

S102: Acquire subject matter use request data, where the subject matter use request data includes a contract number corresponding to the subject matter.

The lessor may obtain the subject matter use request data of the lessee, and the subject matter use request data may include the contract number, the use time, the ID corresponding to the client, and the like. In some implementations, the use request data may also include parameter data of the subject matter to be rented. For example, in a shared car application scenario, the use request data may also include the license plate number and location of the subject matter to be rented. Wait.

In some embodiments of this specification, the lessee may send the subject matter use request data through its corresponding terminal device, and the subject matter use request data may be generated on the terminal device corresponding to the lessee and sent to it via Bluetooth, wifi, etc. The terminal device or server corresponding to the lessor.

In other embodiments of the present specification, the obtaining of the subject matter use request data may further include: obtaining subject matter use request two-dimensional code information, the two-dimensional code information is based on the public key and the contract lease when the lease is signed by the lessor Information generation; decoding the two-dimensional code information to obtain contract lease information, and generate subject matter use request data based on the contract lease information.

If when the contract lease is signed, the lessor converts the public key and the contract lease information into a QR code and sends it to the lessee, then the lessee can directly use the QR code to scan to initiate identity verification. Correspondingly, the lessor can scan and recognize the two-dimensional code, and decode the two-dimensional code to obtain the corresponding contract lease information and public key information. At the same time, the subject matter use request data can be generated based on the contract lease information, the requested time, place, and parameters corresponding to the subject matter. Correspondingly, the subject matter use request data contains a contract number, and the contract number is used for identification.

S104: Obtain the public key corresponding to the contract number and the first private key fragment of the lessor according to the contract number.

The lessor can obtain the contract lease information corresponding to the contract number, the public key, and the lessor's first private key fragment. In some implementations, if the lessor associates the generated contract lease information, public key, and lessor's first private key fragments with the contract number, upload them to the blockchain for storage. Correspondingly, after receiving the subject matter data request data, the lessor can obtain the contract lease information, the public key, and the lessor’s first private key fragment corresponding to the contract number from the blockchain according to the contract number.

In other embodiments, if the lessee uses the QR code to initiate a use request, the lessor can obtain the corresponding public key information after decoding the QR code. Then, the lessor can also obtain the contract number after decoding the two-dimensional code, and then retrieve the lessor’s first private key segment from the lessor’s terminal device, server system or blockchain according to the contract number.

S106: Perform a joint signature on the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment.

After obtaining the public key corresponding to the contract number and the lessor’s first private key fragments, the lessor can initiate a joint signature on the use request data. Correspondingly, during the joint signature verification process, the lessee can also retrieve the second private key segment corresponding to the contract number from its corresponding terminal device according to the contract number.

The lessor and the lessee can jointly sign the use request data through secure multi-party calculation based on the lessor's first private key fragment and the lessee's second private key fragment. Secure multi-party computing can provide collaborative computing capabilities for raw data without pooling. Using secure multi-party computing to combine the private key shards of the two parties for collaborative computing can ensure that the private key data of both parties does not leave their respective nodes. Under the premise, complete the joint signature.

S108: Use the public key to verify the signed subject matter use request data, and when the signature verification is passed, the use right is opened.

After the two parties use their private keys to complete the multi-party security calculation joint signature of the use request data, the lessor can use the public key to verify the signed subject use request data to determine the identity and use right of the lessee. The use of secure multi-party calculations for joint signatures and the use of public keys to verify the correctness of the joint signatures can effectively ensure the confidentiality of the private keys of the two parties, while achieving simple, effective and safe confirmation of the identity of the tenant.

If the signature verification is passed, the identity and usage rights of the lessee can be confirmed. Accordingly, the smart device corresponding to the subject matter can open the usage rights to the lessee. For example, the door lock of the shared car is opened, and at the same time, the control device of the shared car develops the use authority to the lessee, and the lessee can start the shared car.

When the lease expires, the system can also automatically delete the user's right to use. For example, the right to use the lessee can be disabled, or the private key and public key data corresponding to the lease can be deleted. When the lease expires or the signature verification is incorrect, the lessor can send a verification failure message to the lessee.

In an embodiment of this specification, the lessor may also upload the signed use request data and the verification result to the blockchain according to the contract number. By entering each calculation and use request into the blockchain according to the contract number, subsequent data query can be facilitated.

In another embodiment of this specification, after using the public key to sign and verify the signed subject matter use request data, the lessor can also use the subject matter use request data according to the contract lease information Right to verify.

The contract lease information may include restrictions such as the user's usage authority, the model or type of the subject matter, and so on. The lessor can also verify the current use request based on the contractual lease information. If the current use request is not within the lease period of the subject matter, or the subject matter currently to be leased does not meet the requirements of the contract lease information, etc., the renter can feed back information about the failure of the relevant request to the client, and at the same time, it can also send the use The reason for the request failure, etc. If the use right verification corresponding to the current use request is passed, the subject matter can develop the use right to the lessee.

In the solution provided by the above embodiments, after the initial verification of the identity of the lessee and the right to use, the use authority, the model or type of the subject matter, etc. are further verified according to the contract lease information, which can further accurately confirm the user’s lease of the subject matter. Use permissions.

Figures 2 and 3 show a schematic diagram of a temporary use right and identity authentication process in a scenario embodiment provided in this specification.

As shown in Figure 2, after completing the registration, the lessee can associate its corresponding private key fragment with the contract number and save it in a safe area. In some embodiments, the lessee may divide its private key into the SIM card of its terminal device or the TEE of the CPU, or divide it into smaller pieces and store them in the SIM card and TEE respectively. The lessor can associate the public key, the private key fragment corresponding to the lessor, and the contract lease information with the contract number, and the lessor can register the information in the blockchain for storage.

After completing registration, private key distribution, and data storage, the lessee can initiate a use request when using the subject matter, and use the subject matter after the right to use and identity verification are passed. As shown in Figure 3, the user can initiate a use request through the client, and the client can send the use request data to the smart device corresponding to the subject matter such as the apartment or car to be rented through Bluetooth, WIFI, etc., correspondingly, the use request The data can include contract number, usage time, parameter data of the subject to be leased, client ID, etc. The smart device corresponding to the subject matter can send the use request data to the renter, so that the renter can verify the identity and temporary use right.

After receiving the use request data, the renter can read the first private key segment and public key of the renter corresponding to the merge number from the blockchain according to the contract number in the use request data. Then, the first private key segment of the joint lessor and the second private key segment of the lessee can be used to jointly sign the usage request data through a secure multi-party calculation. Then, the public key can be used to verify the correctness of the joint signature.

After the verification is passed, the rental terminal can send an instruction to open the use permission to the smart device corresponding to the subject matter, for example, an instruction to open the smart door lock. Of course, after the signature verification is passed, the rental terminal can further verify the use permission of the use request, the model or type of the subject matter, etc. according to the contract lease information, and then, after the second verification is passed, the smart device corresponding to the subject matter Send an open access instruction. At the same time, the rental terminal can also record each calculation and usage status in the blockchain according to the lease contract number to facilitate subsequent traceability.

Figure 4 shows a schematic flow diagram of another temporary identity authentication method provided in this specification. As shown in FIG. 4, based on the foregoing scenario embodiment, one or more embodiments of this specification also provide a temporary identity authentication method, and the method may include:

S202: The first client sends subject matter use request data to the first rental terminal, where the subject matter use request data includes a contract number corresponding to the subject matter;

S204: The first rental terminal receives the subject matter use request data, and obtains the public key corresponding to the contract number and the first private key fragment of the lessor from the blockchain according to the contract number;

Wherein, the private key and public key corresponding to the contract number are generated by the first renter when the lease is signed, and the private key is divided into at least two pieces, including the first private key fragment and the renter used by the lessor for signing The second private key fragment used by the party for signing, the public key and the first private key fragment are pre-stored in the blockchain by the lessor based on the contract number, and the second private key fragment is stored in the first In a client;

S206: The first client and the first renter jointly sign the subject matter use request data through a multi-party security algorithm based on the first private key fragment and the second private key fragment;

S208: The first renting terminal uses the public key to verify the signed subject matter use request data, and when the signature verification is passed, it issues an open use permission instruction to the first subject matter terminal, so that the first subject matter terminal Open access.

The first rental end may receive the subject matter use request data sent by the first client, and then, according to the contract number in the subject matter use request data, obtain the public key corresponding to the contract number and the lessor’s second from the blockchain. A private key fragment. Then, the first renter and the first renter can use the first private key fragment of the lessor and the second private key fragment of the lessee to perform a secure multiparty calculation signature based on the secure multiparty computing protocol, and use the public key to join The correctness of the signature is verified to verify the identity of the tenant and the right to use. The specific implementation can be done with reference to the above-mentioned embodiments, which will not be repeated here.

It should be noted that the first client, the second client, the first rental terminal, the second rental terminal, etc. in the embodiments of this specification are merely differentiated definitions for ease of description. In actual use, the structure of each terminal And the function can be the same or different, which is determined by the specific implementation.

Utilizing the solution provided by the foregoing embodiment, the two-party joint signature is performed to verify the lessee based on secure multi-party calculation, which can greatly improve the convenience and security of the use right and identity verification during the use of the leased property.

Optionally, in another embodiment of this specification, the method may further include:

When the signature verification is passed, the first leaser obtains the contract lease information corresponding to the contract number from the blockchain according to the contract number, wherein the contract lease information corresponding to the contract number is pre-assigned by the lessor based on the contract The serial number is stored in the blockchain;

The first rental terminal verifies the use right of the subject matter use request data according to the contract lease information;

Correspondingly, after the verification of the use right is passed, the first rental terminal issues an instruction to open the use right to the first subject end, so that the first subject end opens the use right.

Using the solution provided by the foregoing embodiment, the user's right to use the leased subject matter can be further accurately confirmed.

The first rental terminal stores the signed subject matter use request data and the verification result in the blockchain based on the contract number.

The solution provided by the foregoing embodiment records each calculation and usage situation in the blockchain according to the lease contract number, which can facilitate data query during the entire lease process.

For the specific implementation of one or more of the foregoing embodiments, reference may be made to the description of the foregoing related processing embodiments, and details are not repeated here.

In each of the above-mentioned embodiments of this specification, the private key is split and allocated to the lessor and the lessee respectively, and the lessee and the lessee are kept separately. The lessee can store the private key fragments in the SIM card and/or TEE of its smart device, and the lessor can use the blockchain to store the private key fragment information, thereby further improving the security of the private key fragment storage. Then, in actual use, the two parties can use their respective private key fragments to complete the joint signature based on the secure multi-party computing protocol under the premise that the private key data of the two parties does not leave their respective nodes. Then, the lessor can use the public key to verify the correctness of the signature, so as to realize the fast and safe verification of the identity of the lessee. Using the various embodiments of the present specification can greatly improve the convenience and security of the use right and identity verification during the use of the leased property.

5 and 6 are schematic diagrams of the temporary use right and identity authentication process in another scenario embodiment provided in this specification.

As shown in Figure 5, after completing the registration, the lessee can associate its corresponding private key fragment with the contract number and save it in a secure area. In some embodiments, the lessee may divide its private key into the SIM card of its terminal device or the TEE of the CPU, or divide it into smaller pieces and store them in the SIM card and TEE respectively. The lessor may associate the private key fragment corresponding to the lessor with the contract number, and the lessor may send the private key fragment to the target object for storage. At the same time, the lessor can also convert the public key and the contract lease information into a QR code and send it to the lessee, and the lessee will save it in its corresponding terminal device.

After completing registration, private key distribution, and data storage, the lessee can initiate a use request when using the subject matter, and use the subject matter after the right to use and identity verification are passed. As shown in Figure 6, the user can display the pre-saved QR code through the client, and the subject end can scan and recognize the QR code and decode the QR code to obtain the contract lease information and the public key. At the same time, the subject matter use request data can be generated based on the contract lease information, the requested time, place, and parameters corresponding to the subject matter.

After the subject matter end generates the subject matter use request data, it can initiate a joint signature, and the lessee and the lessor use the private key fragments of both parties to perform a multi-party security calculation joint signature on the subject matter use request data. In some implementations, a connection between the subject end and the client can be established through methods such as Bluetooth, WIFI, infrared, wireless, etc., and multi-party security calculations can be used on the connection channel to verify the validity of the lease. During the verification process, the private keys of the two parties can be used to jointly sign the usage request data (ie usage record) used this time.

Then, the subject end can use the public key to verify the signature, and if the verification is correct, it can open the use right to the lessee. Of course, after the signature verification is passed, the subject end or the rental end can further verify the use permission of the use request, the model or type of the subject matter, etc. according to the contract lease information, and then, after the second verification is passed, the subject end will send the The lessee opens the right to use.

At the same time, the subject end can also associate each calculation and usage with the contract number and send it to the rental end, which will record it in the blockchain according to the contract number to facilitate subsequent traceability.

Figure 7 shows a schematic flow diagram of another temporary identity authentication method provided in this specification. As shown in FIG. 7, based on the foregoing scenario embodiment, one or more embodiments of this specification also provide a temporary identity authentication method, and the method may include:

S302: The second object terminal obtains the QR code information displayed by the second client, and the QR code information is generated by the lessor based on the contract lease information and the public key when the lease is signed;

S304: The second object terminal decodes the two-dimensional code information, obtains contract lease information and a public key, and generates object use request data according to the contract lease information;

S306: The second object terminal obtains the first private key fragment corresponding to the contract number according to the contract number in the contract lease information;

S308: The second subject end and the second client jointly sign the subject use request data through a multi-party security algorithm based on the first private key fragment and the second private key fragment;

S310: The second subject end uses the public key to verify the signed subject use request data, and when the signature verification passes, the use right is opened.

The private key and public key can be generated when the lease is signed, and then the private key is split and kept separately by the lessor and the lessee. Then, the contract lease information and public key can be converted into a QR code and sent to the lessee. The lessee can use the QR code scan to initiate identity verification during actual use. Then, the lessor and the lessee can use the private keys of the two parties to perform multi-party secure calculation of joint signatures. The lessor then uses the public key to verify the correctness of the signature, and then confirm the lessee's identity and usage rights.

Since the above two-dimensional code only contains the relevant public key part and not the private key part, even if the lessee’s two-dimensional code is maliciously stolen by a third party, the thief does not have the corresponding private key when scanning the two-dimensional code. The key can't carry out the corresponding joint signature, so it will not get the legal right to use.

Preferably, in another embodiment of this specification, the method may further include:

When the signature verification is passed, the second subject end verifies the use right of the subject matter use request data according to the contract lease information obtained after decoding the QR code;

Correspondingly, after the verification of the use right is passed, the end of the second target object opens the use right.

The second object terminal sends the signed object use request data and the verification result to the second rental terminal;

The second rental terminal stores the signed subject matter use request data and the verification result in the blockchain based on the contract number.

Using the foregoing embodiments of this specification, the lessee can directly use the QR code to verify the use right, which greatly improves the convenience of the use right verification. At the same time, since the two-dimensional code only contains the public key, and the two parties must jointly sign in the verification process to achieve the correct verification of the use right, which further improves the security of the use right verification.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. For details, reference may be made to the description of the foregoing related processing related embodiments, which will not be repeated here.

The foregoing describes specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims may be performed in a different order than in the embodiments and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown to achieve the desired result. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

The temporary identity authentication method provided by one or more embodiments of this specification can automatically generate a public key and a private key after an agreement is reached between the lessor and the lessee, and divide the private key into at least two pieces. Each holds a private key. When the lessee uses the subject matter, the use request data can be jointly signed based on the lessee's second private key fragment and the lessor's first private key fragment through secure multi-party computing. Then, the public key is used to verify the correctness of the signature to verify the identity of the lessee and the right to use the subject matter. When the signature is verified, the subject matter develops the use right to the lessee. Using the various embodiments of this specification, by using a secure multi-party calculation of the joint signature, the user's right to temporarily use the subject matter can be quickly, simply and safely confirmed.

Based on the aforementioned temporary identity authentication method, one or more embodiments of this specification also provide a temporary identity authentication device. The described devices may include systems, software (applications), modules, components, servers, etc. that use the methods described in the embodiments of this specification, combined with necessary implementation hardware devices. Based on the same innovative concept, the devices in one or more embodiments provided in the embodiments of this specification are as described in the following embodiments. Since the implementation scheme of the device to solve the problem is similar to the method, the implementation of the specific device in the embodiment of this specification can refer to the implementation of the foregoing method, and the repetition will not be repeated. As used below, the term "unit" or "module" can be a combination of software and/or hardware that implements predetermined functions. Although the devices described in the following embodiments are preferably implemented by software, hardware or a combination of software and hardware is also possible and conceived. Specifically, FIG. 8 shows a schematic diagram of the module structure of an embodiment of a temporary identity authentication device provided in the specification. As shown in FIG. 8, the device may include:

The first data acquisition module 402 may be used to acquire subject matter use request data, where the subject matter use request data includes a contract number corresponding to the subject matter;

The second data acquisition module 404 can be used to acquire the public key corresponding to the contract number and the first private key fragment of the lessor according to the contract number, wherein the private key and the public key corresponding to the contract number are leased The party generates when the lease is signed, and the private key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the second private key fragment used by the lessee for signing;

The first data signature module 406 may be used to jointly sign the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment;

The first data verification module 408 may be used to verify the signed subject matter use request data by using the public key;

The first permission opening module 410 can be used to open the usage permission when the signature verification is passed.

Utilizing the solution provided by the foregoing embodiment, the two-party joint signature is performed to verify the lessee based on secure multi-party calculation, which can greatly improve the convenience and security of the right to use and identity verification during the use of the leased property.

In another embodiment of this specification, the second data acquisition module 404 may include:

The first data obtaining unit may be used to obtain the public key corresponding to the contract number and the first private key fragment of the lessor from the blockchain according to the contract number, wherein the public key corresponding to the contract number and The lessor’s first private key segment is previously stored in the blockchain by the lessor based on the contract number.

In another embodiment of the present specification, the first data acquisition module 402 may include:

The second data acquisition unit may be used to acquire the two-dimensional code information of the subject matter use request, wherein the two-dimensional code information is generated by the lessor based on the public key and the contract lease information when the lease is signed;

The decoding unit may be used to decode the two-dimensional code information to obtain contract lease information, and generate subject matter use request data according to the contract lease information;

Correspondingly, the second data obtaining module 404 may also be used to obtain the public key corresponding to the contract number from the data obtained after decoding the two-dimensional code information.

In another embodiment of the present specification, the device may further include:

The use right confirmation module may be used to obtain the contract lease information corresponding to the contract number according to the contract number when the signature verification is passed, and verify the use right of the subject matter use request data according to the contract lease information;

Correspondingly, the first permission development module 410 can also be used to open the usage right after the usage right is verified.

The data update module can be used to store the signed subject matter use request data and the verification result in the blockchain based on the contract number.

Another embodiment of this specification also provides a rental terminal, which may include:

The data receiving module may be used to receive subject matter use request data, where the subject matter use request data includes the contract number corresponding to the subject matter;

The data retrieval module can be used to retrieve the public key corresponding to the contract number and the first private key fragment of the lessor from the blockchain according to the contract number, wherein,

The second data signature module may be used to jointly sign the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment;

The second data verification module may be used to verify the signed subject matter use request data by using the public key;

The instruction sending module can be used to issue an open use permission instruction to the subject end when the signature verification is passed.

Another embodiment of this specification also provides a client. The client may include a SIM card and/or TEE, and a data sending module, wherein the SIM card and/or TEE is used to store the tenant’s Two private key fragments;

The data sending module may be used to send subject matter use request data. The subject matter use request data includes the contract number corresponding to the subject matter, so that the lessor can receive the subject matter use request data and obtain it according to the contract number. The public key corresponding to the contract number and the lessor’s first private key shard, and based on the lessor’s first private key shard and the lessee’s second private key shard to the subject matter through secure multi-party calculations The request data is used for joint signature, and the public key is used to verify the signed subject matter use request data. When the signature verification is passed, the use authority is opened.

Another embodiment of this specification also provides a target end, and the target end may include;

The decoding module can be used to obtain the two-dimensional code information displayed by the second client, decode the two-dimensional code information, obtain contract lease information and public key, and generate subject matter use request data based on the contract lease information ；

The third data acquisition module may be used to acquire the first private key fragment of the lessor corresponding to the contract number according to the contract number;

The third data signature module can be used to jointly sign the subject matter use request data through a multi-party security algorithm based on the lessor’s first private key fragment and the lessee’s second private key fragment;

The third data verification module can be used to verify the signed subject matter use request data by using the public key;

The second permission opening module can be used to open the usage permission when the signature verification is passed.

Another embodiment of this specification also provides a client, the client may include a SIM card and/or TEE, a data storage module, and a data display module, where:

The SIM card and/or TEE may be used to store the second private key fragments of the lessee;

The data storage module can be used to store the QR code information generated from the public key and the contract lease information;

The data display module can be used to display the two-dimensional code information, so that the lessor can decode the two-dimensional code information to obtain the public key and contract lease information, and generate the use of the subject matter according to the contract lease information Request data, and obtain the lessor’s first private key segment based on the contract number in the contract lease information. Based on the lessor’s first private key segment and the lessee’s second private key segment, the multi-party security algorithms The subject matter uses request data for joint signature, and the public key is used to verify the signed subject matter use request data. When the signature verification is passed, the use authority is opened.

It should be noted that the above-mentioned device may also include other implementation manners according to the description of the method embodiment. For specific implementation manners, reference may be made to the description of the related method embodiments, which will not be repeated here.

The temporary identity authentication device provided by one or more embodiments of this specification can automatically generate a public key and a private key after the lessor and the lessee reach an agreement, and divide the private key into at least two pieces. The lessor and the lessee Each holds a private key. When the lessee uses the subject matter, the use request data can be jointly signed based on the lessee's second private key fragment and the lessor's first private key fragment through secure multi-party computing. Then, the public key is used to verify the correctness of the signature to verify the identity of the lessee and the right to use the subject matter. When the signature is verified, the subject matter develops the use right to the lessee. Using the various embodiments of this specification, by using a secure multi-party calculation of the joint signature, the user's right to temporarily use the subject matter can be quickly, simply and safely confirmed.

The method or device described in the foregoing embodiment provided in this specification can implement business logic through a computer program and record it on a storage medium, and the storage medium can be read and executed by a computer to achieve the effects of the solution described in the embodiment of this specification. Therefore, this specification also provides a temporary identity authentication device, including a processor and a memory storing executable instructions of the processor. When the instructions are executed by the processor, the temporary identity authentication method described in any of the above embodiments is implemented. step.

The method embodiments provided in the embodiments of this specification can be executed in a mobile terminal, a computer terminal, a server or a similar computing device. Taking running on a server as an example, FIG. 9 is a hardware structural block diagram of a temporary identity authentication server applying the embodiment of this specification. As shown in FIG. 9, the server 10 may include one or more (only one is shown in the figure) processor 100 (the processor 100 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA), The memory 200 for storing data, and the transmission module 300 for communication functions. Those of ordinary skill in the neighborhood can understand that the structure shown in FIG. 9 is only for illustration, and does not limit the structure of the above-mentioned electronic device. For example, the server 10 may also include more or fewer components than shown in FIG. 9, for example, may also include other processing hardware, such as a database or multi-level cache, GPU, or have a different configuration from that shown in FIG. 9.

The memory 200 can be used to store software programs and modules of application software, such as program instructions/modules corresponding to the search method in the embodiment of the present invention. The processor 100 executes various functions by running the software programs and modules stored in the memory 200 Application and data processing. The memory 200 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 200 may further include a memory remotely provided with respect to the processor 100, and these remote memories may be connected to a computer terminal through a network. Examples of the aforementioned networks include but are not limited to the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

The transmission module 300 is used to receive or send data via a network. The foregoing specific examples of the network may include a wireless network provided by a communication provider of a computer terminal. In one example, the transmission module 300 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station to communicate with the Internet. In an example, the transmission module 300 may be a radio frequency (RF) module, which is used to communicate with the Internet in a wireless manner.

The storage medium may include a physical device for storing information, and the information is usually digitized and then stored in an electric, magnetic, or optical medium. The storage medium may include: devices that use electrical energy to store information, such as various types of memory, such as RAM, ROM, etc.; devices that use magnetic energy to store information, such as hard disks, floppy disks, magnetic tapes, magnetic core memory, bubble memory, U disk; a device that uses optical means to store information, such as CD or DVD. Of course, there are other ways of readable storage media, such as quantum memory, graphene memory, and so on.

The temporary identity authentication device described in the above embodiment can automatically generate a public key and a private key after the lessor and the lessee reach an agreement, and divide the private key into at least two pieces, and the lessor and the lessee each hold one piece of private key. key. When the lessee uses the subject matter, the use request data can be jointly signed based on the lessee's second private key fragment and the lessor's first private key fragment through secure multi-party computing. Then, the public key is used to verify the correctness of the signature to verify the identity of the lessee and the right to use the subject matter. When the signature is verified, the subject matter develops the use right to the lessee. Using the various embodiments of this specification, by using a secure multi-party calculation of the joint signature, the user's right to temporarily use the subject matter can be quickly, simply and safely confirmed.

This specification also provides a temporary identity authentication system, which can be a separate temporary identity authentication system, or can be applied to a variety of computer data processing systems. The system can be a single server, or it can include server clusters, systems (including distributed systems), software (applications), and one or more of the methods described in this specification or one or more embodiments of the device. The actual operation device, logic gate circuit device, quantum computer, etc., combined with the terminal device necessary to implement the hardware. The temporary identity authentication system may include at least one processor and a memory storing computer-executable instructions. The processor implements the steps of the method in any one or more of the foregoing embodiments when executing the instructions.

Fig. 10 shows a schematic structural diagram of a temporary identity authentication system provided by one or more embodiments of this specification. As shown in FIG. 10, the temporary identity authentication system may include a first client, a first object terminal, a first rental terminal, and a blockchain.

The first client may be used to store the second private key fragments of the lessee and send the subject matter use request data to the first renter, where the subject matter use request data includes the contract number corresponding to the subject matter.

The first rental terminal can be used to receive the subject matter use request data, and also to retrieve the public key corresponding to the contract number and the first private key of the lessor from the blockchain according to the contract number Based on the lessee’s second private key shard and the lessor’s first private key shard to jointly sign the subject matter use request data through secure multi-party computation, and use the public key to sign the subject matter The object use request data is verified, and when the signature verification is passed, an instruction to open the use permission is issued to the first object end.

The first object terminal may be used to receive and respond to the open usage permission instruction sent by the first rental terminal.

The blockchain can be used to store contract lease information, public key and lessor’s first private key fragments, signed subject matter use request data, and verification results based on the contract number.

Fig. 11 shows a schematic structural diagram of a temporary identity authentication system provided by another embodiment of this specification. As shown in FIG. 11, the temporary identity authentication system may include a second client, a second object terminal, a second lease terminal, and a blockchain.

The second client can be used to store the second private key fragments of the lessee and the QR code information generated from the public key and the contract lease information;

The second object terminal can be used to obtain the QR code information displayed by the second client, decode the QR code information to obtain the public key and contract lease information, and generate the object according to the contract lease information Use the request data, and obtain the lessor’s first private key segment based on the contract number in the contract lease information. Based on the lessor’s first private key segment and the lessee’s second private key segment, the multi-party security algorithm is used to pair The subject matter uses request data to perform a joint signature, the public key is used to verify the signed subject matter use request data, and when the signature verification is passed, the use authority is opened;

The second rental end may be used to receive the signed subject matter use request data and verification result sent by the second subject matter end, and store the signed subject matter use request data and verification result based on the contract number To the blockchain;

The blockchain can be used to store contract lease information and signed subject matter use request data and verification results based on the contract number.

It should be noted that the above-mentioned system may also include other implementation manners based on the description of the method or device embodiment. For the specific implementation manner, reference may be made to the description of the relevant method embodiment, which will not be repeated here.

The temporary identity authentication system described in the above embodiment can automatically generate a public key and a private key after the lessor and the lessee reach an agreement, and divide the private key into at least two pieces. The lessor and the lessee each hold a piece of private key. key. When the lessee uses the subject matter, the use request data can be jointly signed based on the lessee's second private key fragment and the lessor's first private key fragment through secure multi-party computing. Then, the public key is used to verify the correctness of the signature to verify the identity of the lessee and the right to use the subject matter. When the signature is verified, the subject matter develops the use right to the lessee. Using the various embodiments of this specification, by using a secure multi-party calculation of the joint signature, the user's right to temporarily use the subject matter can be quickly, simply and safely confirmed.

It should be noted that the device or system described above in this specification may also include other implementation manners based on the description of the related method embodiments. For specific implementation manners, refer to the description of the method embodiments, which will not be repeated here. The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the hardware+program and storage medium+program embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiments.

The embodiments of this specification are not limited to the conditions described in the embodiments of this specification that must conform to the standard data model/template. Certain industry standards or implementations described in custom methods or examples with slight modifications can also achieve the same, equivalent or similar implementation effects of the foregoing examples, or predictable implementation effects after modification. The examples obtained by applying these modified or deformed data acquisition, storage, judgment, processing methods, etc., may still fall within the scope of the optional implementation solutions of this specification.

The systems, devices, modules, or units illustrated in the above embodiments may be specifically implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a vehicle-mounted human-computer interaction device, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, and a tablet. Computers, wearable devices, or any combination of these devices.

For the convenience of description, when describing the above device, the functions are divided into various modules and described separately. Of course, when implementing one or more of this specification, the function of each module can be realized in the same one or more software and/or hardware, or the module that realizes the same function can be realized by a combination of multiple sub-modules or sub-units, etc. . The device embodiments described above are merely illustrative, for example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components can be combined or integrated To another system, or some features can be ignored, or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, it is entirely possible to program the method steps to make the controller use logic gates, switches, application specific integrated circuits, programmable logic controllers and embedded The same function can be realized in the form of a microcontroller, etc. Therefore, such a controller can be regarded as a hardware component, and the devices included in the controller for realizing various functions can also be regarded as a structure within the hardware component. Or even, the device for realizing various functions can be regarded as both a software module for realizing the method and a structure within a hardware component.

The present invention is described with reference to flowcharts and/or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and/or block in the flowchart and/or block diagram, and the combination of processes and/or blocks in the flowchart and/or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing equipment to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing equipment are generated It is a device that realizes the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing functions specified in a flow or multiple flows in the flowchart and/or a block or multiple blocks in the block diagram.

In a typical configuration, the computing device includes one or more processors (CPU), input/output interfaces, network interfaces, and memory.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, product or equipment including a series of elements not only includes those elements, but also includes Other elements that are not explicitly listed, or include elements inherent to this process, method, commodity, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other same elements in the process, method, or device that includes the element.

Those skilled in the art should understand that one or more embodiments of this specification can be provided as a method, a system, or a computer program product. Therefore, one or more embodiments of this specification may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, one or more embodiments of this specification may adopt a computer program implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. The form of the product.

One or more embodiments of this specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of this specification can also be practiced in distributed computing environments. In these distributed computing environments, tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment. In the description of this specification, descriptions with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" etc. mean specific features described in conjunction with the embodiment or example , Structure, materials or features are included in at least one embodiment or example in this specification. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the described specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine the different embodiments or examples and the characteristics of the different embodiments or examples described in this specification without contradicting each other.

The above descriptions are only examples of this specification and are not intended to limit this specification. For those skilled in the art, this specification can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this specification shall be included in the scope of the claims of this specification.

Claims

A temporary identity authentication method, characterized in that it comprises:

Obtain subject matter use request data, where the subject matter use request data includes the contract number corresponding to the subject matter;

Obtain the public key corresponding to the contract number and the lessor’s first private key fragment according to the contract number, wherein the private key and public key corresponding to the contract number are generated by the lessor when the lease is signed, and the private The key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the second private key fragment used by the lessee for signing;

Perform a joint signature on the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment;

The public key is used to verify the signed subject matter use request data, and when the signature verification is passed, the use right is opened.
The method according to claim 1, wherein the obtaining the public key corresponding to the contract number and the first private key fragment of the lessor according to the contract number comprises:

Obtain the public key corresponding to the contract number and the lessor’s first private key fragment from the blockchain according to the contract number, wherein the public key corresponding to the contract number and the lessor’s first private key fragment It is stored in the blockchain by the lessor based on the contract number in advance.
The method according to claim 1, wherein said obtaining subject matter use request data comprises:

Obtain the two-dimensional code information of the target use request, the two-dimensional code information is generated by the lessor based on the public key and the contract lease information when the lease is signed;

Decoding the two-dimensional code information to obtain contract lease information, and generate subject matter use request data according to the contract lease information;

Correspondingly, the obtaining the public key corresponding to the contract number according to the contract number includes obtaining the public key corresponding to the contract number from the data obtained after decoding the two-dimensional code information.
The method according to any one of claims 1-3, wherein the method further comprises:

When the signature verification is passed, obtain the contract lease information corresponding to the contract number according to the contract number;

The use right verification is performed on the subject matter use request data according to the contract lease information, and correspondingly, the use right is opened after the use right verification is passed.
The method according to claim 4, wherein the method further comprises:

The signed subject matter use request data and the verification result are stored in the blockchain based on the contract number.
A temporary identity authentication device, characterized in that the device includes:

The first data acquisition module is configured to acquire subject matter use request data, where the subject matter use request data includes the contract number corresponding to the subject matter;

The second data acquisition module is used to acquire the public key corresponding to the contract number and the lessor’s first private key fragments according to the contract number, wherein the private key and public key corresponding to the contract number are shared by the lessor Generated when the lease is signed, the private key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the second private key fragment used by the lessee for signing;

The first data signature module is configured to jointly sign the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment;

The first data verification module is configured to use the public key to verify the signed subject matter use request data;

The first permission opening module is used to open the usage permission when the signature verification is passed.
The device according to claim 6, wherein the second data acquisition module comprises:

The first data acquisition unit is configured to acquire the public key corresponding to the contract number and the first private key segment of the lessor from the blockchain according to the contract number, wherein the public key corresponding to the contract number and the lease The first private key segment of the party is pre-stored in the blockchain by the lessor based on the contract number.
The device according to claim 6, wherein the first data acquisition module comprises:

The second data acquisition unit is used to acquire the two-dimensional code information of the subject matter use request, wherein the two-dimensional code information is generated by the lessor based on the public key and the contract lease information when the lease is signed;

A decoding unit, configured to decode the two-dimensional code information to obtain contract lease information, and generate subject matter use request data according to the contract lease information;

Correspondingly, the second data obtaining module is further configured to obtain the public key corresponding to the contract number from the data obtained after decoding the two-dimensional code information.
The device according to any one of claims 6-8, wherein the device further comprises:

The use right confirmation module is configured to obtain the contract lease information corresponding to the contract number according to the contract number when the signature verification is passed, and verify the use right of the subject matter use request data according to the contract lease information;

Correspondingly, the first permission development module is also used to open the usage right after the usage right is verified.
The device according to claim 9, wherein the device further comprises:

The data update module is used to store the signed subject matter use request data and the verification result in the blockchain based on the contract number.
A temporary identity authentication device, characterized by comprising a processor and a memory for storing executable instructions of the processor. When the instructions are executed by the processor, the method including the method according to any one of claims 1 to 5 is realized. step.
A temporary identity authentication method, characterized in that it comprises:

The first client sends the subject matter use request data to the first rental terminal, where the subject matter use request data includes the contract number corresponding to the subject matter;

The first rental terminal receives the subject matter use request data, and obtains the public key corresponding to the contract number and the first private key fragment of the lessor from the blockchain according to the contract number, wherein,

The private key and public key corresponding to the contract number are generated by the first lessor when the lease is signed. The private key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the lessee For the signed second private key segment, the public key and the first private key segment are pre-stored in the blockchain by the lessor based on the contract number, and the second private key segment is stored in the first client End in

The first client and the first renter jointly sign the subject matter use request data through a multi-party security algorithm based on the first private key fragment and the second private key fragment;

The first rental end uses the public key to verify the signed subject matter use request data, and when the signature verification is passed, it issues an open use permission instruction to the first subject matter end, so that the first subject matter end is open for use Permissions.
The method of claim 12, wherein the method further comprises:

When the signature verification is passed, the first renter obtains the contract lease information corresponding to the contract number from the blockchain according to the contract number, wherein the contract lease information corresponding to the contract number is pre-assigned by the lessor based on the contract The serial number is stored in the blockchain;

The first rental terminal verifies the use right of the subject matter use request data according to the contract lease information;

Correspondingly, after the verification of the use right is passed, the first rental terminal issues an instruction to open the use right to the first subject end, so that the first subject end opens the use right.
The method of claim 12, wherein the method further comprises:

The first rental terminal stores the signed subject matter use request data and the verification result in the blockchain based on the contract number.
A rental terminal, characterized in that, the rental terminal includes:

A data receiving module for receiving subject matter use request data, where the subject matter use request data includes the contract number corresponding to the subject matter;

The data retrieval module is used to retrieve the public key corresponding to the contract number and the first private key segment of the lessor from the blockchain according to the contract number, wherein,

The private key and public key corresponding to the contract number are generated by the first lessor when the lease is signed. The private key is divided into at least two pieces, including the first private key fragment used by the lessor for signing and the lessee For the second private key segment of the signature, the public key and the first private key segment are pre-stored in the blockchain by the lessor based on the contract number;

The second data signature module is configured to jointly sign the subject matter use request data through secure multi-party calculation based on the first private key fragment and the second private key fragment;

The second data verification module is configured to use the public key to verify the signed subject matter use request data;

The instruction sending module is used to issue an open use permission instruction to the subject end when the signature verification is passed.
A client terminal, characterized in that the client terminal includes a SIM card and/or TEE, and a data sending module, wherein the SIM card and/or TEE is used to store a second private key fragment of a lessee;

The data sending module is configured to send subject matter use request data, the subject matter use request data including the contract number corresponding to the subject matter, so that the lessor can receive the subject matter use request data, and obtain all data according to the contract number. The public key corresponding to the contract number and the lessor’s first private key fragment, and the use of the subject matter through secure multi-party calculation based on the lessor’s first private key fragment and the lessee’s second private key fragment The request data is jointly signed, and the signed subject matter use request data is verified by using the public key. When the signature verification is passed, the use authority is opened.
A temporary identity authentication system, characterized in that, the system includes a first client, a first object terminal, a first rental terminal and a blockchain, wherein:

The first client is used to store the second private key fragments of the lessee, and send the subject matter use request data to the first renter, the subject matter use request data including the contract number corresponding to the subject matter;

The first rental terminal is used to receive the subject matter use request data, and is also used to retrieve the public key corresponding to the contract number and the first private key of the lessor from the blockchain according to the contract number. Based on the lessee’s second private key shard and the lessor’s first private key shard to jointly sign the subject matter use request data through secure multi-party computing, and use the public key to sign the subject matter Use the requested data for verification, and when the signature verification is passed, issue an open-use permission instruction to the first subject;

The first subject end is used to receive and respond to the open use permission instruction sent by the first rental end;

The blockchain is used to store contract lease information, public key and lessor’s first private key fragments, signed subject matter use request data, and verification results based on the contract number.
A temporary identity authentication method, characterized in that it comprises:

The second object terminal obtains the QR code information displayed by the second client, and the QR code information is generated by the lessor based on the contract lease information and the public key when the lease is signed;

Wherein, the contract lease information and the corresponding private key and public key are generated by the lessor when the lease is signed, and the private key is divided into at least two pieces, including the first private key segment used by the lessor for signing and the lease The second private key fragment used by the party for signing, the first private key fragment is stored on the first subject end, and the second private key fragment is stored on the second client;

The second object terminal decodes the two-dimensional code information, obtains contract lease information and a public key, and generates object use request data according to the contract lease information;

The second object terminal obtains the first private key fragment corresponding to the contract number according to the contract number in the contract lease information;

The second subject end and the second client use a multi-party security algorithm to jointly sign the subject use request data based on the first private key fragment and the second private key fragment;

The second subject end uses the public key to verify the signed subject use request data, and when the signature verification is passed, the use right is opened.
The method of claim 18, wherein the method further comprises:

When the signature verification is passed, the second subject end verifies the use right of the subject matter use request data according to the contract lease information obtained after decoding the QR code;

Correspondingly, after the verification of the use right is passed, the end of the second target object opens the use right.
The method of claim 18, wherein the method further comprises:

The second object terminal sends the signed object use request data and the verification result to the second rental terminal;

The second rental terminal stores the signed subject matter use request data and the verification result in the blockchain based on the contract number.
A subject end, characterized in that the subject end includes;

The decoding module is used to obtain the two-dimensional code information displayed by the second client, decode the two-dimensional code information, obtain contract lease information and public key, and generate subject matter use request data according to the contract lease information;

The third data acquisition module is configured to acquire the first private key fragment of the lessor corresponding to the contract number according to the contract number;

The third data signature module is used to jointly sign the subject matter use request data through a multi-party security algorithm based on the lessor’s first private key fragment and the lessee’s second private key fragment;

The third data verification module is configured to use the public key to verify the signed subject matter use request data;

The second permission opening module is used to open the usage permission when the signature verification is passed.
A client terminal, characterized in that the client terminal includes a SIM card and/or TEE, a data storage module and a data display module, wherein:

The SIM card and/or TEE is used to store the second private key fragments of the lessee;

The data storage module is used to store the QR code information generated from the public key and the contract lease information;

The data display module is used to display the two-dimensional code information, so that the lessor can decode the two-dimensional code information to obtain the public key and contract lease information, and generate a subject matter use request based on the contract lease information Data, and, according to the contract number in the contract lease information to obtain the lessor’s first private key fragment, based on the lessor’s first private key fragment and the lessee’s second private key fragment, the multi-party security algorithm The subject matter uses the request data for joint signature, and the public key is used to verify the signed subject matter use request data. When the signature verification is passed, the use authority is opened.
A temporary identity authentication system, characterized in that, the system includes a second client, a second object terminal, a second rental terminal, and a blockchain, wherein:

The second client is used to store the second private key fragments of the lessee and the QR code information generated from the public key and the contract lease information;

The second subject end is used to obtain the two-dimensional code information displayed by the second client, decode the two-dimensional code information to obtain the public key and contract lease information, and generate the use of the subject matter according to the contract lease information Request data, and obtain the lessor’s first private key segment based on the contract number in the contract lease information. Based on the lessor’s first private key segment and the lessee’s second private key segment, the multi-party security algorithms The subject matter use request data is jointly signed, the public key is used to verify the signed subject matter use request data, and when the signature verification is passed, the use authority is opened;

The second rental terminal is used to receive the signed subject matter use request data and the verification result sent by the second subject matter terminal, and store the signed subject matter use request data and the verification result in the contract number based on the contract number. In the blockchain;

The blockchain is used to store contract lease information, signed subject matter use request data, and verification results based on the contract number.