WO2019205389A1 - Electronic device, authentication method based on block chain, and program and computer storage medium - Google Patents

Abstract

An electronic device, an authentication method based on a block chain, and a program and a computer storage medium. The method involves: after first user identity information is verified according to a pre-determined authentication rule, determining whether to execute multi-factor authentication according to a pre-determined determination rule; and when it is determined to execute multi-factor authentication, releasing second user identity information to a block chain network for verification, so as to obtain a verification result of the multi-factor authentication. Diversified requirements of multiple application scenarios can be met, the accuracy of user authentication can be improved, and user identity information leakage can be also prevented.

Description

Electronic device, blockchain-based authentication method, program, and computer storage medium

Priority claim

This application is based on the priority of the Paris Convention for the Chinese patent application entitled "Electronic Device, Blockchain-Based Authentication Method and Computer Storage Media", filed on April 26, 2018, CN201810386011.6, China The entire content of the patent application is incorporated herein by reference.

Technical field

The present application relates to the field of blockchain technology, and in particular, to an electronic device, a blockchain-based identity verification method, a program, and a computer storage medium.

Background technique

The blockchain is essentially a distributed database based on smart contracts. The information on the blockchain is shared by all P2P (Peer-to-peer) networks to all nodes. Due to the advantages of tamper resistance, high transparency and decentralization, blockchain has been widely used in various fields in recent years.

Authentication also becomes "authentication" or "identification", which refers to the process of confirming the identity of an operator in a computer and computer network system to determine whether the user has access to and use of a certain resource, thereby enabling the computer and The access policy of the network system can be executed reliably and effectively, preventing the attacker from impersonating legitimate users to obtain access rights to resources, ensuring the security of the system and data, and authorizing the legitimate interests of the visitors.

Generally, the identity verification method of the blockchain is: when the user logs in through the application end of a blockchain, the application end authenticates the user identity by verifying the user name and the user password of the user. The problem with this verification method is that the same verification method is adopted for different users, and the verification method is too singular to meet the diverse needs of multiple application scenarios.

Summary of the invention

The main purpose of the present application is to provide an electronic device, a blockchain-based identity verification method, a program, and a computer storage medium, which are intended to solve the problem that the existing identity verification method is too single to meet the diverse needs of multiple application scenarios. .

To achieve the above object, the present application provides an electronic device including a memory and a processor, and the memory stores a first identity verification program based on a blockchain, the first identity based on the blockchain The verification procedure is implemented by the processor to implement the following steps:

a verification step: when receiving the first identity verification request carrying the first user identity information, verifying the first user identity information according to a predetermined identity verification rule to obtain a first verification result;

a determining step: determining whether to perform multiple identity verification according to the obtained first verification result, the first user identity information, and a predetermined determination rule;

a first outputting step: when it is determined that the multiple authentication is not performed, outputting the first verification result as a user identity verification result; or, when determining to perform the multiple identity verification, acquiring the second user identity information;

The searching step: searching for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identification information in the first user identity information and the predetermined user identification information and the verification node identification information;

a publishing step: publishing a second identity verification request carrying the second user identity information to the blockchain network, and receiving, by the blockchain network, the carrying node identification information that is generated and broadcasted by the second user identity information Feedback information;

The analyzing step: analyzing and processing the verification result in the feedback information based on the predetermined first result analysis rule, and outputting the first analysis result as the second verification result;

The second output step is: performing analysis processing on the second verification result according to the predetermined second result analysis rule, and outputting the second analysis result as the identity verification result of the user.

In addition, in order to achieve the above object, the present application further provides an electronic device, where the electronic device includes a memory and a processor, and the memory stores a second identity verification program based on a blockchain, and the blockchain-based When the second authentication program is executed by the processor, the following steps are implemented:

Receiving step: receiving an identity verification request carrying user identity information;

The verification step: verifying the user identity information to obtain a verification result, and generating feedback information carrying the node identification information according to the verification result, and broadcasting the feedback information to the blockchain network.

In addition, to achieve the above object, the present application further provides a blockchain-based identity verification method, the method comprising the steps of:

a first verification step: when receiving the first identity verification request carrying the first user identity information, verifying the first user identity information according to a predetermined identity verification rule to obtain a first verification result;

a determining step: determining whether to perform multiple identity verification according to the obtained first verification result, the first user identity information, and a predetermined determination rule;

a first outputting step: when it is determined that the multiple authentication is not performed, outputting the first verification result as a user identity verification result; or, when determining to perform the multiple identity verification, acquiring the second user identity information;

The searching step: searching for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identification information in the first user identity information and the predetermined user identification information and the verification node identification information;

a publishing step: publishing a second identity verification request carrying the second user identity information to the blockchain network, and receiving, by the blockchain network, the carrying node identification information that is generated and broadcasted by the second user identity information Feedback information;

The analyzing step: analyzing and processing the verification result in the feedback information based on the predetermined first result analysis rule, and outputting the first analysis result as the second verification result;

The second output step is: performing analysis processing on the second verification result according to the predetermined second result analysis rule, and outputting the second analysis result as the identity verification result of the user.

In addition, to achieve the above object, the present application further provides a blockchain-based identity verification program, where the blockchain-based identity verification program includes:

a verification module, configured to: when receiving the first identity verification request carrying the first user identity information, verify the first user identity information according to a predetermined identity verification rule, to obtain a first verification result;

a determining module, configured to determine whether to perform multiple identity verification according to the obtained first verification result, the first user identity information, and a predetermined determination rule;

a first output module, configured to output the first verification result as a user identity verification result when determining that multiple authentication is not performed; or acquire second user identity information when determining to perform multiple identity verification;

a searching module, configured to search for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identifier information in the first user identity information and the predetermined user identifier information and the verification node identifier information;

a publishing module, configured to send a second identity verification request that carries the second user identity information to a blockchain network, and receive a carrying node that is configured to verify and broadcast the second user identity information of the blockchain network Feedback information of the identification information;

An analysis module, configured to analyze and process the verification result in the feedback information based on a predetermined first result analysis rule, and output the first analysis result as a second verification result;

And a second output module, configured to perform an analysis process on the second verification result according to the predetermined second result analysis rule, and output a second analysis result as the identity verification result of the user.

In addition, in order to achieve the above object, the present application further provides a computer readable storage medium storing a first identity program based on a blockchain, the first identity verification program based on a blockchain The at least one processor can be executed by the at least one processor to perform the following steps:

a verification step: when receiving the first identity verification request carrying the first user identity information, verifying the first user identity information according to a predetermined identity verification rule to obtain a first verification result;

a determining step: determining whether to perform multiple identity verification according to the obtained first verification result, the first user identity information, and a predetermined determination rule;

a first outputting step: when it is determined that the multiple authentication is not performed, outputting the first verification result as a user identity verification result; or, when determining to perform the multiple identity verification, acquiring the second user identity information;

The searching step: searching for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identification information in the first user identity information and the predetermined user identification information and the verification node identification information;

a publishing step: publishing a second identity verification request carrying the second user identity information to the blockchain network, and receiving, by the blockchain network, the carrying node identification information that is generated and broadcasted by the second user identity information Feedback information;

The analyzing step: analyzing and processing the verification result in the feedback information based on the predetermined first result analysis rule, and outputting the first analysis result as the second verification result;

The second output step is: performing analysis processing on the second verification result according to the predetermined second result analysis rule, and outputting the second analysis result as the identity verification result of the user.

In addition, to achieve the above object, the present application further provides a blockchain-based identity verification method, where the blockchain-based identity verification method includes:

Receiving step: receiving an identity verification request carrying user identity information;

The verification step: verifying the user identity information to obtain a verification result, and generating feedback information carrying the node identification information according to the verification result, and broadcasting the feedback information to the blockchain network.

In addition, to achieve the above object, the present application further provides a blockchain-based identity verification program, where the blockchain-based identity verification program includes:

a receiving module, configured to receive an identity verification request that carries user identity information;

And a verification module, configured to verify the user identity information to obtain a verification result, and generate feedback information carrying the node identification information according to the verification result, and broadcast the feedback information to the blockchain network.

In addition, in order to achieve the above object, the present application further provides a computer readable storage medium storing a blockchain based second identity verification program, the blockchain based second identity verification The program can be executed by at least one processor to cause the at least one processor to perform the following steps:

Receiving step: receiving an identity verification request carrying user identity information;

The verification step: verifying the user identity information to obtain a verification result, and generating feedback information carrying the node identification information according to the verification result, and broadcasting the feedback information to the blockchain network.

After verifying the first user identity information according to the predetermined identity verification rule, the application determines whether to perform the multiple identity verification according to the predetermined determination rule, and after determining to perform the multiple identity verification, releasing the second user identity information to the zone. The blockchain network is verified to obtain the verification result of multiple authentication. Compared with the prior art, the present application can meet the diverse needs of multiple application scenarios, improve the accuracy of user identity verification, and prevent user identity information from being leaked.

DRAWINGS

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings to be used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present application, and other drawings can be obtained according to the structures shown in the drawings without any creative work for those skilled in the art.

1 is a schematic diagram of an operating environment of a first electronic device and a second electronic device according to the present application;

2 is a schematic diagram of an operating environment of a first embodiment of a first identity verification procedure based on a blockchain according to the present application;

3 is a program module diagram of a first embodiment of a first identity verification procedure based on a blockchain according to the present application;

4 is a schematic flowchart of a blockchain-based identity verification method according to a first embodiment of the present application;

5 is a schematic diagram of an operating environment of a first embodiment of a second identity verification procedure based on a blockchain according to the present application;

6 is a program module diagram of a first embodiment of a second identity verification procedure based on a blockchain according to the present application;

FIG. 7 is a schematic flowchart diagram of a second embodiment of a blockchain-based identity verification method according to the present application.

The implementation, functional features and advantages of the present application will be further described with reference to the accompanying drawings.

detailed description

The principles and features of the present application are described in the following with reference to the accompanying drawings, which are only used to explain the present application and are not intended to limit the scope of the application.

The electronic device of the present application, the blockchain-based identity verification method, and the computer storage medium are applicable to a blockchain-based public welfare system, and the system includes a plurality of application terminals, and node devices corresponding to the application terminals, and the application end The utility model includes a public welfare platform and a public welfare target platform, and the node equipment comprises a public welfare platform node device corresponding to the public welfare platform, a public welfare object platform node device corresponding to the public welfare object platform, a plurality of public welfare platform employee management subsystems, and a corresponding public welfare platform employee management subsystem. The non-profit platform employee management node device; in some embodiments, the blockchain-based public interest system further includes: a plurality of fair institution platforms and fair institution node devices corresponding to the fair institution platforms.

The application also proposes a first identity verification procedure based on a blockchain.

Please refer to FIG. 1 . FIG. 1 is a schematic diagram of an operating environment of a first electronic device 1 and a second electronic device 2 according to the present application.

Please refer to FIG. 2 , which is a schematic diagram of the operating environment of the first embodiment of the first identity verification program 10 based on the blockchain of the present application.

In the present embodiment, the first identity verification program 10 based on the blockchain is installed and operates in the first electronic device 1. The first electronic device 1 may be a publishing node device, or may be an application server corresponding to the publishing node device, and may be an electronic device other than the publishing node device and the application server. .

The first electronic device 1 may be a computing device such as a desktop computer, a notebook, a palmtop computer, and a server. The first electronic device 1 may include, but is not limited to, a memory 11, a processor 12, and a display 13. Figure 2 shows only the first electronic device 1 with components 11-13, but it should be understood that not all illustrated components may be implemented, and more or fewer components may be implemented instead.

The memory 11 may be an internal storage unit of the first electronic device 1, such as a hard disk or memory of the first electronic device 1, in some embodiments. The memory 11 may also be an external storage device of the first electronic device 1 in other embodiments, such as a plug-in hard disk equipped on the first electronic device 1, a smart memory card (SMC), and a secure digital (Secure) Digital, SD) cards, flash cards, etc. Further, the memory 11 may also include both an internal storage unit of the first electronic device 1 and an external storage device. The memory 11 is used to store application software and various types of data installed in the first electronic device 1, such as program code of the first identity verification program 10 based on the blockchain. The memory 11 can also be used to temporarily store data that has been output or is about to be output.

The processor 12, in some embodiments, may be a Central Processing Unit (CPU), microprocessor or other data processing chip for running program code or processing data stored in the memory 11, for example, performing a first identity Verification procedure 10, etc. In this embodiment, if the first electronic device 1 is a publishing node, the processor 12 may be a smart contract.

The display 13 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch sensor, or the like in some embodiments. The display 13 is for displaying information processed in the first electronic device 1 and a user interface for displaying visualization. The components 11-13 of the first electronic device 1 communicate with one another via a system bus.

Please refer to FIG. 3, which is a program module diagram of the first embodiment of the first identity verification program 10 based on the blockchain of the present application. In this embodiment, the blockchain-based first identity verification program 10 can be divided into one or more modules, one or more modules are stored in the memory 11, and by one or more processors (this implementation) The example is executed by the processor 12) to complete the application. For example, in FIG. 3, the first identity verification program 10 based on the blockchain may be divided into a verification module 101, a determination module 102, a first output module 103, a lookup module 104, a distribution module 105, an analysis module 106, and a second. Output module 107. A module as referred to in the present application refers to a series of computer program instruction segments capable of performing a specific function, and is more suitable than the program to describe the execution process of the first identity verification program 10 based on the blockchain in the first electronic device 1, wherein:

The verification module 101 is configured to, when receiving the first identity verification request carrying the first user identity information, verify the first user identity information according to the predetermined identity verification rule to obtain a first verification result.

The determining module 102 is configured to determine whether to perform the multiple identity verification according to the obtained first verification result, the first user identity information, and the predetermined determination rule.

The first output module 103 is configured to: when the multi-identity verification is not performed, output the first verification result as a user identity verification result; or, when it is determined to perform the multiple identity verification, acquire the second user identity information.

The searching module 104 is configured to search for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identifier information in the first user identity information and the predetermined user identifier information and the verification node identifier information.

a publishing module 105, configured to issue a second identity verification request that carries the second user identity information to the blockchain network, and receive, by the blockchain network, the second user identity information to be verified and generated and broadcasted. Feedback information of node identification information.

The analyzing module 106 is configured to perform analysis processing on the verification result in the feedback information based on the predetermined first result analysis rule, and output the first analysis result as the second verification result.

The second output module 107 is configured to perform analysis processing on the second verification result according to a predetermined second result analysis rule, and output a second analysis result as the identity verification result of the user.

The first user identity information is identity information that does not involve user privacy. Even if the first user identity information is obtained by another person, the winner of the first user identity information cannot learn the true identity of the user by using the first user identity information. For example, the first user identity information includes user identification information and first user identity information, where the user identity association information includes user name information and user password information (the user password information may be U shield, electronic certificate, etc. as a storage medium). ), dynamic code, etc.

The above predetermined authentication rules include:

And searching for the first standard user identity feature information corresponding to the user identifier information, according to the user identifier information in the first identity information, and based on a mapping relationship between the predetermined user identifier information and the first standard user identity feature information .

And verifying the first user identity feature information to be verified in the first identity information according to the first standard user identity feature information obtained by the search; if the verification result is the same, outputting the first verification result is successful verification; If the verification result is different, the first verification result is output as the verification failure.

The following two rules are used to explain the predetermined judgment rules:

Option One:

The above predetermined judgment rules are:

Determining to perform multiple authentication when the first verification result is a verification failure; or determining to perform multiple authentication when the first verification result is a verification failure and receiving a request sent by the user to continue performing the authentication. .

When the first verification result is that the verification is successful, determining that the multiple authentication is not performed; or, when the first verification result is the verification success, or when the first verification result is the verification failure and receiving the user sending When terminating a request to perform multi-factor authentication, it is determined that multi-authentication is not performed.

The application scenario of the foregoing solution 1 is: when the user logs in through the public welfare platform, the public interest platform first authenticates by using the user name and user password provided by the user. If the verification result is that the verification fails, the user may be an illegal login user or the user forgets the user. Username and/or user password, in order to prevent misjudgment, the public welfare platform performs multiple authentication to ensure the accuracy of authentication.

Option II:

The above predetermined judgment rules are:

When the first verification result is that the verification is successful, determining whether to perform the multiple identity verification according to the user identification information in the first user identity information and based on the predetermined determination sub-rule. When it is determined that the multi-factor authentication is performed based on the predetermined judging sub-rule, the outputting of the judgment result is to perform the multi-intelligence verification. When it is determined that the multi-factor authentication is not performed based on the predetermined judging sub-rule, the outputting of the judgment result is that the multi-factor authentication is not performed.

When the first verification result is a verification failure, the output judgment result is that the multiple authentication is not performed.

Wherein, the above predetermined judging rule is:

Extracting a user identity level in the user identification information as a user identity level to be confirmed, and determining whether the user identity level to be confirmed and the multiple identity are based on a mapping relationship between the predetermined user identity level and the multiple identity verification. Verify that there is a mapping relationship.

If so, the output judgment result is to perform multi-factor authentication.

If not, the output judgment result is that multi-factor authentication is not performed.

In some embodiments, the multiple identity identifier may also be set in advance in the user identification information. If the multiple identity identifier exists in the user identifier information of a user, it is determined to perform multiple identity verification, if the user of the user If the multiple authentication identifier does not exist in the identification information, it is determined that multiple authentication is not performed.

The application scenario of the foregoing solution 2 is: when the user logs in through the public welfare platform, the public welfare platform first performs verification by using the first user identity information provided by the user. If the verification is passed, it is further determined whether the user is a user with a high system operation level (for example, a public interest platform employee), and since these users can often have processing authority for confidential data or non-public data in the system, to ensure system data security. Sex, the user's real identity needs to be verified to confirm that the login is actually performed by the user himself. If it is determined that the user is a user with a high system operation level, it is determined that the user needs to perform multiple authentication; if it is determined that the user is not a user with a high system operation level, it is determined that the user does not need only multiple authentication, but only The first user identity information needs to be verified. Since the first user identity information is identity information that does not involve user privacy, the first user identity information may be stored in each node of the blockchain, and even if the first user identity information is stolen, the user is not caused. The disclosure of privacy.

The second user identity information includes user identity information and second user identity feature information.

The second user identity feature information includes at least one of user biometric information and identity document information.

The user biometric information includes fingerprint information, face information, iris information, voiceprint information, and the like for biometric information for uniquely identifying a user identity.

The above identification information includes the ID number, passport number, employee number, and the like.

The mapping relationship between the foregoing user identification information and the verification node identification information may be stored in a mapping table, wherein the identity verification of a user may be completed by one or more verification nodes, and the number of verification nodes enabled to perform one user identity verification may be Determined according to needs, not limited here.

The publishing module 105 is specifically used to:

And encrypting the second user identity information according to the predetermined first encryption rule, and issuing a second identity verification request carrying the encrypted second user identity information to the blockchain network. After receiving the second identity verification request, the blockchain network (eg, the verification node in the blockchain network) decrypts the encrypted second user identity information according to the predetermined first decryption rule to obtain the first And the second user identity information is verified, and the verification result is obtained, and the feedback information carrying the node identification information is generated according to the verification result, and the feedback information is broadcasted to the blockchain network. .

The step of performing the encryption processing on the second user identity information according to the predetermined first encryption rule, and issuing the second identity verification request carrying the encrypted second user identity information to the blockchain network, specifically:

First, the public key corresponding to the verification node is obtained.

If the verification node is one, the second user identity information is encrypted by using the obtained public key corresponding to the verification node to obtain the encrypted second user identity information.

If the number of the verification nodes is multiple, the second user identity information is separately encrypted by using the obtained public key corresponding to each of the verification nodes to obtain a plurality of the encrypted second user identity information.

The second authentication request is then issued to the blockchain network by the publishing node.

The above one verification node (for example, the public interest platform employee management node device) generally corresponds to a blockchain-based first identity verification program, and the blockchain-based first identity verification program is stored in the memory, and the blockchain is based on the blockchain. The first authentication program can be executed by one or more processors, and the processor executing the blockchain-based first identity verification program can be set in the verification node or can be set on the application end (for example, the nonprofit platform employee) The management subsystem may also be independently disposed in an electronic device. For example, if the processor is disposed in the verification node, the processor may be a smart contract corresponding to the verification node.

The following describes how the blockchain-based authentication program receives and processes the second identity verification request by taking the processor in the verification node as an example:

If the verification node is one, the verification node decrypts the encrypted second user identity information by using the private key corresponding to the verification node after receiving the second identity verification request to obtain the Second user identity information. And searching for the second pre-encrypted storage corresponding to the user identifier information, according to the user identifier information in the second user identity information, and based on a mapping relationship between the predetermined user identifier information and the second standard user identity feature information. Standard user identity information, and decrypting the encrypted second standard user identity feature information by using a symmetric encryption key corresponding to the verification node to obtain second standard user identity feature information, according to the second criterion of the search The user identity information is used to verify the second user identity feature information to be verified in the second identity information. If the second user identity feature information to be verified is the same as the second standard user identity feature information, the verification result is verified to be successful. If the second user identity feature information to be verified is different from the second standard user identity feature information, the verification result is a verification failure. And generating, according to the verification result, feedback information carrying the node identification information, where the verification node issues the generated feedback information to the blockchain network.

If the number of the verification nodes is multiple, each of the verification nodes can receive the plurality of encrypted second user identity information, and the verification node can only receive the encrypted second user identity information. Decrypting the second user identity information encrypted with the public key corresponding to the verification node. a method for verifying, by the verification node, the received second user identity information by using a private key corresponding to each verification node, verifying the second user identity information, and generating and distributing feedback information. The method is the same and will not be described here.

The above predetermined first result analysis rule is:

If the verification node is one, when the verification result is successful, the first analysis result is determined as successful verification; when the verification result is verification failure, determining that the first analysis result is verification failure;

If the verification node is multiple, when all the verification results are successful, it is determined that the first analysis result is the verification success; otherwise, the first analysis result is determined to be the verification failure.

The above predetermined second result analysis rule is:

If the second verification result is that the verification is successful, the second analysis result is that the verification is successful;

If the second verification result is a verification failure or the second verification result is a null value, the second analysis result is a verification failure.

The case where the second verification result described above is null is that the multiple authentication is suspended by the user.

In this embodiment, after verifying the first user identity information according to the predetermined identity verification rule, determining whether to perform the multiple identity verification according to the predetermined determination rule, and after determining to perform the multiple identity verification, publishing the second user identity information to the The blockchain network is verified to obtain verification results for multiple authentications. Compared with the prior art, this embodiment can meet the diversified requirements of multiple application scenarios, improve the accuracy of user identity verification, and prevent user identity information from being leaked.

The application also provides a blockchain-based authentication method, which is applicable to a publishing end of an identity verification request in a blockchain network, for example, a publishing node.

In this embodiment, the first identity verification program based on the blockchain is stored in the memory, and the blockchain-based first identity verification program may be executed by one or more processors to implement the block based in the embodiment. The chain authentication method, the processor executing the blockchain-based first identity verification program may be set in the verification node, or may be set in the application end (for example, a public welfare platform), or may be independently set in an electronic In the device, for example, if the processor is disposed in the publishing node, the processor may be a smart contract corresponding to the publishing node.

As shown in FIG. 4, FIG. 4 is a schematic flowchart of a first embodiment of a blockchain-based identity verification method according to the present application.

In this embodiment, the method includes:

Step S110: When receiving the first identity verification request that carries the first user identity information, verify the first user identity information according to a predetermined identity verification rule to obtain a first verification result.

The first user identity information is identity information that does not involve user privacy. Even if the first user identity information is obtained by another person, the winner of the first user identity information cannot learn the true identity of the user by using the first user identity information. For example, the first user identity information includes user identification information and first user identity information, where the user identity association information includes user name information and user password information (the user password information may be U shield, electronic certificate, etc. as a storage medium). ), dynamic code, etc.

The above predetermined authentication rules include:

And searching for the first standard user identity feature information corresponding to the user identifier information, according to the user identifier information in the first identity information, and based on a mapping relationship between the predetermined user identifier information and the first standard user identity feature information .

And verifying the first user identity feature information to be verified in the first identity information according to the first standard user identity feature information obtained by the search; if the verification result is the same, outputting the first verification result is successful verification; If the verification result is different, the first verification result is output as the verification failure.

Step S120: Determine whether to perform multiple identity verification according to the obtained first verification result, the first user identity information, and a predetermined determination rule.

The predetermined judgment rules are explained by the following two schemes:

Option One:

The above predetermined judgment rules are:

Determining to perform multiple authentication when the first verification result is a verification failure; or determining to perform multiple authentication when the first verification result is a verification failure and receiving a request sent by the user to continue performing the authentication. .

When the first verification result is that the verification is successful, determining that the multiple authentication is not performed; or, when the first verification result is the verification success, or when the first verification result is the verification failure and receiving the user sending When terminating a request to perform multi-factor authentication, it is determined that multi-authentication is not performed.

The application scenario of the foregoing solution 1 is: when the user logs in through the public welfare platform, the public interest platform first authenticates by using the user name and user password provided by the user. If the verification result is that the verification fails, the user may be an illegal login user or the user forgets the user. Username and/or user password, in order to prevent misjudgment, the public welfare platform performs multiple authentication to ensure the accuracy of authentication.

Option II:

The above predetermined judgment rules are:

When the first verification result is that the verification is successful, determining whether to perform the multiple identity verification according to the user identification information in the first user identity information and based on the predetermined determination sub-rule. When it is determined that the multi-factor authentication is performed based on the predetermined judging sub-rule, the outputting of the judgment result is to perform the multi-intelligence verification. When it is determined that the multi-factor authentication is not performed based on the predetermined judging sub-rule, the outputting of the judgment result is that the multi-factor authentication is not performed.

When the first verification result is a verification failure, the output judgment result is that the multiple authentication is not performed.

Wherein, the above predetermined judging rule is:

Extracting a user identity level in the user identification information as a user identity level to be confirmed, and determining whether the user identity level to be confirmed and the multiple identity are based on a mapping relationship between the predetermined user identity level and the multiple identity verification. Verify that there is a mapping relationship.

If so, the output judgment result is to perform multi-factor authentication.

If not, the output judgment result is that multi-factor authentication is not performed.

In some embodiments, the multiple identity identifier may also be set in advance in the user identification information. If the multiple identity identifier exists in the user identifier information of a user, it is determined to perform multiple identity verification, if the user of the user If the multiple authentication identifier does not exist in the identification information, it is determined that multiple authentication is not performed.

The application scenario of the foregoing solution 2 is: when the user logs in through the public welfare platform, the public welfare platform first performs verification by using the first user identity information provided by the user. If the verification is passed, it is further determined whether the user is a user with a high system operation level (for example, a public interest platform employee), and since these users can often have processing authority for confidential data or non-public data in the system, to ensure system data security. Sex, the user's real identity needs to be verified to confirm that the login is actually performed by the user himself. If it is determined that the user is a user with a high system operation level, it is determined that the user needs to perform multiple authentication; if it is determined that the user is not a user with a high system operation level, it is determined that the user does not need only multiple authentication, but only The first user identity information needs to be verified. Since the first user identity information is identity information that does not involve user privacy, the first user identity information may be stored in each node of the blockchain, and even if the first user identity information is stolen, the user is not caused. The disclosure of privacy.

Step S130, when it is determined that the multiple authentication is not performed, outputting the first verification result as a user identity verification result.

Step S140, when it is determined that the multiple identity verification is performed, acquiring the second user identity information.

The second user identity information includes user identity information and second user identity feature information.

The second user identity feature information includes at least one of user biometric information and identity document information.

The user biometric information includes fingerprint information, face information, iris information, voiceprint information, and the like for biometric information for uniquely identifying a user identity.

The above identification information includes the ID number, passport number, employee number, and the like.

Step S150: Search for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identifier information in the first user identity information and the predetermined user identifier information and the verification node identifier information.

The mapping relationship between the foregoing user identification information and the verification node identification information may be stored in a mapping table, wherein the identity verification of a user may be completed by one or more verification nodes, and the number of verification nodes enabled to perform one user identity verification may be Determined according to needs, not limited here.

Step S160, the second identity verification request carrying the second user identity information is sent to the blockchain network, and the carrying node identification information that is verified by the blockchain network and generated and broadcasted by the second user identity information is received. Feedback information.

Step S160 specifically includes:

And encrypting the second user identity information according to the predetermined first encryption rule, and issuing a second identity verification request carrying the encrypted second user identity information to the blockchain network. After receiving the second identity verification request, the blockchain network (eg, the verification node in the blockchain network) decrypts the encrypted second user identity information according to the predetermined first decryption rule to obtain the first And the second user identity information is verified, and the verification result is obtained, and the feedback information carrying the node identification information is generated according to the verification result, and the feedback information is broadcasted to the blockchain network. .

The step of performing the encryption processing on the second user identity information according to the predetermined first encryption rule, and issuing the second identity verification request carrying the encrypted second user identity information to the blockchain network, specifically:

First, the public key corresponding to the verification node is obtained.

If the verification node is one, the second user identity information is encrypted by using the obtained public key corresponding to the verification node to obtain the encrypted second user identity information.

If the number of the verification nodes is multiple, the second user identity information is separately encrypted by using the obtained public key corresponding to each of the verification nodes to obtain a plurality of the encrypted second user identity information.

The second authentication request is then issued to the blockchain network by the publishing node.

The above one verification node (for example, the public interest platform employee management node device) generally corresponds to a blockchain-based first identity verification program, and the blockchain-based first identity verification program is stored in the memory, and the blockchain is based on the blockchain. The first authentication program can be executed by one or more processors, and the processor executing the blockchain-based first identity verification program can be set in the verification node or can be set on the application end (for example, the nonprofit platform employee) The management subsystem may also be independently disposed in an electronic device. For example, if the processor is disposed in the verification node, the processor may be a smart contract corresponding to the verification node.

The following describes how the blockchain-based authentication program receives and processes the second identity verification request by taking the processor in the verification node as an example:

If the verification node is one, the verification node decrypts the encrypted second user identity information by using the private key corresponding to the verification node after receiving the second identity verification request to obtain the The second user identity information is obtained according to the user identity information in the second user identity information, and based on the mapping relationship between the predetermined user identity information and the second standard user identity feature information, searching for the corresponding information of the user identity information Pre-encrypting the stored second standard user identity feature information, and decrypting the encrypted second standard user identity feature information by using a symmetric encryption key corresponding to the verification node, to obtain a second standard user identity feature information, according to the search The second standard user identity feature information is used to verify the second user identity feature information to be verified in the second identity information; if the second user identity feature information and the second standard user identity feature information are to be verified If the same, the output verification result is verified successfully; if the second user identity characteristic letter is to be verified Different from the second standard user identity information, the output verification result is a verification failure; according to the verification result, feedback information carrying the node identification information is generated, and the verification node issues the generated feedback information to the blockchain. In the network.

If the number of the verification nodes is multiple, each of the verification nodes can receive the plurality of encrypted second user identity information, and the verification node can only receive the encrypted second user identity information. Decrypting the second user identity information encrypted by the public key corresponding to the verification node; each verification node decrypts the received encrypted second user identity information by using a private key corresponding to each verification node, The method for verifying the second user identity information and generating and distributing the feedback information is the same as the foregoing method, and details are not described herein.

Step S170: Perform analysis processing on the verification result in the feedback information based on the predetermined first result analysis rule, and output the first analysis result as the second verification result.

The above predetermined first result analysis rule is:

If the verification node is one, when the verification result is successful, the first analysis result is determined as the verification success; when the verification result is the verification failure, determining that the first analysis result is a verification failure;

If the verification node is multiple, when all the verification results are successful, it is determined that the first analysis result is the verification success; otherwise, the first analysis result is determined to be the verification failure.

Step S180: Perform analysis processing on the second verification result according to the predetermined second result analysis rule, and output a second analysis result as the identity verification result of the user.

The above predetermined second result analysis rule is:

If the second verification result is that the verification is successful, the second analysis result is that the verification is successful;

If the second verification result is a verification failure or the second verification result is a null value, the second analysis result is a verification failure.

The case where the second verification result described above is null is that the multiple authentication is suspended by the user.

In this embodiment, after verifying the first user identity information according to the predetermined identity verification rule, determining whether to perform the multiple identity verification according to the predetermined determination rule, and after determining to perform the multiple identity verification, publishing the second user identity information to the The blockchain network is verified to obtain verification results for multiple authentications. Compared with the prior art, the identity verification method provided in this embodiment can meet the diversified requirements of multiple application scenarios, improve the accuracy of user identity verification, and prevent user identity information from being leaked.

Further, the present application further provides a computer readable storage medium storing a first identity verification program based on a blockchain, wherein the blockchain-based first identity verification program can be at least A processor executes to cause the at least one processor to perform the blockchain based authentication method of any of the above embodiments.

The application also proposes a second identity verification procedure based on a blockchain.

Please refer to FIG. 5 , which is a schematic diagram of the operating environment of the first embodiment of the second identity verification program 20 based on the blockchain of the present application.

In the present embodiment, the block chain-based second identity verification program 20 is installed and operates in the second electronic device 2. The second electronic device 2 may be a verification node device, or an application server corresponding to the verification node device, and may be an electronic device other than the verification node device and the application server. .

The second electronic device 2 can be a computing device such as a desktop computer, a notebook, a palmtop computer, and a server. The second electronic device 2 can include, but is not limited to, a memory 21, a processor 22, and a display 23. Figure 5 shows only the second electronic device 2 with components 21-23, but it should be understood that not all illustrated components may be implemented and that more or fewer components may be implemented instead.

The memory 21 may be an internal storage unit of the second electronic device 2, such as a hard disk or memory of the second electronic device 2, in some embodiments. The memory 21 may also be an external storage device of the second electronic device 2 in other embodiments, such as a plug-in hard disk equipped on the second electronic device 2, a smart memory card (SMC), and a secure digital (Secure) Digital, SD) cards, flash cards, etc. Further, the memory 21 may also include both an internal storage unit of the second electronic device 2 and an external storage device. The memory 21 is used to store application software and various types of data installed in the second electronic device 2, such as program code of the second identity verification program 20 based on the blockchain. The memory 21 can also be used to temporarily store data that has been output or is about to be output.

The processor 22, in some embodiments, may be a Central Processing Unit (CPU), microprocessor or other data processing chip for running program code or processing data stored in the memory 21, such as executing a second identity. Verification program 20, etc. In this embodiment, if the second electronic device 2 is a verification node, the processor 22 may be a smart contract.

The display 23 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch sensor, or the like in some embodiments. The display 23 is used to display information processed in the second electronic device 2 and a user interface for displaying visualizations. The components 21-23 of the second electronic device 2 communicate with one another via a system bus.

Please refer to FIG. 6, which is a program module diagram of the first embodiment of the block chain-based second identity verification program 20 of the present application. In this embodiment, the blockchain-based second identity verification program 20 can be divided into one or more modules, one or more modules are stored in the memory 21, and by one or more processors (this implementation) The example is executed by the processor 22) to complete the application. For example, in FIG. 6, the blockchain based second identity verification program 20 can be partitioned into a receiving module 201 and a verification module 202. A module as referred to in the present application refers to a series of computer program instruction segments capable of performing a specific function, and is more suitable than a program to describe the execution process of the blockchain-based second identity verification program 20 in the second electronic device 2, wherein:

The receiving module 201 is configured to receive an identity verification request that carries user identity information.

The verification module 202 is configured to check the user identity information to obtain a verification result, and generate feedback information carrying the node identification information according to the verification result, and broadcast the feedback information to the blockchain network.

The user identity information includes user identification information and user identity feature information.

The user identity feature information includes at least one of user biometric information and identity document information.

The user biometric information includes fingerprint information, face information, iris information, voiceprint information, and the like for biometric information for uniquely identifying a user identity.

The above identification information includes the ID number, passport number, employee number, and the like.

Preferably, the user identity information is encrypted user identity information obtained by encrypting user identity information by using a predetermined first encryption rule.

The first encryption rule includes: encrypting the user identity information by using the public key of the verification node.

The verification module 202 is specifically configured to:

Decrypting the encrypted user information according to a predetermined first decryption rule (for example, using an asymmetric encryption private key of the verification node) to obtain the user identity information plaintext as the identity information to be verified, the to-be-verified The user identity information includes user identification information and identity information of the user to be verified;

And searching for the encryption standard user identity feature information corresponding to the user identifier information, according to the mapping relationship between the user identifier information in the user identity information to be verified and the predetermined user identifier information and the standard user identity feature information;

Decrypting the encrypted standard user identity feature information according to a predetermined second decryption rule (for example, using a symmetric encryption key of the verification node) to obtain standard user identity feature information;

And verifying the identity information of the user to be verified according to the standard user identity characteristic information;

When it is determined that the to-be-verified user identity feature information is the same as the standard user identity feature information, the output verification result is successful verification;

When it is determined that the to-be-verified user identity feature information is different from the standard user identity feature information, the verification result is a verification failure.

Compared with the prior art, this embodiment satisfies the diversified requirements of multiple application scenarios, improves the accuracy of user identity verification, and prevents user identity information from being leaked.

The application also provides a blockchain-based authentication method, which is applicable to a receiving end of an identity verification request in a blockchain network, for example, a verification node.

In this embodiment, the blockchain-based second identity verification program is stored in the memory, and the blockchain-based second identity verification program can be executed by one or more processors to implement the block based in the embodiment. The chain authentication method, the processor executing the blockchain-based second identity verification program may be set in the verification node, or may be set in the application end (for example, the public welfare platform employee management subsystem), or may be independent The processor is disposed in an electronic device. For example, if the processor is disposed in the verification node, the processor may be a smart contract corresponding to the verification node.

As shown in FIG. 7, FIG. 7 is a schematic flowchart of a second embodiment of a blockchain-based identity verification method according to the present application.

In this embodiment, the method includes:

Step S210: Receive an identity verification request that carries user identity information.

The user identity information includes user identification information and user identity feature information.

The user identity feature information includes at least one of user biometric information and identity document information.

The user biometric information includes fingerprint information, face information, iris information, voiceprint information, and the like for biometric information that uniquely identifies the user.

The above identification information includes the ID number, passport number, employee number, and the like.

Preferably, the user identity information is encrypted user identity information obtained by encrypting user identity information by using a predetermined first encryption rule.

The first encryption rule includes: encrypting the user identity information by using the public key of the verification node.

Step S220: Perform verification on the user identity information to obtain a verification result, and generate feedback information carrying the node identification information according to the verification result, and broadcast the feedback information to the blockchain network.

Preferably, the step S220 includes:

Decrypting the encrypted user information according to a predetermined first decryption rule (for example, using an asymmetric encryption private key of the verification node) to obtain the user identity information plaintext as the identity information to be verified, the to-be-verified The user identity information includes user identification information and identity information of the user to be verified;

And searching for the encryption standard user identity feature information corresponding to the user identifier information, according to the mapping relationship between the user identifier information in the user identity information to be verified and the predetermined user identifier information and the standard user identity feature information;

Decrypting the encrypted standard user identity feature information according to a predetermined second decryption rule (for example, using a symmetric encryption key of the verification node) to obtain standard user identity feature information;

And verifying the identity information of the user to be verified according to the standard user identity characteristic information;

When it is determined that the to-be-verified user identity feature information is the same as the standard user identity feature information, the output verification result is successful verification;

When it is determined that the to-be-verified user identity feature information is different from the standard user identity feature information, the verification result is a verification failure.

Compared with the prior art, this embodiment satisfies the diversified requirements of multiple application scenarios, improves the accuracy of user identity verification, and prevents user identity information from being leaked.

Further, the present application further provides a computer readable storage medium storing a blockchain-based second identity verification program, the blockchain-based second identity verification program being at least A processor executes to cause the at least one processor to perform the blockchain based authentication method of any of the above embodiments.

The above description is only a preferred embodiment of the present application, and is not intended to limit the scope of the patents of the present application, and the equivalent structural transformation, or direct/indirect use, of the present application and the contents of the drawings is used in the present invention. All other related technical fields are included in the patent protection scope of the present application.

Claims (20)

An electronic device, comprising: a memory and a processor, wherein the memory stores a first identity verification program based on a blockchain, and the first identity verification program based on the blockchain is The following steps are implemented when the processor is executed: a verification step: when receiving the first identity verification request carrying the first user identity information, verifying the first user identity information according to a predetermined identity verification rule to obtain a first verification result; a determining step: determining whether to perform multiple identity verification according to the obtained first verification result, the first user identity information, and a predetermined determination rule; a first outputting step: when it is determined that the multiple authentication is not performed, outputting the first verification result as a user identity verification result; or, when determining to perform the multiple identity verification, acquiring the second user identity information; The searching step: searching for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identification information in the first user identity information and the predetermined user identification information and the verification node identification information; a publishing step: publishing a second identity verification request carrying the second user identity information to the blockchain network, and receiving, by the blockchain network, the carrying node identification information that is generated and broadcasted by the second user identity information Feedback information; The analyzing step: analyzing and processing the verification result in the feedback information based on the predetermined first result analysis rule, and outputting the first analysis result as the second verification result; The second output step is: performing analysis processing on the second verification result according to the predetermined second result analysis rule, and outputting the second analysis result as the identity verification result of the user. The electronic device of claim 1, wherein the predetermined determination rule comprises: When the first verification result is that the verification is successful, determining whether to perform the multiple identity verification according to the user identification information in the first user identity information and the predetermined determination sub-rule; When it is determined that the multi-identity verification is performed based on the predetermined judging sub-rule, the outputting of the judgment result is to perform the multi-factor authentication; When it is determined that the multi-factor authentication is not performed based on the predetermined judging sub-rule, the output judgment result is that the multi-factor authentication is not performed; When the first verification result is a verification failure, the output judgment result is that the multiple authentication is not performed. An electronic device, comprising: a memory and a processor, wherein the memory stores a second identity verification program based on a blockchain, and the second identity verification program based on the blockchain is The following steps are implemented when the processor is executed: Receiving step: receiving an identity verification request carrying user identity information; The verification step: verifying the user identity information to obtain a verification result, and generating feedback information carrying the node identification information according to the verification result, and broadcasting the feedback information to the blockchain network. The electronic device according to claim 3, wherein the user identity information is encrypted user identity information obtained by encrypting user identity data by using a predetermined first encryption rule. The electronic device of claim 3, wherein the verifying step comprises: Decrypting the encrypted user information according to the predetermined first decryption rule to obtain the user identity information plaintext as the user identity information to be verified, the user identity information to be verified includes the user identifier information and the identity of the user to be verified information; And searching for the encryption standard user identity feature information corresponding to the user identifier information, according to the mapping relationship between the user identifier information in the user identity information to be verified and the predetermined user identifier information and the standard user identity feature information; Decrypting the encrypted standard user identity feature information according to a predetermined second decryption rule to obtain standard user identity feature information; And verifying the identity information of the user to be verified according to the standard user identity characteristic information; When it is determined that the to-be-verified user identity feature information is the same as the standard user identity feature information, the output verification result is successful verification; When it is determined that the to-be-verified user identity feature information is different from the standard user identity feature information, the verification result is a verification failure. A blockchain-based authentication method, the method comprising: a verification step: when receiving the first identity verification request carrying the first user identity information, verifying the first user identity information according to a predetermined identity verification rule to obtain a first verification result; a determining step: determining whether to perform multiple identity verification according to the obtained first verification result, the first user identity information, and a predetermined determination rule; a first outputting step: when it is determined that the multiple authentication is not performed, outputting the first verification result as a user identity verification result; or, when determining to perform the multiple identity verification, acquiring the second user identity information; The searching step: searching for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identification information in the first user identity information and the predetermined user identification information and the verification node identification information; a publishing step: publishing a second identity verification request carrying the second user identity information to the blockchain network, and receiving, by the blockchain network, the carrying node identification information that is generated and broadcasted by the second user identity information Feedback information; The analyzing step: analyzing and processing the verification result in the feedback information based on the predetermined first result analysis rule, and outputting the first analysis result as the second verification result; The second output step is: performing analysis processing on the second verification result according to the predetermined second result analysis rule, and outputting the second analysis result as the identity verification result of the user. The blockchain-based identity verification method according to claim 6, wherein the predetermined determination rule comprises: When the first verification result is that the verification is successful, determining whether to perform the multiple identity verification according to the user identification information in the first user identity information and the predetermined determination sub-rule; When it is determined that the multi-identity verification is performed based on the predetermined judging sub-rule, the outputting of the judgment result is to perform the multi-factor authentication; When it is determined that the multi-factor authentication is not performed based on the predetermined judging sub-rule, the output judgment result is that the multi-factor authentication is not performed; When the first verification result is a verification failure, the output judgment result is that the multiple authentication is not performed. A blockchain-based authentication method, characterized in that the blockchain-based identity verification method comprises: Receiving step: receiving an identity verification request carrying user identity information; The verification step: verifying the user identity information to obtain a verification result, and generating feedback information carrying the node identification information according to the verification result, and broadcasting the feedback information to the blockchain network. The blockchain-based identity verification method according to claim 8, wherein the user identity information is encrypted user identity information obtained by encrypting user identity data by using a predetermined first encryption rule. The blockchain-based authentication method according to claim 8, wherein the verifying step comprises: Decrypting the encrypted user information according to the predetermined first decryption rule to obtain the user identity information plaintext as the user identity information to be verified, the user identity information to be verified includes the user identifier information and the identity of the user to be verified information; And searching for the encryption standard user identity feature information corresponding to the user identifier information, according to the mapping relationship between the user identifier information in the user identity information to be verified and the predetermined user identifier information and the standard user identity feature information; Decrypting the encrypted standard user identity feature information according to a predetermined second decryption rule to obtain standard user identity feature information; And verifying the identity information of the user to be verified according to the standard user identity characteristic information; When it is determined that the to-be-verified user identity feature information is the same as the standard user identity feature information, the output verification result is successful verification; When it is determined that the to-be-verified user identity feature information is different from the standard user identity feature information, the verification result is a verification failure. A blockchain-based authentication program, characterized in that the blockchain-based identity verification program comprises: a verification module, configured to: when receiving the first identity verification request carrying the first user identity information, verify the first user identity information according to a predetermined identity verification rule, to obtain a first verification result; a determining module, configured to determine, according to the obtained first verification result, the first user identity information, and the predetermined determination rule, whether to perform multiple identity verification; a first output module, configured to output the first verification result as a user identity verification result when determining that multiple authentication is not performed; or acquire second user identity information when determining to perform multiple identity verification; a searching module, configured to search for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identifier information in the first user identity information and the predetermined user identifier information and the verification node identifier information; a publishing module, configured to send a second identity verification request that carries the second user identity information to a blockchain network, and receive a carrying node that is configured to verify and broadcast the second user identity information of the blockchain network Feedback information of the identification information; An analysis module, configured to analyze and process the verification result in the feedback information based on a predetermined first result analysis rule, and output the first analysis result as a second verification result; And a second output module, configured to perform an analysis process on the second verification result according to the predetermined second result analysis rule, and output a second analysis result as the identity verification result of the user. The blockchain-based identity verification program according to claim 11, wherein said predetermined determination rule comprises: When the first verification result is that the verification is successful, determining whether to perform the multiple identity verification according to the user identification information in the first user identity information and the predetermined determination sub-rule; When it is determined that the multi-identity verification is performed based on the predetermined judging sub-rule, the outputting of the judgment result is to perform the multi-factor authentication; When it is determined that the multi-factor authentication is not performed based on the predetermined judging sub-rule, the output judgment result is that the multi-factor authentication is not performed; When the first verification result is a verification failure, the output judgment result is that the multiple authentication is not performed. A blockchain-based authentication program, characterized in that the blockchain-based identity verification program comprises: a receiving module, configured to receive an identity verification request that carries user identity information; And a verification module, configured to verify the user identity information to obtain a verification result, and generate feedback information carrying the node identification information according to the verification result, and broadcast the feedback information to the blockchain network. The blockchain-based identity verification program according to claim 13, wherein the user identity information is encrypted user identity information obtained by encrypting user identity data by using a predetermined first encryption rule. The blockchain-based identity verification program according to claim 13, wherein the verification module is specifically configured to: Decrypting the encrypted user information according to the predetermined first decryption rule to obtain the user identity information plaintext as the user identity information to be verified, the user identity information to be verified includes the user identifier information and the identity of the user to be verified information; And searching for the encryption standard user identity feature information corresponding to the user identifier information, according to the mapping relationship between the user identifier information in the user identity information to be verified and the predetermined user identifier information and the standard user identity information; Decrypting the encrypted standard user identity feature information according to a predetermined second decryption rule to obtain standard user identity feature information; And verifying the identity information of the user to be verified according to the standard user identity characteristic information; When it is determined that the to-be-verified user identity feature information is the same as the standard user identity feature information, the output verification result is successful verification; When it is determined that the to-be-verified user identity feature information is different from the standard user identity feature information, the verification result is a verification failure. A computer readable storage medium, characterized in that the computer readable storage medium stores a first identity verification program based on a blockchain, the first identity verification program based on the blockchain can be at least one processor Executing to cause the at least one processor to perform the following steps: a verification step: when receiving the first identity verification request carrying the first user identity information, verifying the first user identity information according to a predetermined identity verification rule to obtain a first verification result; a determining step: determining whether to perform multiple identity verification according to the obtained first verification result, the first user identity information, and a predetermined determination rule; a first outputting step: when it is determined that the multiple authentication is not performed, outputting the first verification result as a user identity verification result; or, when determining to perform the multiple identity verification, acquiring the second user identity information; The searching step: searching for at least one verification node corresponding to the user identification information according to the mapping relationship between the user identification information in the first user identity information and the predetermined user identification information and the verification node identification information; a publishing step: publishing a second identity verification request carrying the second user identity information to the blockchain network, and receiving, by the blockchain network, the carrying node identification information that is generated and broadcasted by the second user identity information Feedback information; The analyzing step: analyzing and processing the verification result in the feedback information based on the predetermined first result analysis rule, and outputting the first analysis result as the second verification result; The second output step is: performing analysis processing on the second verification result according to the predetermined second result analysis rule, and outputting the second analysis result as the identity verification result of the user. The computer readable storage medium of claim 16, wherein the predetermined determination rule comprises: When the first verification result is that the verification is successful, determining whether to perform the multiple identity verification according to the user identification information in the first user identity information and the predetermined determination sub-rule; When it is determined that the multi-identity verification is performed based on the predetermined judging sub-rule, the outputting of the judgment result is to perform the multi-factor authentication; When it is determined that the multi-factor authentication is not performed based on the predetermined judging sub-rule, the output judgment result is that the multi-factor authentication is not performed; When the first verification result is a verification failure, the output judgment result is that the multiple authentication is not performed. A computer readable storage medium, characterized in that the computer readable storage medium stores a blockchain based second identity verification program, and the blockchain based second identity verification program can be at least one processor Executing to cause the at least one processor to perform the following steps: Receiving step: receiving an identity verification request carrying user identity information; The verification step: verifying the user identity information to obtain a verification result, and generating feedback information carrying the node identification information according to the verification result, and broadcasting the feedback information to the blockchain network. The computer readable storage medium according to claim 18, wherein the user identity information is encrypted user identity information obtained by encrypting user identity data using a predetermined first encryption rule. The computer readable storage medium of claim 18, wherein the verifying step comprises: Decrypting the encrypted user information according to the predetermined first decryption rule to obtain the user identity information plaintext as the user identity information to be verified, the user identity information to be verified includes the user identifier information and the identity of the user to be verified information; And searching for the encryption standard user identity feature information corresponding to the user identifier information, according to the mapping relationship between the user identifier information in the user identity information to be verified and the predetermined user identifier information and the standard user identity feature information; Decrypting the encrypted standard user identity feature information according to a predetermined second decryption rule to obtain standard user identity feature information; And verifying the identity information of the user to be verified according to the standard user identity characteristic information; When it is determined that the to-be-verified user identity feature information is the same as the standard user identity feature information, the output verification result is successful verification; When it is determined that the to-be-verified user identity feature information is different from the standard user identity feature information, the verification result is a verification failure.

Images