Blockchain authorization information generation

Patent metadata

Field	Value
Publication number	US-10790973-B2
Application number	US-202016803807-A
Country	US
Kind code	B2
Filing date	Feb 27, 2020
Priority date	Apr 19, 2019
Publication date	Sep 29, 2020
Grant date	Sep 29, 2020

Abstract

A computer-implemented method includes: receiving, by a platform including one or more computing devices, a blockchain authorization information generation request from a client, in which the blockchain authorization information generation request includes a target blockchain identifier and user information; determining, based on the target blockchain identifier, a target blockchain; determining a blockchain parameter of the target blockchain, in which the blockchain parameter indicates one or more requirements for authorization information used to join the target blockchain; generating blockchain authorization information based on the blockchain parameter and the user information, in which the blockchain authorization information conforms to the one or more requirements; and sending the blockchain authorization information to the client.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, from a client device by a platform comprising one or more computing devices, a request to become a blockchain node in a target blockchain, wherein the request comprises a target blockchain identifier and user information;
determining, by the platform, based on the target blockchain identifier, a target blockchain for which the platform is configured to generate authorization information, the target blockchain being one of a plurality of blockchains for which the platform is configured to generate authorization information;
determining, by the platform, a blockchain parameter of the target blockchain, wherein the blockchain parameter indicates one or more requirements for authorization information to satisfy the request to become a blockchain node in the target blockchain, and
wherein the one or more requirements are different from another one or more requirements for authorization information to satisfy a request to become a blockchain node in another blockchain of the plurality of blockchains;

generating, by the platform, blockchain authorization information based on the blockchain parameter and the user information; and
sending the generated blockchain authorization information to the client device.

2. The computer-implemented method of claim 1 , wherein generating the blockchain authorization information comprises:
determining, based on the blockchain parameter, a password generation algorithm, wherein an output of the password generation algorithm conforms to the one or more requirements; and
generating the blockchain authorization information using the password generation algorithm.

3. The computer-implemented method of claim 2 , wherein the blockchain authorization information comprises a blockchain identity certificate, and wherein generating the blockchain authorization information comprises:
generating a blockchain identity certificate request based on the user information by using the password generation algorithm; and
obtaining, based on the blockchain identity certificate request, the blockchain identity certificate.

4. The computer-implemented method of claim 3 , wherein obtaining the blockchain identity certificate comprises:
sending the blockchain identity certificate request to an authentication server for signature authentication;
receiving, from the authentication server, a signature-authenticated blockchain identity certificate request; and
using the signature-authenticated blockchain identity certificate request as the blockchain identity certificate.

5. The computer-implemented method of claim 3 , wherein obtaining the blockchain identity certificate comprises:
sending the blockchain identity certificate request to an administrator of the target blockchain for approval;
receiving, from an authentication server, a signature-authenticated blockchain identity certificate request; and
using the signature-authenticated blockchain identity certificate request as the blockchain identity certificate.

6. The computer-implemented method of claim 2 , wherein the blockchain authorization information comprises a private key, and wherein generating the blockchain authorization information comprises:
generating the private key based on the user information by using the password generation algorithm.

7. The computer-implemented method of claim 1 , wherein the one or more requirements comprise one or more of: a key format and a type of encryption algorithm used to generate the blockchain authorization information.

8. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
receiving, from a client device by a platform comprising one or more computing devices, a request to become a blockchain node in a target blockchain, wherein the request comprises a target blockchain identifier and user information;
determining, by the platform, based on the target blockchain identifier, a target blockchain for which the platform is configured to generate authorization information, the target blockchain being one of a plurality of blockchains for which the platform is configured to generate authorization information;
determining, by the platform, a blockchain parameter of the target blockchain, wherein the blockchain parameter indicates one or more requirements for authorization information to satisfy the request to become a blockchain node in the target blockchain, and
wherein the one or more requirements are different from another one or more requirements for authorization information to satisfy a request to become a blockchain node in another blockchain of the plurality of blockchains;

generating, by the platform, blockchain authorization information based on the blockchain parameter and the user information; and
sending the generated blockchain authorization information to the client device.

9. The computer-readable medium of claim 8 , wherein generating the blockchain authorization information comprises:
determining, based on the blockchain parameter, a password generation algorithm, wherein an output of the password generation algorithm conforms to the one or more requirements; and
generating the blockchain authorization information using the password generation algorithm.

10. The computer-readable medium of claim 9 , wherein the blockchain authorization information comprises a blockchain identity certificate, and wherein generating the blockchain authorization information comprises:
generating a blockchain identity certificate request based on the user information by using the password generation algorithm; and
obtaining, based on the blockchain identity certificate request, the blockchain identity certificate.

11. The computer-readable medium of claim 10 , wherein obtaining the blockchain identity certificate comprises:
sending the blockchain identity certificate request to an authentication server for signature authentication;
receiving, from the authentication server, a signature-authenticated blockchain identity certificate request; and
using the signature-authenticated blockchain identity certificate request as the blockchain identity certificate.

12. The computer-readable medium of claim 10 , wherein obtaining the blockchain identity certificate comprises:
sending the blockchain identity certificate request to an administrator of the target blockchain for approval;
receiving, from an authentication server, a signature-authenticated blockchain identity certificate request; and
using the signature-authenticated blockchain identity certificate request as the blockchain identity certificate.

13. The computer-readable medium of claim 9 , wherein the blockchain authorization information comprises a private key, and wherein generating the blockchain authorization information comprises:
generating the private key based on the user information by using the password generation algorithm.

14. The computer-readable medium of claim 8 , wherein the one or more requirements comprise one or more of: a key format and a type of encryption algorithm used to generate the blockchain authorization information.

15. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, from a client device by a platform comprising one or more comp

Assignees

• Alibaba Group Holding Ltd

Inventors

• Zhang Yixiang
• Gu Jun

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/0863 Primary

  involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067) · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/3239 Primary

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title