CN118138254A - A digital currency identity authentication system based on blockchain technology - Google Patents
A digital currency identity authentication system based on blockchain technology Download PDFInfo
- Publication number
- CN118138254A CN118138254A CN202410552122.5A CN202410552122A CN118138254A CN 118138254 A CN118138254 A CN 118138254A CN 202410552122 A CN202410552122 A CN 202410552122A CN 118138254 A CN118138254 A CN 118138254A
- Authority
- CN
- China
- Prior art keywords
- transaction
- user
- identity
- address
- blockchain
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
- G06Q20/4014—Identity check for transactions
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0407—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden
- H04L63/0421—Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/40—Network security protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Signal Processing (AREA)
- Computer Networks & Wireless Communication (AREA)
- Business, Economics & Management (AREA)
- Computer Hardware Design (AREA)
- Accounting & Taxation (AREA)
- General Engineering & Computer Science (AREA)
- Computing Systems (AREA)
- Finance (AREA)
- Theoretical Computer Science (AREA)
- General Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- Physics & Mathematics (AREA)
- Strategic Management (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
本发明公开了一种基于区块链技术的数字货币身份认证系统，涉及区块链技术领域，该系统包括若干模块；其技术要点为：在本区块链上进行交易时，通过获取评估数据集中的交易频率差、交易时间差和交易对手方与黑名单地址的关联度数据，搭建对应的模型计算后，生成准确、有效的异常程度预估值Ead1，依据后续的对比结果，可以高效的检测到异常交易行为；在跨区块链进行交易时，通过同步获取用户交易过程中的评估数据集和网络波动系数Q，并基于预处理的数据集计算交易的异常程度预估值Ead2，依据后续的对比结果，可以得出在不同场景下交易时的异常程度，这有助于评估跨链交易的安全性和可信度，识别可能存在的风险和异常情况。
The present invention discloses a digital currency identity authentication system based on blockchain technology, and relates to the technical field of blockchain. The system comprises several modules. The technical key points are as follows: when conducting transactions on the blockchain, by acquiring the transaction frequency difference, transaction time difference and correlation data between the transaction counterparty and the blacklist address in the evaluation data set, a corresponding model is built for calculation, and an accurate and effective abnormality degree estimation value Ead1 is generated. According to the subsequent comparison results, abnormal transaction behavior can be efficiently detected. When conducting transactions across blockchains, by synchronously acquiring the evaluation data set and the network volatility coefficient Q in the user transaction process, and calculating the abnormality degree estimation value Ead2 of the transaction based on the preprocessed data set, according to the subsequent comparison results, the abnormality degree of the transaction in different scenarios can be obtained, which is helpful to evaluate the security and credibility of the cross-chain transaction and identify possible risks and abnormal situations.
Description
Technical Field
The invention relates to the technical field of blockchain, in particular to a digital currency identity authentication system based on the blockchain technology.
Background
The block chain technology is a decentralised distributed database technology, the core concept of which is that a plurality of nodes jointly maintain a tamper-proof, public and transparent data chain, the security of data is ensured by using an encryption algorithm, and the trust problem between the nodes is solved by a consensus mechanism; applying blockchain technology to digital currency identity authentication can provide a safer, transparent and decentralised authentication mechanism, the presented scenarios are user registration and authentication: when a user registers an account on a digital currency platform, basic identity information needs to be provided, the information is encrypted and converted into a unique identity mark, and a corresponding public key and private key pair is generated; authentication transaction: when the user performs identity verification, the information to be verified is encrypted and signed by using the private key, and the signed data and the public key are sent to the digital currency platform. The platform will verify the signature with the user's public key, ensuring that the information is created by the holder of the corresponding private key. The method does not need the user to send the original identity information to the platform, and the privacy of the user is protected.
The prior application publication number is: CN117155582A, named a digital currency identity authentication system based on blockchain technology, comprises the following technical schemes: the key generation module is used for generating a key pair and is configured to generate a first traceability identifier and/or generate a second traceability identifier; the certificate generation module generates a certificate; the address controller module receives the certificate and writes the digital currency unitization generating unit currency check code into the certificate; the traceability authentication module is configured to acquire anonymous authentication information from the nodes participating in interaction, send the anonymous authentication information to the key generation module and the certificate generation module, generate a second private key corresponding to the public key by the key generation module, and generate an anonymous certificate by the certificate generation module; the anomaly verification module is configured to detect anomaly monitoring transactions, the traceability of transactions on a chain is only realized, and by generating traceability restriction during digital currency transactions, secondary transactions are avoided, any transactions which do not accord with certificate authentication are intercepted, the security of digital currency transactions is ensured, and anomaly conditions existing in a transaction scene are not effectively detected.
When the above document and the prior art are combined, during the digital currency transaction conducted on the internet, there are usually transaction conditions in different scenes, when an authentication system used in combination with the blockchain technology is used, after the identity information of a user is verified, transaction processing is generally conducted on the blockchain, evaluation data change during the transaction can be monitored to judge whether the transaction process is normal or not, but if the transaction process is required to be conducted through the blockchain, because the condition of external network access may exist during the transaction through the blockchain, the security of the transaction is reduced, and the abnormal state of the transaction cannot be accurately known due to the fact that the change of the original evaluation data is monitored, so that the reliability of the transaction through the blockchain is greatly reduced.
Disclosure of Invention
(One) solving the technical problems
Aiming at the defects of the prior art, the invention provides a digital currency identity authentication system based on a blockchain technology, when trading is carried out on the blockchain, by acquiring the trade frequency difference, the trade time difference and the association degree data of a trade counter party and a blacklist address in an evaluation data set, building a corresponding model for calculation, generating an accurate and effective abnormal degree predicted value Ead1, and according to a subsequent comparison result, efficiently detecting abnormal trading behavior; when the cross-block chain is used for trading, the evaluation data set and the network fluctuation coefficient Q in the user trading process are synchronously acquired, the abnormal degree predicted value Ead of the trade is calculated based on the preprocessed data set, and the abnormal degree of the trade in different scenes can be obtained according to the subsequent comparison results, so that the cross-block chain trading is conducive to evaluating the safety and the reliability of the cross-block chain trading, the possible risks and abnormal situations are identified, and the problems in the background technology are solved.
(II) technical scheme
In order to achieve the above purpose, the invention is realized by the following technical scheme:
a blockchain technology-based digital currency identity authentication system, comprising:
the user registration and identity verification module is used for acquiring identity information and proving material data of a user during registration and performing primary identity verification;
The data acquisition and storage module extracts identity information and proving material data of the user after the user identity is initially verified, creates a digital identity of the user and stores the digital identity on the blockchain;
before a user performs a transaction, the identity authentication and verification module encrypts and signs identity information provided by the user by adopting a public key encryption and digital signature technology, and provides a digital signature to verify the identity of the user and an authentication result when the user performs the transaction on the blockchain, and synchronously acquires an evaluation data set in the user transaction process;
The cross-chain identity authentication and interoperation module is used for transmitting the identity information and the proving material data of the user to the target blockchain through a cross-chain identity authentication and interoperation mechanism when the user carries out transactions on other blockchains, and synchronously acquiring an evaluation data set and a network fluctuation coefficient Q in the user transaction process;
The abnormal risk assessment early warning module builds an abnormal risk assessment calculation model according to the preprocessed assessment data set when carrying out transactions on the blockchain, generates an abnormal degree predicted value Ead1 of the transactions, and compares the abnormal degree predicted value Ead1 with a preset first assessment threshold value Comparing, if the abnormality degree predicted value Ead exceeds the first evaluation thresholdSending out a first-level early warning signal; otherwise, no response action is performed;
When trading is carried out through a block-crossing chain, an abnormal risk assessment calculation model is built for the second time according to the pretreated assessment data set and the network fluctuation coefficient Q, an abnormal degree predicted value Ead2 of the trade is generated, and the abnormal degree predicted value Ead2 is compared with a preset second assessment threshold value Comparing, if the abnormality degree predicted value Ead exceeds the second evaluation thresholdSending out a secondary early warning signal; otherwise, do not respond.
Further, the identity information of the user comprises the name, the identification card number and the contact phone of the user, the identity information of the user is filled in and provided by the user during registration, and the certification material data comprises a passport, a driving license and a photo of the user.
Further, the primary identity verification is performed by the following steps: and comparing with a legal organization database.
Further, the evaluation data set comprises a trade frequency difference, a trade time difference and a correlation degree of a trade counter party and a blacklist address, wherein the trade frequency difference represents a difference between the trade frequency and a historical trade frequency, and the historical trade frequency represents a trade frequency of the last month; the transaction time difference represents the difference between the current transaction time and the normal working time range, and the normal working time range is 9 points earlier to 5 points later.
Further, the association degree of the transaction counter-party and the blacklist address represents an association index I of the network IP address of the counter-party and the blacklist address preset by the system;
The specific association index I is obtained using the following steps:
S201, creating a blacklist address list preset by a system, wherein the list comprises addresses known to be marked as untrusted;
S202, in the transaction process, the IP address of the transaction counter party is acquired by any one of a weblog, an access log and an audit record;
s203, comparing the IP address of the transaction partner with a preset blacklist address list, directly comparing the IP address of the transaction partner with each address in the blacklist address list, and taking the IP address of the transaction partner as associated data if the IP address of the transaction partner is matched with each address in the blacklist address list;
s204, after the matched IP address is found, calculating a correlation index I by using the following formula:
Where Ps represents the number of matching IP addresses and Zs represents the total number of IP addresses.
Further, the network fluctuation coefficient Q is obtained as follows:
collecting network transmission rate of transaction at each moment in a preset time period T Calculating the average value of the network transmission rate at different moments in the T time period, and according to the average value and the network transmission rateThe network fluctuation coefficient Q is calculated according to the following formula:
；
In the method, in the process of the invention, The average value of the network transmission rate at different moments in time within T time periods is represented, t=1, 2, …, n being a positive integer, and n=t.
Further, the preprocessing of the evaluation data set comprises the following steps: and carrying out dimensionless treatment on each data.
Further, when the transaction is performed on the blockchain, the abnormal degree predicted value Ead1 of the transaction is calculated according to the following formula:
In the method, in the process of the invention, Trade frequency difference and trade time difference,/>, respectivelyPreset proportionality coefficients of trade frequency difference, trade time difference and associated index I respectively, and；
When a transaction is carried out by a cross-block chain, calculating an abnormal degree predicted value Ead of the transaction according to the following formula:
In the method, in the process of the invention, Is a constant correction coefficient.
(III) beneficial effects
The invention provides a digital currency identity authentication system based on a blockchain technology, which has the following beneficial effects:
When trading is carried out on the blockchain, through acquiring the trade frequency difference, the trade time difference and the association degree data of the trade counter party and the blacklist address in the evaluation data set, building a corresponding model calculation, generating an accurate and effective abnormal degree predicted value Ead1, and according to a subsequent comparison result, the abnormal trade behavior can be efficiently detected, so that the trading risk is reduced; when the cross-block chain is used for trading, the evaluation data set and the network fluctuation coefficient Q in the user trading process are synchronously acquired, the abnormal degree predicted value Ead of the trade is calculated based on the preprocessed data set, and the abnormal degree of the trade in different scenes can be obtained according to the subsequent comparison results, so that the cross-block chain trading is conducive to evaluating the safety and the reliability of the cross-block chain trading, and possible risks and abnormal situations are identified;
2. the invention adopts public key encryption, digital signature technology and method for evaluating data set, can improve the integrity, authenticity and authentication accuracy of data, and simultaneously detect and prevent abnormal transaction behavior, enhance the safety and credibility of cross-chain transaction, and is beneficial to protecting user privacy, preventing risks and maintaining the safe operation of the whole system.
Drawings
FIG. 1 is a schematic diagram of a block chain technology based digital currency identity authentication system;
Fig. 2 is a diagram of an electronic device of the present invention.
Detailed Description
The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
Example 1
Referring to fig. 1, the present embodiment provides a digital currency identity authentication system based on a blockchain technology, where the system includes a user registration and identity verification module, a data acquisition and storage module, an identity authentication and verification module, a cross-chain identity authentication and interoperability module, and an abnormal risk assessment early warning module, and the system performs abnormal detection processing on identity authentication and transaction performed under different conditions, and performs effective assessment on risks existing in the transaction process, so as to prompt a user and perform remote supervision through an online supervisor, thereby ensuring security of digital currency transaction performed under different identity authentication conditions;
the user registration and identity verification module is used for acquiring identity information and proving material data of a user during registration and performing primary identity verification;
The identity information of the user comprises the name, the ID card number and the contact telephone of the user, the identity information of the user is automatically filled and provided when the user registers, and the certification material data comprises a passport, a driving license and a photo of the user;
The mode of carrying out the preliminary identity authentication is as follows: the conventional identity verification method is used, such as comparing with legal organization databases or using a third party identity verification service, and the identity verification method used in the scheme is as follows: comparison with legal authorities databases, this approach typically involves comparison with other legal authorities' identity verification databases to verify the accuracy and validity of the identity information provided by the individual;
The specific implementation mode comprises the following steps:
collecting identity information: when the user performs identity verification, personal identity information such as name, birth date and ID card number needs to be provided; database query: the authentication service provider will compare the identity information provided by the user with corresponding legal authorities databases, which may include national population registration databases, driver's license databases, passport databases; data comparison: the identity verification service compares identity information provided by a user with corresponding information stored in a database, and the comparison process generally involves verifying the consistency, validity and legitimacy of data; for example, verifying if the identification number is valid, if the name matches the database record; verification result: according to the comparison result, the identity verification service generates a verification result which indicates whether the provided identity information passes verification, and the verification result can pass, fails or needs further verification; notably, the particular authentication means and legal authorities databases used may vary from country to country and region to region; in some countries it is possible to provide an authentication interface allowing online authentication by third party service providers; and elsewhere, the user may be required to provide a copy of the identification document and manually verify by the service provider.
The data acquisition and storage module extracts identity information and proving material data of the user after the user identity is initially verified, creates a digital identity of the user and stores the digital identity on the blockchain;
The method for creating the digital identity of the user and storing the digital identity on the blockchain is a mode for protecting the privacy of the user and ensuring the safety of identity information, and comprises the following specific processes:
S101, a user successfully passes basic identity verification, provides a mobile phone number and a mailbox address, and verifies the validity of the mobile phone number and the mailbox address;
s102, providing identification materials such as an identification card, a passport and a driver license by a user, and extracting key information such as a name, an identification card number, nationality and the like from the identification materials by a platform by utilizing an OCR technology or other means;
S103, using an encryption algorithm to encode the identity information of the user into a unique digital identity identifier, for example, a Hash function can be used to Hash the identity information to obtain a unique digital identifier;
S104, storing the digital identity of the user on a blockchain to ensure that the data cannot be tampered and deleted, and selecting a public blockchain such as an Ethernet or a private blockchain to store the digital identity of the user, wherein the digital identity of the user depends on specific requirements and security requirements;
S105, in order to protect the privacy of the user, the digital identity stored on the blockchain can be encrypted, and only the user with the corresponding private key can decrypt and access the personal identity information;
for example, assuming XX is a new user, she successfully passes preliminary verification by providing a cell phone number and mailbox address, then XX provides her identification material, including an identification card photo, the platform extracts the name, identification card number and nationality information of the identification card using OCR technology; then, using an encryption algorithm, such as SHA-256, to encode XX identity information into a unique digital identity identifier, for example, by hashing, alice's identity information generates a digital identifier of "abc123"; finally, the platform stores abc123 on the blockchain to ensure the non-falsification and security of the data; only XX and other authorized users with corresponding private keys can decrypt and access the information, and when other service parties need to verify the identity of XX, the necessary identity information can be obtained by requesting digital identity data on the blockchain, and verification is performed.
Before a user performs a transaction, the identity authentication and verification module encrypts and signs identity information provided by the user by adopting a public key encryption and digital signature technology so as to ensure the integrity and the authenticity of data, and is convenient for requiring the user to provide a digital signature to verify the identity and the authentication result when the user performs the transaction on the blockchain; synchronously acquiring an evaluation data set in the user transaction process, wherein the evaluation data set comprises a transaction frequency difference, a transaction time difference and the association degree of a transaction counter party and a blacklist address;
Among them, public key encryption and digital signature techniques are two encryption and verification techniques commonly used in cryptography, which can be used to ensure confidentiality, integrity and identity authentication of data;
Public key encryption: public key encryption is an encryption technology, which uses a pair of keys, including a public key and a private key, the public key can be distributed to anyone in public, the private key is kept secret by the owner of the key, the public key encryption algorithm is used, the public key can be used for encrypting the message, and only the person holding the corresponding private key can decrypt the message; in short, if X1 wants to send an encrypted message to X2, X2 can provide X1 with its public key, and X1 will encrypt the message using the public key to get a ciphertext that can only be decrypted by X2, even if other people get the encrypted message during transmission, they cannot decrypt it because only X2 holds the private key, common public key encryption algorithms are RSA and elliptic curve encryption algorithm ECC;
Digital signature: digital signature is a technique for verifying data integrity and identity authentication, based on a pair of keys, including a private key and a public key, which is used to sign data, unlike public key encryption, while the public key is used to verify the authenticity of the signature, when X1 is to send a signed message to X2, X1 first signs the message using her private key, creating a unique digital signature, and then she sends the message and digital signature to X2, X2 can verify the authenticity of the signature using the public key of X1, which means that the message is indeed signed by X1 and is not tampered with during transmission, the digital signature is often used to ensure the originality of the file, verify the identity (through public key authentication), or to ensure that the data is not tampered with during transmission; common digital signature algorithms include RSA and elliptic curve digital signature algorithm ECDSA;
summarizing, public key encryption technology is used for data encryption and decryption, and digital signature technology is used for data integrity verification and identity authentication, and the two technologies are used in combination, so that confidentiality, integrity and identity authenticity of data can be ensured in network communication;
Trade frequency difference: analyzing the transaction frequency of the user, detecting whether abnormal frequent transaction behaviors exist or not, wherein the transaction frequency difference represents the difference between the transaction frequency of the time and the historical transaction frequency, and the historical transaction frequency represents the transaction frequency of the last month; for example: the trade frequency is 10 times/day, the trade frequency of the last month is 5 times/day, and the difference value is 5
Transaction time difference: checking whether the transaction time is in a normal working range or not so as to prevent abnormal transaction behaviors, wherein the transaction time difference represents the difference value between the transaction time and the normal working time range, and the normal working time range is 9 points early to 5 points late; for example: the transaction time is 8 hours in the morning, and the transaction time difference is 9-8=1 hours;
correlation of transaction counter-parties to blacklist addresses: analyzing the transaction counter-party, and detecting the association index I of the network IP address of the counter-party and the system preset blacklist address;
The specific association index I is obtained using the following steps:
S201, collecting a blacklist address list: firstly, a system preset blacklist address list needs to be created, wherein the list contains known malicious IP addresses or addresses marked as distrust;
S202, acquiring the IP address of a transaction counter party: in the transaction process, the IP address of the transaction counter party is acquired, and the IP address can be acquired in a weblog, an access log or an audit record and the like;
s203, comparing the IP addresses: comparing the IP address of the transaction partner with a preset blacklist of addresses, one of two methods may be used: a) And (3) accurate matching: directly comparing the IP address of the transaction counter party with each address in the blacklist address list, and taking the address as one of the associated indexes if matching exists; b) Sub-network matching: according to the subnet mask of the IP address, carrying out subnet matching on the IP address of the transaction counter party and the address in the blacklist address list, and if the matching exists, taking the matching as one of the association indexes;
S204, calculating a correlation coefficient: after finding a matching IP address, the association index I can be calculated using the following formula:
wherein Ps represents the number of matching IP addresses, zs represents the total number of IP addresses;
The association index I indicates the association degree of the IP address of the transaction counter party and the blacklist address preset by the system, and if the association coefficient is close to or reaches 1, the association degree indicates that the IP address of the transaction counter party is highly associated with the blacklist address, and risks can exist; it should be noted that, the association coefficient only represents the matching degree between the IP addresses, and cannot directly determine the credibility of the transaction counterpart, and may have a false positive or false negative condition; therefore, the final judgment can be made by comprehensively evaluating other security measures and authentication modes.
The cross-chain identity authentication and interoperation module is used for transmitting the identity information and the proving material data of the user to the target blockchain through a cross-chain identity authentication and interoperation mechanism when the user carries out transactions on other blockchains, and synchronously acquiring an evaluation data set and a network fluctuation coefficient Q in the user transaction process;
The cross-chain identity authentication and interoperation mechanism is a technical solution for implementing identity authentication and information sharing between different block chains, and the following is an implementation manner in the embodiment, which shows a process of cross-chain identity authentication and interoperation:
Cross-chain identity authentication: a) The user initiates an identity authentication request: when a user needs to conduct transaction or use service on a target blockchain, firstly, an identity authentication request is sent to the target blockchain, wherein the request comprises identity information of the user and information needing to be verified; b) Cross-chain identity authentication mechanism: the target blockchain uses a specific cross-chain identity authentication mechanism to verify the identity of the user, which may involve communication verification with the original blockchain of the user, or uses a specific cross-chain identity verification protocol, after verification is successful, the target blockchain confirms the identity of the user; c) And returning an identity authentication result: the target blockchain returns an identity authentication result, typically an identity authentication token or other identifier, to the user;
Cross-chain information sharing: a) User request information sharing: after the user completes identity authentication on the target blockchain, the user can send an information sharing request which comprises the data expected to be shared and the address of the receiver; b) Cross-chain interoperation mechanism: the target blockchain uses a cross-chain interoperation mechanism to pass requests to the source blockchain to obtain the data that needs to be shared, which may involve invocation of a particular cross-chain communication protocol or smart contract; c) Source blockchain data sharing: after the source blockchain receives the sharing request, corresponding data is shared to the target blockchain according to the legality and authority of the request, which may require the use of specific data conversion or encryption technology to ensure the security and consistency of the data in the cross-chain process; d) Returning a sharing result: the source blockchain transmits the shared data to the target blockchain and returns a sharing result, and the target blockchain can continue to conduct transaction or service after receiving the data;
Specific cross-chain identity authentication and interoperation mechanisms can vary from one blockchain platform to another, and some open-source cross-chain solutions, such as Cosmos, polkadot and INTERLEDGER, provide specific protocols and mechanisms to implement cross-chain identity authentication and sharing; summarizing, the cross-chain identity authentication and interoperability mechanism allows users to perform identity authentication and information sharing among different blockchains, ensures security and consistency through specific protocols and mechanisms, provides users with seamless experience among the cross-region blockchains, and promotes interoperability and data sharing among blockchains;
The network fluctuation coefficient Q represents the fluctuation degree of the network in the system during the transaction, and the higher the fluctuation degree is, the more unstable the transaction is in the transmission process, and the greater the risk of external network access during the transaction is;
The network fluctuation coefficient Q is obtained as follows:
collecting network transmission rate of transaction at each moment in a preset time period T Calculating the average value of the network transmission rate at different moments in the T time period, and according to the average value and the network transmission rateThe network fluctuation coefficient Q is calculated according to the following formula:
In the method, in the process of the invention, The average value of the network transmission rate at different moments in time within T time periods is represented, t=1, 2, …, n being a positive integer, and n=t.
The abnormal risk assessment early warning module builds an abnormal risk assessment calculation model according to the preprocessed assessment data set when carrying out transactions on the blockchain, generates an abnormal degree predicted value Ead1 of the transactions, and compares the abnormal degree predicted value Ead1 with a preset first assessment threshold valueComparing, if the abnormality degree predicted value Ead exceeds the first evaluation thresholdIf the transaction is abnormal, a first-level early warning signal is sent; otherwise, the system does not respond;
When trading is carried out through a block-crossing chain, an abnormal risk assessment calculation model is built for the second time according to the pretreated assessment data set and the network fluctuation coefficient Q, an abnormal degree predicted value Ead2 of the trade is generated, and the abnormal degree predicted value Ead2 is compared with a preset second assessment threshold value Comparing, if the abnormality degree predicted value Ead exceeds the second evaluation thresholdIf the transaction is abnormal, a secondary early warning signal is sent; otherwise, the system does not respond;
the preprocessing of the evaluation data set comprises the following steps: carrying out dimensionless treatment on each data;
When the transaction is carried out on the block chain, the abnormal degree predicted value Ead1 of the transaction is calculated according to the following formula:
In the method, in the process of the invention, Trade frequency difference and trade time difference,/>, respectivelyPreset proportionality coefficients of trade frequency difference, trade time difference and associated index I respectively, and，The value ranges of the two are all 0-1;
When a transaction is carried out by a cross-block chain, calculating an abnormal degree predicted value Ead of the transaction according to the following formula:
In the method, in the process of the invention, Is a constant correction coefficient, and its specific value can be set by user adjustment, or generated by analysis function fitting, andThe value range of (2) is 1-2;
It should be noted that, the primary early warning signal and the secondary early warning signal are only used for distinguishing the early warning signal form;
When the staff receives the first-level early warning signal and the second-level early warning signal, the response action is made to immediately close the current transaction process and save evidence, so that the follow-up investigation and evidence collection are facilitated.
Specifically, when the transaction is performed on the blockchain, by acquiring the transaction frequency difference, the transaction time difference and the association degree data of the transaction counter party and the blacklist address in the evaluation data set, building a corresponding model calculation, generating an accurate and effective abnormal degree predicted value Ead1, and according to the subsequent comparison result, efficiently detecting abnormal transaction behaviors, thereby being beneficial to reducing transaction risks; when the cross-block chain is used for trading, the evaluation data set and the network fluctuation coefficient Q in the user trading process are synchronously acquired, the abnormal degree predicted value Ead of the trade is calculated based on the preprocessed data set, and the abnormal degree of the trade in different scenes can be obtained according to the subsequent comparison results, so that the cross-block chain trading is conducive to evaluating the safety and the reliability of the cross-block chain trading, and possible risks and abnormal situations are identified;
By integrating the whole scheme of the embodiment, the public key encryption, the digital signature technology and the method for evaluating the data set are adopted, so that the integrity, the authenticity and the accuracy of identity verification of the data can be improved, abnormal transaction behaviors can be detected and prevented, the safety and the credibility of the cross-chain transaction are enhanced, and the privacy of users, the prevention risk and the safe operation of a block chain system can be protected.
Referring to fig. 2, the digital currency identity authentication system based on the blockchain technology is required to be used by the corresponding electronic device, and the electronic device includes a processor and a memory for executing the digital currency identity authentication system based on the blockchain technology.
Example 2
Based on embodiment 1, this embodiment also provides a process of digital currency identity authentication based on blockchain technology: s1, acquiring identity information and proving material data of a user during registration, and performing primary identity verification;
S2, after the user identity is initially verified, extracting identity information and proving material data of the user, creating a digital identity of the user, and storing the digital identity on a blockchain;
S3, before a user performs transaction, encrypting and signing identity information provided by the user by adopting a public key encryption and digital signature technology, and providing a digital signature to verify the identity and authentication result of the user and synchronously acquiring an evaluation data set in the user transaction process when the user performs the transaction on the blockchain;
S4, when a user carries out transactions on other blockchains, transmitting the identity information and the proving material data of the user to a target blockchain through a cross-chain identity authentication and interoperation mechanism, and synchronously acquiring an evaluation data set and a network fluctuation coefficient Q in the user transaction process;
S5, when a transaction is carried out on the blockchain, an abnormal risk assessment calculation model is built according to the preprocessed assessment data set, an abnormal degree predicted value Ead1 of the transaction is generated, and the abnormal degree predicted value Ead1 is compared with a preset first assessment threshold value Comparing, if the abnormality degree predicted value Ead exceeds the first evaluation thresholdSending out a first-level early warning signal; otherwise, no response action is performed;
When trading is carried out through a block-crossing chain, an abnormal risk assessment calculation model is built for the second time according to the pretreated assessment data set and the network fluctuation coefficient Q, an abnormal degree predicted value Ead2 of the trade is generated, and the abnormal degree predicted value Ead2 is compared with a preset second assessment threshold value Comparing, if the abnormality degree predicted value Ead exceeds the second evaluation thresholdSending out a secondary early warning signal; otherwise, do not respond.
In the application, the related formulas are all the numerical calculation after dimensionality removal, and the formulas are one formulas for obtaining the latest real situation by software simulation through collecting a large amount of data, and the formulas are set by a person skilled in the art according to the actual situation.
The above embodiments may be implemented in whole or in part by software, hardware, firmware, or any other combination. When implemented in software, the above-described embodiments may be implemented in whole or in part in the form of a computer program product. Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the solution.
The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed over a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
The foregoing is merely illustrative of the present application, and the present application is not limited thereto, and any person skilled in the art will readily recognize that variations or substitutions are within the scope of the present application.
Claims (10)
1. A blockchain technology-based digital currency identity authentication system, comprising:
the user registration and identity verification module is used for acquiring identity information and proving material data of a user during registration and performing primary identity verification;
The data acquisition and storage module extracts identity information and proving material data of the user after the user identity is initially verified, creates a digital identity of the user and stores the digital identity on the blockchain;
before a user performs a transaction, the identity authentication and verification module encrypts and signs identity information provided by the user by adopting a public key encryption and digital signature technology, and provides a digital signature to verify the identity of the user and an authentication result when the user performs the transaction on the blockchain, and synchronously acquires an evaluation data set in the user transaction process;
The cross-chain identity authentication and interoperation module is used for transmitting the identity information and the proving material data of the user to the target blockchain through a cross-chain identity authentication and interoperation mechanism when the user carries out transactions on other blockchains, and synchronously acquiring an evaluation data set and a network fluctuation coefficient Q in the user transaction process;
The abnormal risk assessment early warning module builds an abnormal risk assessment calculation model according to the preprocessed assessment data set when carrying out transactions on the blockchain, generates an abnormal degree predicted value Ead1 of the transactions, and compares the abnormal degree predicted value Ead1 with a preset first assessment threshold value Comparing, if the abnormality degree predicted value Ead1 exceeds the first evaluation thresholdSending out a first-level early warning signal; otherwise, no response action is performed;
When trading is carried out through a block-crossing chain, an abnormal risk assessment calculation model is built for the second time according to the pretreated assessment data set and the network fluctuation coefficient Q, an abnormal degree predicted value Ead2 of the trade is generated, and the abnormal degree predicted value Ead2 is compared with a preset second assessment threshold value Comparing, if the abnormality degree predicted value Ead exceeds the second evaluation thresholdSending out a secondary early warning signal; otherwise, do not respond.
2. The blockchain technology-based digital currency identity authentication system of claim 1, wherein: the identity information of the user comprises the name, the ID card number and the contact phone of the user, the identity information of the user is filled in and provided by the user during registration, and the certification material data comprises a passport, a driving license and a photo of the user.
3. The blockchain technology-based digital currency identity authentication system of claim 2, wherein: the mode of carrying out the preliminary identity authentication is as follows: and comparing with a database prepared in advance.
4. A blockchain technology based digital currency identity authentication system as in claim 3, wherein: the evaluation data set comprises a transaction frequency difference, a transaction time difference and a correlation degree of a transaction counter party and a blacklist address, wherein the transaction frequency difference represents a difference value between the transaction frequency and a historical transaction frequency, and the historical transaction frequency represents a transaction frequency of the last month; the transaction time difference represents the difference between the current transaction time and the normal working time range.
5. The blockchain technology-based digital currency identity authentication system of claim 4, wherein: the association degree of the transaction counter-party and the blacklist address represents an association index I of the network IP address of the counter-party and a blacklist address preset by the system;
The specific association index I is obtained using the following steps:
S201, creating a blacklist address list preset by a system, wherein the list comprises addresses known to be marked as untrusted;
S202, in the transaction process, the IP address of the transaction counter party is acquired by any one of a weblog, an access log and an audit record;
s203, comparing the IP address of the transaction partner with a preset blacklist address list, directly comparing the IP address of the transaction partner with each address in the blacklist address list, and taking the IP address of the transaction partner as associated data if the IP address of the transaction partner is matched with each address in the blacklist address list;
s204, after the matched IP address is found, calculating a correlation index I by using the following formula:
；
Where Ps represents the number of matching IP addresses and Zs represents the total number of IP addresses.
6. The blockchain technology-based digital currency identity authentication system of claim 5, wherein: the network fluctuation coefficient Q is obtained as follows:
collecting network transmission rate of transaction at each moment in a preset time period T Calculating the average value of the network transmission rate at different moments in the T time period, and according to the average value and the network transmission rateThe network fluctuation coefficient Q is calculated according to the following formula:
；
In the method, in the process of the invention, The average value of the network transmission rate at different moments in time within T time periods is represented, t=1, 2, …, n being a positive integer, and n=t.
7. The blockchain technology-based digital currency identity authentication system of claim 6, wherein: the preprocessing of the evaluation dataset is as follows: and carrying out dimensionless treatment on each data.
8. The blockchain technology-based digital currency identity authentication system of claim 7, wherein: when the transaction is carried out on the block chain, the abnormal degree predicted value Ead1 of the transaction is calculated according to the following formula:
；
In the method, in the process of the invention, Trade frequency difference and trade time difference,/>, respectivelyPreset proportionality coefficients of trade frequency difference, trade time difference and associated index I respectively, and；
When a transaction is carried out by a cross-block chain, calculating an abnormal degree predicted value Ead of the transaction according to the following formula:
；
In the method, in the process of the invention, Is a constant correction coefficient.
9. A computer readable storage medium having stored thereon a computer program for implementing the system of any of claims 1-8 when executed.
10. An electronic device comprising a processor and a memory for executing the system of any of claims 1-8.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410552122.5A CN118138254B (en) | 2024-05-07 | 2024-05-07 | Digital currency identity authentication system based on blockchain technology |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410552122.5A CN118138254B (en) | 2024-05-07 | 2024-05-07 | Digital currency identity authentication system based on blockchain technology |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN118138254A true CN118138254A (en) | 2024-06-04 |
| CN118138254B CN118138254B (en) | 2024-08-09 |
Family
ID=91230537
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202410552122.5A Active CN118138254B (en) | 2024-05-07 | 2024-05-07 | Digital currency identity authentication system based on blockchain technology |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN118138254B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN118898518A (en) * | 2024-10-08 | 2024-11-05 | 青岛场外市场清算中心有限公司 | System and method for sharing transaction metadata information of financial assets based on blockchain |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20180240107A1 (en) * | 2015-03-27 | 2018-08-23 | Black Gold Coin, Inc. | Systems and methods for personal identification and verification |
| CN116485401A (en) * | 2023-04-24 | 2023-07-25 | 中国工商银行股份有限公司 | Online secure payment method and device, server of financial institution and storage medium |
| CN116796362A (en) * | 2023-05-15 | 2023-09-22 | 华能招标有限公司 | Digital currency transaction supervision method and system based on blockchain |
| CN117155582A (en) * | 2023-09-07 | 2023-12-01 | 北京数盾信息科技有限公司 | Digital currency identity authentication system based on blockchain technology |
-
2024
- 2024-05-07 CN CN202410552122.5A patent/CN118138254B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20180240107A1 (en) * | 2015-03-27 | 2018-08-23 | Black Gold Coin, Inc. | Systems and methods for personal identification and verification |
| CN116485401A (en) * | 2023-04-24 | 2023-07-25 | 中国工商银行股份有限公司 | Online secure payment method and device, server of financial institution and storage medium |
| CN116796362A (en) * | 2023-05-15 | 2023-09-22 | 华能招标有限公司 | Digital currency transaction supervision method and system based on blockchain |
| CN117155582A (en) * | 2023-09-07 | 2023-12-01 | 北京数盾信息科技有限公司 | Digital currency identity authentication system based on blockchain technology |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN118898518A (en) * | 2024-10-08 | 2024-11-05 | 青岛场外市场清算中心有限公司 | System and method for sharing transaction metadata information of financial assets based on blockchain |
Also Published As
| Publication number | Publication date |
|---|---|
| CN118138254B (en) | 2024-08-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109067801B (en) | Identity authentication method, identity authentication device and computer readable medium | |
| CN109905360B (en) | Data verification method and terminal equipment | |
| AU2020104272A4 (en) | Blockchain-based industrial internet data security monitoring method and system | |
| CN114257376B (en) | Digital certificate updating method, device, computer equipment and storage medium | |
| US20140258718A1 (en) | Method and system for secure transmission of biometric data | |
| CN106790045A (en) | One kind is based on cloud environment distributed virtual machine broker architecture and data integrity support method | |
| CN115549906B (en) | Privacy calculation method, system, device and medium based on block chain | |
| CN118965399B (en) | Information safety protection method and system for energy power trading platform | |
| CN106101092A (en) | A kind of information evaluation processing method and first instance | |
| US11729159B2 (en) | System security infrastructure facilitating protecting against fraudulent use of individual identity credentials | |
| Feng et al. | Autonomous vehicles' forensics in smart cities | |
| CN113849797B (en) | Method, device, equipment and storage medium for repairing data security hole | |
| CN113364763B (en) | Verifiable statement generation method and device, electronic equipment and storage medium | |
| CN118138254B (en) | Digital currency identity authentication system based on blockchain technology | |
| CN111160997A (en) | Blockchain-based advertising supervision method, device and advertising delivery system | |
| CN116720839B (en) | Financial information management method based on blockchain technology and supervision system thereof | |
| CN114048453A (en) | User feature generation method and device, computer equipment and storage medium | |
| CN108540447A (en) | A kind of certification authentication method and system based on block chain | |
| CN113872751A (en) | Monitoring method, device, device and storage medium for business data | |
| US12455962B2 (en) | Systems and methods for preventing communications with malicious cryptography-based storage application addresses using consensus | |
| CN112995096A (en) | Data encryption and decryption method, device and equipment | |
| US20180332028A1 (en) | Method For Detecting Unauthorized Copies Of Digital Security Tokens | |
| CN116471081B (en) | Indoor security anonymous authentication method based on Internet of things technology | |
| CN117499159B (en) | A data transaction method, device and electronic equipment based on blockchain | |
| CN117235804B (en) | A data set right confirmation method, system, device and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |