WO2024011863A9 - 通信方法、装置、sim卡、电子设备和终端设备 - Google Patents

通信方法、装置、sim卡、电子设备和终端设备 Download PDF

Info

Publication number
WO2024011863A9
WO2024011863A9 PCT/CN2022/142033 CN2022142033W WO2024011863A9 WO 2024011863 A9 WO2024011863 A9 WO 2024011863A9 CN 2022142033 W CN2022142033 W CN 2022142033W WO 2024011863 A9 WO2024011863 A9 WO 2024011863A9
Authority
WO
WIPO (PCT)
Prior art keywords
user
metaverse
identity information
sim card
virtual
Prior art date
Application number
PCT/CN2022/142033
Other languages
English (en)
French (fr)
Other versions
WO2024011863A1 (zh
Inventor
梁伟
卢毅
刘岩
Original Assignee
中国电信股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中国电信股份有限公司 filed Critical 中国电信股份有限公司
Publication of WO2024011863A1 publication Critical patent/WO2024011863A1/zh
Publication of WO2024011863A9 publication Critical patent/WO2024011863A9/zh

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40Network security protocols

Definitions

  • the present disclosure relates to the technical field of the Metaverse, and in particular to a communication method, device, SIM card, electronic equipment and terminal equipment.
  • Metaverse is a virtual world that maps and interacts with the real world. Based on the metaverse, the virtual world and the real world can be closely integrated in the economic system, social system, and identity system, and users can be allowed to produce content and edit the world.
  • users can register through the Internet platform, and the Internet platform can generate virtual identity information for users to access the Metaverse.
  • users can access the Metaverse platform based on this virtual identity information.
  • the Internet platform will record the user's virtual identity information.
  • the virtual identity information lacks privacy protection, resulting in the risk of leakage of the virtual identity information, which is not conducive to the user's privacy protection.
  • the purpose of the embodiments of the present disclosure is to provide a communication method, device, SIM card, electronic device and terminal device, which can reduce the risk of virtual identity information leakage and is beneficial to user privacy protection.
  • the specific technical solutions are as follows:
  • the first aspect of the embodiment of the present disclosure first provides a terminal device.
  • the terminal device includes: a user identity module SIM card; and is installed with a Metaverse application module, wherein:
  • the Metaverse application module is used to send an identity information request to the SIM card when it is necessary to access the Metaverse platform;
  • the SIM card is used to obtain locally recorded virtual identity information when receiving the identity information request, and send the virtual identity information to the Metaverse application module; wherein the virtual identity information is: login When the first user of the Metaverse application module registers the SIM (Subscriber Identity Module) card, the SIM card is generated based on the first user's private key; the first user's The private key is obtained by hashing the preset random number;
  • the Metaverse application module is further configured to send an authentication request to the Metaverse platform based on the virtual identity information, so that the Metaverse platform authenticates the authentication request based on the virtual identity information.
  • a second aspect of the embodiments of the present disclosure provides a communication method.
  • the method is applied to the Metaverse application module in a terminal device.
  • the terminal device further includes a SIM card.
  • the method includes:
  • an identity information request is sent to the SIM card, so that when the SIM card receives the identity information request, it obtains the locally recorded virtual identity information and sends it to the Metaverse application module.
  • an authentication request is sent to the Metaverse platform, so that the Metaverse platform authenticates the authentication request based on the virtual identity information.
  • the method further includes:
  • the method further includes:
  • the virtual asset is sent to the SIM card, so that the SIM card generates a copy of the virtual asset based on the virtual identity information.
  • Unique identification and record the virtual asset and unique identification locally.
  • a third aspect of the embodiment of the present disclosure provides a communication method.
  • the method is applied to a SIM card in a terminal device.
  • the terminal device further includes a Metaverse application module.
  • the method includes:
  • the virtual identity information is: when the first user who logs in to the Metaverse application module registers the SIM card, the SIM card is based on the third
  • the private key of a user is generated; the private key of the first user is obtained by hashing a preset random number; so that the Metaverse application module sends a request to the Metaverse based on the virtual identity information.
  • the platform sends an authentication request, so that the Metaverse platform authenticates the authentication request based on the virtual identity information.
  • the method further includes:
  • the method further includes:
  • the generation process of virtual identity information includes:
  • the DID (Decentralized Identity, decentralized identity) of the first user is generated as the virtual identity information of the first user.
  • the method further includes:
  • the encrypted random number is: encrypted based on the user password provided by the registered user and the corresponding operator password;
  • a fourth aspect of the embodiments of the present disclosure provides a communication device, which is applied to the Metaverse application module in a terminal device.
  • the terminal device further includes a SIM card.
  • the device includes:
  • An identity information request sending module configured to send an identity information request to the SIM card when it is necessary to access the Metaverse platform, so that the SIM card obtains the locally recorded virtual identity information when receiving the identity information request, and sends the virtual identity information to the Metaverse application module; wherein the virtual identity information is: when the first user who logs in to the Metaverse application module registers the SIM card, the SIM card is based on the The private key of the first user is generated; the private key of the first user is obtained by hashing a preset random number;
  • An authentication request sending module is configured to send an authentication request to the Metaverse platform based on the virtual identity information, so that the Metaverse platform authenticates the authentication request based on the virtual identity information.
  • the device further includes:
  • a transaction record acquisition module used to obtain the transaction records of the first user in the Metaverse platform
  • a transaction record sending module configured to send the transaction record to the SIM card, so that the SIM card encrypts the transaction record based on the private key of the first user, obtains a corresponding digital signature, and sends the transaction record to the SIM card.
  • the Metaverse application module sends the digital signature;
  • a digital signature acquisition module is used to acquire the digital signature from the SIM card and send the transaction record and the digital signature to the Metaverse platform.
  • the device further includes:
  • a virtual asset sending module configured to send the virtual asset to the SIM card when it is detected that the first user obtains a virtual asset in the Metaverse platform, so that the SIM card can be based on the virtual identity
  • the information generates a unique identification of the virtual asset, and the virtual asset and the unique identification are correspondingly recorded locally.
  • a fifth aspect of the embodiment of the present disclosure provides a communication device, which is applied to a SIM card in a terminal device.
  • the terminal device further includes a metaverse application module.
  • the device includes:
  • a virtual identity information acquisition module configured to obtain locally recorded virtual identity information when receiving an identity information request; wherein the identity information request is sent to the SIM card when the Metaverse application module needs to access the Metaverse platform. of;
  • a virtual identity information sending module configured to send the virtual identity information to the Metaverse application module; wherein the virtual identity information is: when the first user who logs in to the Metaverse application module registers the SIM card, The SIM card is generated based on the private key of the first user; the private key of the first user is obtained by hashing a preset random number; so that the Metaverse application module is based on the virtual Identity information, sending an authentication request to the Metaverse platform, so that the Metaverse platform authenticates the authentication request based on the virtual identity information.
  • the device further includes:
  • a transaction record receiving module configured to receive transaction records sent by the Metaverse application module; wherein the transaction records are the transaction records of the first user in the Metaverse platform;
  • a digital signature generation module configured to encrypt the transaction record based on the private key of the first user to obtain a corresponding digital signature
  • a digital signature sending module is configured to send the digital signature to the Metaverse application module, so that the Metaverse application module sends the transaction record and the digital signature to the Metaverse platform.
  • the device further includes:
  • a virtual asset receiving module configured to receive virtual assets sent by the Metaverse application module; wherein the virtual assets are obtained by the first user in the Metaverse platform;
  • a unique identifier generation module configured to generate a unique identifier of the virtual asset based on the virtual identity information, and record the virtual asset and the unique identifier locally.
  • the device further includes:
  • Random number generation module used to generate random numbers
  • a private key generation module configured to calculate the hash value of the random number based on a preset hash algorithm to obtain the private key of the first user
  • a DID generation module configured to generate a decentralized identity DID of the first user based on the private key of the first user as the virtual identity information of the first user.
  • the device further includes:
  • the first acquisition module is used to obtain the user password and the user's true identity information provided by the user to be verified when the user identity of the user to be verified needs to be verified;
  • the first determination module is used to determine the encrypted random number and the operator password corresponding to the user's true identity information provided by the user to be verified based on the pre-recorded correspondence between the user's true identity information, the encrypted random number and the operator's password; wherein , the encrypted random number recorded in the corresponding relationship is: encrypted based on the user password provided by the registered user and the corresponding operator password;
  • the first judgment module is used to judge whether the determined encrypted random number can be successfully decrypted based on the determined operator password and the user password provided by the user to be verified; if so, determine that the user to be verified passes the identity Verify; if not, it is determined that the user to be verified has not passed identity verification.
  • a sixth aspect of the embodiment of the present disclosure provides a SIM card, the SIM card including a computing chip, a communication module and a SIM card module;
  • the computing chip is used to perform data communication with the Metaverse application module in the terminal device through the communication module to implement any of the above communication method steps applied to the SIM card.
  • a seventh aspect of the embodiment of the present disclosure provides an electronic device, which is characterized in that it includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory complete communication with each other through the communication bus;
  • Memory used to store computer programs
  • the processor is used to implement any of the above communication method steps when executing the program stored in the memory.
  • Embodiments of the present disclosure also provide a computer program product containing instructions, which when run on a computer, causes the computer to perform any of the above communication methods.
  • the terminal device includes a user identity module SIM card and a Metaverse application module, wherein: the Metaverse application module is used to send an identity information request to the SIM when it is necessary to access the Metaverse platform; the SIM card is used to When receiving the identity information request, obtain the locally recorded virtual identity information and send the virtual identity information to the Metaverse application module; where the virtual identity information is: when the first user who logs in to the Metaverse application module registers a SIM card, the SIM card Generated based on the first user's private key; the first user's private key is obtained by hashing a preset random number; the Metaverse application module is also used to send authentication requests to the Metaverse platform based on virtual identity information , so that the Metaverse platform authenticates authentication requests based on virtual identity information.
  • the Metaverse application module is used to send an identity information request to the SIM when it is necessary to access the Metaverse platform
  • the SIM card is used to When receiving the identity information request, obtain the locally recorded virtual identity information and send the virtual identity information to the Metaverse application module
  • the user's virtual identity information can be generated and stored in the SIM card. Subsequently, based on the virtual identity information recorded in the SIM card, the user can access the Metaverse. Platform, there is no need to record the user's virtual identity information on each Internet platform, thereby reducing the risk of virtual identity information leakage and conducive to user privacy protection.
  • Figure 1 is an architecture diagram of a terminal device provided by an embodiment of the present disclosure
  • FIG. 2 is a structural diagram of a SIM card provided by an embodiment of the present application.
  • Figure 3 is a schematic diagram of the hardware structure of a BSIM card provided by an embodiment of the present disclosure
  • Figure 4 is an interaction diagram of a communication method provided by an embodiment of the present disclosure.
  • Figure 5 is a schematic diagram of a platform for accessing the metaverse provided by an embodiment of the present disclosure
  • Figure 6 is an interaction diagram of another communication method provided by an embodiment of the present disclosure.
  • Figure 7 is an interaction diagram of yet another communication method provided by an embodiment of the present disclosure.
  • Figure 8 is a flow chart of a process of generating virtual identity information provided by an embodiment of the present disclosure.
  • Figure 9 is a flow chart of a user identity verification process provided by an embodiment of the present disclosure.
  • Figure 10 is a schematic diagram of user verification provided by an embodiment of the present disclosure.
  • Figure 11 is a schematic diagram of communication between an operating system of a smart terminal and a SIM card provided by an embodiment of the present disclosure
  • Figure 12 is a schematic diagram of a SIM card managing virtual assets provided by an embodiment of the present disclosure.
  • Figure 13 is a schematic diagram of a metaverse asset management process provided by an embodiment of the present disclosure.
  • Figure 14 is a structural diagram of a communication device provided by an embodiment of the present disclosure.
  • Figure 15 is a structural diagram of yet another communication device provided by an embodiment of the present disclosure.
  • Figure 16 is a structural diagram of an electronic device provided by an embodiment of the present application.
  • Internet platforms record users' virtual identity information, which leads to the risk of leakage of virtual identity information and is not conducive to user privacy protection.
  • FIG. 1 is an architecture diagram of a terminal device provided by an embodiment of the present disclosure.
  • the terminal device includes a SIM (Subscriber Identity Module). ) Card 101 and Metaverse Application Module 102, among which:
  • the Metaverse application module 102 is used to send an identity information request to the SIM card 101 when it is necessary to access the Metaverse platform.
  • the SIM card 101 is used to obtain the locally recorded virtual identity information when receiving an identity information request, and send the virtual identity information to the Metaverse application module 102.
  • the virtual identity information is: when the first user who logs in to the Metaverse application module 102 registers a SIM card, the SIM card 101 is generated based on the first user's private key; the first user's private key is a preset random number. Calculated by hash.
  • the Metaverse application module 102 is also used to send an authentication request to the Metaverse platform based on the virtual identity information, so that the Metaverse platform authenticates the authentication request based on the virtual identity information.
  • the terminal device provided by the embodiment of the present disclosure can generate the user's virtual identity information when the user registers the SIM card and store it in the SIM card. Subsequently, based on the virtual identity information recorded in the SIM card, the user can access the Metaverse platform. , There is no need to record the user's virtual identity information on each Internet platform, thereby reducing the risk of virtual identity information leakage and conducive to user privacy protection.
  • the terminal device can be a mobile phone, and the user can communicate with the Metaverse platform through the mobile phone.
  • the SIM card in the terminal device represents the SIM card built into the mobile phone, and the Metaverse application module may include applications installed in the mobile phone for accessing the Metaverse platform.
  • FIG. 2 is a structural diagram of a SIM card provided by an embodiment of the present application, including: a computing chip 201, a SIM card module 202 and a communication module 203;
  • the computing chip 201 is used for data communication with the metaverse application module in the terminal device through the communication module 203.
  • the SIM card in this disclosure may also be called a BSIM (Blockchain Subscriber Identity Module) card.
  • the Metaverse platform application module can be the Metaverse software installed on terminal devices.
  • Figure 3 is a schematic diagram of the hardware structure of a BSIM card provided by an embodiment of the present disclosure.
  • the BSIM card includes a SIM card module 301, a Bluetooth module 302, a computing chip 303 and an interface module 304.
  • the SIM card module 301 includes the hardware structure of a traditional SIM card
  • the Bluetooth module 302 is the communication module in the above embodiment
  • the interface module 304 includes the specific interface described below.
  • the computing chip 303 is used to generate the user's virtual identity information, sign transaction records, generate unique identifiers of virtual assets, and verify the user's identity. Specifically, details will be received in subsequent embodiments.
  • the computing chip 303 has a financial security level.
  • the BSIM card can support ECC-secp256k1 (Elliptic Curve Cryptography), AES (Advanced Encryption Standard), ECDSA-secp256k1 (Elliptic Curve Digital Signature Algorithm) ), HMAC-SHA512 (Hash-based Message Authentication Code) and other blockchain algorithms.
  • the BSIM card supports blockchain digital currency protocols such as BIP32 (wallet layering scheme) and BIP44 (wallet mnemonic creation scheme).
  • BIP32 wallet layering scheme
  • BIP44 wallet mnemonic creation scheme
  • the storage space in the BSIM card is greater than 1M, the user space is greater than 450K; the signature speed is less than 150ms. Among them, the user space is used to store the user's virtual identity information, virtual assets, mobile phone number, encryption seeds and private keys.
  • BSIM can be implemented through the following architecture: JAVA application layer, JAVA platform, hardware interface layer and hardware layer.
  • the JAVA application layer is used to implement blockchain application logic in the BSIM card, including seed generation, public and private key generation, encrypted storage, digital signature generation, private key retrieval, backup, etc.
  • the JAVA platform layer can implement JAVACARD virtual machine and card content management functions, and provide JAVA interfaces for application calls.
  • the BSIM card communicates with the Metaverse platform module through the JAVA interface.
  • the hardware interface layer can call the hardware interface based on C language to generate the user's virtual identity information, sign transaction records, generate unique identifiers of virtual assets, and verify user identities.
  • the hardware layer can improve algorithm performance through hardware algorithm IP coprocessors.
  • the hardware algorithm IP coprocessor is the computing chip in the above embodiment.
  • embodiments of the present disclosure also provide a communication method, which can be applied to SIM cards and Metaverse application modules in terminal devices.
  • the SIM card and the Metaverse application module can be the SIM card 101 and Metaverse application module 102 in the terminal device in Figure 1 respectively.
  • Figure 4 is an interaction diagram of a communication method provided by an embodiment of the present disclosure. The method may include the following steps:
  • the Metaverse application module sends an identity information request to the SIM card.
  • the SIM card When receiving the identity information request, the SIM card obtains the locally recorded virtual identity information and sends the virtual identity information to the Metaverse application module.
  • the virtual identity information is: when the first user who logs in to the Metaverse application module registers a SIM card, the SIM card is generated based on the first user's private key; the first user's private key is a hash of a preset random number calculated.
  • the Metaverse application module sends an authentication request to the Metaverse platform based on the virtual identity information, so that the Metaverse platform authenticates the authentication request based on the virtual identity information.
  • the communication method provided by the embodiment of the present disclosure can generate the user's virtual identity information when the user registers the SIM card and store it in the SIM card. Subsequently, based on the virtual identity information recorded in the SIM card, the user can access the Metaverse platform. , There is no need to record the user's virtual identity information on each Internet platform, thereby reducing the risk of virtual identity information leakage and conducive to user privacy protection.
  • the user's virtual identity information is recorded in the user's registered SIM card, so that the user can have ownership of the virtual identity information, that is, it can clarify the ownership of the virtual identity information and promote the development of the Metaverse.
  • the Metaverse platform corresponds to the Metaverse application module, that is, users can access different Metaverse platforms through different Metaverse application modules.
  • the Metaverse application module can send an identity information request to the SIM card.
  • the Metaverse application module can call the SDK (Software Development Kit) through a specific interface, and then send an identity information request to the SIM card through the SDK to obtain the identity information stored in the SIM card.
  • the above-mentioned specific interface may be an interface provided by the operating system of the smart terminal.
  • the first user is a user who currently uses a smart terminal and needs to access the Metaverse platform through the Metaverse application module.
  • the first user can apply to the operator to register a SIM card.
  • the SIM card can generate virtual identity information of the first user.
  • the virtual identity information of the first user may include DID. That is, when the first user registers a SIM card, the operator can store the first user's DID in the blockchain built by the operator.
  • the Metaverse application module can generate a DID verifiable statement based on the first user's DID, and send an authentication request carrying the DID verifiable statement to the Metaverse platform.
  • the Metaverse platform can obtain the DID of the first user stored in the blockchain built by the operator, and verify the DID verifiable statement based on the DID, thereby authenticating the authentication request.
  • the authentication request is authenticated, that is, the first user is authenticated.
  • the DID may contain a DID identifier and a DID document.
  • the DID document includes: the first user's public key, a set of encryption protocols, a set of service endpoints, the creation timestamp of the DID document and JSON-LD (JavaScript Object Notation).
  • JSON-LD JavaScript Object Notation
  • -Linked Data a method of representing and transmitting interconnected data based on JSON) signature.
  • the JSON-LD signature is used to verify the legitimacy of the DID document.
  • the public key of the first user corresponds to the private key of the first user mentioned later.
  • the Metaverse platform can verify the DID verifiable statement carried in the authentication request based on the DID specification of the W3C (World Wide Web Consortium). For example, it can be judged whether the signature in the DID verifiable statement is legal, or whether the DID in the DID verifiable statement is a DID trusted by the metaverse platform, that is, the DID identifier represented by the DID verifiable statement and Whether the DID document is the DID identifier and DID document stored in the blockchain built by the operator. That is to say, when the first user accesses the Metaverse platform through the Metaverse application module, the Metaverse platform can obtain the DID verifiable statement of the first user. If the DID verifiable statement passes the verification, it can determine the authentication of the first user. Success; otherwise, it is determined that the authentication of the first user failed.
  • W3C World Wide Web Consortium
  • FIG. 5 is a schematic diagram of an access metaverse platform provided by an embodiment of the present disclosure.
  • Each metaverse in Figure 5 represents the metaverse platform.
  • a natural person i.e. user
  • the operator stores the user's DID key (DID) in the BSIM card chip.
  • the Metaverse platform can obtain the user's DID from the operator.
  • the Metaverse platform can obtain the DID.
  • the verification statement is parsed and verified, and then the user is authenticated.
  • unified and standardized DIDs can be interconnected and mutually recognized between Metaverse platforms. Users can seamlessly switch between multiple Metaverse platforms. That is, users can access different metaverse platforms based on one DID. Metaverse platform, there is no need to register different DIDs on different Metaverse platforms.
  • Blockchain infrastructure is a network that operates based on blockchain technology. Operators can participate in the construction of blockchain infrastructure. At the same time, DID can also be stored in the blockchain. In addition, the blockchain can also store the transaction records of each DID in the Metaverse platform. Using BSIM cards to store users' virtual identity information can open up digital identities between multiple Metaverse platforms, realize a unified identity authentication protocol across Metaverse platforms, and build an authoritative, standard, and credible user identity for the Cloud Universe platform. system infrastructure.
  • Figure 6 is an interaction diagram of another communication method provided by an embodiment of the present disclosure. Based on Figure 4, the method may include the following steps:
  • the Metaverse application module obtains the transaction records of the first user in the Metaverse platform.
  • S405 The Metaverse application module sends transaction records to the SIM card.
  • S406 The SIM card encrypts the transaction record based on the first user's private key, obtains the corresponding digital signature, and sends the digital signature to the Metaverse application module.
  • the Metaverse application module obtains the digital signature from the SIM card and sends transaction records and digital signatures to the Metaverse platform.
  • the Metaverse platform can use blockchain as its infrastructure.
  • the Metaverse platform can issue virtual assets based on the blockchain.
  • the Metaverse platform can generate a transaction record to represent the first user's virtual asset transaction in the Metaverse platform.
  • transaction records may include the time of the transaction, the virtual identity information of both parties to the transaction, and the original identification of the virtual assets traded.
  • the original identification of the virtual asset represents the identification obtained when the virtual asset was generated.
  • the SIM card can process the transaction record based on a digital digest algorithm to obtain a fixed-length string, and then encrypt the string based on the first user's private key to form a digital signature.
  • the SIM card can send digital signatures to the Metaverse application module through the blockchain interface.
  • the digital digest algorithm may be a Hash algorithm.
  • the blockchain interface can be a hardware interface provided by the SIM card, and the SIM card can access the blockchain corresponding to each metaverse platform through this hardware interface.
  • the Metaverse application module can obtain a digital signature based on the blockchain interface in the SIM card, and send the digital signature and its corresponding transaction record to the Metaverse platform.
  • the communication method provided by the disclosed embodiments uses the first user's private key stored in the SIM card to sign the transaction record when the user conducts a virtual asset transaction, and sends the obtained digital signature and transaction record to the Metaverse platform. It prevents users' transaction records from being tampered with, and the transaction cost is low and not limited by time and space.
  • Figure 7 is an interaction diagram of yet another communication method provided by an embodiment of the present disclosure. Based on Figure 4, the method may include the following steps:
  • S409 The SIM card generates a unique identifier of the virtual asset based on the virtual identity information, and records the virtual asset and the unique identifier locally.
  • the first user can purchase virtual assets and exchange virtual assets in the Metaverse platform through the Metaverse application module.
  • the Metaverse application module can send the virtual assets obtained by the first user to the SIM card.
  • the first user can use points to purchase NFT (Non-Fungible Token) digital commodities such as digital artworks and game props.
  • NFT Non-Fungible Token
  • the points can be virtual assets obtained by the first user's recharge on the operator's business operation platform; or they can also be virtual assets presented to the user by the operator based on the user's historical consumption records.
  • the SIM card can splice the virtual identity information and the original identification of the virtual asset as the unique identification of the virtual asset.
  • virtual assets and virtual identities are the core of the Metaverse, carrying the asset rights and social identities of users in the Metaverse.
  • the communication method provided by the embodiments of the present disclosure can generate unique identifiers for different assets in different metaverses based on the virtual identity information stored in the SIM card, which is conducive to users' management of virtual assets and, in turn, is conducive to building a metaverse trading ecosystem and User privacy protection.
  • Figure 8 is a flow chart of a process of generating virtual identity information provided by an embodiment of the present disclosure.
  • the process of generating virtual identity information by a SIM card includes:
  • S802 Based on the preset hash algorithm, calculate the hash value of the random number and obtain the first user's private key.
  • S803 Based on the first user's private key, generate the first user's DID as the first user's virtual identity information.
  • the SIM card when the first user registers the SIM card, can generate a random number of specified bytes through a hardware random number generator (TRNG, True Random Number Generator). The random number is processed based on the preset hash algorithm to obtain the first user's private key.
  • TRNG hardware random number generator
  • the first user's private key is processed based on the hash algorithm to obtain a fixed-length string as the first hash value.
  • Add the DID role type byte before the second hash value, and use the second hash value after the DID role type byte is added as the third hash value.
  • the third hash value is calculated based on the hash algorithm to obtain the fourth hash value.
  • the fifth hash value is encoded to obtain the DID corresponding to the first user, which is used as the first user's virtual identity information.
  • the bytes of the first numerical length may be the first 20 bytes
  • the bytes of the second numerical length may be the first 4 bytes.
  • the hash algorithm can be SHA-512 (Secure Hash Algorithm-512, secure hash algorithm).
  • the DID role type byte indicates the role type represented by the DID, where the role type can be an application, a person, a device, etc.
  • the fifth hash value can be encoded using Bitcoin's Base58 encoding method.
  • the specified bytes can be 64 bytes, and the length of the private key can be 512 bits, which means that there can be 2 to the 512th power of different private keys, that is, the number of private keys is close to 10 to the 150th power, randomly.
  • the probability that the selected private keys are the same is one in 10 to the power of 150, which is close to 0, thus improving the uniqueness and security of the private key.
  • the communication method provided by the disclosed embodiment can generate the first user's private key based on random numbers, ensuring the uniqueness and security of the private key, and generates the user's virtual identity information when the user registers the SIM card, clarifying the user's
  • the ownership of virtual identity information ensures that the right to interpret the user's virtual identity lies with the user himself rather than the Internet platform, which is conducive to user privacy protection and promotes the development of the Metaverse.
  • Figure 9 is a flow chart of a user identity verification process provided by an embodiment of the present disclosure, including:
  • S901 When the user identity of the user to be verified needs to be verified, obtain the user password and user's real identity information provided by the user to be verified.
  • S902 Based on the pre-recorded correspondence between the user's true identity information, the encrypted random number and the operator's password, determine the encrypted random number and operator's password corresponding to the user's true identity information provided by the user to be verified.
  • the encrypted random number recorded in the corresponding relationship is encrypted based on the user password provided by the registered user and the corresponding operator password.
  • the random number may also be called a seed
  • the encrypted random number may also be called an encryption seed
  • the user can provide the user password when registering the SIM card.
  • a user password can be a fixed-length string.
  • users can provide real identity information. Real identity information can include the user's name and ID number.
  • the operator password is generated by the operator when the user registers the SIM card. The operator passwords corresponding to different users can be the same or different. For each user, when the user registers a SIM card, after obtaining the corresponding encrypted random number, the SIM card can store the user's corresponding encrypted random number, operator password and the real identity information provided by the user in the operator's business Operation platform.
  • the user to be verified is the user who currently needs to verify the user identity.
  • the SIM card can obtain the encrypted random number and operation record recorded in the business operation platform and correspond to the real identity information provided by the user to be verified. business password. Then, the SIM card decrypts the encrypted random number by combining the user password and operator password provided by the user to be verified; if the decryption is successful, it is determined that the user to be verified has passed the identity verification; if the decryption is unsuccessful, it is determined that the user to be verified has not passed the identity verification. .
  • the business operation platform since the business operation platform stores encrypted seeds and does not store the user's user password, therefore, based only on the operator's password, the operator cannot obtain the user's seeds, private keys, and assets, ensuring User assets are safe and conducive to user privacy protection.
  • FIG. 10 is a schematic diagram of user verification provided by an embodiment of the present disclosure.
  • the user to be verified can apply to the operator to restore the card.
  • the operator can write the recorded encryption seed and operator password corresponding to the real identity information such as the mobile phone number provided by the user to be verified into the SIM card.
  • the SIM card can obtain the user password entered by the user to be verified. Then, the SIM card decrypts the encrypted seed based on the operator password and user password. If the decryption is successful, it is determined that the user to be verified has passed the identity verification.
  • the operator can Restore the SIM card for the user to be verified, that is, the user to be verified gets a new card and retrieves the wallet (that is, the private key of the user to be verified); if the decryption is unsuccessful, it is determined that the user to be verified has not passed the identity verification.
  • FIG. 11 is a schematic diagram of communication between an operating system of a smart terminal and a SIM card provided by an embodiment of the present disclosure.
  • the smart terminal can be a mobile phone.
  • the mobile phone OS (operating system) can call the SDK (Software Development Kit) through a specific interface to communicate with the SIM card.
  • the SIM card stores the user's mobile phone number, Crypto seeds, private keys, cryptographic digital assets and SIM card calculation programs. Among them, the SIM card calculation program can generate the user's virtual identity information, sign transaction records, generate unique identifiers of virtual assets, and verify the user's identity.
  • FIG. 12 is a schematic diagram of a SIM card managing virtual assets provided by an embodiment of the present disclosure.
  • the BSIM card can store the user's user identity (i.e., virtual identity information), user assets (virtual assets), native assets (points issued by the operator), and FT (Fungible Token) and NFT (Non-Fungible Token).
  • FT can include game coins
  • NFT can include: digital artwork, game props, Metaverse assets, etc.
  • digital identity authentication can be realized, digital asset trading malls (for example, points trading platforms) can be built, and digital artworks (including music, videos, pictures, etc.) and game assets (including equipment, items, abilities, skins, etc.) etc.) and trade with Metaverse assets.
  • digital asset trading malls for example, points trading platforms
  • digital artworks including music, videos, pictures, etc.
  • game assets including equipment, items, abilities, skins, etc.
  • Metaverse assets including equipment, items, abilities, skins, etc.
  • Blockchain nodes include: alliance chain blockchain nodes, blockchain consensus nodes, copyright protection nodes, cross-chain nodes, etc. Each node implements different business functions based on smart contracts.
  • Figure 13 is a schematic diagram of a metaverse asset management process provided by an embodiment of the present disclosure.
  • the BSIM card can be used as the entrance device to the Metaverse. Based on the BSIM card, it can realize the authentication of blockchain distributed digital identities, the management of Metaverse digital assets, and digital asset transactions based on certificates. This enables the constructed Metaverse to serve data rights and asset circulation, and create a Metaverse digital identity and asset trading ecosystem.
  • the BSIM card has the advantages of supporting multiple blockchain algorithms, high performance, good security, and convenient use. It is conducive to driving 5G large network traffic revenue, and digital assets on the blockchain are not easy to migrate, providing user stickiness, which is conducive to the operation of existing high-net-worth users and attracting users from different networks.
  • an embodiment of the present disclosure also provides a communication device. See Figure 14.
  • Figure 14 is a structural diagram of a communication device provided by an embodiment of the present disclosure. The device is applied to Metaverse applications in terminal equipment. Module, terminal equipment also includes SIM card, device includes:
  • the identity information request sending module 1401 is used to send an identity information request to the SIM card when it is necessary to access the Metaverse platform, so that when the SIM card receives the identity information request, it can obtain the locally recorded virtual identity information and apply it to the Metaverse
  • the module sends virtual identity information; where the virtual identity information is: when the first user who logs in to the Metaverse application module registers a SIM card, the SIM card is generated based on the first user's private key; the first user's private key is the preset Suppose the random number is obtained by hash calculation;
  • the authentication request sending module 1402 is configured to send an authentication request to the Metaverse platform based on the virtual identity information, so that the Metaverse platform authenticates the authentication request based on the virtual identity information.
  • the device further includes:
  • the transaction record acquisition module is used to obtain the transaction records of the first user in the Metaverse platform
  • the transaction record sending module is used to send transaction records to the SIM card, so that the SIM card encrypts the transaction records based on the first user's private key, obtains the corresponding digital signature, and sends the digital signature to the Metaverse application module;
  • the digital signature acquisition module is used to obtain digital signatures from the SIM card and send transaction records and digital signatures to the Metaverse platform.
  • the device further includes:
  • the virtual asset sending module is used to send the virtual asset to the SIM card when it is detected that the first user obtains the virtual asset in the Yuanverse platform, so that the SIM card generates a unique identification of the virtual asset based on the virtual identity information and corresponds to it locally. Record virtual assets and unique identifiers.
  • an embodiment of the present disclosure also provides a communication device. See Figure 15.
  • Figure 15 is a structural diagram of another communication device provided by an embodiment of the present disclosure.
  • the device is applied to a SIM card in a terminal device.
  • the terminal equipment also includes the Metaverse application module, and the device includes:
  • the virtual identity information acquisition module 1501 is used to obtain locally recorded virtual identity information when receiving an identity information request; wherein the identity information request is sent to the SIM card when the Metaverse application module needs to access the Metaverse platform;
  • the virtual identity information sending module 1502 is used to send virtual identity information to the Metaverse application module; where the virtual identity information is: when the first user who logs in to the Metaverse application module registers a SIM card, the SIM card is based on the first user's private key Generated; the first user's private key is obtained by hashing the preset random number; so that the Metaverse application module sends an authentication request to the Metaverse platform based on the virtual identity information, so that the Metaverse platform is based on the virtual identity Information to authenticate authentication requests.
  • the device further includes:
  • the transaction record receiving module is used to receive transaction records sent by the Metaverse application module; where the transaction records are the transaction records of the first user in the Metaverse platform;
  • the digital signature generation module is used to encrypt the transaction record based on the first user's private key and obtain the corresponding digital signature;
  • the digital signature sending module is used to send digital signatures to the Metaverse application module, so that the Metaverse application module sends transaction records and digital signatures to the Metaverse platform.
  • the device further includes:
  • the virtual asset receiving module is used to receive virtual assets sent by the Metaverse application module; where the virtual assets are obtained by the first user in the Metaverse platform;
  • the unique identifier generation module is used to generate unique identifiers of virtual assets based on virtual identity information, and record virtual assets and unique identifiers locally.
  • the device further includes:
  • Random number generation module used to generate random numbers
  • the private key generation module is used to calculate the hash value of the random number based on the preset hash algorithm and obtain the first user's private key;
  • the DID generation module is used to generate the first user's decentralized identity DID based on the first user's private key as the first user's virtual identity information.
  • the device further includes:
  • the first acquisition module is used to obtain the user password and user real identity information provided by the user to be verified when the user identity of the user to be verified needs to be verified;
  • the first determination module is used to determine the encrypted random number and operator password corresponding to the user's true identity information provided by the user to be verified based on the pre-recorded correspondence between the user's true identity information, the encrypted random number and the operator's password; where, corresponding to The encrypted random number recorded in the relationship is: encrypted based on the user password provided by the registered user and the corresponding operator password;
  • the first judgment module is used to judge whether the determined encrypted random number can be successfully decrypted based on the determined operator password and the user password provided by the user to be verified; if so, it is determined that the user to be verified has passed the identity verification; if not , it is determined that the user to be authenticated has not passed the authentication.
  • FIG 16 is a structural diagram of an electronic device provided by an embodiment of the present application. It includes a processor 1601, a communication interface 1602, a memory 1603 and a communication bus 1604. The processor 1601, the communication interface 1602 and the memory 1603 complete communication with each other through the communication bus 1604.
  • the processor 1601 is used to implement the steps of any communication method in the above embodiments when executing the program stored in the memory 1603.
  • the communication bus mentioned in the above-mentioned electronic equipment can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc.
  • PCI Peripheral Component Interconnect
  • EISA Extended Industry Standard Architecture
  • the communication bus can be divided into address bus, data bus, control bus, etc. For ease of presentation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.
  • the communication interface is used for communication between the above-mentioned electronic devices and other devices.
  • the memory may include random access memory (Random Access Memory, RAM) or non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk memory.
  • RAM Random Access Memory
  • NVM Non-Volatile Memory
  • the memory may also be at least one storage device located far away from the aforementioned processor.
  • the above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (Network Processor, NP), etc.; it can also be a digital signal processor (Digital Signal Processor, DSP), special integrated Circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.
  • CPU central processing unit
  • NP Network Processor
  • DSP Digital Signal Processor
  • ASIC Application Specific Integrated Circuit
  • FPGA Field-Programmable Gate Array
  • a computer-readable storage medium stores a computer program.
  • the computer program is executed by a processor, any one of the above communication methods is implemented. step.
  • a computer program product containing instructions is also provided, which, when run on a computer, causes the computer to perform any of the communication methods in the above embodiments.
  • the computer program product includes one or more computer instructions.
  • the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device.
  • the computer instructions may be stored in or transmitted from one computer-readable storage medium to another, e.g., the computer instructions may be transferred from a website, computer, server, or data center Transmission to another website, computer, server or data center by wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.) means.
  • the computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. that contains one or more available media integrated.
  • the available media may be magnetic media (eg, floppy disk, hard disk, magnetic tape), optical media (eg, DVD), or semiconductor media (eg, Solid State Disk (SSD)), etc.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)

Abstract

一种通信方法、装置、SIM卡、电子设备和终端设备,涉及元宇宙技术领域。元宇宙应用模块,用于当需要访问元宇宙平台时,向SIM卡发送身份信息请求;还用于基于虚拟身份信息,向元宇宙平台发送认证请求,以使元宇宙平台基于虚拟身份信息对认证请求进行认证。SIM卡,用于在接收到身份信息请求时,获取本地记录的虚拟身份信息,并向元宇宙应用模块发送虚拟身份信息;其中,虚拟身份信息为:登录元宇宙应用模块的第一用户在注册SIM卡时,SIM卡基于第一用户的私钥生成得到的;第一用户的私钥为对预设随机数进行哈希计算得到的。

Description

通信方法、装置、SIM卡、电子设备和终端设备
相关申请的交叉引用
本申请要求于2022年07月15日提交的申请号为202210837363.5、名称为“一种通信方法、装置、SIM卡、电子设备和终端设备”的中国专利申请的优先权,该中国专利申请的全部内容通过引用全部并入本文。
技术领域
本公开涉及元宇宙技术领域,特别是涉及一种通信方法、装置、SIM卡、电子设备和终端设备。
背景技术
元宇宙(Metaverse)是与现实世界映射与交互的虚拟世界。基于元宇宙,可以将虚拟世界与现实世界在经济系统、社交系统、身份系统上密切融合,并且允许用户进行内容生产和世界编辑。
相关技术中,用户可以通过互联网平台进行注册,互联网平台可以生成用户用于访问元宇宙的虚拟身份信息,进而,用户可以基于该虚拟身份信息访问元宇宙平台。
然而,相关技术中,互联网平台会记录用户的虚拟身份信息,虚拟身份信息缺乏隐私保护,导致虚拟身份信息存在泄露的风险,不利于用户的隐私保护。
发明内容
本公开实施例的目的在于提供一种通信方法、装置、SIM卡、电子设备和终端设备,能够降低虚拟身份信息泄露的风险,有利于用户的隐私保护。具体技术方案如下:
本公开实施例的第一方面,首先提供了一种终端设备,所述终端设备包括:用户身份模块SIM卡;并安装有元宇宙应用模块,其中:
所述元宇宙应用模块,用于当需要访问元宇宙平台时,向所述SIM卡发送身份信息请求;
所述SIM卡,用于在接收到所述身份信息请求时,获取本地记录的虚拟身份信息,并向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM(Subscriber Identity Module,用户身份模块)卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;
所述元宇宙应用模块,还用于基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
本公开实施例的第二方面,提供了一种通信方法,所述方法应用于终端设备中的元宇宙应用模块,所述终端设备还包括SIM卡,所述方法包括:
当需要访问元宇宙平台时,向所述SIM卡发送身份信息请求,以使所述SIM卡在接收到所述身份信息请求时,获取本地记录的虚拟身份信息,并向所述元宇宙应用模块发 送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;
基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
在一些实施例中,所述方法还包括:
获取所述第一用户在所述元宇宙平台中的交易记录;
向所述SIM卡发送所述交易记录,以使所述SIM卡基于所述第一用户的私钥对所述交易记录进行加密处理,得到对应的数字签名,并向所述元宇宙应用模块发送所述数字签名;
从所述SIM卡获取所述数字签名,并向所述元宇宙平台发送所述交易记录和所述数字签名。
在一些实施例中,所述方法还包括:
当检测到所述第一用户在所述元宇宙平台中获取到虚拟资产时,向所述SIM卡发送所述虚拟资产,以使所述SIM卡基于所述虚拟身份信息生成所述虚拟资产的唯一标识,并在本地对应记录所述虚拟资产和唯一标识。
本公开实施例的第三方面,提供了一种通信方法,所述方法应用于终端设备中的SIM卡,所述终端设备还包括元宇宙应用模块,所述方法包括:
当接收到身份信息请求时,获取本地记录的虚拟身份信息;其中,所述身份信息请求为所述元宇宙应用模块需要访问元宇宙平台时向所述SIM卡发送的;
向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;以使所述元宇宙应用模块基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
在一些实施例中,所述方法还包括:
接收所述元宇宙应用模块发送的交易记录;其中,所述交易记录为所述第一用户在所述元宇宙平台中的交易记录;
基于所述第一用户的私钥对所述交易记录进行加密处理,得到对应的数字签名;
向所述元宇宙应用模块发送所述数字签名,以使所述元宇宙应用模块向所述元宇宙平台发送所述交易记录和所述数字签名。
在一些实施例中,所述方法还包括:
接收所述元宇宙应用模块发送的虚拟资产;其中,所述虚拟资产为所述第一用户在所述元宇宙平台中获取到的;
基于所述虚拟身份信息生成所述虚拟资产的唯一标识,并在本地对应记录所述虚拟资产和唯一标识。
在一些实施例中,所述虚拟身份信息的生成过程包括:
生成随机数;
基于预设的哈希算法,计算所述随机数的哈希值,得到所述第一用户的私钥;
基于所述第一用户的私钥,生成所述第一用户的DID(Decentralized Identity,去中心化身份),作为所述第一用户的虚拟身份信息。
在一些实施例中,所述方法还包括:
当需要对待验证用户的用户身份进行验证时,获取所述待验证用户提供的用户密码和用户真实身份信息;
基于预先记录的用户真实身份信息、加密随机数与运营商密码的对应关系,确定所述待验证用户提供的用户真实身份信息对应的加密随机数与运营商密码;其中,所述对应关系中记录的加密随机数为:基于注册用户提供的用户密码和对应的运营商密码进行加密得到的;
判断基于确定出的运营商密码和所述待验证用户提供的用户密码,是否能够成功对确定出的加密随机数进行解密;
若是,则确定所述待验证用户通过身份验证;
若否,确定所述待验证用户未通过身份验证。
本公开实施例的第四方面,提供了一种通信装置,所述装置应用于终端设备中的元宇宙应用模块,所述终端设备还包括SIM卡,所述装置包括:
身份信息请求发送模块,用于当需要访问元宇宙平台时,向所述SIM卡发送身份信息请求,以使所述SIM卡在接收到所述身份信息请求时,获取本地记录的虚拟身份信息,并向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;
认证请求发送模块,用于基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
在一些实施例中,所述装置还包括:
交易记录获取模块,用于获取所述第一用户在所述元宇宙平台中的交易记录;
交易记录发送模块,用于向所述SIM卡发送所述交易记录,以使所述SIM卡基于所述第一用户的私钥对所述交易记录进行加密处理,得到对应的数字签名,并向所述元宇宙应用模块发送所述数字签名;
数字签名获取模块,用于从所述SIM卡获取所述数字签名,并向所述元宇宙平台发送所述交易记录和所述数字签名。
在一些实施例中,所述装置还包括:
虚拟资产发送模块,用于当检测到所述第一用户在所述元宇宙平台中获取到虚拟资产时,向所述SIM卡发送所述虚拟资产,以使所述SIM卡基于所述虚拟身份信息生成所述虚拟资产的唯一标识,并在本地对应记录所述虚拟资产和唯一标识。
本公开实施例的第五方面,提供了一种通信装置,所述装置应用于终端设备中的SIM卡,所述终端设备还包括元宇宙应用模块,所述装置包括:
虚拟身份信息获取模块,用于当接收到身份信息请求时,获取本地记录的虚拟身份信息;其中,所述身份信息请求为所述元宇宙应用模块需要访问元宇宙平台时向所述SIM卡发送的;
虚拟身份信息发送模块,用于向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;以使所述元宇宙应用模块基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
在一些实施例中,所述装置还包括:
交易记录接收模块,用于接收所述元宇宙应用模块发送的交易记录;其中,所述交易记录为所述第一用户在所述元宇宙平台中的交易记录;
数字签名生成模块,用于基于所述第一用户的私钥对所述交易记录进行加密处理,得到对应的数字签名;
数字签名发送模块,用于向所述元宇宙应用模块发送所述数字签名,以使所述元宇宙应用模块向所述元宇宙平台发送所述交易记录和所述数字签名。
在一些实施例中,所述装置还包括:
虚拟资产接收模块,用于接收所述元宇宙应用模块发送的虚拟资产;其中,所述虚拟资产为所述第一用户在所述元宇宙平台中获取到的;
唯一标识生成模块,用于基于所述虚拟身份信息生成所述虚拟资产的唯一标识,并在本地对应记录所述虚拟资产和唯一标识。
在一些实施例中,所述装置还包括:
随机数生成模块,用于生成随机数;
私钥生成模块,用于基于预设的哈希算法,计算所述随机数的哈希值,得到所述第一用户的私钥;
DID生成模块,用于基于所述第一用户的私钥,生成所述第一用户的去中心化身份DID,作为所述第一用户的虚拟身份信息。
在一些实施例中,所述装置还包括:
第一获取模块,用于当需要对待验证用户的用户身份进行验证时,获取所述待验证用户提供的用户密码和用户真实身份信息;
第一确定模块,用于基于预先记录的用户真实身份信息、加密随机数与运营商密码的对应关系,确定所述待验证用户提供的用户真实身份信息对应的加密随机数与运营商密码;其中,所述对应关系中记录的加密随机数为:基于注册用户提供的用户密码和对应的运营商密码进行加密得到的;
第一判断模块,用于判断基于确定出的运营商密码和所述待验证用户提供的用户密码,是否能够成功对确定出的加密随机数进行解密;若是,则确定所述待验证用户通过身份验证;若否,确定所述待验证用户未通过身份验证。
本公开实施例的第六方面,提供了一种SIM卡,所述SIM卡包括计算芯片、通信模块和SIM卡模块;
所述计算芯片,用于通过所述通信模块与终端设备中的元宇宙应用模块进行数据通信,以实现上述任一应用于SIM卡的通信方法步骤。
本公开实施例的第七方面,提供了一种电子设备,其特征在于,包括处理器、通信接口、存储器和通信总线,其中,处理器,通信接口,存储器通过通信总线完成相互间的通信;
存储器,用于存放计算机程序;
处理器,用于执行存储器上所存放的程序时,实现上述任一通信方法步骤。
本公开实施例还提供了一种包含指令的计算机程序产品,当其在计算机上运行时,使得计算机执行上述任一通信方法。
本公开实施例有益效果:
本公开实施例提供的终端设备包括用户身份模块SIM卡和元宇宙应用模块,其中:元宇宙应用模块,用于当需要访问元宇宙平台时,向SIM发送身份信息请求;SIM卡,用于在接收到身份信息请求时,获取本地记录的虚拟身份信息,并向元宇宙应用模块发送虚拟身份信息;其中,虚拟身份信息为:登录元宇宙应用模块的第一用户在注册SIM卡时,SIM卡基于第一用户的私钥生成得到的;第一用户的私钥为对预设随机数进行哈希计算得到的;元宇宙应用模块,还用于基于虚拟身份信息,向元宇宙平台发送认证请求,以使元宇宙平台基于虚拟身份信息对认证请求进行认证。
基于本公开实施例提供的终端设备,可以在用户注册SIM卡时,生成用户的虚拟身份信息,并存储在SIM卡中,后续,基于SIM卡中记录的虚拟身份信息,可以实现用户 访问元宇宙平台,而无需在各互联网平台会记录用户的虚拟身份信息,进而,降低虚拟身份信息泄露的风险,有利于用户的隐私保护。
当然,实施本公开的任一产品或方法并不一定需要同时达到以上所述的所有优点。
附图说明
为了更清楚地说明本公开实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本公开的一些实施例,对于本领域普通技术人员来讲,还可以根据这些附图获得其他的实施例。
图1为本公开实施例提供的一种终端设备的架构图;
图2为本申请实施例提供的一种SIM卡的结构图;
图3为本公开实施例提供的一种BSIM卡的硬件结构示意图;
图4为本公开实施例提供的一种通信方法的交互图;
图5为本公开实施例提供的一种访问元宇宙平台的示意图;
图6为本公开实施例提供的另一种通信方法的交互图;
图7为本公开实施例提供的又一种通信方法的交互图;
图8为本公开实施例提供的一种虚拟身份信息的生成过程的流程图;
图9为本公开实施例提供的一种用户身份验证过程的流程图;
图10为本公开实施例提供的一种待验证用户验证示意图;
图11为本公开实施例提供的一种智能终端的操作系统与SIM卡的通信示意图;
图12为本公开实施例提供的一种SIM卡对虚拟资产进行管理的示意图;
图13为本公开实施例提供的一种元宇宙资产管理流程示意图;
图14为本公开实施例提供的一种通信装置的结构图;
图15为本公开实施例提供的又一种通信装置的结构图;
图16为本申请实施例提供的一种电子设备的结构图。
具体实施方式
下面将结合本公开实施例中的附图,对本公开实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例仅仅是本公开一部分实施例,而不是全部的实施例。基于本公开中的实施例,本领域普通技术人员基于本公开所获得的所有其他实施例,都属于本公开保护的范围。
相关技术中,互联网平台会记录用户的虚拟身份信息,导致虚拟身份信息存在泄露的风险,不利于用户的隐私保护。
为了解决上述问题,本公开实施例提供了一种终端设备,参见图1,图1为本公开实施例提供的一种终端设备的架构图,该终端设备包括SIM(用户身份模块,Subscriber Identity Module)卡101和元宇宙应用模块102,其中:
元宇宙应用模块102,用于当需要访问元宇宙平台时,向SIM卡101发送身份信息请求。
SIM卡101,用于在接收到身份信息请求时,获取本地记录的虚拟身份信息,并向元宇宙应用模块102发送虚拟身份信息。
其中,虚拟身份信息为:登录元宇宙应用模块102的第一用户在注册SIM卡时,SIM卡101基于第一用户的私钥生成得到的;第一用户的私钥为对预设随机数进行哈希计算得到的。
元宇宙应用模块102,还用于基于虚拟身份信息,向元宇宙平台发送认证请求,以使元宇宙平台基于虚拟身份信息对认证请求进行认证。
本公开实施例提供的终端设备,可以在用户注册SIM卡时,生成用户的虚拟身份信息,并存储在SIM卡中,后续,基于SIM卡中记录的虚拟身份信息,可以实现用户访问元宇宙平台,而无需在各互联网平台会记录用户的虚拟身份信息,进而,降低虚拟身份信息泄露的风险,有利于用户的隐私保护。
本公开实施例提供的终端设备可以应用于不同的场景,例如,该终端设备可以为手机,用户可以通过手机与元宇宙平台进行通信。相应的,该终端设备中的SIM卡表示内置于该手机的SIM卡,元宇宙应用模块可以包括该手机中安装的用于访问元宇宙平台的应用程序。
本公开实施例还提供了一种SIM卡,如图2所示,图2为本申请实施例提供的一种SIM卡的结构图,包括:计算芯片201、SIM卡模块202和通信模块203;
计算芯片201,用于通过通信模块203与终端设备中的元宇宙应用模块进行数据通信。
本公开中的SIM卡也可以称为BSIM(区块链用户身份模块,Blockchain Subscriber Identity Module)卡。元宇宙平台应用模块可以为终端设备安装的元宇宙软件。
一种实现方式中,如图3所示,图3为本公开实施例提供的一种BSIM卡的硬件结构示意图。在图3中,BSIM卡包括SIM卡模块301、蓝牙模块302、计算芯片303和接口模块304。SIM卡模块301包括传统SIM卡的硬件结构,蓝牙模块302即为上述实施例中的通信模块,接口模块304包含后文中的特定接口。计算芯片303用于生成用户的虚拟身份信息、对交易记录进行签名、生成虚拟资产的唯一标识,以及对用户身份进行验证等,具体地,将在后续实施例中详细接收。该计算芯片303具备金融安全等级。
一种实现方式中,BSIM卡可以支持ECC-secp256k1(椭圆曲线算法,Elliptic Curve Cryptography)、AES(高级加密标准算法,Advanced Encryption Standard)、ECDSA-secp256k1(椭圆曲线数字签名算法,Elliptic Curve Digital Signature Algorithm)、HMAC-SHA512(基于消息认证码的哈希算法,Hash-based Message Authentication Code)等区块链算法。BSIM卡支持BIP32(钱包分层方案)、BIP44(钱包助记词创建方案)等区块链数字货币协议。BSIM卡中的存储空间大于1M,用户空间大于450K;签名速度小于150ms。其中,用户空间用于存储用户的虚拟身份信息、虚拟资产、手机号、加密种子和私钥。
一种实现方式中,BSIM可以通过以下架构实现:JAVA应用层、JAVA平台、硬件接口层和硬件层。JAVA应用层用于BSIM卡内实现区块链应用逻辑,包括种子生成、公私钥生成、加密存储、数字签名生成、私钥找回、备份等。JAVA平台层可以实现JAVACARD虚拟机及卡片内容管理功能,提供应用调用的JAVA接口。BSIM卡通过JAVA接口与元宇宙平台用于模块进行通信。硬件接口层可以基于C语言调用硬件接口,以生成用户的虚拟身份信息、对交易记录进行签名、生成虚拟资产的唯一标识,以及对用户身份进行验证等处理。硬件层可以通过硬件算法IP协处理器,提升算法性能。硬件算法IP协处理器即上述实施例中的计算芯片。
基于相同的发明构思,本公开实施例还提供了一种通信方法,该方法可以应用于终端设备中的SIM卡和元宇宙应用模块。该SIM卡和元宇宙应用模块可以分别为图1中终 端设备中的SIM卡101和元宇宙应用模块102。参见图4,图4为本公开实施例提供的一种通信方法的交互图,该方法可以包括以下步骤:
S401:当需要访问元宇宙平台时,元宇宙应用模块向SIM卡发送身份信息请求。
S402:SIM卡在接收到身份信息请求时,获取本地记录的虚拟身份信息,并向元宇宙应用模块发送虚拟身份信息。
其中,虚拟身份信息为:登录元宇宙应用模块的第一用户在注册SIM卡时,SIM卡基于第一用户的私钥生成得到的;第一用户的私钥为对预设随机数进行哈希计算得到的。
S403:元宇宙应用模块基于虚拟身份信息,向元宇宙平台发送认证请求,以使元宇宙平台基于虚拟身份信息对认证请求进行认证。
本公开实施例提供的通信方法,可以在用户注册SIM卡时,生成用户的虚拟身份信息,并存储在SIM卡中,后续,基于SIM卡中记录的虚拟身份信息,可以实现用户访问元宇宙平台,而无需在各互联网平台会记录用户的虚拟身份信息,进而,降低虚拟身份信息泄露的风险,有利于用户的隐私保护。
另外,相关技术中,虚拟资产和虚拟身份是元宇宙的核心,承载了元宇宙中用户的资产权益和社交身份。但由于用户的虚拟身份解释权在互联网平台机构,所有权属性不明确,阻碍了元宇宙的发展。
而基于本公开实施例的方法,用户的虚拟身份信息记录在用户注册的SIM卡中,使得用户能够拥有虚拟身份信息的所有权,即,能够明确虚拟身份信息的所有权,促进元宇宙的发展。
针对步骤S401,该元宇宙平台与元宇宙应用模块对应,即,用户可以通过不同的元宇宙应用模块访问不同的元宇宙平台。
一种实现方式中,当用户在智能终端中开启元宇宙应用模块时,该元宇宙应用模块可以向SIM卡发送身份信息请求。例如,元宇宙应用模块可以通过特定接口调用SDK(软件开发工具包,Software Development Kit),进而,通过SDK向SIM卡发送身份信息请求,以获取SIM卡中储存的身份信息。上述特定接口可以为智能终端的操作系统提供的接口。
针对步骤S402,第一用户为当前使用智能终端需要通过元宇宙应用模块访问元宇宙平台的用户。一种实现方式中,第一用户可以向运营商申请注册SIM卡,在注册SIM卡时,SIM卡可以生成第一用户的虚拟身份信息。
针对步骤S403,一种实现方式中,第一用户的虚拟身份信息可以包含DID。即,第一用户在注册SIM卡时,运营商可以将该第一用户的DID存储至运营商构建的区块链中。相应的,元宇宙应用模块可以基于第一用户的DID生成DID可验证声明,并向元宇宙平台发送携带有该DID可验证声明的认证请求。相应的,元宇宙平台可以获取运营商构建的区块链中存储的第一用户的DID,并基于该DID对DID可验证声明进行验证,也就可以对认证请求进行认证。其中,对认证请求进行认证,也就是对第一用户进行认证。
例如,DID可以包含DID标识符和DID文档,该DID文档包括:该第一用户的公钥、加密协议的集合、服务端点的集合、该DID文档的创建时间戳和JSON-LD(JavaScript Object Notation-Linked Data,一种基于JSON表示和传输互联数据的方法)签名。其中,JSON-LD签名用于验证该DID文档的合法性。该第一用户的公钥与后文中提到的第一用户的私钥对应。
一种实现方式中,元宇宙平台可以基于W3C(万维网联盟,World Wide Web Consortium)的DID规范,对认证请求中携带的DID可验证声明进行验证。例如,可以判断该DID可验证声明中的签名是否合法,或,可以判断该DID可验证声明中的DID是否为该元宇宙平台信任的DID,即,该DID可验证声明表征的DID标识符和DID文档是否为 运营商构建的区块链中存储的DID标识符和DID文档。也就是说,当第一用户通过元宇宙应用模块访问元宇宙平台时,元宇宙平台可以获取第一用户的DID可验证声明,若该DID可验证声明通过验证,则可以确定对第一用户认证成功;反之,确定对第一用户认证失败。
一种实现方式中,参见图5,图5为本公开实施例提供的一种访问元宇宙平台的示意图。图5中的各元宇宙表示元宇宙平台,自然人(即用户)通过运营商进行实名认证后,可以登录元宇宙平台,并可以切换访问多个不同的元宇宙平台。运营商将用户的DID密钥(即DID)存储在BSIM卡芯片内,元宇宙平台可以从运营商获取该用户的DID,后续,当该用户访问元宇宙平台时,元宇宙平台可以对DID可验证声明进行解析、验证,进而对用户进行认证。基于W3C的DID标识规范定义,可以实现统一规范的DID在元宇宙平台之间互联互通互认,用户可以实现在多个元宇宙平台间无缝切换,即,用户可以基于一个DID通过访问不同的元宇宙平台,无需在不同的元宇宙平台注册不同的DID。区块链基础设施是一个基于区块链技术运行的网络,运营商可以参与区块链基础设施的构建,同时,区块链中也可以存储DID。另外,区块链中还可以存储元宇宙平台中的每一DID的交易记录。利用BSIM卡对用户的虚拟身份信息进行存储,可以打通多个元宇宙平台之间的数字身份,实现跨元宇宙平台的统一身份认证协议,为云宇宙平台构建权威、标准、可信的用户身份体系基础设施。
一种实现方式中,参见图6,图6为本公开实施例提供的另一种通信方法的交互图,在图4的基础上,该方法可以包括以下步骤:
S404:元宇宙应用模块获取第一用户在元宇宙平台中的交易记录。
S405:元宇宙应用模块向SIM卡发送交易记录。
S406:SIM卡基于第一用户的私钥对交易记录进行加密处理,得到对应的数字签名,并向元宇宙应用模块发送数字签名。
S407:元宇宙应用模块从SIM卡获取数字签名,并向元宇宙平台发送交易记录和数字签名。
元宇宙平台可以使用区块链作为基础设施,例如,元宇宙平台可以基于区块链发行虚拟资产。
当用户在元宇宙平台中购买或出售一件虚拟资产时,元宇宙平台可以产生一条交易记录,用来表示第一用户在该元宇宙平台中进行虚拟资产交易。例如,交易记录可以包含交易的时间、交易双方的虚拟身份信息和交易的虚拟资产原有的标识。虚拟资产原有的标识表示生成该虚拟资产时得到的标识。
一种实现方式中,SIM卡可以基于数字摘要算法对交易记录进行处理,得到固定长度的字符串,然后,基于第一用户的私钥对字符串进行加密,形成数字签名。SIM卡可以通过区块链接口,将数字签名发送至元宇宙应用模块。例如,数字摘要算法可以为Hash(哈希)算法。其中,区块链接口可以为SIM卡提供的硬件接口,SIM卡可以通过该硬件接口接入各元宇宙平台对应的区块链。
元宇宙应用模块可以基于SIM卡中的区块链接口获取数字签名,并将该数字签名和其对应的交易记录发送至元宇宙平台。
本公开实施例提供的通信方法,在用户进行虚拟资产交易时,使用SIM卡中存储的第一用户的私钥对交易记录进行签名,将得到的数字签名和交易记录发送至元宇宙平台,可以避免用户的交易记录被篡改,且交易的成本低、不受时间和空间的限制。
一种实现方式中,参见图7,图7为本公开实施例提供的又一种通信方法的交互图,在图4的基础上,该方法可以包括以下步骤:
S408:当检测到第一用户在元宇宙平台中获取到虚拟资产时,元宇宙应用模块向SIM卡发送虚拟资产。
S409:SIM卡基于虚拟身份信息生成虚拟资产的唯一标识,并在本地对应记录虚拟资产和唯一标识。
第一用户可以通过元宇宙应用模块在元宇宙平台中购买虚拟资产、交换虚拟资产,相应的,元宇宙应用模块可以将第一用户得到的虚拟资产发送至SIM卡中。
一种实现方式中,第一用户可以使用积分购买数字艺术品、游戏道具等NFT(非同质化代币,Non-Fungible Token)数字商品。其中,积分可以为第一用户在运营商的业务运营平台进行充值得到的虚拟资产;或者,也可以为运营商根据用户的历史消费记录,向用户赠送的虚拟资产。
一种实现方式中,SIM卡可以对虚拟身份信息和虚拟资产原有的标识进行拼接,作为虚拟资产的唯一标识。
相关技术中,虚拟资产和虚拟身份是元宇宙的核心,承载了元宇宙中用户的资产权益和社交身份。但由于虚拟身份信息及衍生的相关资产、活动等数据缺乏隐私,不利于用户隐私的保护。本公开实施例提供的通信方法,可以基于SIM卡中存储的虚拟身份信息对不同元宇宙中的不同资产生成唯一标识,有利于用户对虚拟资产进行管理,进而,有利于打造元宇宙交易生态和用户的隐私保护。
一种实现方式中,如图8所示,图8为本公开实施例提供的一种虚拟身份信息的生成过程的流程图,SIM卡生成虚拟身份信息的过程包括:
S801:生成随机数。
S802:基于预设的哈希算法,计算随机数的哈希值,得到第一用户的私钥。
S803:基于第一用户的私钥,生成第一用户的DID,作为第一用户的虚拟身份信息。
一种实现方式中,在第一用户注册SIM卡时,SIM卡可以通过硬件随机数发生器(TRNG,True Random Number Generator)生成指定字节的随机数。基于预设的哈希算法对随机数进行处理,得到第一用户的私钥。
基于哈希算法对第一用户的私钥进行处理,得到一个固定长度的字符串,作为第一哈希值。获取第一哈希值的第一数值长度的字节,将该第一数值长度的字节作为第二哈希值。在第二哈希值前添加DID角色类型字节,将添加DID角色类型字节后的第二哈希值作为第三哈希值。基于哈希算法对第三哈希值进行计算,得到第四哈希值。获取第四哈希值的第二数值长度的字节,并将第二数值长度的字节与第三哈希值拼接,得到的拼接后的值作为第五哈希值。对第五哈希值进行编码处理,得到该第一用户对应的DID,作为第一用户的虚拟身份信息。
其中,第一数值长度的字节可以为前20个字节,第二数值长度的字节可以为前4个字节。哈希算法可以为SHA-512(Secure Hash Algorithm-512,安全散列算法)。DID角色类型字节表示该DID代表的角色类型,其中,角色类型可以为应用程序、个人或设备等。对第五哈希值进行编码处理可以使用比特币的Base58编码方法。
指定字节可以为64字节,私钥的长度可以为512位,也就使得能够存在2的512次方个不同的私钥,即,私钥的个数接近于10的150次方,随机选取出的私钥相同的概率为10的150次方分之一,接近于0,进而,能够提高私钥的唯一性和安全性。
本公开实施例提供的通信方法,可以基于随机数生成第一用户的私钥,确保了私钥的唯一性、安全性,且在用户注册SIM卡时生成用户的虚拟身份信息,明确了用户的虚拟身份信息的所有权,保障了用户的虚拟身份解释权在用户本人而非互联网平台,有利于用户的隐私保护,促进元宇宙的发展。
一种实现方式中,当SIM卡被遗失或损坏时,用户可以恢复SIM卡,相应的,可以对用户身份进行验证。如图9所示,图9为本公开实施例提供的一种用户身份验证过程的流程图,包括:
S901:当需要对待验证用户的用户身份进行验证时,获取待验证用户提供的用户密码和用户真实身份信息。
S902:基于预先记录的用户真实身份信息、加密随机数与运营商密码的对应关系,确定待验证用户提供的用户真实身份信息对应的加密随机数与运营商密码。
其中,对应关系中记录的加密随机数为:基于注册用户提供的用户密码和对应的运营商密码进行加密得到的。
S903:判断基于确定出的运营商密码和待验证用户提供的用户密码,是否能够成功对确定出的加密随机数进行解密;若是,则执行步骤S904;若否,则执行步骤S905。
S904:确定待验证用户通过身份验证。
S905:确定待验证用户未通过身份验证。
在本公开中,随机数也可以称为种子,加密随机数也可以称为加密种子。
一种实现方式中,用户在注册SIM卡时,可以提供用户密码。例如,用户密码可以为固定长度的字符串。另外,用户可以提供真实身份信息。真实身份信息可以包括用户的姓名和身份证号。运营商密码为运营商在用户在注册SIM卡时生成的。不同的用户对应的运营商密码可以相同,也可以不同。针对每一用户,在该用户注册SIM卡时,SIM卡在得到对应加密随机数后,可以将该用户对应的加密随机数、运营商密码和该用户提供的真实身份信息存储在运营商的业务运营平台。
待验证用户为当前需要进行用户身份验证的用户,当需要对待验证用户的用户身份进行验证时,SIM卡可以获取业务运营平台中记录的与待验证用户提供真实身份信息对应的加密随机数、运营商密码。进而,SIM卡结合待验证用户提供的用户密码和运营商密码对加密随机数进行解密;若解密成功,则确定待验证用户通过身份验证;若解密未成功,则确定待验证用户未通过身份验证。
本公开实施例提供的通信方法,由于业务运营平台存储的为加密种子,并未存储用户的用户密码,因此,仅基于运营商密码,运营商无法得到用户的种子、私钥和资产,保证了用户资产安全,有利于用户的隐私保护。
一种实现方式中,参见图10,图10为本公开实施例提供的一种待验证用户验证示意图。图10中,当SIM卡丢失或损坏时,待验证用户可以向运营商申请恢复卡。运营商可以将记录的与待验证用户提供的手机号等真实身份信息对应的加密种子和运营商密码写入SIM卡中。另外,SIM卡可以获取待验证用户输入的用户密码,进而,SIM卡基于运营商密码和用户密码对加密种子进行解密,若解密成功,则确定待验证用户通过身份验证,相应的,运营商可以为待验证用户恢复SIM卡,即,待验证用户得到新卡,找回钱包(即待验证用户的私钥);若解密未成功,则确定待验证用户未通过身份验证。
一种实现方式中,参见图11,图11为本公开实施例提供的一种智能终端的操作系统与SIM卡的通信示意图。如图11所示,智能终端可以为手机,手机OS(操作系统)可以通过特定接口调用SDK(软件开发工具包,Software Development Kit),与SIM卡进行通信,SIM卡存储有用户的手机号、加密种子、私钥、加密数字资产和SIM卡计算程序。其中,通过SIM卡计算程序可以生成用户的虚拟身份信息、对交易记录进行签名、生成虚拟资产的唯一标识,以及对用户身份进行验证。
一种实现方式中,参见图12,图12为本公开实施例提供的一种SIM卡对虚拟资产进行管理的示意图。图12中,BSIM卡中可以存储用户的用户身份(即,虚拟身份信息)、用户资产(虚拟资产)、原生资产(运营商下发的积分)、FT(同质化代币,Fungible Token) 和NFT(非同质化代币,Non-Fungible Token)。其中,FT可以包括游戏金币,NFT可以包括:数字艺术品、游戏道具、元宇宙资产等。基于区块链可以实现数字身份的认证、构建数字资产交易商城(例如,积分交易平台),以及对数字艺术品(包括音乐、视频、图片等)、游戏资产(包括装备、物品、能力、皮肤等)和元宇宙资产进行交易。例如,针对数字艺术品,可定义所有权和使用权;能够实现对元宇宙的权力与资产的管理,保证资产归属与价值在元宇宙中得到无边界的广泛确认。区块链节点包括:联盟链区块链节点、区块链共识节点、版权保护节点、跨链节点等,各节点基于智能合约分别实现不同的业务功能。
一种实现方式中,如图13所示,图13为本公开实施例提供的一种元宇宙资产管理流程示意图。图13中,BSIM卡可以作为元宇宙的入口装置,基于BSIM卡,可以实现区块链分布式数字身份的认证、元宇宙数字资产管理,以及基于通证的数字资产交易。使得构建的元宇宙能够服务于数据权益与资产流转,打造元宇宙数字身份及资产交易生态。BSIM卡具有支持多种区块链算法、性能高、安全性好、使用便捷等优点。有利于拉动5G大网流量收入,且区块链上数字资产不易迁移,提供用户粘性,有利于现有高净值用户的运营和吸引异网用户。
基于相同的发明构思,本公开实施例还提供了一种通信装置,参见图14,图14为本公开实施例提供的一种通信装置的结构图,该装置应用于终端设备中的元宇宙应用模块,终端设备还包括SIM卡,装置包括:
身份信息请求发送模块1401,用于当需要访问元宇宙平台时,向SIM卡发送身份信息请求,以使SIM卡在接收到身份信息请求时,获取本地记录的虚拟身份信息,并向元宇宙应用模块发送虚拟身份信息;其中,虚拟身份信息为:登录元宇宙应用模块的第一用户在注册SIM卡时,SIM卡基于第一用户的私钥生成得到的;第一用户的私钥为对预设随机数进行哈希计算得到的;
认证请求发送模块1402,用于基于虚拟身份信息,向元宇宙平台发送认证请求,以使元宇宙平台基于虚拟身份信息对认证请求进行认证。
在一些实施例中,装置还包括:
交易记录获取模块,用于获取第一用户在元宇宙平台中的交易记录;
交易记录发送模块,用于向SIM卡发送交易记录,以使SIM卡基于第一用户的私钥对交易记录进行加密处理,得到对应的数字签名,并向元宇宙应用模块发送数字签名;
数字签名获取模块,用于从SIM卡获取数字签名,并向元宇宙平台发送交易记录和数字签名。
在一些实施例中,装置还包括:
虚拟资产发送模块,用于当检测到第一用户在元宇宙平台中获取到虚拟资产时,向SIM卡发送虚拟资产,以使SIM卡基于虚拟身份信息生成虚拟资产的唯一标识,并在本地对应记录虚拟资产和唯一标识。
基于相同的发明构思,本公开实施例还提供了一种通信装置,参见图15,图15为本公开实施例提供的又一种通信装置的结构图,该装置应用于终端设备中的SIM卡,终端设备还包括元宇宙应用模块,装置包括:
虚拟身份信息获取模块1501,用于当接收到身份信息请求时,获取本地记录的虚拟身份信息;其中,身份信息请求为元宇宙应用模块需要访问元宇宙平台时向SIM卡发送的;
虚拟身份信息发送模块1502,用于向元宇宙应用模块发送虚拟身份信息;其中,虚拟身份信息为:登录元宇宙应用模块的第一用户在注册SIM卡时,SIM卡基于第一用户的私钥生成得到的;第一用户的私钥为对预设随机数进行哈希计算得到的;以使元宇 宙应用模块基于虚拟身份信息,向元宇宙平台发送认证请求,以使元宇宙平台基于虚拟身份信息对认证请求进行认证。
在一些实施例中,装置还包括:
交易记录接收模块,用于接收元宇宙应用模块发送的交易记录;其中,交易记录为第一用户在元宇宙平台中的交易记录;
数字签名生成模块,用于基于第一用户的私钥对交易记录进行加密处理,得到对应的数字签名;
数字签名发送模块,用于向元宇宙应用模块发送数字签名,以使元宇宙应用模块向元宇宙平台发送交易记录和数字签名。
在一些实施例中,装置还包括:
虚拟资产接收模块,用于接收元宇宙应用模块发送的虚拟资产;其中,虚拟资产为第一用户在元宇宙平台中获取到的;
唯一标识生成模块,用于基于虚拟身份信息生成虚拟资产的唯一标识,并在本地对应记录虚拟资产和唯一标识。
在一些实施例中,装置还包括:
随机数生成模块,用于生成随机数;
私钥生成模块,用于基于预设的哈希算法,计算随机数的哈希值,得到第一用户的私钥;
DID生成模块,用于基于第一用户的私钥,生成第一用户的去中心化身份DID,作为第一用户的虚拟身份信息。
在一些实施例中,装置还包括:
第一获取模块,用于当需要对待验证用户的用户身份进行验证时,获取待验证用户提供的用户密码和用户真实身份信息;
第一确定模块,用于基于预先记录的用户真实身份信息、加密随机数与运营商密码的对应关系,确定待验证用户提供的用户真实身份信息对应的加密随机数与运营商密码;其中,对应关系中记录的加密随机数为:基于注册用户提供的用户密码和对应的运营商密码进行加密得到的;
第一判断模块,用于判断基于确定出的运营商密码和待验证用户提供的用户密码,是否能够成功对确定出的加密随机数进行解密;若是,则确定待验证用户通过身份验证;若否,确定待验证用户未通过身份验证。
本公开实施例还提供了一种电子设备,如图16所示,图16为本申请实施例提供的一种电子设备的结构图。包括处理器1601、通信接口1602、存储器1603和通信总线1604,其中,处理器1601,通信接口1602,存储器1603通过通信总线1604完成相互间的通信,
存储器1603,用于存放计算机程序;
处理器1601,用于执行存储器1603上所存放的程序时,实现上述实施例中任一通信方法的步骤。
上述电子设备提到的通信总线可以是外设部件互连标准(Peripheral Component Interconnect,PCI)总线或扩展工业标准结构(Extended Industry Standard Architecture,EISA)总线等。该通信总线可以分为地址总线、数据总线、控制总线等。为便于表示,图中仅用一条粗线表示,但并不表示仅有一根总线或一种类型的总线。
通信接口用于上述电子设备与其他设备之间的通信。
存储器可以包括随机存取存储器(Random Access Memory,RAM),也可以包括非易失性存储器(Non-Volatile Memory,NVM),例如至少一个磁盘存储器。可选的,存储器还可以是至少一个位于远离前述处理器的存储装置。
上述的处理器可以是通用处理器,包括中央处理器(Central Processing Unit,CPU)、网络处理器(Network Processor,NP)等;还可以是数字信号处理器(Digital Signal Processor,DSP)、专用集成电路(Application Specific Integrated Circuit,ASIC)、现场可编程门阵列(Field-Programmable Gate Array,FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件。
在本公开提供的又一实施例中,还提供了一种计算机可读存储介质,该计算机可读存储介质内存储有计算机程序,所述计算机程序被处理器执行时实现上述任一通信方法的步骤。
在本公开提供的又一实施例中,还提供了一种包含指令的计算机程序产品,当其在计算机上运行时,使得计算机执行上述实施例中任一通信方法。
在上述实施例中,可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时,可以全部或部分地以计算机程序产品的形式实现。所述计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行所述计算机程序指令时,全部或部分地产生按照本公开实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中,或者从一个计算机可读存储介质向另一个计算机可读存储介质传输,例如,所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线(DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质,(例如,软盘、硬盘、磁带)、光介质(例如,DVD)、或者半导体介质(例如固态硬盘Solid State Disk(SSD))等。
需要说明的是,在本文中,诸如第一和第二等之类的关系术语仅仅用来将一个实体或者操作与另一个实体或操作区分开来,而不一定要求或者暗示这些实体或操作之间存在任何这种实际的关系或者顺序。而且,术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含,从而使得包括一系列要素的过程、方法、物品或者设备不仅包括那些要素,而且还包括没有明确列出的其他要素,或者是还包括为这种过程、方法、物品或者设备所固有的要素。在没有更多限制的情况下,由语句“包括一个……”限定的要素,并不排除在包括所述要素的过程、方法、物品或者设备中还存在另外的相同要素。
本说明书中的各个实施例均采用相关的方式描述,各个实施例之间相同相似的部分互相参见即可,每个实施例重点说明的都是与其他实施例的不同之处。尤其,对于装置、SIM卡、电子设备和终端设备实施例而言,由于其基本相似于方法实施例,所以描述的比较简单,相关之处参见方法实施例的部分说明即可。
以上所述仅为本公开的较佳实施例,并非用于限定本公开的保护范围。凡在本公开的精神和原则之内所作的任何修改、等同替换、改进等,均包含在本公开的保护范围内。

Claims (21)

  1. 一种终端设备,其中,包括:用户身份模块SIM卡;并安装有元宇宙应用模块,其中:
    所述元宇宙应用模块,用于当需要访问元宇宙平台时,向所述SIM卡发送身份信息请求;
    所述SIM卡,用于在接收到所述身份信息请求时,获取本地记录的虚拟身份信息,并向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;
    所述元宇宙应用模块,还用于基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
  2. 一种通信方法,其中,应用于终端设备中的元宇宙应用模块,所述终端设备还包括SIM卡,所述方法包括:
    当需要访问元宇宙平台时,向所述SIM卡发送身份信息请求,以使所述SIM卡在接收到所述身份信息请求时,获取本地记录的虚拟身份信息,并向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;
    基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
  3. 根据权利要求2所述的方法,其中,所述方法还包括:
    获取所述第一用户在所述元宇宙平台中的交易记录;
    向所述SIM卡发送所述交易记录,以使所述SIM卡基于所述第一用户的私钥对所述交易记录进行加密处理,得到对应的数字签名,并向所述元宇宙应用模块发送所述数字签名;
    从所述SIM卡获取所述数字签名,并向所述元宇宙平台发送所述交易记录和所述数字签名。
  4. 根据权利要求2所述的方法,其中,所述方法还包括:
    当检测到所述第一用户在所述元宇宙平台中获取到虚拟资产时,向所述SIM卡发送所述虚拟资产,以使所述SIM卡基于所述虚拟身份信息生成所述虚拟资产的唯一标识,并在本地对应记录所述虚拟资产和唯一标识。
  5. 一种通信方法,其中,所述方法应用于终端设备中的SIM卡,所述终端设备还包括元宇宙应用模块,所述方法包括:
    当接收到身份信息请求时,获取本地记录的虚拟身份信息;其中,所述身份信息请求为所述元宇宙应用模块需要访问元宇宙平台时向所述SIM卡发送的;
    向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;以使所述元宇宙应用模块基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
  6. 根据权利要求5所述的方法,其中,所述方法还包括:
    接收所述元宇宙应用模块发送的交易记录;其中,所述交易记录为所述第一用户在所述元宇宙平台中的交易记录;
    基于所述第一用户的私钥对所述交易记录进行加密处理,得到对应的数字签名;
    向所述元宇宙应用模块发送所述数字签名,以使所述元宇宙应用模块向所述元宇宙平台发送所述交易记录和所述数字签名。
  7. 根据权利要求5所述的方法,其中,所述方法还包括:
    接收所述元宇宙应用模块发送的虚拟资产;其中,所述虚拟资产为所述第一用户在所述元宇宙平台中获取到的;
    基于所述虚拟身份信息生成所述虚拟资产的唯一标识,并在本地对应记录所述虚拟资产和唯一标识。
  8. 根据权利要求5所述的方法,其中,所述虚拟身份信息的生成过程包括:
    生成随机数;
    基于预设的哈希算法,计算所述随机数的哈希值,得到所述第一用户的私钥;
    基于所述第一用户的私钥,生成所述第一用户的去中心化身份DID,作为所述第一用户的虚拟身份信息。
  9. 根据权利要求8所述的方法,其中,所述方法还包括:
    当需要对待验证用户的用户身份进行验证时,获取所述待验证用户提供的用户密码和用户真实身份信息;
    基于预先记录的用户真实身份信息、加密随机数与运营商密码的对应关系,确定所述待验证用户提供的用户真实身份信息对应的加密随机数与运营商密码;其中,所述对应关系中记录的加密随机数为:基于注册用户提供的用户密码和对应的运营商密码进行加密得到的;
    判断基于确定出的运营商密码和所述待验证用户提供的用户密码,是否能够成功对确定出的加密随机数进行解密;
    若是,则确定所述待验证用户通过身份验证;
    若否,确定所述待验证用户未通过身份验证。
  10. 一种通信装置,其中,所述装置应用于终端设备中的元宇宙应用模块,所述终端设备还包括SIM卡,所述装置包括:
    身份信息请求发送模块,用于当需要访问元宇宙平台时,向所述SIM卡发送身份信息请求,以使所述SIM卡在接收到所述身份信息请求时,获取本地记录的虚拟身份信息,并向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;
    认证请求发送模块,用于基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
  11. 根据权利要求10所述的装置,其中,所述装置还包括:
    交易记录获取模块,用于获取所述第一用户在所述元宇宙平台中的交易记录;
    交易记录发送模块,用于向所述SIM卡发送所述交易记录,以使所述SIM卡基于所述第一用户的私钥对所述交易记录进行加密处理,得到对应的数字签名,并向所述元宇宙应用模块发送所述数字签名;
    数字签名获取模块,用于从所述SIM卡获取所述数字签名,并向所述元宇宙平台发送所述交易记录和所述数字签名。
  12. 根据权利要求10所述的装置,其中,所述装置还包括:
    虚拟资产发送模块,用于当检测到所述第一用户在所述元宇宙平台中获取到虚拟资产时,向所述SIM卡发送所述虚拟资产,以使所述SIM卡基于所述虚拟身份信息生成所述虚拟资产的唯一标识,并在本地对应记录所述虚拟资产和唯一标识。
  13. 一种通信装置,其中,所述装置应用于终端设备中的SIM卡,所述终端设备还包括元宇宙应用模块,所述装置包括:
    虚拟身份信息获取模块,用于当接收到身份信息请求时,获取本地记录的虚拟身份信息;其中,所述身份信息请求为所述元宇宙应用模块需要访问元宇宙平台时向所述SIM卡发送的;
    虚拟身份信息发送模块,用于向所述元宇宙应用模块发送所述虚拟身份信息;其中,所述虚拟身份信息为:登录所述元宇宙应用模块的第一用户在注册所述SIM卡时,所述SIM卡基于所述第一用户的私钥生成得到的;所述第一用户的私钥为对预设随机数进行哈希计算得到的;以使所述元宇宙应用模块基于所述虚拟身份信息,向所述元宇宙平台发送认证请求,以使所述元宇宙平台基于所述虚拟身份信息对所述认证请求进行认证。
  14. 根据权利要求13所述的装置,其中,所述装置还包括:
    交易记录接收模块,用于接收所述元宇宙应用模块发送的交易记录;其中,所述交易记录为所述第一用户在所述元宇宙平台中的交易记录;
    数字签名生成模块,用于基于所述第一用户的私钥对所述交易记录进行加密处理,得到对应的数字签名;
    数字签名发送模块,用于向所述元宇宙应用模块发送所述数字签名,以使所述元宇宙应用模块向所述元宇宙平台发送所述交易记录和所述数字签名。
  15. 根据权利要求13所述的装置,其中,所述装置还包括:
    虚拟资产接收模块,用于接收所述元宇宙应用模块发送的虚拟资产;其中,所述虚拟资产为所述第一用户在所述元宇宙平台中获取到的;
    唯一标识生成模块,用于基于所述虚拟身份信息生成所述虚拟资产的唯一标识,并在本地对应记录所述虚拟资产和唯一标识。
  16. 根据权利要求13所述的装置,其中,所述装置还包括:
    随机数生成模块,用于生成随机数;
    私钥生成模块,用于基于预设的哈希算法,计算所述随机数的哈希值,得到所述第一用户的私钥;
    DID生成模块,用于基于所述第一用户的私钥,生成所述第一用户的去中心化身份DID,作为所述第一用户的虚拟身份信息。
  17. 根据权利要求16所述的装置,其中,所述装置还包括:
    第一获取模块,用于当需要对待验证用户的用户身份进行验证时,获取所述待验证用户提供的用户密码和用户真实身份信息;
    第一确定模块,用于基于预先记录的用户真实身份信息、加密随机数与运营商密码的对应关系,确定所述待验证用户提供的用户真实身份信息对应的加密随机数与运营商密码;其中,所述对应关系中记录的加密随机数为:基于注册用户提供的用户密码和对应的运营商密码进行加密得到的;
    第一判断模块,用于判断基于确定出的运营商密码和所述待验证用户提供的用户密码,是否能够成功对确定出的加密随机数进行解密;若是,则确定所述待验证用户通过身份验证;若否,确定所述待验证用户未通过身份验证。
  18. 一种SIM卡,其中,所述SIM卡包括计算芯片、通信模块和SIM卡模块;
    所述计算芯片,用于通过所述通信模块与终端设备中的元宇宙应用模块进行数据通信,以实现权利要求5-9任一所述的方法。
  19. 一种电子设备,其中,包括处理器、通信接口、存储器和通信总线,其中,处理器,通信接口,存储器通过通信总线完成相互间的通信;
    存储器,用于存放计算机程序;
    处理器,用于执行存储器上所存放的程序时,实现权利要求2-9任一所述的方法步骤。
  20. 一种计算机可读存储介质,其中,所述计算机可读存储介质内存储有计算机程序,所述计算机程序被处理器执行时实现权利要求2-9任一所述的方法步骤。
  21. 一种计算机程序产品,包括计算机程序,其中,所述计算机程序被处理器执行时实现权利要求2-9中任一项所述的方法的步骤。
PCT/CN2022/142033 2022-07-15 2022-12-26 通信方法、装置、sim卡、电子设备和终端设备 WO2024011863A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202210837363.5A CN115811412A (zh) 2022-07-15 2022-07-15 一种通信方法、装置、sim卡、电子设备和终端设备
CN202210837363.5 2022-07-15

Publications (2)

Publication Number Publication Date
WO2024011863A1 WO2024011863A1 (zh) 2024-01-18
WO2024011863A9 true WO2024011863A9 (zh) 2024-02-29

Family

ID=85482352

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2022/142033 WO2024011863A1 (zh) 2022-07-15 2022-12-26 通信方法、装置、sim卡、电子设备和终端设备

Country Status (2)

Country Link
CN (1) CN115811412A (zh)
WO (1) WO2024011863A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117806465B (zh) * 2024-02-29 2024-06-04 南昌菱形信息技术有限公司 一种基于元宇宙技术的沉浸式数字体验方法及系统

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8914854B2 (en) * 2008-09-11 2014-12-16 International Business Machines Corporation User credential verification indication in a virtual universe
CN106161032B (zh) * 2015-04-24 2019-03-19 华为技术有限公司 一种身份认证的方法及装置
CN108696870B (zh) * 2018-04-26 2021-04-09 越亮传奇科技股份有限公司 一种基于swp-sim技术的移动终端身份认证方法
CN110493769A (zh) * 2019-07-05 2019-11-22 南京航空航天大学 基于轻量级Hash映射的手机号保密方案
CN114417421A (zh) * 2022-01-26 2022-04-29 深圳技术大学 一种基于元宇宙的共享信息隐私保护方法及相关装置

Also Published As

Publication number Publication date
WO2024011863A1 (zh) 2024-01-18
CN115811412A (zh) 2023-03-17

Similar Documents

Publication Publication Date Title
CA3053316C (en) Method for providing simplified account registration service and user authentication service, and authentication server using same
JP2023502346A (ja) 量子安全ネットワーキング
JP2020528222A (ja) ブロックチェーンにおけるスマートコントラクトに基づくトランザクション活動の取扱注意データを保護するための方法及びデバイス
CN112671720B (zh) 一种云平台资源访问控制的令牌构造方法、装置及设备
CN111275419B (zh) 一种区块链钱包签名确权方法、装置及系统
CN111476573B (zh) 一种账户数据处理方法、装置、设备及存储介质
CN111753014B (zh) 基于区块链的身份认证方法及装置
JP2023535013A (ja) 量子安全支払いシステム
WO2022068356A1 (zh) 基于区块链的信息加密方法、装置、设备及介质
CN107347073B (zh) 一种资源信息处理方法
CN114629713B (zh) 身份验证方法、装置及系统
CN112347516A (zh) 基于区块链的资产证明方法及装置
JP6533542B2 (ja) 秘密鍵複製システム、端末および秘密鍵複製方法
WO2024011863A1 (zh) 通信方法、装置、sim卡、电子设备和终端设备
CN110910110A (zh) 一种数据处理方法、装置及计算机存储介质
CN111241492A (zh) 一种产品多租户安全授信方法、系统及电子设备
CN112948789B (zh) 身份认证方法及装置、存储介质及电子设备
CN113722749A (zh) 基于加密算法的区块链baas服务的数据处理方法及装置
KR102517001B1 (ko) 블록체인 네트워크 상에서 전자서명 처리 시스템 및 방법
CN113342802A (zh) 区块链数据存储的方法和装置
WO2022227799A1 (zh) 设备注册方法及装置、计算机设备、存储介质
US20220191034A1 (en) Technologies for trust protocol with immutable chain storage and invocation tracking
TWI759838B (zh) 一種圖形化代碼生成方法、裝置、移動設備、服務平台以及電腦可讀儲存介質
TWI766171B (zh) 帳戶資料處理方法及帳戶資料處理系統
CN115967508A (zh) 数据访问控制方法及装置、设备、存储介质、程序产品

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22950970

Country of ref document: EP

Kind code of ref document: A1