CN117650943B - User verification method and device based on distributed network, equipment and medium - Google Patents

Abstract

The present disclosure provides a user verification method and device, equipment and medium based on a distributed network, and relates to a distributed storage technology and an industrial internet technology, wherein signature information and file name information of a file to be stored are extracted and analyzed to obtain a first mechanism general ID and a first data type, and user identity information; matching the user identity information in the first corresponding relation table, if so, comparing whether the second mechanism general ID is consistent with the first mechanism general ID, if so, matching the user identity information in the second corresponding relation table, if so, comparing whether the second data type is consistent with the first data type, and determining whether the user identity is verified successfully based on the obtained data type comparison result; and in response to successful verification of the user identity, the file is stored in each node in the blockchain in a distributed mode, so that effective verification of the user identity is realized, and the system security of the blockchain is improved.

Description

Translated fromChinese

基于分布式网络的用户核验方法和装置、设备和介质User verification method, device, equipment and medium based on distributed network

技术领域Technical Field

本公开涉及分布式存储技术和工业互联网技术，尤其是一种基于分布式网络的用户核验方法和装置、设备和介质。The present disclosure relates to distributed storage technology and industrial Internet technology, and in particular to a user verification method and apparatus, device and medium based on a distributed network.

背景技术Background technique

Web3.0也被称为“去中心化互联网”。它基于区块链技术，旨在通过去中心化、加密和自主控制等特性，为用户提供更加安全、开放和自由的网络环境。Web3.0 的核心思想是将互联网的控制权从中心化的机构转移到用户手中，让用户拥有更多的控制权和数据所有权。通过使用区块链技术，Web3.0可以实现去中心化应用程序（DApps）的开发和部署，这些应用程序可以在无需中心化服务器的情况下运行，从而提高了网络的安全性和可靠性。Web3.0 还包括加密货币和去中心化金融（DeFi）等领域，这些技术可以为用户提供更加安全和便捷的金融服务。总的来说，Web3.0 是一个充满潜力和挑战的领域，它将为互联网的发展带来新的机遇和可能性。Web3.0 is also known as the "decentralized Internet". It is based on blockchain technology and aims to provide users with a more secure, open and free network environment through features such as decentralization, encryption and autonomous control. The core idea of Web3.0 is to transfer the control of the Internet from centralized institutions to users, giving users more control and data ownership. By using blockchain technology, Web3.0 can realize the development and deployment of decentralized applications (DApps), which can run without centralized servers, thereby improving the security and reliability of the network. Web3.0 also includes fields such as cryptocurrency and decentralized finance (DeFi), which can provide users with more secure and convenient financial services. In general, Web3.0 is a field full of potential and challenges, which will bring new opportunities and possibilities for the development of the Internet.

在web3.0的应用中，在将文件存储于分布式网络时，需要对文件上报方用户的用户身份进行核验，以防止非法用户滥用文件存储权限、以及上报的文件不符合分布式存储要求。然而，相关技术中，尚无相关实现方案。In web3.0 applications, when storing files in a distributed network, it is necessary to verify the user identity of the file reporting user to prevent illegal users from abusing file storage permissions and reported files that do not meet distributed storage requirements. However, there is no relevant implementation solution in the relevant technology.

需要说明的是，在上述背景技术部分公开的信息仅用于加强对本公开的背景的理解，因此可以包括不构成对本领域普通技术人员已知的现有技术的信息。It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present disclosure, and therefore may include information that does not constitute the prior art known to ordinary technicians in the field.

发明内容Summary of the invention

本公开的目的在于提供一种基于分布式网络的用户核验方法和装置、设备和介质，至少在一定程度上克服由于相关技术的限制和缺陷而导致的一个或者多个问题。The purpose of the present disclosure is to provide a distributed network-based user verification method and apparatus, device and medium, which at least to some extent overcome one or more problems caused by limitations and defects of related technologies.

根据本公开的一个方面，提供一种基于分布式网络的用户核验方法，包括：According to one aspect of the present disclosure, a distributed network-based user verification method is provided, comprising:

提取上报的待存储的文件的签名信息及文件名信息，对所述文件名信息进行解析，得到第一机构通用ID及第一数据类型；Extracting the signature information and file name information of the reported file to be stored, parsing the file name information, and obtaining the first institution universal ID and the first data type;

对所述签名信息进行解析，得到用户身份信息，并将所述用户身份信息在第一对应关系表中进行匹配，若所述第一对应关系表中存在与所述用户身份信息匹配的机构通用ID，则将与所述用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID；Parse the signature information to obtain user identity information, and match the user identity information in the first correspondence table. If there is an institution universal ID matching the user identity information in the first correspondence table, extract the institution universal ID matching the user identity information and save it as the second institution universal ID;

比对所述第二机构通用ID与所述第一机构通用ID是否一致，若所述第二机构通用ID与所述第一机构通用ID比对一致，则判定用户身份信息匹配成功；Comparing the second institution's universal ID with the first institution's universal ID to see if they are consistent; if the second institution's universal ID is consistent with the first institution's universal ID, determining that the user identity information matches successfully;

若用户身份信息匹配成功，将所述用户身份信息在第二对应关系表中进行匹配，若所述第二对应关系表中存在与所述用户身份信息匹配的数据类型，则将与所述用户身份信息匹配的数据类型提取并保存为第二数据类型；If the user identity information matches successfully, the user identity information is matched in the second correspondence table, and if a data type matching the user identity information exists in the second correspondence table, the data type matching the user identity information is extracted and saved as the second data type;

比对所述第一数据类型与所述第二数据类型是否一致，得到数据类型比对结果；Comparing whether the first data type is consistent with the second data type, and obtaining a data type comparison result;

基于所述数据类型比对结果，确定所述用户身份信息对应的用户身份是否核验成功；Based on the data type comparison result, determining whether the user identity corresponding to the user identity information is successfully verified;

响应于所述用户身份核验成功，将所述文件分布式存储至区块链中的各节点中。In response to the user identity verification being successful, the file is distributed and stored in each node in the blockchain.

在本公开的一种示例性实施例中，提取所述文件的签名信息及文件名信息，对所述文件名信息进行解析，得到第一机构通用ID及第一数据类型，包括：In an exemplary embodiment of the present disclosure, the signature information and file name information of the file are extracted, the file name information is parsed, and the first institution universal ID and the first data type are obtained, including:

基于所述文件的文件格式，解析所述文件的预设预留字段中的文件字符信息，得到所述文件的签名信息；Based on the file format of the file, parsing the file character information in the preset reserved field of the file to obtain the signature information of the file;

基于预设文件名命名规则，基于预设文件名标识符对所述文件名信息进行解析，得到第一机构通用ID及第一数据类型。Based on a preset file name naming rule, the file name information is parsed based on a preset file name identifier to obtain a first institution universal ID and a first data type.

在本公开的一种示例性实施例中，还包括：In an exemplary embodiment of the present disclosure, it further includes:

若所述第一对应关系表中不存在与所述用户身份信息匹配的机构通用ID，则判定用户身份核验失败，并生成机构通用ID匹配失败信息。If there is no institution universal ID matching the user identity information in the first correspondence table, it is determined that the user identity verification has failed, and institution universal ID matching failure information is generated.

在本公开的一种示例性实施例中，还包括：In an exemplary embodiment of the present disclosure, it further includes:

若所述第二机构通用ID与所述第一机构通用ID不一致，则判定用户身份核验失败，并生成机构通用ID比对失败信息。If the second institution universal ID is inconsistent with the first institution universal ID, it is determined that the user identity verification has failed, and institution universal ID comparison failure information is generated.

在本公开的一种示例性实施例中，还包括：In an exemplary embodiment of the present disclosure, it further includes:

若所述第二对应关系表中不存在与所述用户身份信息匹配的数据类型，则判定用户身份核验失败，并生成数据类型匹配失败信息。If the data type matching the user identity information does not exist in the second correspondence table, it is determined that the user identity verification has failed, and data type matching failure information is generated.

在本公开的一种示例性实施例中，比对所述第一数据类型与所述第二数据类型是否一致，得到数据类型比对结果；基于所述数据类型比对结果，确定所述用户身份信息对应的用户身份是否核验成功，包括：In an exemplary embodiment of the present disclosure, comparing whether the first data type is consistent with the second data type to obtain a data type comparison result; and determining whether the user identity corresponding to the user identity information is successfully verified based on the data type comparison result, includes:

若所述第一数据类型与所述第二数据类型不一致，得到数据类型比对失败的数据类型比对结果，基于所述数据类型比对失败的数据类型比对结果判定用户身份核验失败，生成数据类型比对失败信息；基于所述数据类型比对失败的数据类型比对结果，确定所述用户身份核验失败；If the first data type is inconsistent with the second data type, a data type comparison result indicating a data type comparison failure is obtained, and based on the data type comparison result indicating a data type comparison failure, it is determined that the user identity verification has failed, and data type comparison failure information is generated; based on the data type comparison result indicating a data type comparison failure, it is determined that the user identity verification has failed;

若所述第一数据类型与所述第二数据类型一致，得到数据类型比对成功的数据类型比对结果，基于所述数据类型比对成功的数据类型比对结果判定用户身份核验成功，生成数据类型比对成功信息；基于所述数据类型比对成功的数据类型比对结果，确定所述用户身份核验成功；If the first data type is consistent with the second data type, a data type comparison result of successful data type comparison is obtained, based on the data type comparison result of successful data type comparison, it is determined that the user identity verification is successful, and data type comparison success information is generated; based on the data type comparison result of successful data type comparison, it is determined that the user identity verification is successful;

所述数据类型比对结果包括数据类型比对失败的数据类型比对结果或者数据类型比对成功的数据类型比对结果。The data type comparison result includes a data type comparison result in which the data type comparison fails or a data type comparison result in which the data type comparison succeeds.

在本公开的一种示例性实施例中，还包括：In an exemplary embodiment of the present disclosure, it further includes:

若所述用户身份核验失败，生成失败原因，所述失败原因包括以下至少一项：机构通用ID匹配失败信息、机构通用ID比对失败信息、数据类型匹配失败信息、数据类型比对失败信息；If the user identity verification fails, a failure reason is generated, and the failure reason includes at least one of the following: institution universal ID matching failure information, institution universal ID comparison failure information, data type matching failure information, and data type comparison failure information;

反馈用户身份核验失败的核验结果及失败原因。Feedback the verification results and reasons for failure of user identity verification.

在本公开的一个方面，提供一种基于分布式网络的用户核验装置，包括：In one aspect of the present disclosure, a user verification device based on a distributed network is provided, comprising:

基础信息提取模块，用于提取上报的待存储的文件的签名信息及文件名信息，对所述文件名信息进行解析，得到第一机构通用ID及第一数据类型；A basic information extraction module, used to extract the signature information and file name information of the reported file to be stored, parse the file name information, and obtain the first institution universal ID and the first data type;

机构通用ID匹配模块，用于对所述签名信息进行解析，得到用户身份信息，并将所述用户身份信息在第一对应关系表中进行匹配，若所述第一对应关系表中存在与所述用户身份信息匹配的机构通用ID，则将与所述用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID；An institution universal ID matching module is used to parse the signature information to obtain user identity information, and match the user identity information in the first correspondence table. If there is an institution universal ID matching the user identity information in the first correspondence table, the institution universal ID matching the user identity information is extracted and saved as a second institution universal ID;

机构通用ID比对模块，用于比对所述第二机构通用ID与所述第一机构通用ID是否一致，若所述第二机构通用ID与所述第一机构通用ID比对一致，则判定用户身份信息匹配成功；An institution universal ID comparison module, used to compare whether the second institution universal ID is consistent with the first institution universal ID. If the second institution universal ID is consistent with the first institution universal ID, it is determined that the user identity information is matched successfully;

数据类型匹配模块，用于若用户身份信息匹配成功，将所述用户身份信息在第二对应关系表中进行匹配，若所述第二对应关系表中存在与所述用户身份信息匹配的数据类型，则将与所述用户身份信息匹配的数据类型提取并保存为第二数据类型；a data type matching module, configured to, if the user identity information is successfully matched, match the user identity information in a second correspondence table, and if a data type matching the user identity information exists in the second correspondence table, extract the data type matching the user identity information and save it as a second data type;

数据类型比对模块，用于比对所述第一数据类型与所述第二数据类型是否一致，得到数据类型比对结果；A data type comparison module, used to compare whether the first data type is consistent with the second data type, and obtain a data type comparison result;

用户身份核验模块，用于基于所述数据类型比对结果，确定所述用户身份信息对应的用户身份是否核验成功；A user identity verification module, used to determine whether the user identity corresponding to the user identity information is successfully verified based on the data type comparison result;

文件存储模块，用于响应于所述用户身份核验成功，将所述文件分布式存储至区块链中的各节点中。The file storage module is used to distribute and store the file in each node in the blockchain in response to the successful verification of the user identity.

在本公开的一个方面，提供一种电子设备，包括：In one aspect of the present disclosure, there is provided an electronic device, comprising:

处理器；以及Processor; and

存储器，所述存储器上存储有计算机可读指令，所述计算机可读指令被所述处理器执行时实现根据上述任意一项所述的方法。A memory having computer-readable instructions stored thereon, wherein the computer-readable instructions, when executed by the processor, implement the method according to any one of the above items.

在本公开的一个方面，提供一种计算机可读存储介质，其上存储有计算机程序，所述计算机程序被处理器执行时实现根据上述任意一项所述的方法。In one aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the method according to any one of the above items is implemented.

本公开实施例提供了对需要分布式存储至区块链的文件的上报方用户身份进行核验的实现方案，通过提取上报的待存储的文件的签名信息及文件名信息，并对文件名信息进行解析，得到第一机构通用ID及第一数据类型，以及基于签名信息进行解析，得到用户身份信息，并将该用户身份信息在第一对应关系表中进行匹配，若第一对应关系表中存在与该用户身份信息匹配的机构通用ID，则将与该用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID；然后，比对第二机构通用ID与第一机构通用ID是否一致，若第二机构通用ID与第一机构通用ID比对一致，则判定用户身份信息匹配成功，将该用户身份信息在第二对应关系表中进行匹配，若第二对应关系表中存在与该用户身份信息匹配的数据类型，则将与该用户身份信息匹配的数据类型提取并保存为第二数据类型；之后，比对第一数据类型与第二数据类型是否一致，并根据得到的数据类型比对结果确定该用户身份信息对应的用户身份是否核验成功；响应于用户身份核验成功，将文件分布式存储至区块链中的各节点中，由此，本公开实施例能够在将文件分布式存储至区块链前对文件上报用户的用户身份进行全面核验，实现了对用户身份的有效核验，以确保文件上报用户具有对文件的分布式存储权限且上报文件的数据类型符合特定的文件分布式存储要求，以防止非法用户滥用文件存储权限、以及上报的文件不符合分布式存储要求，有助于提升区块链的系统存储性能和存储效率、系统安全性。The disclosed embodiment provides an implementation scheme for verifying the identity of the user who reports the file that needs to be distributedly stored in the blockchain, by extracting the signature information and file name information of the reported file to be stored, parsing the file name information, obtaining the first institution general ID and the first data type, and parsing based on the signature information to obtain the user identity information, and matching the user identity information in the first correspondence table. If there is an institution general ID matching the user identity information in the first correspondence table, the institution general ID matching the user identity information is extracted and saved as the second institution general ID; then, the second institution general ID is compared with the first institution general ID to see if they are consistent. If the second institution general ID is consistent with the first institution general ID, it is determined that the user identity information matches successfully, and the user identity information is matched in the second correspondence table. If there is an institution general ID matching the user identity information in the second correspondence table, the institution general ID matching the user identity information is extracted and saved as the second institution general ID. The data type that matches the user identity information is extracted and saved as a second data type; thereafter, the first data type is compared with the second data type to see if they are consistent, and based on the obtained data type comparison result, it is determined whether the user identity corresponding to the user identity information is successfully verified; in response to successful user identity verification, the file is distributedly stored in each node in the blockchain. Thus, the disclosed embodiment can perform a comprehensive verification of the user identity of the file reporting user before the file is distributedly stored in the blockchain, thereby achieving effective verification of the user identity to ensure that the file reporting user has the distributed storage permission for the file and that the data type of the reported file meets the specific file distributed storage requirements, so as to prevent illegal users from abusing the file storage permission and the reported file from not meeting the distributed storage requirements, thereby helping to improve the system storage performance, storage efficiency and system security of the blockchain.

应当理解的是，以上的一般描述和后文的细节描述仅是示例性和解释性的，并不能限制本公开。It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure.

下面通过附图和实施例，对本公开的技术方案做进一步的详细描述。The technical solution of the present disclosure is further described in detail below through the accompanying drawings and embodiments.

附图说明BRIEF DESCRIPTION OF THE DRAWINGS

构成说明书的一部分的附图描述了本公开的实施例，并且连同描述一起用于解释本公开的原理。The accompanying drawings, which constitute a part of the specification, illustrate embodiments of the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

参照附图，根据下面的详细描述，可以更加清楚地理解本公开，其中：The present disclosure may be more clearly understood from the following detailed description with reference to the accompanying drawings, in which:

图1为本公开方法一个实施例基于分布式网络的用户核验方法的流程图；FIG1 is a flow chart of a user verification method based on a distributed network according to an embodiment of the disclosed method;

图2为本公开方法一个实施例基于分布式网络的用户核验方法的判定逻辑流程图；FIG2 is a decision logic flow chart of a user verification method based on a distributed network according to an embodiment of the disclosed method;

图3为本公开方法一个实施例基于分布式网络的用户核验装置的结构框图；FIG3 is a structural block diagram of a user verification device based on a distributed network according to an embodiment of the method disclosed herein;

图4为本公开方法一个实施例的电子设备的框图。FIG. 4 is a block diagram of an electronic device according to an embodiment of the method disclosed herein.

具体实施方式Detailed ways

现在将参考附图更全面地描述示例实施例。然而，示例实施例能够以多种形式实施，且不应被理解为限于在此阐述的实施例；相反，提供这些实施例使得本公开将全面和完整，并将示例实施例的构思全面地传达给本领域的技术人员。在图中相同的附图标记表示相同或类似的部分，因而将省略对它们的重复描述。Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in many forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be comprehensive and complete and will fully convey the concepts of the example embodiments to those skilled in the art. The same reference numerals in the figures represent the same or similar parts, and thus their repeated description will be omitted.

此外，所描述的特征、结构或特性可以以任何合适的方式结合在一个或更多实施例中。在下面的描述中，提供许多具体细节从而给出对本公开的实施例的充分理解。然而，本领域技术人员将意识到，可以实践本公开的技术方案而没有所述特定细节中的一个或更多，或者可以采用其它的方法、组元、材料、装置、步骤等。在其它情况下，不详细示出或描述公知结构、方法、装置、实现、材料或者操作以避免模糊本公开的各方面。In addition, the described features, structures or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced without one or more of the specific details, or other methods, components, materials, devices, steps, etc. may be adopted. In other cases, known structures, methods, devices, implementations, materials or operations are not shown or described in detail to avoid blurring the various aspects of the present disclosure.

附图中所示的方框图仅仅是功能实体，不一定必须与物理上独立的实体相对应。即，可以采用软件形式来实现这些功能实体，或在一个或多个软件硬化的模块中实现这些功能实体或功能实体的一部分，或在不同网络和/或处理器装置和/或微控制器装置中实现这些功能实体。The block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities may be implemented in software form, or these functional entities or parts of functional entities may be implemented in one or more software hardened modules, or these functional entities may be implemented in different networks and/or processor devices and/or microcontroller devices.

工业互联网标识管理，是工业互联网网络体系的重要组成部分，是支撑工业互联网互联互通的神经中枢。传统互联网由于缺乏身份层设计，网络信任的机制主要依靠中心化机构搭建网络安全服务设施实现，这导致身份欺诈、数据窃取等问题时有发生，无法有效保证标识注册及解析等过程信息的安全性。Industrial Internet identity management is an important part of the industrial Internet network system and the nerve center that supports the interconnection of the industrial Internet. Due to the lack of identity layer design in the traditional Internet, the network trust mechanism mainly relies on centralized institutions to build network security service facilities, which leads to identity fraud, data theft and other problems from time to time, and cannot effectively guarantee the security of information in the process of identity registration and resolution.

工业互联网标识管理，包括标识许可注册、标识使用及标识保护等方面，标识管理过程中涉及众多信息安全性问题，本公开实施例可用于对工业互联网标识许可注册过程中的数据文件（以下简称为：文件）进行核验，更确切的讲，本公开实施例可以在Web3.0架构下，在将文件分布式存储至区块链之前，对文件上报方用户进行用户身份核验。在用户身份核验通过后，可以将文件存入区块链中的各节点中，以供后续标识解析、查询、管理等操作需求使用。Industrial Internet identification management includes identification license registration, identification use and identification protection. The identification management process involves many information security issues. The disclosed embodiment can be used to verify the data file (hereinafter referred to as: file) in the industrial Internet identification license registration process. More specifically, the disclosed embodiment can verify the user identity of the file reporting party before the file is distributed and stored in the blockchain under the Web3.0 architecture. After the user identity verification is passed, the file can be stored in each node in the blockchain for subsequent identification resolution, query, management and other operation needs.

图1为本公开方法一个实施例基于分布式网络的用户核验方法的流程图。本公开实施例基于分布式网络的文件名核验方法可以由文件接收方执行，在本示例的一些可选实施例中，文件接收方可以为区块链中的任一节点，本公开实施例对此不做限制。Figure 1 is a flow chart of a user verification method based on a distributed network in an embodiment of the disclosed method. The file name verification method based on a distributed network in the disclosed embodiment can be executed by the file receiver. In some optional embodiments of this example, the file receiver can be any node in the blockchain, which is not limited in the disclosed embodiment.

参考图1中所示，该实施例基于分布式网络的用户核验方法可以包括以下步骤：Referring to FIG. 1 , the user verification method based on a distributed network in this embodiment may include the following steps:

步骤S110，提取上报的待存储的文件的签名信息及文件名信息，并对该文件名信息进行解析，得到该文件中携带的第一机构通用ID（Identity Document，身份标识号）及第一数据类型。Step S110: extract the signature information and file name information of the reported file to be stored, and parse the file name information to obtain the first institution universal ID (Identity Document) and the first data type carried in the file.

本公开实施例中待存储的文件，可以是工业互联网标识的相关文件，例如工业互联网标识许可注册过程中的数据文件，或者还可以是其他文件，本公开实施例对此不做限制。The files to be stored in the embodiments of the present disclosure may be files related to the industrial Internet identity, such as data files in the industrial Internet identity license registration process, or may be other files, and the embodiments of the present disclosure do not impose any restrictions on this.

在本示例的一些可选实施例中，待存储的文件可以由文件上报方上传，该文件上报方可以为标识解析服务器。In some optional embodiments of this example, the file to be stored may be uploaded by a file reporter, and the file reporter may be an identity resolution server.

本公开实施例中，第一机构通用ID即上述文件的文件上报方的机构通用ID。每个机构通用ID为一个文件上报方的唯一识别代码。各文件上报方的机构通用ID可以为文件上报方在注册管理机构注册时，由注册管理机构基于文件上报方的用户身份信息生成与该文件上报方的身份唯一对应的机构通用ID并分配给该文件上报方。注册管理机构向各文件上报方分配机构通用ID后，可以将文件上报方的用户身份信息与机构通用ID发送给文件接收方，由文件接收方在第一对应关系表中存储各文件上报方的用户身份信息对应的机构通用ID。上述用户身份信息可以包括但不限于文件上报方的用户名、文件上报方的机构名称或者组合等等，本公开实施例对此不做限制。In the disclosed embodiment, the first institution general ID is the institution general ID of the file reporter of the above-mentioned file. Each institution general ID is a unique identification code for a file reporter. The institution general ID of each file reporter can be generated by the registration management agency based on the user identity information of the file reporter when the file reporter registers with the registration management agency. The institution general ID uniquely corresponds to the identity of the file reporter and is assigned to the file reporter. After the registration management agency assigns the institution general ID to each file reporter, the user identity information of the file reporter and the institution general ID can be sent to the file recipient, and the file recipient stores the institution general ID corresponding to the user identity information of each file reporter in the first correspondence table. The above-mentioned user identity information may include but is not limited to the user name of the file reporter, the institution name of the file reporter or a combination thereof, etc., and the disclosed embodiment does not limit this.

步骤S120，对上述签名信息进行解析，得到用户身份信息，并将该用户身份信息在第一对应关系表中进行匹配，若第一对应关系表中存在与该用户身份信息匹配的机构通用ID，说明该用户身份信息存在且有效，则将与该用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID。Step S120, parse the above-mentioned signature information to obtain user identity information, and match the user identity information in the first correspondence table. If there is an institution universal ID matching the user identity information in the first correspondence table, it means that the user identity information exists and is valid, then the institution universal ID matching the user identity information is extracted and saved as the second institution universal ID.

其中，该第一对应关系表包括预先建立的各授权用户的用户身份信息与机构通用ID之间的对应关系。其中，每个机构通用ID用于唯一标识一个文件上报方用户。The first correspondence table includes a pre-established correspondence between the user identity information of each authorized user and the institution's universal ID, wherein each institution's universal ID is used to uniquely identify a file reporting user.

否则，若第一对应关系表中不存在与该用户身份信息匹配的机构通用ID，说明该用户身份信息不存在，不执行本实施例的后续流程。Otherwise, if there is no organization universal ID matching the user identity information in the first correspondence table, it means that the user identity information does not exist, and the subsequent process of this embodiment is not executed.

步骤S130，比对第二机构通用ID与第一机构通用ID是否一致，若第二机构通用ID与第一机构通用ID比对一致，说明文件上报方的第一机构通用ID存在且正确，则判定用户身份信息匹配成功。Step S130, compare the second institution's universal ID with the first institution's universal ID to see if they are consistent. If the second institution's universal ID is consistent with the first institution's universal ID, it means that the first institution's universal ID of the file reporting party exists and is correct, and it is determined that the user identity information matches successfully.

否则，若第二机构通用ID与第一机构通用ID比对不一致，说明文件上报方的第一机构通用ID不正确或不存在，可以判定用户身份信息匹配失败，不执行本实施例的后续流程。Otherwise, if the second institution's universal ID is inconsistent with the first institution's universal ID, it means that the first institution's universal ID of the file reporter is incorrect or does not exist. It can be determined that the user identity information matching fails and the subsequent process of this embodiment will not be executed.

步骤S140，若用户身份信息匹配成功，将解析得到的上述用户身份信息在第二对应关系表中进行匹配，若第二对应关系表中存在与该用户身份信息匹配的数据类型，说明支持对该文件上报方的文件进行相应数据类型文件的分布式存储，则将与该用户身份信息匹配的数据类型提取并保存为第二数据类型。Step S140, if the user identity information matches successfully, the above-mentioned user identity information obtained by parsing will be matched in the second correspondence table. If there is a data type matching the user identity information in the second correspondence table, it means that the distributed storage of the corresponding data type file of the file reporter is supported, then the data type matching the user identity information will be extracted and saved as the second data type.

其中，第二对应关系表包括预先建立的各授权用户的用户身份信息与数据类型之间的对应关系，该第二对应关系表反映了各授权用户支持的分布式存储文件的数据类型。The second correspondence table includes a pre-established correspondence between the user identity information of each authorized user and the data type, and the second correspondence table reflects the data type of the distributed storage file supported by each authorized user.

否则，若第二对应关系表中不存在与用户身份信息匹配的数据类型，即不支持对该文件上报方的文件进行任何数据类型文件的分布式存储，不执行本实施例的后续流程。Otherwise, if the data type matching the user identity information does not exist in the second correspondence table, that is, distributed storage of files of any data type for the file reporter is not supported, the subsequent process of this embodiment is not executed.

步骤S150，比对第一数据类型与第二数据类型是否一致，得到数据类型比对结果。Step S150, comparing the first data type and the second data type to see if they are consistent, and obtaining a data type comparison result.

步骤S160，基于数据类型比对结果，确定用户身份信息对应的用户身份是否核验成功。Step S160: Based on the data type comparison result, determine whether the user identity corresponding to the user identity information is successfully verified.

在本示例的一些可选实施例中，基于数据类型比对结果，若第一数据类型与第二数据类型一致，说明文件上报方上报的文件符合其支持的数据类型，可以确定用户身份信息对应的用户身份核验成功；否则，若第一数据类型与第二数据类型不一致，说明文件上报方上报的文件不符合其支持的数据类型，可以确定用户身份信息对应的用户身份核验失败。In some optional embodiments of this example, based on the data type comparison result, if the first data type is consistent with the second data type, it means that the file reported by the file reporting party conforms to the data type it supports, and it can be determined that the user identity verification corresponding to the user identity information is successful; otherwise, if the first data type is inconsistent with the second data type, it means that the file reported by the file reporting party does not conform to the data type it supports, and it can be determined that the user identity verification corresponding to the user identity information has failed.

步骤S170，响应于用户身份核验成功，将该文件分布式存储至区块链中的各节点中。Step S170, in response to successful user identity verification, the file is distributed and stored in each node in the blockchain.

在本示例的一些可选实施例中，若用户身份核验成功，则不对该文件进行分布式存储处理，还可以选择性地反馈用户身份核验失败的核验结果及失败原因。In some optional embodiments of this example, if the user identity verification is successful, the file will not be processed through distributed storage, and the verification result and reason for the failure of the user identity verification can also be selectively fed back.

基于本公开实施例，提供了对需要分布式存储至区块链的文件的上报方用户身份进行核验的实现方案，通过提取上报的待存储的文件的签名信息及文件名信息，并对文件名信息进行解析，得到第一机构通用ID及第一数据类型，以及基于签名信息进行解析，得到用户身份信息，并将该用户身份信息在第一对应关系表中进行匹配，若第一对应关系表中存在与该用户身份信息匹配的机构通用ID，则将与该用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID；然后，比对第二机构通用ID与第一机构通用ID是否一致，若第二机构通用ID与第一机构通用ID比对一致，则判定用户身份信息匹配成功，将该用户身份信息在第二对应关系表中进行匹配，若第二对应关系表中存在与该用户身份信息匹配的数据类型，则将与该用户身份信息匹配的数据类型提取并保存为第二数据类型；之后，比对第一数据类型与第二数据类型是否一致，并根据得到的数据类型比对结果确定该用户身份信息对应的用户身份是否核验成功；响应于用户身份核验成功，将文件分布式存储至区块链中的各节点中，由此，本公开实施例能够在将文件分布式存储至区块链前对文件上报用户的用户身份进行全面核验，实现了对用户身份的有效核验，以确保文件上报用户具有对文件的分布式存储权限且上报文件的数据类型符合特定的文件分布式存储要求，以防止非法用户滥用文件存储权限、以及上报的文件不符合分布式存储要求，有助于提升区块链的系统存储性能和存储效率、系统安全性。Based on the embodiments of the present disclosure, an implementation scheme for verifying the identity of the user who reports the file that needs to be distributedly stored in the blockchain is provided, by extracting the signature information and file name information of the reported file to be stored, parsing the file name information, obtaining the first institution general ID and the first data type, and parsing based on the signature information to obtain the user identity information, and matching the user identity information in the first correspondence table. If there is an institution general ID matching the user identity information in the first correspondence table, the institution general ID matching the user identity information is extracted and saved as the second institution general ID; then, the second institution general ID is compared with the first institution general ID to see if they are consistent. If the second institution general ID is consistent with the first institution general ID, it is determined that the user identity information matches successfully, and the user identity information is matched in the second correspondence table. If there is an institution general ID matching the user identity information in the second correspondence table, the institution general ID matching the user identity information is extracted and saved as the second institution general ID. In the data type that matches the user identity information, the data type that matches the user identity information is extracted and saved as a second data type; thereafter, the first data type is compared with the second data type to see if they are consistent, and a determination is made based on the obtained data type comparison result whether the user identity corresponding to the user identity information has been successfully verified; in response to successful user identity verification, the file is distributedly stored in each node in the blockchain. Thus, the disclosed embodiment can perform a comprehensive verification of the user identity of the file reporting user before the file is distributedly stored in the blockchain, thereby achieving effective verification of the user identity to ensure that the file reporting user has the distributed storage permission for the file and that the data type of the reported file meets the specific file distributed storage requirements, thereby preventing illegal users from abusing the file storage permission and the reported file from not meeting the distributed storage requirements, thereby helping to improve the system storage performance, storage efficiency and system security of the blockchain.

图2为本公开方法一个实施例基于分布式网络的用户核验方法的判定逻辑流程图。下面，参照图2对本公开实施例中的一种基于分布式网络的用户核验方法进行进一步的说明。Fig. 2 is a decision logic flow chart of a user verification method based on a distributed network according to an embodiment of the present disclosure.

在本示例的一些可选实施例中，可以在接收到文件上报方上报的待存储的文件时，首先对该文件的文件名的规范性进行核验，以确保待存储文件的文件名符合预设存储要求和规范、以便于后续被有效查阅。若文件的文件名规范性符合预设存储要求和规范，则可以进一步通过本公开任一实施例对该文件上报放进行用户身份核验。In some optional embodiments of this example, when receiving a file to be stored reported by a file reporting party, the standardization of the file name of the file can be first verified to ensure that the file name of the file to be stored meets the preset storage requirements and specifications so as to facilitate subsequent effective reference. If the standardization of the file name meets the preset storage requirements and specifications, the user identity verification can be further performed on the file report through any embodiment of the present disclosure.

在步骤S110中，可以提取文件上报方上报的待存储的文件的签名信息及文件名信息，对该文件名信息进行解析，得到该文件中携带的第一机构通用ID及第一数据类型。In step S110, the signature information and file name information of the file to be stored reported by the file reporter may be extracted, and the file name information may be parsed to obtain the first institution universal ID and the first data type carried in the file.

在本示例的一些可选实施例中，可以基于该文件的文件格式，解析该文件中预设预留字段中的文件字符信息，得到文件的签名信息，该签名信息可以包括文件上报方的用户身份信息，还可以进一步包括其他信息，例如该文件的生成时间、上报时间等等，本公开实施例对此不做限制。In some optional embodiments of this example, based on the file format of the file, the file character information in the preset reserved field in the file can be parsed to obtain the signature information of the file. The signature information may include the user identity information of the file reporter and may further include other information, such as the generation time and reporting time of the file, etc. The embodiments of the present disclosure are not limited to this.

在一个具体示例中，可以基于文件的文件名信息的后缀名，确定该文件的文件格式，若上报的待存储的文件采用xml（Extensible Markup Language，可扩展标记语言）文件格式，由于xml文件格式包括声明部分、根元素部分、元素部分、属性部分，其中，根元素部分包括用于指示根元素定义的结构字段及可由用户进行自定义的预设预留字段。按照预设的签名信息在文件中登记的规则，可以在xml文件的根元素部分的预设预留字段中，采用文件字符信息的方式保存签名信息，以便系统可以快速读取该预设预留字段中保存的该文件的签名信息。In a specific example, the file format of the file can be determined based on the suffix of the file name information of the file. If the reported file to be stored adopts the XML (Extensible Markup Language) file format, since the XML file format includes a declaration part, a root element part, an element part, and an attribute part, wherein the root element part includes a structure field for indicating the root element definition and a preset reserved field that can be customized by the user. According to the preset rules for registering signature information in the file, the signature information can be saved in the preset reserved field of the root element part of the XML file in the form of file character information, so that the system can quickly read the signature information of the file saved in the preset reserved field.

在本示例的一些可选实施例中，可以针对文件的文件名信息，按照预设文件名命名规则，基于文件名标识符对该文件的文件名信息进行解析，得到该文件的第一机构通用ID及第一数据类型。具体的，基于预设文件名命名规则，文件名信息可以包括文件名的数据长度、文件名字符和文件名标识符。其中，文件名的数据长度为文件名包括的字符的长度。文件名字符为文件名中各字段（也称为子分段）包括的字符，文件名标识符为预先设置的、文件名中用于分隔不同字段的标识符。在具体实现中，文件名字符可以包括平台类型子分段、机构通用ID子分段、数据类型子分段和时间子分段。其中，平台类型子分段，用于记录文件上报方所属的平台类型；机构通用ID子分段，用于记录文件上报方的第一机构通用ID；数据类型子分段，用于记录文件的数据类型；时间子分段，用于记录文件的生成时间。上述文件名字符可以通过上述文件名标识符分段分隔以对文件名字符中的各子分段进行分段间隔，因此，可以通过该文件的文件名信息，分别从指定的机构通用ID子分段、数据类型子分段中，提取得到第一机构通用ID及第一数据类型。In some optional embodiments of this example, the file name information of the file can be parsed based on the file name identifier according to the preset file name naming rules to obtain the first institution general ID and the first data type of the file. Specifically, based on the preset file name naming rules, the file name information may include the data length of the file name, the file name characters and the file name identifier. Among them, the data length of the file name is the length of the characters included in the file name. The file name characters are the characters included in each field (also called sub-segment) in the file name, and the file name identifier is a pre-set identifier used to separate different fields in the file name. In a specific implementation, the file name characters may include a platform type sub-segment, an institution general ID sub-segment, a data type sub-segment and a time sub-segment. Among them, the platform type sub-segment is used to record the platform type to which the file reporter belongs; the institution general ID sub-segment is used to record the first institution general ID of the file reporter; the data type sub-segment is used to record the data type of the file; the time sub-segment is used to record the generation time of the file. The above-mentioned file name characters can be segmented and separated by the above-mentioned file name identifier to segment and separate each sub-segment in the file name characters. Therefore, the first organization universal ID and the first data type can be extracted from the specified organization universal ID sub-segment and data type sub-segment respectively through the file name information of the file.

在一个具体示例中，以某上报的待存储的文件为例，该文件为xml文件格式的文件，对该文件的根元素部分的预设预留字段进行读取，得到该文件的签名信息为甲二三，同时，基于预设文件名命名规则，对文件名信息为ROOT-111111-SST-200012311200205927.xml的文件进行解析，通过读取文件名标识符“-”分隔的机构通用ID子分段、数据类型子分段，得到该文件中携带的第一机构通用ID为111111，第一数据类型为SST（Static Sorted Table，静态排序表数据类型）。In a specific example, taking a reported file to be stored as an example, the file is in the xml file format. The preset reserved field of the root element of the file is read, and the signature information of the file is obtained as A23. At the same time, based on the preset file name naming rule, the file with the file name information ROOT-111111-SST-200012311200205927.xml is parsed, and the organization general ID sub-segment and data type sub-segment separated by the file name identifier "-" are read. The first organization general ID carried in the file is 111111, and the first data type is SST (Static Sorted Table, static sorted table data type).

在步骤S120中，首先对基于签名信息进行解析，得到用户身份信息。In step S120, the signature information is first parsed to obtain the user identity information.

在本示例的一些可选实施例中，文件的签名信息可以包括文件上报方的用户身份信息的简称或者全称，若为用户身份信息的简称，则可以基于签名信息在第三对应关系表中进行匹配，该第三对应关系表包括预先建立的各授权用户的签名信息与用户身份信息之间的对应关系，其中的用户身份信息可以同时包括用户身份信息的简称与全称。若第三对应关系表中存在与上述签名信息匹配的用户身份信息，说明存在与该签名信息匹配的用户身份信息的全称，则将与该签名信息匹配的用户身份信息提取并保存为全称的用户身份信息。否则，若在第三对应关系表中不存在与该签名信息匹配的用户身份信息，说明不存在与该签名信息匹配的用户身份信息的全称，则判定用户身份核验失败，并生成签名信息匹配失败信息。In some optional embodiments of this example, the signature information of the file may include the abbreviation or full name of the user identity information of the file reporter. If it is the abbreviation of the user identity information, it can be matched in the third correspondence table based on the signature information. The third correspondence table includes the pre-established correspondence between the signature information and the user identity information of each authorized user, wherein the user identity information may include both the abbreviation and the full name of the user identity information. If there is user identity information matching the above signature information in the third correspondence table, it means that there is a full name of the user identity information matching the signature information, and the user identity information matching the signature information is extracted and saved as the full name of the user identity information. Otherwise, if there is no user identity information matching the signature information in the third correspondence table, it means that there is no full name of the user identity information matching the signature information, and it is determined that the user identity verification fails, and signature information matching failure information is generated.

在本示例的另一些可选实施例中，文件的签名信息可以是利用公私密钥对中的私钥、以及与文件接收方预先协商的加解密算法，对文件上报方的用户身份信息的简称或者全称进行签名，得到的签名信息。其中的公私密钥对，可以由文件上报方在向文件接收方上报文件前，可以利用预设加密算法生成，该预设加密算法为不对称加密算法，该公私密钥对包括公钥和私钥，其中私钥在上述文件上报方本地保存，用来对该文件上报方的用户身份信息进行签名，得到签名信息，其中的公钥与该文件上报方的第一机构通用ID可以通过可信约定方式发送至文件接收方，文件接收方可以保持该文件上报方的第一机构通用ID与对应的公钥，以使文件接收方基于该公钥对该文件发送方后续发送的签名信息进行解密，并对解密得到的信息进行解析，得到用户身份信息。在该实施例中，文件接收方可以利用第一机构通用ID对应的公钥对文件发送方后续发送的签名信息进行解密，并对解密得到的信息进行解析，得到用户身份信息的简称或者全称，若为用户身份信息的简称，则可以基于上述实施例，基于签名信息在第三对应关系表中进行匹配。In some other optional embodiments of this example, the signature information of the file can be the signature information obtained by signing the abbreviation or full name of the user identity information of the file reporter using the private key in the public-private key pair and the encryption and decryption algorithm pre-negotiated with the file receiver. The public-private key pair can be generated by the file reporter using a preset encryption algorithm before reporting the file to the file receiver. The preset encryption algorithm is an asymmetric encryption algorithm. The public-private key pair includes a public key and a private key. The private key is stored locally by the file reporter and is used to sign the user identity information of the file reporter to obtain the signature information. The public key and the first institution universal ID of the file reporter can be sent to the file receiver through a trusted agreement. The file receiver can keep the first institution universal ID of the file reporter and the corresponding public key, so that the file receiver can decrypt the signature information subsequently sent by the file sender based on the public key, and parse the decrypted information to obtain the user identity information. In this embodiment, the file recipient can use the public key corresponding to the first institution's universal ID to decrypt the signature information subsequently sent by the file sender, and parse the decrypted information to obtain the abbreviation or full name of the user identity information. If it is the abbreviation of the user identity information, it can be matched in the third correspondence table based on the signature information based on the above embodiment.

在一个具体示例中，以上述待存储的文件为例，该文件为xml文件格式的文件，对该文件的根元素部分的预设预留字段进行读取，得到该文件的签名信息为甲二三，由于甲二三为用户身份信息的简称，可以将签名信息甲二三在第三对应关系表中进行匹配，得到与该签名信息甲二三匹配的用户身份信息的全称A国信息甲B二三，说明甲二三的用户身份信息的全称为A国信息甲B二三，则将与A国信息甲B二三提取并保存为用户身份信息。In a specific example, taking the above-mentioned file to be stored as an example, the file is a file in the xml file format, and the preset reserved field of the root element part of the file is read, and the signature information of the file is obtained as A23. Since A23 is the abbreviation of the user identity information, the signature information A23 can be matched in the third correspondence table to obtain the full name of the user identity information matching the signature information A23, which is A country information AB23, indicating that the full name of the user identity information of A23 is A country information AB23, and the A country information AB23 will be extracted and saved as the user identity information.

在本示例的一些可选实施例中，步骤S120还包括：将解析得到的上述用户身份信息在第一对应关系表中进行匹配，该第一对应关系表包括至少一个用户身份信息与机构通用ID之间的对应关系。若第一对应关系表中存在与该用户身份信息匹配的机构通用ID，说明该用户身份信息对应的用户为已进行身份注册的用户，该用户身份信息存在且有效，则将与该用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID；否则，若第一对应关系表中不存在与用户身份信息匹配的机构通用ID，说明该用户身份信息不存在，该用户身份信息对应的用户并非已进行身份注册的用户，则判定用户身份核验失败，并生成机构通用ID匹配失败信息。在具体实现中，第一对应关系表可以为基于预设的文件命名规则的用户身份信息与机构通用ID的单一对应关系的集合。In some optional embodiments of this example, step S120 also includes: matching the above-mentioned user identity information obtained by parsing in a first correspondence table, and the first correspondence table includes at least one correspondence between user identity information and an institution's universal ID. If there is an institution's universal ID matching the user identity information in the first correspondence table, it means that the user corresponding to the user identity information is a user who has registered for identity, and the user identity information exists and is valid, then the institution's universal ID matching the user identity information is extracted and saved as the second institution's universal ID; otherwise, if there is no institution's universal ID matching the user identity information in the first correspondence table, it means that the user identity information does not exist, and the user corresponding to the user identity information is not a user who has registered for identity, then it is determined that the user identity verification has failed, and an institution's universal ID matching failure information is generated. In a specific implementation, the first correspondence table can be a collection of single correspondences between user identity information and institution's universal ID based on a preset file naming rule.

在一个具体示例中，以上述待存储的文件为例，将A国信息甲B二三作为用户身份信息在第一对应关系表中进行匹配，若第一对应关系表中存在与A国信息甲B二三匹配的机构通用ID，例如为111111，说明A国信息甲B二三为已进行身份注册的用户，则将与A国信息甲B二三匹配的111111提取并保存为第二机构通用ID。In a specific example, taking the above-mentioned file to be stored as an example, country A's information A B 2 3 is matched as user identity information in the first correspondence table. If there is an institution general ID matching country A's information A B 2 3 in the first correspondence table, for example 111111, it means that country A's information A B 2 3 is a user who has registered his identity, then 111111 matching country A's information A B 2 3 is extracted and saved as the second institution general ID.

否则，以上述待存储的文件为例，将A国信息甲B二三作为用户身份信息在第一对应关系表中进行匹配，若第一对应关系表中不存在与A国信息甲B二三匹配的机构通用ID，说明A国信息甲B二三并非已进行身份注册的用户，则判定用户身份核验失败，并生成机构通用ID匹配失败信息。Otherwise, taking the above-mentioned file to be stored as an example, country A's information A, B, 2, and 3 are matched as user identity information in the first correspondence table. If there is no institution universal ID matching country A's information A, B, 2, and 3 in the first correspondence table, it means that country A's information A, B, 2, and 3 is not a user who has registered his identity, and the user identity verification is determined to have failed, and institution universal ID matching failure information is generated.

在本示例的一些可选实施例中，步骤S130可以包括：比对第二机构通用ID与第一机构通用ID是否一致，若第二机构通用ID与第一机构通用ID比对一致，说明第二机构通用ID对应的用户身份信息为已进行身份注册的用户，文件上报方的第一机构通用ID存在且正确，则判定A国信息甲B二三的用户身份信息匹配成功。In some optional embodiments of this example, step S130 may include: comparing whether the second institution's universal ID is consistent with the first institution's universal ID. If the second institution's universal ID is consistent with the first institution's universal ID, it means that the user identity information corresponding to the second institution's universal ID is a user who has registered his identity, and the first institution's universal ID of the file reporting party exists and is correct, then it is determined that the user identity information of country A information A, B, 2 and 3 matches successfully.

在一个具体示例中，以上述待存储的文件为例，将A国信息甲B二三作为用户身份信息在第一对应关系表中进行匹配，若匹配的第二机构通用ID为111111，将第二机构通用ID为111111与第一机构通用ID为111111进行比对，由于第二机构通用ID与第一机构通用ID比对一致，说明第二机构通用ID为111111对应的A国信息甲B二三为已进行身份注册的用户，则判定A国信息甲B二三的用户身份信息匹配成功。In a specific example, taking the above-mentioned file to be stored as an example, country A information A B 23 is matched as user identity information in the first correspondence table. If the matched second institution general ID is 111111, the second institution general ID 111111 is compared with the first institution general ID 111111. Since the second institution general ID is consistent with the first institution general ID, it means that the country A information A B 23 corresponding to the second institution general ID 111111 is a user who has registered his identity, and it is determined that the user identity information of country A information A B 23 matches successfully.

在另一个具体示例中，以上述待存储的文件为例，将A国信息甲B二三作为用户身份信息在第一对应关系表中进行匹配，若匹配的第二机构通用ID为222222，将第二机构通用ID为222222与第一机构通用ID为111111进行比对，由于第二机构通用ID与第一机构通用ID比对不一致，说明第二机构通用ID为111111对应的A国信息甲B二三并未进行身份注册的用户，则判定A国信息甲B二三的用户身份核验失败，并生成机构通用ID比对失败信息。In another specific example, taking the above-mentioned file to be stored as an example, country A information A B 23 is matched as user identity information in the first correspondence table. If the matched second institution general ID is 222222, the second institution general ID 222222 is compared with the first institution general ID 111111. Since the second institution general ID is inconsistent with the first institution general ID, it means that the user with country A information A B 23 corresponding to the second institution general ID 111111 has not registered his identity. Therefore, it is determined that the user identity verification of country A information A B 23 has failed, and the institution general ID comparison failure information is generated.

在用户身份信息匹配成功后，进行步骤S140，首先将解析得到的上述用户身份信息在第二对应关系表中进行匹配，若第二对应关系表中存在与该用户身份信息匹配的数据类型，说明支持对该文件上报方的文件进行相应数据类型文件的分布式存储，则将与该用户身份信息匹配的数据类型提取并保存为第二数据类型。若第二对应关系表中不存在与用户身份信息匹配的数据类型，说明不支持对该文件上报方的文件进行任何数据类型文件的分布式存储，则判定用户身份核验失败，并生成数据类型匹配失败信息。第二对应关系表包括用户身份信息与数据类型之间的对应关系，其中，该第二对应关系表中，一个用户身份信息可以对应一个数据类型，也可以对应多个数据类型，本公开实施例对此不做限制。After the user identity information is matched successfully, step S140 is performed. First, the above-mentioned user identity information obtained by parsing is matched in the second correspondence table. If there is a data type matching the user identity information in the second correspondence table, it means that the distributed storage of the corresponding data type file of the file reporting party is supported, and the data type matching the user identity information is extracted and saved as the second data type. If there is no data type matching the user identity information in the second correspondence table, it means that the distributed storage of any data type file of the file reporting party is not supported, and the user identity verification is determined to have failed, and data type matching failure information is generated. The second correspondence table includes the correspondence between the user identity information and the data type, wherein in the second correspondence table, one user identity information can correspond to one data type or multiple data types, and the embodiments of the present disclosure do not limit this.

在一个具体示例中，以上述待存储的文件为例，在A国信息甲B二三的用户身份信息匹配成功后，将A国信息甲B二三在第二对应关系表中进行匹配，若第二对应关系表中存在与A国信息甲B二三匹配的数据类型为SST，说明支持对该文件上报方的文件进行SST数据类型的文件的分布式存储，则将与A国信息甲B二三匹配的SST提取并保存为第二数据类型。In a specific example, taking the above-mentioned file to be stored as an example, after the user identity information of country A information A, B, and 3 is matched successfully, country A information A, B, and 3 are matched in the second correspondence table. If the data type that matches country A information A, B, and 3 in the second correspondence table is SST, it means that the distributed storage of files of the SST data type is supported for the file reporter's file, and the SST that matches country A information A, B, and 3 is extracted and saved as the second data type.

在另一个具体示例中，以上述待存储的文件为例，在A国信息甲B二三的用户身份信息匹配成功后，将A国信息甲B二三在第二对应关系表中进行匹配，若第二对应关系表中存在与A国信息甲B二三匹配的数据类型为SST、VSD（VirtualServer Data，虚拟服务数据类型），说明支持对该文件上报方的文件进行SST、VSD数据类型的文件的分布式存储，则将与A国信息甲B二三匹配的SST、VSD提取并保存为第二数据类型。In another specific example, taking the above-mentioned file to be stored as an example, after the user identity information of country A information A, B, and 3 is matched successfully, the country A information A, B, and 3 are matched in the second correspondence table. If the data types matching the country A information A, B, and 3 in the second correspondence table are SST and VSD (Virtual Server Data, virtual service data type), it means that the distributed storage of files of SST and VSD data types for the file reporter is supported, then the SST and VSD matching the country A information A, B, and 3 are extracted and saved as the second data type.

否则，若第二对应关系表中不存在与A国信息甲B二三匹配的数据类型，说明不支持对该文件上报方的文件进行任何数据类型文件的分布式存储，则判定用户身份核验失败，并生成数据类型匹配失败信息。Otherwise, if there is no data type matching the information A, B, 2, and 3 in country A's second correspondence table, indicating that distributed storage of files of any data type for the file reporter is not supported, the user identity verification is determined to have failed, and data type matching failure information is generated.

在本示例的一些可选实施例中，步骤S150可以包括，比对第一数据类型与第二数据类型是否一致，得到数据类型比对结果。In some optional embodiments of this example, step S150 may include comparing whether the first data type is consistent with the second data type to obtain a data type comparison result.

在一个具体示例中，以上述待存储的文件为例，若第一数据类型SST与第二数据类型SST比对一致，说明文件上报方上报的文件符合其支持的数据类型，得到数据类型比对成功的数据类型比对结果，基于数据类型比对成功的数据类型比对结果判定用户身份核验成功，生成数据类型比对成功信息。In a specific example, taking the above-mentioned file to be stored as an example, if the first data type SST is consistent with the second data type SST, it means that the file reported by the file reporting party conforms to the data type it supports, and a data type comparison result of successful data type comparison is obtained. Based on the data type comparison result of successful data type comparison, it is determined that the user identity verification is successful, and data type comparison success information is generated.

在另一个具体示例中，以上述待存储的文件为例，若第一数据类型SST与第二数据类型VSD比对不一致，说明文件上报方上报的文件不符合其支持的数据类型，得到数据类型比对失败的数据类型比对结果，基于数据类型比对失败的数据类型比对结果确定用户身份核验失败，生成数据类型比对失败信息。In another specific example, taking the above-mentioned file to be stored as an example, if the first data type SST is inconsistent with the second data type VSD, it means that the file reported by the file reporting party does not conform to the data type it supports, and a data type comparison result of data type comparison failure is obtained. Based on the data type comparison result of data type comparison failure, it is determined that the user identity verification has failed, and data type comparison failure information is generated.

在另一个具体示例中，以上述待存储的文件为例，若将第一数据类型SST与第二数据类型SST、VSD进行比对，由于第二数据类型SST、VSD中含有与第一数据类型SST比对一致的数据类型SST，判定对比一致，说明文件上报方上报的文件符合其支持的数据类型，得到数据类型比对成功的数据类型比对结果，基于数据类型比对成功的数据类型比对结果确定用户身份核验成功，生成数据类型比对成功信息。In another specific example, taking the above-mentioned file to be stored as an example, if the first data type SST is compared with the second data type SST and VSD, since the second data type SST and VSD contain a data type SST that is consistent with the first data type SST, the comparison is determined to be consistent, indicating that the file reported by the file reporting party conforms to the data type it supports, and a data type comparison result of successful data type comparison is obtained. Based on the data type comparison result of successful data type comparison, it is determined that the user identity verification is successful, and data type comparison success information is generated.

在步骤S160中，可以基于数据类型比对结果，确定用户身份信息对应的用户身份是否核验成功。若用户身份核验失败，可以生成失败原因，该失败原因可以包括以下至少一项：机构通用ID匹配失败信息、机构通用ID比对失败信息、数据类型匹配失败信息、数据类型比对失败信息；反馈用户身份核验失败的核验结果及失败原因等等。In step S160, it can be determined whether the user identity corresponding to the user identity information is successfully verified based on the data type comparison result. If the user identity verification fails, a failure reason can be generated, and the failure reason can include at least one of the following: institution universal ID matching failure information, institution universal ID comparison failure information, data type matching failure information, data type comparison failure information; feedback of the verification result and failure reason of the user identity verification failure, etc.

在本示例的一些可选实施例中，基于签名信息在第三对应关系表中进行匹配，若在第三对应关系表中不存在与签名信息匹配的用户身份信息，则确定用户身份核验失败，直接结束用户身份核验流程并反馈用户身份核验失败的核验结果及签名信息匹配失败信息的失败原因，失败原因例如“签名信息匹配失败”。In some optional embodiments of this example, a match is performed in the third correspondence table based on the signature information. If the user identity information that matches the signature information does not exist in the third correspondence table, it is determined that the user identity verification has failed, and the user identity verification process is directly terminated and the verification result of the user identity verification failure and the failure reason for the signature information matching failure are fed back, such as "signature information matching failure".

在本示例的一些可选实施例中，将用户身份信息在第一对应关系表中进行匹配，若第一对应关系表中不存在与用户身份信息匹配的机构通用ID，则确定用户身份核验失败，直接结束用户身份核验流程并反馈用户身份核验失败的核验结果及机构通用ID匹配失败信息的失败原因，失败原因例如“机构通用ID匹配失败”。In some optional embodiments of this example, the user identity information is matched in the first correspondence table. If there is no institution universal ID matching the user identity information in the first correspondence table, it is determined that the user identity verification has failed, and the user identity verification process is directly terminated and the verification result of the user identity verification failure and the reason for the failure of the institution universal ID matching failure information are fed back, such as "institution universal ID matching failure".

在本示例的一些可选实施例中，比对第二机构通用ID与第一机构通用ID是否一致，若第二机构通用ID与第一机构通用ID比对不一致，则确定用户身份核验失败，直接结束用户身份核验流程并反馈用户身份核验失败的核验结果及机构通用ID比对失败信息的失败原因，失败原因例如“机构通用ID比对失败”。In some optional embodiments of this example, the second institution's universal ID is compared with the first institution's universal ID to see if they are consistent. If the second institution's universal ID is inconsistent with the first institution's universal ID, it is determined that the user identity verification has failed, and the user identity verification process is directly terminated and the verification result of the user identity verification failure and the reason for the failure of the institution's universal ID comparison are fed back, such as "institution universal ID comparison failed."

在本示例的一些可选实施例中，将用户身份信息在第二对应关系表中进行匹配，若第二对应关系表中不存在与用户身份信息匹配的数据类型，则确定用户身份核验失败，直接结束用户身份核验流程并反馈用户身份核验失败的核验结果及数据类型匹配失败信息的失败原因，失败原因例如“数据类型匹配失败”。In some optional embodiments of this example, the user identity information is matched in the second correspondence table. If there is no data type matching the user identity information in the second correspondence table, it is determined that the user identity verification has failed, and the user identity verification process is directly terminated and the verification result of the user identity verification failure and the reason for the failure of the data type matching failure are fed back, such as "data type matching failure".

在本示例的一些可选实施例中，比对第一数据类型与第二数据类型是否一致，若第一数据类型与第二数据类型比对不一致，则确定用户身份核验失败，直接结束用户身份核验流程并反馈用户身份核验失败的核验结果及数据类型比对失败信息的失败原因，失败原因例如“数据类型比对失败”。In some optional embodiments of this example, the first data type is compared to the second data type for consistency. If the first data type is inconsistent with the second data type, it is determined that the user identity verification has failed, and the user identity verification process is directly terminated and the verification result of the user identity verification failure and the reason for the failure of the data type comparison are fed back, such as "data type comparison failed".

在本公开实施例中，只有上述所有关于用户身份核验的匹配及比对结果均为核验成功（即通过核验），才确定文件上报方的用户身份核验成功；否则，若有任一项关于用户身份核验的匹配及比对结果为核验失败（即未通过核验），则确定文件的文件上报方的用户身份核验失败。In the embodiment of the present disclosure, only when all the above-mentioned matching and comparison results regarding the user identity verification are successful (i.e., passed the verification), is it determined that the user identity verification of the file reporting party is successful; otherwise, if any of the matching and comparison results regarding the user identity verification is a verification failure (i.e., failed the verification), it is determined that the user identity verification of the file reporting party has failed.

在本示例的实施例中，在完成对分布式存储的文件的上报用户的用户身份核验后，还可以分别对文件的加解密进行核验、文件格式进行核验、文件路径进行核验、入库核验，完成对分布式存储的文件的核验。对文件进行加解密核验，可是实现对用户公钥信息对内容中的签名信息的核验；通过后进行文件格式的核验，可以通过使用对应类型文件的XSD（XML Schema Definition，可扩展标记语言架构）校验文件内容的属性是否合规实现对文件格式的核验，通过进行文件路径核验，核验文件上报路径是否合规；通过后进行入库核验，可以核验数据的有效性、存在性等存储校验。只有在用户身份核验、文件格式、文件路径、入库核验都通过后，再将文件分布式存储至区块链中的各节点中，从而实现对分布式存储文件的全面核验，进一步提升文件存储的安全性和规范性。In the embodiment of this example, after completing the user identity verification of the reporting user of the distributed storage file, the encryption and decryption of the file, the file format, the file path, and the storage verification can be performed to complete the verification of the distributed storage file. The encryption and decryption verification of the file can realize the verification of the signature information in the content of the user's public key information; after passing the verification, the file format can be verified by using the XSD (XML Schema Definition, Extensible Markup Language Architecture) of the corresponding type of file to verify whether the attributes of the file content are compliant to realize the verification of the file format, and by verifying the file path, verify whether the file reporting path is compliant; after passing the storage verification, the storage verification can be performed to verify the validity and existence of the data. Only after the user identity verification, file format, file path, and storage verification are passed, the file is distributed and stored in each node in the blockchain, thereby realizing a comprehensive verification of the distributed storage file, further improving the security and standardization of file storage.

在步骤S170中，可以响应于用户身份核验成功，将文件分布式存储至区块链中的各节点中。In step S170, in response to successful user identity verification, the file can be distributed and stored in each node in the blockchain.

需要说明的是，尽管在附图中以特定顺序描述了本公开中方法的各个步骤，但是，这并非要求或者暗示必须按照该特定顺序来执行这些步骤，或是必须执行全部所示的步骤才能实现期望的结果。附加的或备选的，可以省略某些步骤，将多个步骤合并为一个步骤执行，以及/或者将一个步骤分解为多个步骤执行等。It should be noted that, although the steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and/or one step may be decomposed into multiple steps, etc.

此外，在本示例实施例中，还提供了一种基于分布式网络的用户核验装置。图3为本公开方法一个实施例基于分布式网络的用户核验装置的结构框图。参照图3所示，该实施例基于分布式网络的用户核验装置300可以包括：基础信息提取模块310、机构通用ID匹配模块320、机构通用ID比对模块330、数据类型匹配模块340、数据类型比对模块350、用户身份核验模块360以及文件存储模块370。其中：In addition, in this example embodiment, a user verification device based on a distributed network is also provided. FIG3 is a structural block diagram of a user verification device based on a distributed network in an embodiment of the disclosed method. Referring to FIG3 , the user verification device 300 based on a distributed network in this embodiment may include: a basic information extraction module 310, an institution universal ID matching module 320, an institution universal ID comparison module 330, a data type matching module 340, a data type comparison module 350, a user identity verification module 360, and a file storage module 370. Among them:

基础信息提取模块310，用于提取上报的待存储的文件的签名信息及文件名信息，对所述文件名信息进行解析，得到所述文件的第一机构通用ID及第一数据类型；The basic information extraction module 310 is used to extract the signature information and file name information of the reported file to be stored, parse the file name information, and obtain the first institution universal ID and the first data type of the file;

机构通用ID匹配模块320，用于对所述签名信息进行解析，得到用户身份信息，并将所述用户身份信息在第一对应关系表中进行匹配，所述第一对应关系表包括用户身份信息与机构通用ID之间的对应关系，若所述第一对应关系表中存在与所述用户身份信息匹配的机构通用ID，则将与所述用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID；An institution universal ID matching module 320 is used to parse the signature information to obtain user identity information, and match the user identity information in a first correspondence table, wherein the first correspondence table includes a correspondence between the user identity information and the institution universal ID. If there is an institution universal ID matching the user identity information in the first correspondence table, the institution universal ID matching the user identity information is extracted and saved as a second institution universal ID;

机构通用ID比对模块330，用于比对所述第二机构通用ID与所述第一机构通用ID是否一致，若所述第二机构通用ID与所述第一机构通用ID比对一致，则判定用户身份信息匹配成功；An institution universal ID comparison module 330 is used to compare whether the second institution universal ID is consistent with the first institution universal ID. If the second institution universal ID is consistent with the first institution universal ID, it is determined that the user identity information is matched successfully;

数据类型匹配模块340，用于若用户身份信息匹配成功，将所述用户身份信息在第二对应关系表中进行匹配，所述第二对应关系表包括用户身份信息与数据类型之间的对应关系，若所述第二对应关系表中存在与所述用户身份信息匹配的数据类型，则将与所述用户身份信息匹配的数据类型提取并保存为第二数据类型；A data type matching module 340 is configured to match the user identity information in a second correspondence table if the user identity information is matched successfully, wherein the second correspondence table includes a correspondence between the user identity information and the data type, and if the data type matching the user identity information exists in the second correspondence table, extract the data type matching the user identity information and save it as the second data type;

数据类型比对模块350，用于比对所述第一数据类型与所述第二数据类型是否一致，得到数据类型比对结果；A data type comparison module 350 is used to compare whether the first data type is consistent with the second data type, and obtain a data type comparison result;

用户身份核验模块360，用于基于所述数据类型比对结果，确定所述用户身份信息对应的用户身份是否核验成功；A user identity verification module 360, configured to determine whether the user identity corresponding to the user identity information has been successfully verified based on the data type comparison result;

文件存储模块370，用于响应于所述用户身份核验成功，将所述文件分布式存储至区块链中的各节点中。The file storage module 370 is used to store the file in each node in the blockchain in a distributed manner in response to the successful verification of the user identity.

本公开实施例的基于分布式网络的用户核验装置与本公开上述基于分布式网络的用户核验方法的实施例之间相互对应，相关内容可以相互参考，此处不再赘述。本公开实施例的基于分布式网络的用户核验装置对应的有益技术效果可以参见上述对应的示例性方法部分的相应有益技术效果，此处不再赘述。The user verification device based on a distributed network of the embodiment of the present disclosure corresponds to the embodiment of the user verification method based on a distributed network of the present disclosure, and the relevant contents can be referenced to each other, which will not be repeated here. The beneficial technical effects corresponding to the user verification device based on a distributed network of the embodiment of the present disclosure can refer to the corresponding beneficial technical effects of the corresponding exemplary method part above, which will not be repeated here.

应当注意，尽管在上文详细描述中提及了基于分布式网络的用户核验装置300的若干模块或者单元，但是这种划分并非强制性的。实际上，根据本公开的实施方式，上文描述的两个或更多模块或者单元的特征和功能可以在一个模块或者单元中具体化。反之，上文描述的一个模块或者单元的特征和功能可以进一步划分为由多个模块或者单元来具体化。It should be noted that, although several modules or units of the user verification device 300 based on the distributed network are mentioned in the above detailed description, such division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

下面，参考图4来描述根据本公开实施例的电子设备。该电子设备可以是第一设备和第二设备中的任一个或两者、或与它们独立的单机设备，该单机设备可以与第一设备和第二设备进行通信，以从它们接收所采集到的输入信号。Below, an electronic device according to an embodiment of the present disclosure is described with reference to Figure 4. The electronic device may be any one or both of the first device and the second device, or a stand-alone device independent of them, and the stand-alone device may communicate with the first device and the second device to receive the collected input signals from them.

图4图示了根据本公开实施例的电子设备的框图。FIG. 4 illustrates a block diagram of an electronic device according to an embodiment of the present disclosure.

如图4所示，电子设备包括一个或多个处理器和存储器。As shown in FIG. 4 , the electronic device includes one or more processors and a memory.

处理器可以是中央处理单元（CPU）或者具有数据处理能力和/或指令执行能力的其他形式的处理单元，并且可以控制电子设备中的其他组件以执行期望的功能。The processor may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and/or instruction execution capabilities, and may control other components in the electronic device to perform desired functions.

存储器可以存储一个或多个计算机程序产品，所述存储器可以包括各种形式的计算机可读存储介质，例如易失性存储器和/或非易失性存储器。所述易失性存储器例如可以包括随机存取存储器（RAM）和/或高速缓冲存储器（cache）等。所述非易失性存储器例如可以包括只读存储器（ROM）、硬盘、闪存等。在所述计算机可读存储介质上可以存储一个或多个计算机程序产品，处理器可以运行所述计算机程序产品，以实现上文所述的本公开的各个实施例方法以及/或者其他期望的功能。The memory may store one or more computer program products, and the memory may include various forms of computer-readable storage media, such as volatile memory and/or non-volatile memory. The volatile memory may include, for example, a random access memory (RAM) and/or a cache memory (cache), etc. The non-volatile memory may include, for example, a read-only memory (ROM), a hard disk, a flash memory, etc. One or more computer program products may be stored on the computer-readable storage medium, and the processor may run the computer program product to implement the various embodiments of the present disclosure described above and/or other desired functions.

在一个示例中，电子装置还可以包括：输入装置和输出装置，这些组件通过总线系统和/或其他形式的连接机构（未示出）互连。In one example, the electronic device may further include: an input device and an output device, and these components are interconnected via a bus system and/or other forms of connection mechanisms (not shown).

此外，该输入装置还可以包括例如键盘、鼠标等等。In addition, the input device may also include, for example, a keyboard, a mouse, and the like.

该输出装置可以向外部输出各种信息，包括确定出的距离信息、方向信息等。该输出装置可以包括例如显示器、扬声器、打印机、以及通信网络及其所连接的远程输出装置等等。The output device can output various information to the outside, including determined distance information, direction information, etc. The output device can include, for example, a display, a speaker, a printer, a communication network and a remote output device connected thereto, and the like.

当然，为了简化，图4中仅示出了该电子设备中与本公开有关的组件中的一些，省略了诸如总线、输入/输出接口等等的组件。除此之外，根据具体应用情况，电子设备还可以包括任何其他适当的组件。Of course, for simplicity, FIG4 only shows some of the components in the electronic device related to the present disclosure, omitting components such as a bus, an input/output interface, etc. In addition, the electronic device may further include any other appropriate components according to specific application scenarios.

除了上述方法和设备以外，本公开的实施例还可以是计算机程序产品，其包括计算机程序指令，所述计算机程序指令在被处理器运行时使得所述处理器执行本说明书上述部分中描述的根据本公开各种实施例方法中的步骤。In addition to the above methods and devices, an embodiment of the present disclosure may also be a computer program product, which includes computer program instructions, which, when executed by a processor, enable the processor to execute the steps of the method according to various embodiments of the present disclosure described in the above part of this specification.

所述计算机程序产品可以以一种或多种程序设计语言的任意组合来编写用于执行本公开实施例操作的程序代码，所述程序设计语言包括面向对象的程序设计语言，诸如Java、C++等，还包括常规的过程式程序设计语言，诸如“C”语言或类似的程序设计语言。程序代码可以完全地在用户计算设备上执行、部分地在用户设备上执行、作为一个独立的软件包执行、部分在用户计算设备上部分在远程计算设备上执行、或者完全在远程计算设备或服务器上执行。The computer program product may be written in any combination of one or more programming languages to write program code for performing the operations of the disclosed embodiments, including object-oriented programming languages such as Java, C++, etc., and conventional procedural programming languages such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server.

此外，本公开的实施例还可以是计算机可读存储介质，其上存储有计算机程序指令，所述计算机程序指令在被处理器运行时使得所述处理器执行本说明书上述部分中描述的根据本公开各种实施例方法中的步骤。In addition, an embodiment of the present disclosure may also be a computer-readable storage medium having computer program instructions stored thereon, which, when executed by a processor, enables the processor to execute the steps of the method according to various embodiments of the present disclosure described in the above part of this specification.

所述计算机可读存储介质可以采用一个或多个可读介质的任意组合。可读介质可以是可读信号介质或者可读存储介质。可读存储介质例如可以包括但不限于电、磁、光、电磁、红外线、或半导体的系统、装置或器件，或者任意以上的组合。可读存储介质的更具体的例子（非穷举的列表）包括：具有一个或多个导线的电连接、便携式盘、硬盘、随机存取存储器（RAM）、只读存储器（ROM）、可擦式可编程只读存储器（EPROM或闪存）、光纤、便携式紧凑盘只读存储器(CD-ROM)、光存储器件、磁存储器件、或者上述的任意合适的组合。The computer readable storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can include, for example, but is not limited to, a system, device or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

以上结合具体实施例描述了本公开的基本原理，但是，需要指出的是，在本公开中提及的优点、优势、效果等仅是示例而非限制，不能认为这些优点、优势、效果等是本公开的各个实施例必须具备的。另外，上述公开的具体细节仅是为了示例的作用和便于理解的作用，而非限制，上述细节并不限制本公开为必须采用上述具体的细节来实现。The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, rather than limitation, and the above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.

本说明书中各个实施例均采用递进的方式描述，每个实施例重点说明的都是与其它实施例的不同之处，各个实施例之间相同或相似的部分相互参见即可。对于系统实施例而言，由于其与方法实施例基本对应，所以描述的比较简单，相关之处参见方法实施例的部分说明即可。Each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the system embodiment, since it basically corresponds to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

本公开中涉及的器件、装置、设备、系统的方框图仅作为例示性的例子并且不意图要求或暗示必须按照方框图示出的方式进行连接、布置、配置。如本领域技术人员将认识到的，可以按任意方式连接、布置、配置这些器件、装置、设备、系统。诸如“包括”、“包含”、“具有”等等的词语是开放性词汇，指“包括但不限于”，且可与其互换使用。这里所使用的词汇“或”和“和”指词汇“和/或”，且可与其互换使用，除非上下文明确指示不是如此。这里所使用的词汇“诸如”指词组“诸如但不限于”，且可与其互换使用。The block diagrams of the devices, apparatuses, equipment, and systems involved in this disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagrams. As will be appreciated by those skilled in the art, these devices, apparatuses, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including," "comprising," "having," and the like are open words, referring to "including but not limited to," and can be used interchangeably therewith. The words "or" and "and" used herein refer to the words "and/or," and can be used interchangeably therewith, unless the context clearly indicates otherwise. The word "such as" used herein refers to the phrase "such as but not limited to," and can be used interchangeably therewith.

可能以许多方式来实现本公开的方法和装置。例如，可通过软件、硬件、固件或者软件、硬件、固件的任何组合来实现本公开的方法和装置。用于所述方法的步骤的上述顺序仅是为了进行说明，本公开的方法的步骤不限于以上具体描述的顺序，除非以其它方式特别说明。此外，在一些实施例中，还可将本公开实施为记录在记录介质中的程序，这些程序包括用于实现根据本公开的方法的机器可读指令。因而，本公开还覆盖存储用于执行根据本公开的方法的程序的记录介质。The method and apparatus of the present disclosure may be implemented in many ways. For example, the method and apparatus of the present disclosure may be implemented by software, hardware, firmware, or any combination of software, hardware, and firmware. The above order of steps for the method is for illustration only, and the steps of the method of the present disclosure are not limited to the order specifically described above, unless otherwise specifically stated. In addition, in some embodiments, the present disclosure may also be implemented as a program recorded in a recording medium, which includes machine-readable instructions for implementing the method according to the present disclosure. Therefore, the present disclosure also covers a recording medium storing a program for executing the method according to the present disclosure.

还需要指出的是，在本公开的装置、设备和方法中，各部件或各步骤是可以分解和/或重新组合的。这些分解和/或重新组合应视为本公开的等效方案。It should also be noted that in the apparatus, device and method of the present disclosure, each component or each step can be decomposed and/or recombined. Such decomposition and/or recombination should be regarded as equivalent solutions of the present disclosure.

提供所公开的方面的以上描述以使本领域的任何技术人员能够做出或者使用本公开。对这些方面的各种修改对于本领域技术人员而言是非常显而易见的，并且在此定义的一般原理可以应用于其他方面而不脱离本公开的范围。因此，本公开不意图被限制到在此示出的方面，而是按照与在此公开的原理和新颖的特征一致的最宽范围。The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

为了例示和描述的目的已经给出了以上描述。此外，此描述不意图将本公开的实施例限制到在此公开的形式。尽管以上已经讨论了多个示例方面和实施例，但是本领域技术人员将认识到其某些变型、修改、改变、添加和子组合。The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims (10)

Translated fromChinese

1.一种基于分布式网络的用户核验方法，其特征在于，包括：1. A user verification method based on a distributed network, characterized by comprising:提取上报的待存储的文件的签名信息及文件名信息，对所述文件名信息进行解析，得到第一机构通用ID及第一数据类型，所述第一机构通用ID为所述待存储的文件的上报方的唯一识别代码；Extracting signature information and file name information of the reported file to be stored, parsing the file name information, and obtaining a first institution universal ID and a first data type, wherein the first institution universal ID is a unique identification code of the reporter of the file to be stored;对所述签名信息进行解析，得到用户身份信息，并将所述用户身份信息在第一对应关系表中进行匹配，若所述第一对应关系表中存在与所述用户身份信息匹配的机构通用ID，则将与所述用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID，所述第二机构通用ID由注册管理机构基于所述用户身份信息生成；Parsing the signature information to obtain user identity information, and matching the user identity information in the first correspondence table, if there is an institution universal ID matching the user identity information in the first correspondence table, extracting the institution universal ID matching the user identity information and saving it as a second institution universal ID, where the second institution universal ID is generated by the registration management agency based on the user identity information;比对所述第二机构通用ID与所述第一机构通用ID是否一致，若所述第二机构通用ID与所述第一机构通用ID比对一致，则判定用户身份信息匹配成功；Comparing the second institution's universal ID with the first institution's universal ID to see if they are consistent; if the second institution's universal ID is consistent with the first institution's universal ID, determining that the user identity information matches successfully;若用户身份信息匹配成功，将所述用户身份信息在第二对应关系表中进行匹配，若所述第二对应关系表中存在与所述用户身份信息匹配的数据类型，则将与所述用户身份信息匹配的数据类型提取并保存为第二数据类型；If the user identity information matches successfully, the user identity information is matched in the second correspondence table, and if a data type matching the user identity information exists in the second correspondence table, the data type matching the user identity information is extracted and saved as the second data type;比对所述第一数据类型与所述第二数据类型是否一致，得到数据类型比对结果；Comparing whether the first data type is consistent with the second data type, and obtaining a data type comparison result;基于所述数据类型比对结果，确定所述用户身份信息对应的用户身份是否核验成功；Based on the data type comparison result, determining whether the user identity corresponding to the user identity information is successfully verified;响应于所述用户身份核验成功，将所述文件分布式存储至区块链中的各节点中。In response to the user identity verification being successful, the file is distributed and stored in each node in the blockchain.2.根据权利要求1所述的方法，其特征在于，提取所述文件的签名信息及文件名信息，对所述文件名信息进行解析，得到第一机构通用ID及第一数据类型，包括：2. The method according to claim 1 is characterized in that the signature information and file name information of the file are extracted, the file name information is parsed, and the first institution universal ID and the first data type are obtained, including:基于所述文件的文件格式，解析所述文件的预设预留字段中的文件字符信息，得到所述文件的签名信息；Based on the file format of the file, parsing the file character information in the preset reserved field of the file to obtain the signature information of the file;基于预设文件名命名规则，基于预设文件名标识符对所述文件名信息进行解析，得到第一机构通用ID及第一数据类型。Based on a preset file name naming rule, the file name information is parsed based on a preset file name identifier to obtain a first institution universal ID and a first data type.3.根据权利要求1所述的方法，其特征在于，还包括：3. The method according to claim 1, further comprising:若所述第一对应关系表中不存在与所述用户身份信息匹配的机构通用ID，则判定用户身份核验失败，并生成机构通用ID匹配失败信息。If there is no institution universal ID matching the user identity information in the first correspondence table, it is determined that the user identity verification has failed, and institution universal ID matching failure information is generated.4.根据权利要求1所述的方法，其特征在于，还包括：4. The method according to claim 1, further comprising:若所述第二机构通用ID与所述第一机构通用ID不一致，则判定用户身份核验失败，并生成机构通用ID比对失败信息。If the second institution universal ID is inconsistent with the first institution universal ID, it is determined that the user identity verification has failed, and institution universal ID comparison failure information is generated.5.根据权利要求1所述的方法，其特征在于，还包括：5. The method according to claim 1, further comprising:若所述第二对应关系表中不存在与所述用户身份信息匹配的数据类型，则判定用户身份核验失败，并生成数据类型匹配失败信息。If the data type matching the user identity information does not exist in the second correspondence table, it is determined that the user identity verification has failed, and data type matching failure information is generated.6.根据权利要求1所述的方法，其特征在于，比对所述第一数据类型与所述第二数据类型是否一致，得到数据类型比对结果；基于所述数据类型比对结果，确定所述用户身份信息对应的用户身份是否核验成功，包括：6. The method according to claim 1, characterized in that comparing whether the first data type is consistent with the second data type to obtain a data type comparison result; and determining whether the user identity corresponding to the user identity information is successfully verified based on the data type comparison result, comprises:若所述第一数据类型与所述第二数据类型不一致，得到数据类型比对失败的数据类型比对结果，基于所述数据类型比对失败的数据类型比对结果判定用户身份核验失败，生成数据类型比对失败信息；基于所述数据类型比对失败的数据类型比对结果，确定所述用户身份核验失败；If the first data type is inconsistent with the second data type, a data type comparison result indicating a data type comparison failure is obtained, and based on the data type comparison result indicating a data type comparison failure, it is determined that the user identity verification has failed, and data type comparison failure information is generated; based on the data type comparison result indicating a data type comparison failure, it is determined that the user identity verification has failed;若所述第一数据类型与所述第二数据类型一致，得到数据类型比对成功的数据类型比对结果，基于所述数据类型比对成功的数据类型比对结果判定用户身份核验成功，生成数据类型比对成功信息；基于所述数据类型比对成功的数据类型比对结果，确定所述用户身份核验成功；If the first data type is consistent with the second data type, a data type comparison result of successful data type comparison is obtained, based on the data type comparison result of successful data type comparison, it is determined that the user identity verification is successful, and data type comparison success information is generated; based on the data type comparison result of successful data type comparison, it is determined that the user identity verification is successful;所述数据类型比对结果包括数据类型比对失败的数据类型比对结果或者数据类型比对成功的数据类型比对结果。The data type comparison result includes a data type comparison result in which the data type comparison fails or a data type comparison result in which the data type comparison succeeds.7.根据权利要求1-6任一所述的方法，其特征在于，还包括：7. The method according to any one of claims 1 to 6, further comprising:若所述用户身份核验失败，生成失败原因，所述失败原因包括以下至少一项：机构通用ID匹配失败信息、机构通用ID比对失败信息、数据类型匹配失败信息、数据类型比对失败信息；If the user identity verification fails, a failure reason is generated, and the failure reason includes at least one of the following: institution universal ID matching failure information, institution universal ID comparison failure information, data type matching failure information, and data type comparison failure information;反馈用户身份核验失败的核验结果及失败原因。Feedback the verification results and reasons for failure of user identity verification.8.一种基于分布式网络的用户核验装置，其特征在于，包括：8. A user verification device based on a distributed network, characterized by comprising:基础信息提取模块，用于提取上报的待存储的文件的签名信息及文件名信息，对所述文件名信息进行解析，得到第一机构通用ID及第一数据类型，所述第一机构通用ID为所述待存储的文件的上报方的唯一识别代码；A basic information extraction module, used to extract the signature information and file name information of the reported file to be stored, parse the file name information, and obtain a first institution universal ID and a first data type, wherein the first institution universal ID is a unique identification code of the reporter of the file to be stored;机构通用ID匹配模块，用于对所述签名信息进行解析，得到用户身份信息，并将所述用户身份信息在第一对应关系表中进行匹配，若所述第一对应关系表中存在与所述用户身份信息匹配的机构通用ID，则将与所述用户身份信息匹配的机构通用ID提取并保存为第二机构通用ID，所述第二机构通用ID由注册管理机构基于所述用户身份信息生成；An institution universal ID matching module, used to parse the signature information to obtain user identity information, and match the user identity information in a first correspondence table. If there is an institution universal ID matching the user identity information in the first correspondence table, the institution universal ID matching the user identity information is extracted and saved as a second institution universal ID, and the second institution universal ID is generated by the registration management agency based on the user identity information;机构通用ID比对模块，用于比对所述第二机构通用ID与所述第一机构通用ID是否一致，若所述第二机构通用ID与所述第一机构通用ID比对一致，则判定用户身份信息匹配成功；An institution universal ID comparison module, used to compare whether the second institution universal ID is consistent with the first institution universal ID. If the second institution universal ID is consistent with the first institution universal ID, it is determined that the user identity information is matched successfully;数据类型匹配模块，用于若用户身份信息匹配成功，将所述用户身份信息在第二对应关系表中进行匹配，若所述第二对应关系表中存在与所述用户身份信息匹配的数据类型，则将与所述用户身份信息匹配的数据类型提取并保存为第二数据类型；a data type matching module, configured to, if the user identity information is successfully matched, match the user identity information in a second correspondence table, and if a data type matching the user identity information exists in the second correspondence table, extract the data type matching the user identity information and save it as a second data type;数据类型比对模块，用于比对所述第一数据类型与所述第二数据类型是否一致，得到数据类型比对结果；A data type comparison module, used to compare whether the first data type is consistent with the second data type, and obtain a data type comparison result;用户身份核验模块，用于基于所述数据类型比对结果，确定所述用户身份信息对应的用户身份是否核验成功；A user identity verification module, used to determine whether the user identity corresponding to the user identity information is successfully verified based on the data type comparison result;文件存储模块，用于响应于所述用户身份核验成功，将所述文件分布式存储至区块链中的各节点中。The file storage module is used to distribute and store the file in each node in the blockchain in response to the successful verification of the user identity.9.一种电子设备，其特征在于，包括：9. An electronic device, comprising:存储器，用于存储计算机程序产品；A memory for storing a computer program product;处理器，用于执行所述存储器中存储的计算机程序产品，且所述计算机程序产品被执行时，实现上述权利要求1-7任一所述的方法。A processor is used to execute the computer program product stored in the memory, and when the computer program product is executed, it implements the method described in any one of claims 1 to 7.10.一种计算机可读存储介质，其上存储有计算机程序指令，其特征在于，该计算机程序指令被处理器执行时，实现上述权利要求1-7任一所述的方法。10. A computer-readable storage medium having computer program instructions stored thereon, wherein when the computer program instructions are executed by a processor, the method according to any one of claims 1 to 7 is implemented.