A self-certified digital identity management system and method based on smart contracts

Abstract

The invention discloses a self-certified digital identity management system and method based on a smart contract. An identity terminal sends a public key and associated digital information to a cloudserver via the Internet, and accomplishes registration and login of digital identity, and the authorization, operation and verification of digital information depending on the smart contract on a block chain and a distributed database under the block chain. A unique identity of the whole network can be provided, passwordless login is achieved by scanning a two-dimensional code, the login mode of the traditional username and password is broken through, and a user entirety can securely and effectively manage the digital identity and the associated digital information, on-demand authorization, operation and verification of information are achieved, thus realizing a decentralized, self-certified digital identity management system.

Description

technical field [0001] The invention relates to the field of information security, in particular to a smart contract-based self-authentication digital identity management system and a method thereof. Background technique [0002] As a global distributed database system, blockchain has the characteristics of unforgeable tampering and data sharing across the network. Because of these good characteristics, the application of blockchain technology in identity verification and management has attracted unanimous attention from both academia and industry . However, most of the traditional Internet identity systems adopt centralized technical solutions. Even in the current identity system that adopts decentralized technical solutions, there are the following defects: [0003] 1. Digital identities and related data are stored in a single centralized mechanism, which not only increases data maintenance costs, but also increases the risk of data leakage and theft. Attackers can steal...

AI Technical Summary

Problems solved by technology

The central organization that stores this information can use its information and data for commercial profit without the user's knowledge or permission, and can delete and tamper with the user's data, resulting in the arbitrary theft of user information and data

[0004]2. At present, most systems adopt the traditional username-password login method. Due to the independence of different systems and different requirements for passwords, users need to memorize a large number of different passwords. password, causing great inconvenience to users logging in to the system

[0005]3. Users cannot have control over their own information and data, and cannot modify or delete information and data stored in different systems at will, and need to follow the format requirements of different systems Uploading data in the corresponding format makes it difficult to share data with other organizations, which is not conducive to data sharing and unified management

[0006]4. The digital information stored in most of the systems cannot be verified safely and effectively, which makes the third-party system unable to determine the legitimacy and accuracy of the information uploaded by users

If verified, the process is cumbersome and vulnerable to tampering attacks

Images