CN111131164A - Block chain-based digital identity implementation method, equipment and medium - Google Patents

Abstract

The present application discloses a method, device and medium for realizing digital identity based on blockchain. The method includes: deploying a blockchain platform based on a blockchain framework; using institutions corresponding to digital identities of multiple dimensions of users as nodes , deployed in the blockchain platform; obtain the digital identity of the user in each institution; write each institution with its own digital signature, and the corresponding digital identity is written into the blockchain platform, so that the demander can share the user's The digital identity is obtained and verified by the public key of each institution. The user's digital identity is stored in the blockchain platform. Since the data in the blockchain platform is open and transparent, users can use the digital identity stored in the blockchain platform at any time when they need to use the digital identity. Very convenient. And because the blockchain platform is distributed storage, data tampering by a single node will not take effect, which ensures the authenticity and credibility of the data on the blockchain platform.

Description

A method, device and medium for realizing digital identity based on blockchain

technical field

The present application relates to the field of digital identity, and in particular to a method, device and medium for realizing digital identity based on blockchain.

Background technique

With the development of technology, people can perform various kinds of business through the network. When people perform these businesses, they usually use their digital identities to register, perform business, and so on. The digital identity refers to the user's identity information stored in digital form.

However, in the prior art, there are still many problems. For example, when users perform business or register, they need to input their corresponding digital identity information every time, which is very inconvenient.

SUMMARY OF THE INVENTION

In order to solve the above problems, this application proposes a method for realizing digital identity based on blockchain, including: deploying a blockchain platform based on a blockchain framework; , deployed in the blockchain platform; obtain the digital identity of the user in each of the institutions; write the digital identity of each institution signed with its own digital signature and the corresponding digital identity into the blockchain platform, so that the demander obtains the digital identity through the sharing of the user, and verifies it through the public key of each institution.

In one example, the method further includes: acquiring the public keys of each of the institutions, and writing the public keys into the blockchain platform.

In one example, the method further includes: deploying a financial institution as a node in the blockchain platform; receiving a registration request for the financial institution sent by a user; the financial institution, according to the registration request, The required digital identity of the user is obtained in the blockchain platform to complete the registration of the user.

In one example, the institution includes at least one of a government department, a school, a bank, a company, and a hospital.

In one example, the digital identity includes: ID card information, personal credit information, driver's license information, and passport information corresponding to the government department, academic information and school grades corresponding to the institution, and information from the bank. At least one of the corresponding bank card information, the position information corresponding to the company, and the physical health status corresponding to the hospital.

In one example, writing the corresponding digital identities signed by each of the institutions with their own digital signatures into the blockchain platform includes: signing each of the institutions with their own digital signatures and digital certificates, and The corresponding digital identity is written into the blockchain platform.

In an example, writing each of the institutions with their own digital signatures and the corresponding digital identities into the blockchain platform includes: signing each of the institutions with their own digital signatures and the corresponding digital identities The digital identity is encrypted by the user's public key and written into the blockchain platform.

In one example, the method further includes: rewarding the user and/or the institution corresponding to the digital identity each time a digital identity is written into the blockchain platform, and the reward includes virtual currency, legal at least one of the currencies.

On the other hand, the present application also proposes a blockchain-based digital identity implementation device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores data that can be accessed by Instructions executed by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to: deploy a blockchain platform based on a blockchain framework; Each institution corresponding to the digital identity is deployed in the blockchain platform as a node; obtains the digital identity of the user corresponding to each institution; signs each institution with its own digital signature and the corresponding The digital identity is written into the blockchain platform, so that the demander can obtain the digital identity through the sharing of the user, and verify it through the public key of each institution.

On the other hand, the present application also proposes a non-volatile computer storage medium based on blockchain-based digital identity implementation, which stores computer-executable instructions, and the computer-executable instructions are set to: a blockchain-based framework deployment area Blockchain platform; use the institutions corresponding to the digital identities of multiple dimensions of users as nodes and deploy them in the blockchain platform; obtain the digital identities of the users corresponding to the institutions; Signed with its own digital signature, and the corresponding digital identity is written into the blockchain platform, so that the demander can obtain the digital identity through the sharing of the user, and verify it through the public key of each institution.

The blockchain-based digital identity implementation method proposed by this application can bring the following beneficial effects:

Store the user's digital identity in the blockchain platform. Since the data in the blockchain platform is open and transparent, users can use the digital identity stored in the blockchain platform at any time when they need to use the digital identity. Very convenient. And because the blockchain platform is distributed storage, data tampering by a single node will not take effect, which ensures the authenticity and credibility of the data on the blockchain platform.

Description of drawings

The drawings described herein are used to provide further understanding of the present application and constitute a part of the present application. The schematic embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation of the present application. In the attached image:

1 is a schematic flowchart of a method for realizing a digital identity based on a blockchain in an embodiment of the application;

FIG. 2 is a schematic diagram of a device for realizing a digital identity based on a blockchain in an embodiment of the present application.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present application clearer, the technical solutions of the present application will be clearly and completely described below with reference to the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

The technical solutions provided by the embodiments of the present application will be described in detail below with reference to the accompanying drawings.

As shown in FIG. 1 , an embodiment of the present application provides a blockchain-based digital identity implementation method, including:

S101. Deploy a blockchain platform based on a blockchain framework.

Blockchain is a new application mode of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, encryption algorithm, etc. It is essentially a decentralized database.

First deploy the blockchain platform based on the blockchain framework. The blockchain framework may be any blockchain framework capable of implementing the corresponding functions of the embodiments of the present application, for example, Bitcoin, Ethereum, Fabric, Corda, and the like. A blockchain platform may refer to a platform that stores a blockchain, for example, a distributed system, etc. Of course, the blockchain platform can also directly represent the blockchain itself, which is not limited here.

S102 , deploying each institution corresponding to the digital identity of the user in multiple dimensions as a node in the blockchain platform.

S103: Acquire the digital identity of the user corresponding to each institution.

Typically, each user will have multiple dimensions of digital identity, used in different contexts. The digital identity of each dimension also corresponds to the corresponding institution. At this point, these institutions can be deployed in the blockchain platform as nodes. Then the user's digital identity corresponding to each institution can be obtained. These digital identities can be proactively provided by corresponding institutions or provided by users, which are not limited here.

Specifically, the above-mentioned institutions include: at least one of government departments, institutions, banks, companies, and hospitals.

Digital identities can include: ID card information, personal credit information, driver's license information, passport information corresponding to government departments, academic information and school grades corresponding to institutions, bank card information corresponding to banks, and job information corresponding to companies , at least one of the physical health conditions corresponding to the hospital.

Among them, ID card information can include name, date of birth, ID number, address, etc., driver's license information can include name, driver's license number, etc., passport information can include name, nationality, place of issuance, issuing authority, issuance time, validity period, etc., identity The information on the license, driver's license and passport can be provided by the relevant agencies in the public security department. Personal credit information can include basic personal information, credit records, public information, objection records, inquiry records, etc. Personal credit information can be provided by the State Credit Information Administration.

Educational information can include academic qualifications, graduate schools, graduation time, etc., and school results can include the scores of various subjects in the school, test scores of relevant certificates, etc. The academic information and school scores can be provided by the school.

The bank card information may include bank card number, cardholder information, registration time, registered mobile phone number, etc. The bank card information may be provided by the bank.

The position information may include the position in the company, the previous position, the duration of each position, etc., and the position information may be provided by the company.

Physical health conditions can include major diseases, genetic medical history, physical examination reports, etc. The physical health conditions can be provided by the hospital.

S104: Write each of the institutions with their own digital signatures and the corresponding digital identities into the blockchain platform, so that the demander can obtain the digital identities through the sharing of the users, and obtain the digital identities through the sharing of the users. The public key of the institution is verified.

After obtaining the digital identity corresponding to each institution, it can be written into the blockchain platform. Among them, when writing, each institution can write its corresponding digital identity to the blockchain platform, or it can be obtained and written by a specific node, which is not limited here. Then, if there is a demander who needs to use the user's digital identity, since the demander does not belong to the node in the blockchain platform, it cannot directly obtain the relevant information. At this time, the user can share the relevant information with the demander. Store the user's digital identity in the blockchain platform. Since the data in the blockchain platform is open and transparent, users can use the digital identity stored in the blockchain platform at any time when they need to use the digital identity. Very convenient. And because the blockchain platform is distributed storage, data tampering by a single node will not take effect, which ensures the authenticity and credibility of the data on the blockchain platform.

However, if data is lost during the writing process, or the written data is forged or tampered with, the information obtained by the demander will be incomplete or falsified, which will have a negative impact on both the user and the demander. . Therefore, when writing a digital identity, the digital identity signed with the digital signature of each institution can be written into the blockchain platform. Among them, the digital signature refers to the process of hashing the information to obtain a digest, and then encrypting the digest with its own private key to obtain a digital signature. The demander can verify the digital signature according to the public key of each institution, that is, decrypt the digest through the public key to obtain the digest, hash the information, and then compare it with the digest. If they are consistent, it can be judged that the information is complete and correct, and corresponding actions can be performed, thereby reducing the probability of negative impacts on users and demanders due to incorrect and incomplete information.

Further, even if a digital signature is used, the computer of the demander may be invaded, causing the stored public key of the institution to be replaced by its own public key by the malicious node, and then the malicious node forges the digital signature through its own private key. situation occurs. Therefore, when writing a digital identity, in addition to the digital signature of each institution, the digital certificate can also be signed together. The digital certificate refers to the authentication of the public key by a certificate authority (Certificate Authority, CA). The CA encrypts the organization's public key and some related information with its own private key. The occurrence of the above situation can be effectively prevented by the digital certificate, which further increases the security of the information.

In one embodiment, the public key of each institution is obtained, and the public key is written into the blockchain platform. When users share information with the demander, they can share the public key together, which reduces the workload of the user's demander and is very convenient.

In one embodiment, a financial institution may be deployed as a node in a blockchain platform, such as a virtual currency exchange or the like. Then, when the user's registration request for the financial institution is received, the node directly obtains the corresponding digital identity in the blockchain platform to complete the registration without the user's sharing. Due to the full Know Your Customer (KYC) policy, anti-money laundering and corruption prevention, users are subject to very strict scrutiny when registering with financial institutions. Therefore, using financial institutions as nodes can greatly reduce the number of user operations, which is very convenient.

In one embodiment, each node directly uploads the user's digital identity to the blockchain platform, which may easily lead to the leakage of the user's identity information. Therefore, the digital identity can be encrypted by the user's public key and written into the blockchain platform. When the user shares the digital identity with the demander, it can be decrypted by its own private key and then shared. The user's public key is encrypted and then written to the blockchain platform, which greatly reduces the leakage of the user's identity information.

In one embodiment, whenever a digital identity is written to the blockchain platform, a reward can be given to the user and/or the institution corresponding to the digital identity, and the reward includes at least one of virtual currency and legal currency. By rewarding, people's enthusiasm for writing their own digital identities can be increased, the number of digital identities stored in the blockchain platform can be increased, and the influence of the blockchain platform can be expanded.

As shown in FIG. 2 , an embodiment of the present application also provides a blockchain-based digital identity implementation device, including:

at least one processor; and,

a memory communicatively coupled to the at least one processor; wherein,

The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

Deploy the blockchain platform based on the blockchain framework;

The institutions corresponding to the digital identities of multiple dimensions of the user are deployed as nodes in the blockchain platform;

Obtain the digital identity of the user corresponding to each of the institutions;

Write each said institution with its own digital signature and write the corresponding digital identity into the blockchain platform, so that the demander can obtain the digital identity through the sharing of the user, and obtain the digital identity through the sharing of each said institution. public key for verification.

The embodiment of the present application also provides a non-volatile computer storage medium based on blockchain digital identity implementation, which stores computer-executable instructions, and the computer-executable instructions are set to:

Deploy the blockchain platform based on the blockchain framework;

The institutions corresponding to the digital identities of multiple dimensions of the user are deployed as nodes in the blockchain platform;

Obtain the digital identity of the user corresponding to each of the institutions;

Write each said institution with its own digital signature and write the corresponding digital identity into the blockchain platform, so that the demander can obtain the digital identity through the sharing of the user, and obtain the digital identity through the sharing of each said institution. public key for verification.

Each embodiment in this application is described in a progressive manner, and the same and similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the apparatus and medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and reference may be made to some descriptions of the method embodiments for related parts.

The devices, media and methods provided in the embodiments of the present application are in one-to-one correspondence. Therefore, the devices and media also have similar beneficial technical effects to their corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, therefore, The beneficial technical effects of the device and the medium will not be repeated here.

As will be appreciated by those skilled in the art, the embodiments of the present application may be provided as a method, a system, or a computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present application. It will be understood that each flow and/or block in the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions The apparatus implements the functions specified in the flow or flow of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

Memory may include non-persistent memory in computer readable media, random access memory (RAM) and/or non-volatile memory in the form of, for example, read only memory (ROM) or flash memory (flash RAM). Memory is an example of a computer-readable medium.

Computer-readable media includes both persistent and non-permanent, removable and non-removable media, and storage of information may be implemented by any method or technology. Information may be computer readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), Flash Memory or other memory technology, Compact Disc Read Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, Magnetic tape cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media, such as modulated data signals and carrier waves.

It should also be noted that the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device comprising a series of elements includes not only those elements, but also Other elements not expressly listed, or which are inherent to such a process, method, article of manufacture, or apparatus are also included. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in the process, method, article of manufacture, or device that includes the element.

The above descriptions are merely examples of the present application, and are not intended to limit the present application. Various modifications and variations of this application are possible for those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included within the scope of the claims of this application.

Claims (10)

1. A method for realizing digital identity based on blockchain, characterized in that, comprising: Deploy the blockchain platform based on the blockchain framework; The institutions corresponding to the digital identities of multiple dimensions of the user are deployed as nodes in the blockchain platform; Obtain the digital identity of the user corresponding to each of the institutions; Write each said institution with its own digital signature and write the corresponding digital identity into the blockchain platform, so that the demander can obtain the digital identity through the sharing of the user, and obtain the digital identity through the sharing of each said institution. public key for verification. 2. The method according to claim 1, wherein the method further comprises: Obtain the public key of each of the institutions, and write the public key into the blockchain platform. 3. The method according to claim 1, wherein the method further comprises: Use financial institutions as nodes to deploy in the blockchain platform; Receive a registration request for the financial institution sent by the user; The financial institution obtains the required digital identity of the user in the blockchain platform according to the registration request, so as to complete the registration of the user. 4. The method according to claim 1, wherein the institution comprises: at least one of a government department, a college, a bank, a company, and a hospital. 5. The method according to claim 4, wherein the digital identity comprises: ID card information, personal credit information, driver's license information, and passport information corresponding to the government department, and academic qualifications corresponding to the institution At least one of information, school grades, bank card information corresponding to the bank, job information corresponding to the company, and physical health status corresponding to the hospital. 6. The method according to claim 1, wherein writing the corresponding digital identities signed by each said institution with its own digital signature into the blockchain platform, comprising: Write each of the institutions signed with their own digital signatures and digital certificates, and the corresponding digital identities into the blockchain platform. 7. The method according to claim 1, characterized in that, writing each said organization with its own digital signature and the corresponding digital identity into the blockchain platform, comprising: Each of the institutions is signed with its own digital signature and the corresponding digital identity is encrypted by the user's public key, and then written into the blockchain platform. 8. The method of claim 1, wherein the method further comprises: Each time a digital identity is written into the blockchain platform, the user and/or the institution corresponding to the digital identity is rewarded, and the reward includes at least one of virtual currency and legal currency. 9. A device for realizing digital identity based on blockchain, characterized in that it comprises: at least one processor; and, a memory communicatively coupled to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to: Deploy the blockchain platform based on the blockchain framework; The institutions corresponding to the digital identities of multiple dimensions of the user are deployed as nodes in the blockchain platform; Obtain the digital identity of the user corresponding to each of the institutions; Write each said institution with its own digital signature and write the corresponding digital identity into the blockchain platform, so that the demander can obtain the digital identity through the sharing of the user, and pass the digital identity of each said institution. public key for verification. 10. A non-volatile computer storage medium based on a blockchain-based digital identity implementation, storing computer-executable instructions, wherein the computer-executable instructions are set to: Deploy the blockchain platform based on the blockchain framework; The institutions corresponding to the digital identities of multiple dimensions of the user are deployed as nodes in the blockchain platform; Obtain the digital identity of the user corresponding to each of the institutions; Write each said institution with its own digital signature and write the corresponding digital identity into the blockchain platform, so that the demander can obtain the digital identity through the sharing of the user, and pass the digital identity of each said institution. public key for verification.

Images