Disclosure of Invention
In view of the defects in the prior art, an object of the present invention is to provide a method and a system for processing student identity information in a blockchain network, so as to solve the problems in the background art.
The invention is realized in such a way that a method for processing student identity information in a blockchain network comprises the following steps:
acquiring a corresponding identity information block according to target user basic information, wherein the target user basic information comprises a name, the last four digits of an identity card number and school information, and student identity information is recorded in the identity information block;
calling a generation management node of each identity information block, verifying the real information of the generation management node, reserving the identity information blocks passing the verification, and allowing the real information of the generation management node corresponding to the identity information blocks passing the verification to pass the credit authorization of a registration authentication mechanism;
sending a block information calling request to a generation management node, wherein the block information calling request comprises real information of the sending node and basic information of a target user, so that the generation management node verifies the real information of the sending node;
receiving a calling secret key sent by a generation management node, calling student identity information in an identity information block according to the calling secret key, integrating all the called student identity information to generate a target block, encrypting the target block, and adding the target block into a block chain network, wherein the four digits after the name and the identity card number in the target block and school information are not encrypted;
receiving a student identity information updating instruction, wherein the student identity information updating instruction comprises updating content, calling student identity information in a target block, generating an updating target block according to the student identity information and the updating content, and covering the target block by the updating target block.
As a further scheme of the invention: the step of verifying the real information of the generation management node and reserving the identity information block passing the verification specifically comprises:
calling real information which is automatically bound by the generation management node, wherein the real information is a school institution name, judging whether the real information belongs to school information, and if not, verifying the real information not to pass; if yes, executing the next step;
judging whether the called real information is subjected to credit authorization of a registration authentication mechanism, wherein the registration authentication mechanism is used for performing credit authorization on the real information bound to the nodes in the block chain;
and when the real information is authenticated by credit authorization, the verification is passed, otherwise, the verification is not passed, and the identity information block passing the verification is reserved.
As a further scheme of the invention: the step of generating the target block after integrating all the called student identity information specifically comprises the following steps:
classifying all the called student identity information according to respective generation management nodes;
calling the generation time of the identity information block corresponding to each student identity information, and marking the generation time on each student identity information;
and reserving the student identity information with the latest generation time in each class, and integrating the reserved student identity information to generate a target block, wherein the target block records the learning information of each stage of the student.
As a further scheme of the invention: the method also comprises the step of authenticating the information in the target block, and the specific steps are as follows:
sending the information and the secret key in the target block to a generation management node passing the verification;
and receiving authentication passing information of the generated management node, and recording real information corresponding to the node passing the authentication in the target block.
As a further scheme of the invention: and when the generation management node receives the block information calling request, verifying the real information of the sending node of the block information calling request and the basic information of the target user, and sending the calling secret key after the verification is passed.
Another object of the present invention is to provide a student identity information processing system in a blockchain network, the system comprising:
the identity information block acquisition module is used for acquiring a corresponding identity information block according to basic information of a target user, wherein the basic information of the target user comprises a name, the last four digits of an identity card number and school information, and student identity information is recorded in the identity information block;
the identity information block screening module is used for calling the generation management node of each identity information block, verifying the real information of the generation management node, reserving the identity information blocks which pass the verification, and authenticating the real information of the generation management node corresponding to the identity information blocks which pass the verification through the trust of the registration authentication mechanism;
the system comprises a calling request sending module, a generating management node and a sending module, wherein the calling request sending module is used for sending a block information calling request to the generating management node, and the block information calling request comprises real information of the sending node and basic information of a target user so that the generating management node verifies the real information of the sending node;
the target block generation module is used for receiving the calling secret key sent by the generation management node, calling the student identity information in the identity information block according to the calling secret key, integrating all the called student identity information to generate a target block, encrypting the target block and adding the target block into the block chain network, wherein the last four digits of the name, the identity card number and the school information in the target block are not encrypted;
the identity information updating module receives a student identity information updating instruction, the student identity information updating instruction comprises updating content, the student identity information in the target block is called, the updating target block is generated according to the student identity information and the updating content, and the target block is covered by the updating target block.
As a further scheme of the invention: the identity information block screening module comprises:
the real information first judgment unit is used for calling the real information which is automatically bound by the generation management node, the real information is a school institution name, whether the real information belongs to school information or not is judged, and if not, verification is not passed; if yes, executing the next step;
the second real information judgment unit is used for judging whether the called real information is subjected to credit authorization of a registration authentication mechanism, and the registration authentication mechanism is used for performing credit authorization on the real information bound to the nodes in the block chain;
and the identity information block retaining unit is used for passing the verification when the real information is authenticated by credit authorization, or retaining the identity information block passing the verification if the verification is not passed.
As a further scheme of the invention: the target block generation module includes:
the identity information classification unit is used for classifying all the called student identity information according to respective generation management nodes;
the generating time marking unit is used for calling the generating time of the identity information block corresponding to each student identity information and marking the generating time on each student identity information;
and the target block generation unit is used for reserving the student identity information with the latest generation time in each class, integrating the reserved student identity information and then generating a target block, wherein the target block records the learning information of each stage of the student.
As a further scheme of the invention: the system also comprises an information authentication module, wherein the information authentication module specifically comprises:
the information key sending unit is used for sending the information and the key in the target block to the generation management node passing the verification;
and the authentication recording unit is used for receiving the authentication passing information of the generation management node and recording the real information corresponding to the authenticated node in the target block.
As a further scheme of the invention: the system also comprises a verification module, when the generation management node receives the block information calling request, the verification module verifies the real information of the sending node of the block information calling request and the basic information of the target user, and sends the calling secret key after the verification is passed.
Compared with the prior art, the invention has the beneficial effects that:
in the invention, the student identity information is stored in the identity information block of the block chain network, and the block chain has the characteristics of decentralization, tamper resistance and the like, so that the authenticity of the information in the identity information block can be ensured; in addition, the generation management node of the identity information block is bound with real information, and the real information needs to be verified, so that the reliability of the real information is ensured.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more clear, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
Specific implementations of the present invention are described in detail below with reference to specific embodiments.
As shown in fig. 1, an embodiment of the present invention provides a method for processing student identity information in a blockchain network, where the method includes the following steps:
s100, acquiring a corresponding identity information block according to target user basic information, wherein the target user basic information comprises a name, the last four digits of an identity card number and school information, and student identity information is recorded in the identity information block;
s200, calling a generation management node of each identity information block, verifying the real information of the generation management node, reserving the identity information blocks passing the verification, and allowing the real information of the generation management node corresponding to the identity information blocks passing the verification to pass the credit authorization of a registration authentication mechanism;
s300, sending a block information calling request to the generation management node, wherein the block information calling request comprises real information of the sending node and basic information of a target user, so that the generation management node verifies the real information of the sending node;
s400, receiving a calling secret key sent by a generation management node, calling student identity information in an identity information block according to the calling secret key, integrating all the called student identity information to generate a target block, encrypting the target block, and adding the target block into a block chain network, wherein the four digits of the name, the identity card number and school information in the target block are not encrypted;
s600, receiving a student identity information updating instruction, wherein the student identity information updating instruction comprises updating content, calling the student identity information in the target block, generating an updating target block according to the student identity information and the updating content, and covering the target block by the updating target block.
It should be noted that, the current student file management adopts a mode of storing paper files in a centralized manner, when students enter another school from a school graduation, the paper files need to be sent from the file management center of one school to the file management center of another school, which is very inconvenient.
In the embodiment of the invention, student identity information is stored in an identity information block of a block chain network, the block chain has the characteristics of decentralization, tampering resistance and the like, and can ensure the authenticity of information in the identity information block, when a student enters university from high school, and the university needs to acquire the identity information of the student, basic information of a target user, namely the basic information of the student, is input, a corresponding identity information block is acquired according to the basic information of the target user, then a generation management node of each identity information block is automatically called, the true information of the generation management node is verified, the identity information block passing verification is reserved, it needs to be stated that the identity of each node on the block chain can be anonymous, the node in the embodiment of the invention needs to bind true information and verify the true information, the node is easy to understand, the student identity information in the identity information block is generated by a school institution, and the true information is the name of the institution; in addition, in order to avoid information leakage, the student identity information in the identity information block is encrypted, but the four digits after the name and the identity card number in the student identity information and the school information are not encrypted, so that the corresponding identity information block can be conveniently obtained through basic information matching of a target user; after the identity information block passing verification is reserved, a block information calling request is required to be sent to the generation management node, the block information calling request comprises real information of a sending node and basic information of a target user, when the generation management node receives the block information calling request, the real information of the sending node of the block information calling request and the basic information of the target user are verified, after the verification is passed, a calling secret key is sent, after the sending node receives the calling secret key, student identity information in the identity information block is called according to the calling secret key, all the called student identity information is integrated to generate the target block, the target block is encrypted and then added into a block chain network, and therefore the university node can automatically obtain reliable student identity information. In addition, when the student identity information needs to be updated, a student identity information updating instruction is input, the student identity information in the target block is automatically called, the updated target block is generated according to the student identity information and the updating content, the updated target block covers the target block, and the target block cannot be modified due to the fact that the block chain cannot be tampered.
As shown in fig. 2, as a preferred embodiment of the present invention, the step of verifying the real information of the generated management node and retaining the identity information block that passes the verification specifically includes:
s201, calling real information which is automatically bound by the generation management node, wherein the real information is a school institution name, judging whether the real information belongs to school information, and if not, verifying the real information not to pass; if yes, executing the next step;
s202, judging whether the called real information is subjected to credit authorization of a registration authentication mechanism, wherein the registration authentication mechanism is used for performing credit authorization on the real information bound to the nodes in the block chain;
s203, when the real information is authenticated by credit authorization, the verification is passed, otherwise, the verification is not passed, and the identity information block passing the verification is reserved.
In the embodiment of the invention, after the real information of the generated management node is obtained, whether the real information belongs to school information in the basic information of the target user is judged, and if not, the verification fails; if the real information is authenticated, judging whether the called real information is authenticated by the registration authentication mechanism, wherein the registration authentication mechanism is used for authenticating the real information bound to the nodes in the block chain, and if the real information is authenticated by the authentication, the verification is passed, otherwise, the verification is not passed.
As shown in fig. 3, as a preferred embodiment of the present invention, the step of generating the target block after integrating all the called student identity information specifically includes:
s401, classifying all the called student identity information according to respective generation management nodes;
s402, calling the generation time of the identity information block corresponding to each student identity information, and marking the generation time on each student identity information;
and S403, reserving the student identity information with the latest generation time in each class, and integrating the reserved student identity information to generate a target block, wherein the target block records the learning information of each stage of the student.
In the embodiment of the invention, due to the property that the block chain can not be tampered, when the identity information of a wrong student needs to be changed by an education institution, only a new identity information block can be generated, namely, only the information in the latest identity information block is accurate; therefore, in the embodiment of the invention, all the called student identity information is classified according to respective generation management nodes, then the generation time of the identity information block corresponding to each student identity information is called, the generation time is marked on each student identity information, only the student identity information with the latest generation time in each class is reserved, and the reserved student identity information is integrated to generate the target block.
As shown in fig. 4, as a preferred embodiment of the present invention, the method further includes authenticating information in the target block, and the specific steps include:
s501, sending the information and the secret key in the target block to a generation management node passing verification;
s502, receiving the authentication passing information of the generated management node, and recording the real information corresponding to the node passing the authentication in the target block.
In the embodiment of the invention, the target block records the learning information of each stage of the student, in order to ensure that the learning information of each stage of the student is real, the information in the target block and the corresponding secret key are sent to the generation management node which passes the verification, the generation management node corresponds to the learning institution of each stage of the student, and the learning institution sends the authentication passing information.
As shown in fig. 5, an embodiment of the present invention further provides a system for processing student identity information in a blockchain network, where the system includes:
the identity informationblock acquiring module 100 is configured to acquire a corresponding identity information block according to target user basic information, where the target user basic information includes a name, four digits after an identity card number, and school information, and student identity information is recorded in the identity information block;
the identity informationblock screening module 200 is used for calling the generation management node of each identity information block, verifying the real information of the generation management node, reserving the identity information blocks which pass the verification, and authenticating the real information of the generation management node corresponding to the identity information blocks which pass the verification through the trust of the registration authentication mechanism;
the callingrequest sending module 300 is configured to send a block information calling request to the generation management node, where the block information calling request includes actual information of the sending node and basic information of a target user, so that the generation management node verifies the actual information of the sending node;
the targetblock generation module 400 is configured to receive a calling secret key sent by a generation management node, call student identity information in an identity information block according to the calling secret key, integrate all the called student identity information, generate a target block, encrypt the target block, and add the encrypted target block to a block chain network, where the last four digits of a name and an identity card number and school information in the target block are not encrypted;
the identity information updating module 600 receives a student identity information updating instruction, where the student identity information updating instruction includes an updating content, calls the student identity information in the target block, generates an updating target block according to the student identity information and the updating content, and the updating target block covers the target block.
In the embodiment of the invention, student identity information is stored in an identity information block of a block chain network, the block chain has the characteristics of decentralization, tampering resistance and the like, and can ensure the authenticity of information in the identity information block, when a student enters university from high school, and the university needs to acquire the identity information of the student, basic information of a target user, namely the basic information of the student, is input, a corresponding identity information block is acquired according to the basic information of the target user, then a generation management node of each identity information block is automatically called, the true information of the generation management node is verified, the identity information block passing verification is reserved, it needs to be stated that the identity of each node on the block chain can be anonymous, the node in the embodiment of the invention needs to bind true information and verify the true information, the node is easy to understand, the student identity information in the identity information block is generated by a school institution, and the true information is the name of the institution; in addition, in order to avoid information leakage, the student identity information in the identity information block is encrypted, but the four digits after the name and the identity card number in the student identity information and the school information are not encrypted, so that the corresponding identity information block can be conveniently obtained through basic information matching of a target user; after the identity information block passing verification is reserved, a block information calling request is required to be sent to the generation management node, the block information calling request comprises real information of a sending node and basic information of a target user, when the generation management node receives the block information calling request, the real information of the sending node of the block information calling request and the basic information of the target user are verified, after the verification is passed, a calling secret key is sent, after the sending node receives the calling secret key, student identity information in the identity information block is called according to the calling secret key, all the called student identity information is integrated to generate the target block, the target block is encrypted and then added into a block chain network, and therefore the university node can automatically obtain reliable student identity information.
As shown in fig. 6, as a preferred embodiment of the present invention, the identity informationblock screening module 200 includes:
a real information first determiningunit 201, configured to invoke real information that is bound by the generation management node, where the real information is a name of a school institution, determine whether the real information belongs to school information, and if not, verify that the real information does not pass; if yes, executing the next step;
a second realinformation determination unit 202, configured to determine whether the called real information is subjected to trust authentication by a registration authentication mechanism, where the registration authentication mechanism is configured to perform trust authentication on the real information bound to the node in the blockchain;
the identity informationblock retaining unit 203, when the real information is authenticated by the credit authorization, the verification is passed, otherwise, the verification is not passed, and the identity information block passing the verification is retained.
In the embodiment of the invention, after the real information of the generated management node is obtained, whether the real information belongs to school information in the basic information of the target user is judged, and if not, the verification is not passed; if the real information is authenticated, judging whether the called real information is authenticated by the registration authentication mechanism, wherein the registration authentication mechanism is used for authenticating the real information bound to the nodes in the block chain, and if the real information is authenticated by the authentication, the verification is passed, otherwise, the verification is not passed.
As shown in fig. 7, as a preferred embodiment of the present invention, the targetblock generation module 400 includes:
an identityinformation classification unit 401, configured to classify all the invoked student identity information according to respective generation management nodes;
a generationtime marking unit 402, configured to retrieve generation time of an identity information block corresponding to each student identity information, and mark the generation time on each student identity information;
the targetblock generation unit 403 is configured to reserve student identity information with the latest generation time in each class, and generate a target block after integrating all the reserved student identity information, where the target block records learning information of each stage of a student.
In the embodiment of the invention, due to the property that the block chain can not be tampered, when the identity information of a wrong student needs to be changed by an education institution, only a new identity information block can be generated, namely, only the information in the latest identity information block is accurate; therefore, in the embodiment of the invention, all the called student identity information is classified according to respective generation management nodes, then the generation time of the identity information block corresponding to each student identity information is called, the generation time is marked on each student identity information, only the student identity information with the latest generation time in each class is reserved, and the reserved student identity information is integrated to generate the target block.
As shown in fig. 8, as a preferred embodiment of the present invention, the system further includes aninformation authentication module 500, where theinformation authentication module 500 specifically includes:
an informationkey sending unit 501, configured to send the information and the key in the target block to a generation management node that passes verification;
theauthentication recording unit 502 is configured to receive authentication passing information of the generation management node, and record real information corresponding to the authenticated node in the target block.
The present invention has been described in detail with reference to the preferred embodiments thereof, and it should be understood that the invention is not limited thereto, but is intended to cover modifications, equivalents, and improvements within the spirit and scope of the present invention.
It should be understood that, although the steps in the flowcharts of the embodiments of the present invention are shown in sequence as indicated by the arrows, the steps are not necessarily performed in sequence as indicated by the arrows. The steps are not performed in the exact order shown and described, and may be performed in other orders, unless explicitly stated otherwise. Moreover, at least a portion of the steps in various embodiments may include multiple sub-steps or multiple stages that are not necessarily performed at the same time, but may be performed at different times, and the order of performance of the sub-steps or stages is not necessarily sequential, but may be performed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above may be implemented by a computer program, which may be stored in a non-volatile computer readable storage medium, and when executed, may include the processes of the embodiments of the methods described above. Any reference to memory, storage, database, or other medium used in the embodiments provided herein may include non-volatile and/or volatile memory, among others. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically Programmable ROM (EPROM), electrically Erasable Programmable ROM (EEPROM), or flash memory. Volatile memory can include Random Access Memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in a variety of forms such as Static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double Data Rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous Link DRAM (SLDRAM), rambus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).
Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure herein. This application is intended to cover any variations, uses, or adaptations of the disclosure following, in general, the principles of the disclosure and including such departures from the present disclosure as come within known or customary practice in the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.