CN108183801A - A service authentication method, system and computer-readable storage medium - Google Patents

Abstract

This application discloses a business authentication method, system, and computer-readable storage medium. The method completes the authentication of business personnel's digital identities through blockchain-based identity token transactions, so that business personnel can self-certify more conveniently and efficiently. identity. And the node where the consumer is located can more accurately query the business information of the business person on the business platform node according to the identity token of the business person, avoiding the interference of false information, so as to choose the best consumption plan.

Description

A service authentication method, system and computer-readable storage medium

technical field

The present application relates to the field of computer technology, specifically, to the field of blockchain technology, and more specifically, to a business authentication method, system, and computer-readable storage medium.

Background technique

Blockchain technology is a collection of new application technologies of distributed data storage, point-to-point transmission, consensus mechanism, encryption algorithm and other computer technologies. From a data point of view, the blockchain is a chained data structure that combines data blocks in a sequentially connected manner in chronological order, and the data structure is cryptographically guaranteed to be tamper-proof and unforgeable. From a technical point of view, blockchain technology integrates a variety of different technologies. By building a blockchain network, each node in the network is allowed to obtain a complete copy of the database, and based on consensus mechanisms and competitive computing. Maintain updates to the blockchain-based database. As a result, the decentralization and trustlessness of data storage and management are realized through the end-to-end network formed by the communication of many nodes.

In the blockchain network, all operating rules and data information are open to all nodes, so each record is visible to all nodes. At the same time, since nodes are trustless, there is no need to disclose identities between nodes, and each participating node is anonymous. At the same time, blockchain technology has excellent security. The modification of the database by a single or even multiple nodes cannot affect the database of other nodes. Unless it is possible to control more than 51% of the nodes in the entire network to modify at the same time, it is possible to modify the blockchain records. data, which is almost impossible.

At present, typical behaviors of business personnel in insurance institutions and pharmaceutical industries have repeatedly affected people's trust in insurance, pharmaceutical and other industries, resulting in a lack of trust. Taking insurance as an example, even if it is a very good insurance business, people will give up buying it because of their distrust of the insurance business personnel. Similarly, there are many informal insurance businesses that benefit from the long-term induction of the insurance business personnel and forge some Successful business cases have led some elderly people to believe in it, and they have to buy it even after spending a lot of money. Due to the emergence of falsified business information records and information asymmetry, consumers' trust in insurance agencies, medical representatives and other business personnel is seriously lacking, which in turn damages the rights and interests of both parties.

Contents of the invention

In view of this, the present application discloses a business authentication method, system, and computer-readable storage medium, so that business personnel can self-certify their identity more conveniently and efficiently, and consumers can query the business information of the business personnel more accurately. Avoid the interference of false information, so as to choose the best consumption plan.

In the first aspect, a business authentication method is provided, including:

The first node and the second node perform block chain-based identity token transactions to generate a first transaction order, the first transaction order including the private key signature of the first node, the identity token of the first node and The address of the second node, the private key of the first node is information generated by calculating the biological characteristics of the business personnel corresponding to the first node through a predetermined algorithm, and the identity token includes the predetermined inquiry business personnel information identification;

After the first transaction order is verified by other nodes in the block chain, the second node obtains the identity token;

The second node initiates a block chain-based identity token transaction to the service platform node to generate a second transaction ticket, the second transaction ticket includes the private key signature of the second node, the identity token and the service platform address of the node;

After the second transaction ticket is verified and the service platform node receives the request from the second node to acquire business personnel information, the service platform node queries the corresponding transaction information of the first node according to the identity token Business personnel information and return query results;

Wherein, the business personnel information includes business information records and credit records; the business information records include business types and the first node address.

Further, the method also includes:

Upload each business information record completed by the business personnel corresponding to the first node to the business platform node, and store the hash value of each business information record in the chain.

Further, the method also includes:

The second node compares the acquired hash value of the first node's business information record with the first node's record on the blockchain to verify the business personnel information corresponding to the first node authenticity.

Further, the identity token becomes invalid after being used by the service platform node.

Further, the predetermined algorithm is a biometric key generation algorithm based on a chaotic system.

Further, before the first node and the second node execute a blockchain-based identity token transaction to generate a first transaction order, the method further includes:

The first node establishes a digital identity at a third node.

Further, the first node establishing a digital identity at the third node includes:

The third node collects the biological characteristics of the business personnel corresponding to the first node to generate the private key of the first node;

The third node initiates a block chain-based identity token transaction to the first node to generate a third transaction ticket, the third transaction ticket includes the private key signature of the third node, the identity token and the address of the first node;

Other nodes in the block chain verify the third transaction order according to the public key of the third node;

If the third transaction slip is verified, the digital identity of the first node is established successfully, and the first node obtains the identity token.

In the second aspect, a service authentication system is provided, including:

The first node is configured to execute a blockchain-based identity token transaction with a second node to generate a first transaction ticket, the first transaction ticket includes the private key signature of the first node, the signature of the first node The identity token and the address of the second node, the private key of the first node is information generated by calculating the biological characteristics of the business personnel corresponding to the first node through a predetermined algorithm, and the identity token includes a predetermined The identification of the query business personnel information;

The second node is configured to initiate a blockchain-based identity token transaction to a service platform node to generate a second transaction order, the second transaction order including the private key signature of the second node, the identity token and the The address of the business platform node; and

The business platform node is configured to query the first node corresponding to The business personnel information and return the query results;

Wherein, the business personnel information includes business information records and credit records; the business information includes business types and the address of the first node.

Further, the system also includes:

The third node is configured to establish the digital identity of the business personnel corresponding to the first node.

In a third aspect, a computer-readable storage medium is provided, on which computer program instructions are stored, and when the computer program instructions are executed by a processor, the method described in any one of the above items is implemented.

In the embodiment of this application, the authentication of the digital identity of the business personnel is completed through the identity token transaction based on the block chain, which makes it more convenient and efficient for the business personnel to self-certify their identities. And the node where the consumer is located can more accurately query the business information of the business person on the business platform node according to the identity token of the business person, avoiding the interference of false information, so as to choose the best consumption plan.

Description of drawings

Through the following description of the embodiments of the application with reference to the accompanying drawings, the above and other purposes, features and advantages of the application will be more clear, in the accompanying drawings:

Fig. 1 is the schematic diagram of the service authentication system of the embodiment of the present application;

Fig. 2 is the flowchart of the business authentication method of the embodiment of the present application;

Fig. 3 is a flow chart of the method for establishing a digital identity according to an embodiment of the present application;

Fig. 4 is a flow chart of the business information authentication method of the embodiment of the present application;

Fig. 5 is a schematic diagram of an electronic device according to an embodiment of the present application.

Detailed ways

The present application is described below based on examples, but the present application is not limited only to these examples. In the following detailed description of the application, some specific details are set forth in detail. The present application can be fully understood by those skilled in the art without the description of these detailed parts. To avoid obscuring the essence of the present application, well-known methods, procedures, procedures, components and circuits have not been described in detail.

Additionally, those of ordinary skill in the art will appreciate that the drawings provided herein are for illustrative purposes and are not necessarily drawn to scale.

Unless the context clearly requires, throughout the specification and claims, "comprises", "comprises" and similar words should be interpreted in an inclusive sense rather than an exclusive or exhaustive meaning; that is, "including but not limited to" meaning.

In the description of the present application, it should be understood that the terms "first", "second" and so on are used for descriptive purposes only, and should not be understood as indicating or implying relative importance. In addition, in the description of the present application, unless otherwise specified, "plurality" means two or more.

FIG. 1 is a schematic diagram of a service authentication system according to an embodiment of the present application. As shown in FIG. 1 , the service authentication system includes a first node 1 , a second node 2 , a third node 3 and a service platform node 4 . Among them, the first node 1 is the node where the business personnel (such as medicine, insurance and other business personnel) are located, the second node 2 is the node where the consumer is located, and the third node 3 is the node of the digital identity establishment agency (that is, the public security department). The first node 1, the second node 2, the third node 3 and the service platform node 4 can all be connected to a block chain network, and connect and communicate through the block chain. It should be understood that in a network based on blockchain technology, a general-purpose data processing device loaded with a predetermined program can freely enter the network and become one of the blockchain nodes.

In the embodiment of this application, the third node 3 (that is, the digital identity establishment authority node) is configured to collect the biological characteristics of the business personnel corresponding to the first node 1 (that is, the node where the business personnel are located), and according to the biological characteristics of the business personnel Characteristic Generate the private key of the first node 1. Wherein, the private key of the first node 1 is calculated according to a biometric key generation algorithm based on a chaotic system.

A chaotic system means that in a deterministic system, there is a seemingly random irregular movement, and its behavior is uncertain, non-repeatable, and unpredictable. This is the phenomenon of chaos. Chaos is an inherent characteristic of nonlinear dynamical systems, and is a ubiquitous phenomenon in nonlinear systems. The chaotic system has two characteristics of sensitivity and randomness necessary for key generation, so the private key of the first node 1 can be calculated according to the biometric key generation algorithm based on the chaotic system.

For example, assuming that the biological characteristics of the business personnel corresponding to the first node 1 are identified by a series of floating-point numbers (c ₁ ,c ₂ ,...,c _L ) in the interval [0,1], a TD-ERCS-based (tangent Delay-ellipse cavity mapsystem, cut delay ellipse reflection cavity system) (a type of chaotic system) biometric processing function to generate a private key The steps are as follows:

(1) Initialization key: set the abscissa x ₀ and angle α of the starting point of the ray, cut delay m (in order to compensate for the performance degradation caused by discretization, the reflection tangent takes the ellipse tangent of the first m reflection points, which is called cut delay m) and the ellipse parameter μ;

(2) Normal state iteration: set the tangent slope K _n equal to the biological characteristics c _i (the biological characteristics are input in the first order and then the reverse order), and perform 2L iterations on the system;

(3) Final iteration: set the cutting delay to m, and perform the last 38 iterations of the system;

(4) Generate a private key: extract the lowest 8 bits of the abscissa x _n in the last 32 iterations, and set up a 256-bit private key.

The iteration formula is as follows:

Wherein, x _n , y _n , k _n represent the abscissa, ordinate and the slope of the reflection line of the nth reflection point respectively; K _n represents the slope of the tangent line of the nth reflection point.

It should be understood that the above example is only one of the algorithms for calculating the private key from the biometrics based on the chaotic system, and other available algorithms may also be used to calculate the private key from the biometrics.

The public key of a blockchain node is information generated by passing its private key through an elliptic curve encryption algorithm. The security of the elliptic curve encryption algorithm is based on the intractability of the discrete logarithm on the elliptic curve.

An elliptic curve is defined by a Weierstrass equation with two arguments x and y:

y ² +axy+by＝x ³ +cx ² +dx+e

A set of all determined points (x, y), plus an infinite point O∞ (considering its y coordinate is infinite).

The elliptic curve commonly used in cryptographic systems is to define the elliptic curve to a finite field Fp, that is, the discrete elliptic curve equation:

y ² =x ³ +ax ² +b(mod p)

The set of all the determined points (x, y), plus a point O∞ at infinity. Among them, x, y, a, and b all take values on the finite field Fp, and a, b satisfy 4a ³ +27b ² ≠0, p is a prime number greater than 3, and Ep(a,b) is usually used to represent this type of curve .

At a certain point P on the elliptic curve, there is a minimum number n such that nP=O∞, then n is the order of point P.

If K and G are points on Ep(a,b), and K=kG, k is an integer smaller than n (n is the order of point G). Given k and G, according to the addition law, it is easy to calculate K, but given K and G, it is more difficult to find k. So far, there is no effective way to solve this problem. This is the principle of the elliptic encryption algorithm (the addition rule includes G +G=2G, that is, kG is the addition of k G).

Wherein, point G is the base point selected by the user on the elliptic curve Ep(a,b). k is the private key selected by the user (k<n, n is the order of the base point G), and K is the public key calculated from the private key k.

In this embodiment, the private key of the first node 1 is obtained from the biological characteristics of the business personnel through the biometric key generation algorithm based on the chaotic system, and then the third node 3 selects the corresponding elliptic curve and the base point to calculate the first node 1's public key. The public key of the first node 1 can obtain the address of the first node 1 through a series of hash operations, and this derivation process is theoretically irreversible. It should be understood that the public key of the blockchain node and the address corresponding to the blockchain node can be disclosed to the outside world, and therefore both can be used as the identification of the blockchain node. The embodiment of this application uses the node's address in the blockchain network as its unique identifier.

It should be understood that the collected biometrics are the information after data processing of at least one predetermined number of definite feature points of the biometrics of the business personnel. The biometric feature can be one or more features of information such as iris, DNA, electrocardiogram, retina, brain wave, infrared temperature spectrum, and vein.

The third node 3 (that is, the digital identity establishment authority node) is also configured to initiate a blockchain-based identity token transaction to the first node 1 (that is, the node where the business personnel is located) to generate a third transaction ticket. The third transaction ticket includes the private key signature of the third node 3 , the identity token of the first node 1 and the address of the first node 1 . Wherein, the identity token includes a predetermined identifier for querying business personnel information. The predetermined identifier for querying business personnel information may be a hash value of the identity feature of the business personnel corresponding to the first node 1 or other information related to the identity information of the business personnel.

After the first node 1 and the third node 3 execute the blockchain transaction, the third transaction order is broadcast in the blockchain. Other nodes in the blockchain use the public key of the third node 3 to verify the third transaction order. If the third transaction order is verified, the digital identity of the business personnel corresponding to the first node 1 is successfully established. The first node 1 obtains the identity token of the first node 1 .

In the embodiment of this application, the establishment of digital identities of business personnel is completed through blockchain-based identity token transactions, so that the identity information of business personnel is no longer concentrated in the central database, which can effectively prevent security issues such as data leakage and forged identities.

The first node 1 is configured to initiate a blockchain-based identity token transaction to the second node 2 (that is, the node where the consumer is located) to generate a first transaction ticket. Wherein, the first transaction ticket includes the private key signature of the first node 1 , the identity token of the first node 1 and the address of the second node 2 .

After the first node 1 and the second node 2 conduct blockchain transactions, the first transaction order is broadcast in the blockchain. Other nodes in the blockchain use the public key of the first node 1 to verify the first transaction order. If the first transaction order is verified, the digital identity authentication of the business personnel corresponding to the first node 1 is successful. The second node 2 obtains the identity token of the first node 1 .

In the embodiment of this application, the authentication of the digital identity of business personnel is completed through blockchain-based identity token transactions, making it more convenient and efficient for business personnel to self-certify their identities.

The second node 2 is configured to initiate a block chain-based identity token transaction to the business platform node 4 to generate a second transaction order, the second transaction order includes the private key signature of the second node 2, the identity token of the first node 1 and the address of the service platform node 4.

After the second node 2 and the service platform node 4 execute the blockchain-based identity token transaction, the second transaction order is broadcast in the blockchain. Other nodes in the blockchain use the public key of the second node 2 to verify the second transaction order. When the second transaction order is verified, the service platform node 4 acquires the identity token of the first node 1 . The identity token includes the identification of the predetermined query business personnel information.

The business platform node 4 is configured to, after the second transaction order is verified and the business platform node receives the request from the second node to obtain the business personnel information, according to the identification of the query business personnel information in the above-mentioned identity token Query the business personnel information corresponding to the first node 1, and return the query result. Wherein, the business personnel information includes business information records and credit records. The business information record includes the business type (such as insurance type, medicine type, etc.) and the address of the first node 1 . The business platform node 4 evaluates the credit records of the business personnel by statistically calculating the business information records corresponding to the business personnel.

It should be understood that the second node 2 may send a request to obtain business personnel information to the business platform node after the second transaction order is verified; it may also initiate a blockchain-based identity token transaction to the business platform node 4 while Send a request to obtain business personnel information to the business platform node.

Preferably, after the identity token is used to log in to the service platform node 4 to query the information of the business personnel, the identity token is set to be invalid to maintain the security of the business personnel information.

After the second node 2 obtains the identity token of the first node 1, the identity token of the first node 1 can be forwarded to other consumer nodes through a blockchain-based identity token transaction. However, after the identity token of the first node 1 is sent to the service platform node 4 and the business personnel information is queried, the identity token is destroyed and invalidated at the service platform node 4 . That is, only one query can be made per identity token.

Preferably, each business information record completed by the business person corresponding to the first node 1 is uploaded to the business platform node 4, and at the same time, the hash value of each business information record of the business person is stored in the chain.

Further, the second node 2 compares the obtained hash value of the business information record of the business personnel corresponding to the first node 1 with the certificate record of the first node 1 on the blockchain. If the hash value of the obtained business information record is consistent with the certificate record on the corresponding blockchain, the business personnel information obtained by querying the business platform node is true. If the hash value of the obtained business information record is inconsistent with the certificate record on the corresponding blockchain, the business personnel information obtained by querying the business platform node may be forged.

To sum up, in the embodiment of this application, the digital identity of business personnel is established through blockchain-based identity token transactions, so that the identity information of business personnel is no longer concentrated in the central database, which can effectively prevent data leakage and forgery Identity and other security issues. And through the blockchain-based identity token transaction to complete the authentication of the digital identity of business personnel, making it more convenient and efficient for business personnel to self-certify their identities. Through blockchain-based identity token transactions to query business personnel information, consumers can more accurately query the business information of the business personnel and verify the authenticity of the business personnel's business information in the blockchain, avoiding false information. Interference, so as to choose the best consumption plan.

Fig. 2 is a flow chart of the service authentication method in the embodiment of the present application. As shown in FIG. 2, in step S110, the third node (ie, the digital identity establishing authority node) collects the biometrics of the business personnel corresponding to the first node (ie, the node where the business personnel is located) to generate the private key of the first node. Wherein, the private key of the first node is calculated according to a biometric key generation algorithm based on a chaotic system. The private key of the first node generates the public key of the first node through an elliptic curve encryption algorithm. The public key of the first node obtains the address of the first node through a series of hash operations. Wherein, the collected biometric feature is the information after data processing of a predetermined number of definite feature points of at least one biometric feature of the business personnel. The biological feature may be one or more features of information such as iris, DNA, electrocardiogram, retina, brain wave, infrared temperature spectrum, and vein.

In step S120, the third node and the first node execute a blockchain-based identity token transaction to generate a third transaction ticket. The third transaction ticket includes the private key signature of the third node, the identity token of the first node and the address of the first node.

In step S130, the third transaction ticket is broadcast in the blockchain, and other nodes in the blockchain verify the third transaction ticket according to the public key of the third node. If the third transaction ticket passes the verification, the digital identity of the business personnel corresponding to the first node is successfully established. The first node obtains the aforementioned identity token.

In step S140, the first node (the node where the business person is located) and the second node (the node where the consumer is located) perform a blockchain-based identity token transaction to generate a first transaction ticket. The first transaction ticket includes the private key signature of the first node, the identity token of the first node and the address of the second node.

In step S150, the first transaction ticket is broadcast in the blockchain, and other nodes in the blockchain verify the first transaction ticket according to the public key of the first node. If the first transaction ticket passes the verification, the digital identity authentication of the business personnel corresponding to the first node is successful, and the second node obtains the identity token of the first node. If the first transaction slip fails the verification, the digital identity authentication of the business personnel corresponding to the second node fails. That is, the business person may have falsified the information.

In step S160, the second node initiates a blockchain-based identity token transaction to the service platform node to generate a second transaction ticket, the second transaction ticket includes the private key signature of the second node, the identity token of the first node and the service platform The address of the node. The identity token includes the identification of the predetermined query business personnel information.

In step S170, the second transaction ticket is broadcast in the blockchain, and other nodes in the blockchain verify the second transaction ticket according to the public key of the second node. When the second transaction order is verified, the service platform node obtains the identity token of the first node.

In step S180, the second node sends a request to the service platform node to acquire information of the service personnel. Wherein, the request for acquiring business personnel information includes the address of the first node.

In step S190, the service platform node queries the service personnel information corresponding to the first node according to the identification of the service personnel information inquired in the identity token of the first node, and returns the query result. Wherein, the business personnel information includes business information records and credit records. The business information record includes the business type (such as insurance type, medicine type, etc.) and the address of the first node. The business platform node evaluates the business personnel's credit records by statistically calculating the business information records corresponding to the business personnel.

It should be understood that the second node may also send a request for acquiring business personnel information to the business platform node while initiating a blockchain-based identity token transaction to the business platform node.

Preferably, after the identity token is used to log in to the service platform node to query the information of the business personnel, the identity token is set to be invalid to maintain the security of the business personnel information.

After the second node obtains the identity token of the first node, the identity token of the first node can be forwarded to other consumer nodes through a blockchain-based identity token transaction. However, after the identity token of the first node is sent to the service platform node and the business personnel information is queried, the identity token is destroyed and becomes invalid at the service platform node. That is, only one query can be made per identity token.

In the embodiment of this application, the digital identity of business personnel is established through blockchain-based identity token transactions, so that the identity information of business personnel is no longer concentrated in the central database, which can effectively prevent security issues such as data leakage and forged identities. And through the blockchain-based identity token transaction to complete the authentication of the digital identity of business personnel, making it more convenient and efficient for business personnel to self-certify their identities. Through blockchain-based identity token transactions to query business personnel information, consumers can more accurately query the business information of the business personnel, avoid the interference of false information, and choose the best consumption plan.

Preferably, the service authentication method further includes step S1A0. In step S1A0, each business information record completed by the business person corresponding to the first node is uploaded to the business platform node, and at the same time, the hash value of each business information record of the business person is stored in the chain.

Preferably, the service authentication method further includes step S1B0. In step S1B0 , the second node compares the obtained hash value of the business information record of the business person corresponding to the first node with the certificate record of the first node on the blockchain. If the hash value of the obtained business information record is consistent with the certificate record on the corresponding blockchain, the business personnel information obtained by querying the business platform node is true. If the hash value of the obtained business information record is inconsistent with the certificate record on the corresponding blockchain, the business personnel information obtained by querying the business platform node may be forged.

Fig. 3 is a flowchart of a method for establishing a digital identity according to an embodiment of the present application. As shown in FIG. 3 , in step S100 , the third node (that is, the digital identity establishment authority node) collects the biometrics of the business personnel corresponding to the first node to generate a private key of the first node. Wherein, the private key of the first node is calculated according to the biological characteristics of the business personnel and based on the biometric key generation algorithm of the chaotic system. The private key of the first node generates the public key of the first node through an elliptic curve encryption algorithm. The public key of the first node obtains the address of the first node through a series of hash operations. Wherein, the collected biological feature is the information after data processing of at least one predetermined number of specific feature points of the biological feature of the business personnel. The biological feature may be one or more features of information such as iris, DNA, electrocardiogram, retina, brain wave, infrared temperature spectrum, and vein.

In step S200, the third node and the first node execute a blockchain-based identity token transaction to generate a third transaction ticket. The third transaction ticket includes the private key signature of the third node, the identity token and the address of the first node.

In step S300, the third transaction ticket is broadcast in the blockchain, and other nodes in the blockchain verify the third transaction ticket according to the public key of the third node. If the third transaction ticket passes the verification, the digital identity of the business personnel corresponding to the first node is successfully established. The first node obtains the above-mentioned identity token by decrypting the third transaction slip.

In the embodiment of this application, the establishment of digital identities of business personnel is completed through blockchain-based identity token transactions, so that the identity information of business personnel is no longer concentrated in the central database, which can effectively prevent security issues such as data leakage and forged identities.

Fig. 4 is a flow chart of a business information authentication method according to an embodiment of the present application. As shown in FIG. 4, in step S400, the second node (that is, the node where the consumer is located) and the first node (that is, the node where the business person is located) execute a blockchain-based identity token transaction to generate a first transaction ticket. The first transaction ticket includes the private key signature of the first node, the identity token of the first node and the address of the second node. Wherein, the private key of the first node is calculated according to the biological characteristics of the business personnel and based on the biometric key generation algorithm of the chaotic system. The identity token includes the identification of the predetermined query business personnel information. The identifier for querying the information of the business person may be a hash value of the identity feature of the business person corresponding to the first node 1 or other information related to the identity information of the business person.

In step S500, the first transaction ticket is broadcast in the blockchain, and other nodes in the blockchain verify the first transaction ticket according to the public key of the first node. If the first transaction ticket passes the verification, the digital identity authentication of the business personnel corresponding to the first node is successful, and the second node obtains the identity token of the first node.

It should be understood that if the first transaction slip fails the verification, then the digital identity authentication of the business personnel corresponding to the second node fails. That is, the information of the business person may be forged.

In step S600, the second node and the service platform node execute a block chain-based identity token transaction to generate a second transaction ticket, the second transaction ticket includes the private key signature of the second node, the identity token of the first node and the service platform The address of the node.

The second transaction order is broadcast in the blockchain, and other nodes in the blockchain verify the second transaction order according to the public key of the second node. If the second transaction order is verified, the service platform node obtains the identity token of the first node.

In step S700, the second node sends a request for acquiring business personnel information to the service platform node. Wherein, the request for acquiring business personnel information includes the address of the first node.

In step S800, the service platform node queries the service personnel information corresponding to the first node according to the identification of the service personnel information in the identity token, and returns the query result. Wherein, the business personnel information includes business information records and credit records. The business information record includes the business type (such as insurance type, medicine type, etc.) and the address of the first node. The business platform node evaluates the business personnel's credit records by statistically calculating the business information records corresponding to the business personnel.

It should be understood that the second node may also send a request for acquiring business personnel information to the business platform node while initiating a blockchain-based identity token transaction to the business platform node.

Preferably, after the identity token is used to log in to the service platform node to query the information of the business personnel, the identity token is set to be invalid to maintain the security of the business personnel information.

After the second node obtains the identity token of the first node, the identity token of the first node can be forwarded to other consumer nodes through a blockchain-based identity token transaction. However, after the identity token of the first node is sent to the service platform node and the business personnel information is queried, the identity token is destroyed and becomes invalid at the service platform node. That is, only one query can be made per identity token.

In the embodiment of this application, the authentication of the digital identity of the business personnel is completed through the identity token transaction based on the block chain, which makes it more convenient and efficient for the business personnel to self-certify their identities. And the consumer inquires the business personnel information of the business personnel according to the information in the identity token, so as to avoid the inquired business personnel information being forged information and the interference of false information, so as to choose the best consumption plan.

Further, the method for querying business information also includes step 900 . In step 900, each business information record completed by the business person corresponding to the first node is uploaded to the business platform node, and at the same time, the hash value of each business information record of the business person is stored in the chain.

Further, the method for querying business information also includes step A00. In step A00, the second node compares the acquired hash value of the business information record of the business person corresponding to the first node with the certificate record of the first node on the blockchain. If the hash value of the obtained business information record is consistent with the certificate record on the corresponding blockchain, the business personnel information obtained by querying the business platform node is true. If the hash value of the obtained business information record is inconsistent with the certificate record on the corresponding blockchain, there will be forgery in the business personnel information obtained by querying the business platform node.

Fig. 5 is a schematic diagram of an electronic device according to an embodiment of the present application. The electronic equipment shown in FIG. 5 is a general-purpose data processing device, which includes a general-purpose computer hardware structure, which at least includes a processor 51 and a memory 52 . The processor 51 and the memory 52 are connected by a bus 53 . The memory 52 is suitable for storing instructions or programs executable by the processor 51 . Processor 51 may be an independent microprocessor, or a collection of one or more microprocessors. Thus, the processor 51 executes the instructions stored in the memory 52 to execute the above-mentioned method flow of the embodiment of the present application to process data and control other devices. The bus 53 connects the above-mentioned various components together, and also connects the above-mentioned components to a display controller 54 and a display device and an input/output (I/O) device 55 . The input/output (I/O) device 55 may be a mouse, a keyboard, a modem, a network interface, a touch input device, a motion input device, a printer, and other devices known in the art. Typically, input/output devices 55 are coupled to the system through input/output (I/O) controllers 56 .

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, devices (devices) or computer program products. Accordingly, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may employ a computer program product embodied on one or more computer-readable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowcharts of methods, apparatuses (devices) and computer program products according to embodiments of the present application. It should be understood that each procedure in the flowcharts can be implemented by computer program instructions.

These computer program instructions may be stored in a computer readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising instruction means, the instruction means Implement the functions specified in one or more processes of the flowchart.

These computer program instructions may also be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that instructions executed by the processor of the computer or other programmable data processing equipment produce Means for implementing the functions specified in one or more procedures of the flowchart.

The above descriptions are only preferred embodiments of the present application, and are not intended to limit the present application. For those skilled in the art, various modifications and changes may be made to the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of this application shall be included within the protection scope of this application.

Claims (10)

1. A business authentication method, comprising: The first node and the second node perform block chain-based identity token transactions to generate a first transaction order, the first transaction order including the private key signature of the first node, the identity token of the first node and The address of the second node, the private key of the first node is information generated by calculating the biological characteristics of the business personnel corresponding to the first node through a predetermined algorithm, and the identity token includes the predetermined inquiry business personnel information identification; After the first transaction order is verified by other nodes in the block chain, the second node obtains the identity token; The second node initiates a block chain-based identity token transaction to the service platform node to generate a second transaction ticket, the second transaction ticket includes the private key signature of the second node, the identity token and the service platform address of the node; After the second transaction ticket is verified and the service platform node receives the request from the second node to acquire business personnel information, the service platform node queries the corresponding transaction information of the first node according to the identity token Business personnel information and return query results; Wherein, the business personnel information includes business information records and credit records; the business information records include business types and the first node address. 2. The service authentication method according to claim 1, wherein the method further comprises: Upload each business information record completed by the business personnel corresponding to the first node to the business platform node, and store the hash value of each business information record in the chain. 3. The service authentication method according to claim 2, wherein the method further comprises: The second node compares the acquired hash value of the first node's business information record with the first node's record on the blockchain to verify the business personnel information corresponding to the first node authenticity. 4. The service authentication method according to claim 1, wherein the identity token becomes invalid after being used by the service platform node. 5. The service authentication method according to claim 1, wherein the predetermined algorithm is a biometric key generation algorithm based on a chaotic system. 6. The service authentication method according to claim 1, characterized in that, before the first node and the second node execute a blockchain-based identity token transaction to generate a first transaction order, the method further comprises: The first node establishes a digital identity at a third node. 7. The service authentication method according to claim 6, wherein said first node establishing a digital identity at a third node comprises: The third node collects the biological characteristics of the business personnel corresponding to the first node to generate the private key of the first node; The third node initiates a block chain-based identity token transaction to the first node to generate a third transaction ticket, the third transaction ticket includes the private key signature of the third node, the identity token and the address of the first node; Other nodes in the block chain verify the third transaction order according to the public key of the third node; If the third transaction slip is verified, the digital identity of the first node is established successfully, and the first node obtains the identity token. 8. A business authentication system, comprising: The first node is configured to execute a blockchain-based identity token transaction with a second node to generate a first transaction ticket, the first transaction ticket includes the private key signature of the first node, the signature of the first node The identity token and the address of the second node, the private key of the first node is information generated by calculating the biological characteristics of the business personnel corresponding to the first node through a predetermined algorithm, and the identity token includes a predetermined The identification of the query business personnel information; The second node is configured to initiate a blockchain-based identity token transaction to a service platform node to generate a second transaction order, the second transaction order including the private key signature of the second node, the identity token and the The address of the business platform node; and The business platform node is configured to query the first node corresponding to The business personnel information and return the query results; Wherein, the business personnel information includes business information records and credit records; the business information includes business types and the address of the first node. 9. The service authentication system according to claim 8, wherein the system further comprises: The third node is configured to establish the digital identity of the business personnel corresponding to the first node. 10. A computer-readable storage medium on which computer program instructions are stored, wherein the computer program instructions implement the method according to any one of claims 1-7 when executed by a processor.