Registration and authorization method device and system

Patent metadata

Field	Value
Publication number	US-11115418-B2
Application number	US-201616315391-A
Country	US
Kind code	B2
Filing date	Dec 23, 2016
Priority date	Dec 23, 2016
Publication date	Sep 7, 2021
Grant date	Sep 7, 2021

Abstract

A registration and authorization method, device and system is used for solving the technical problem of relatively low safety of the existing authorization technology. The method is applied to an authorization server, the authorization server is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the method comprises: receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user; assigning authorization information to the user, wherein the authorization information is used for indicating a service that the user can access; and writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.

First claim

The invention claimed is:

1. A registration method applied to an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, wherein each block is used for storing authorization information, the method comprising:
receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.

2. The method according to claim 1 , wherein the identification information is a ciphertext of a password hash value; or the identification information is a user public key.

3. The method according to claim 1 , further:
receiving an update message, wherein the update message is used for updating the authorization information corresponding to the identification information; and
writing the identification information and the updated authorization information into the blocks of the blockchain through the authorization server.

4. An authorization method applied to an access server which is a node in a blockchain network, the method comprising:
receiving an access request message sent by a user device, wherein the access request message includes user identity information;
inquiring identification information and authorization information of the user in the blockchain according to the user identity information through the access server;
performing identity verification on the user according to the identification information; and
allowing the user to access the designated service according to the authorization information after the verification is passed,
wherein the identification information is a user public key, and performing identity verification on the user according to the identification information comprises:
sending instruction information instructing the user to provide identification to the user device;
receiving signature information of the user private key signature sent by the user device according to the instruction information; and
performing signature verification on the signature information according to the user public key, and determining that the identity verification is passed if the signature verification succeeds.

5. The method according to claim 4 , wherein inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises:
when a plurality of blocks storing the identification information and the authorization information of the user are inquired in the blockchain by the access server by utilizing the user identity information, acquiring the identification information and the authorization information of the user from the latest block in the plurality of the blocks.

6. The method according to claim 4 , wherein the identification information is a ciphertext of a password hash value, and the user identity information includes a user name and the password hash value;
inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises: seeking the corresponding ciphertext of the password hash value and the authorization information on the blockchain through the access server by utilizing the user name;
performing identity verification on the user according to the identification information comprises:
decrypting the ciphertext of the password hash value, and determining that the verification is passed if a plaintext obtained by decryption is consistent with the password hash value in the user identity information.

7. An authorization server, wherein the authorization server is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the authorization server comprises:
a processor, a communication interface, a memory and a communication bus; the processor, the communication interface and the memory communicate with each other through the communication bus;
the memory is used for storing application programs;
the processor is used for performing the application program to implement the following method:
receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.

8. The authorization server according to claim 7 , wherein the identification information is a ciphertext of a password hash value; or the identification information is a user public key.

9. The authorization server according to claim 7 , wherein the method implemented by the processor further comprises:
receiving an update message, wherein the update message is used for updating the authorization information corresponding to the identification information; and
writing the identification information and the updated authorization information into the blocks of the blockchain through the authorization server.

10. An access server, wherein the access server is a node in a blockchain network, and the access server comprises:
a processor, a communication interface, a memory and a communication bus; the processor, the communication interface and the memory communicate with each other through the communication bus;
the memory is used for storing application programs;
the processor is used for performing the application program to implement the following method:
receiving an access request message sent by a user device, wherein the access request message includes user identity information;
inquiring identification information and authorization information of the user in the blockchain according to the user identity information through the access server;
performing identity verification on the user according to the identification information; and
allowing the user to access the designated service according to the authorization information after the verification is passed,
wherein the identification information is a user public key, and performing identity verification on the user according to the identification information comprises:
sending instruction information instructing the user to provide identification to the user device;
receiving signature information of the user private key signature sent by the user device according to the instruction information; and
performing signature verification on the signature information according to the user public key, and determining that the identity verification is passed if the signature verification succeeds.

11. The access server according to claim 10 , wherein inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises:
when a plurality of blocks storing the identification information and the authorization information of the user are inquired in the blockchain by the

Assignees

• Cloudminds Shenzhen Robotics Systems Co Ltd
• Cloudminds Shanghai Robotics Co Ltd

Inventors

• Xie Hui
• Wang Jian

Classifications

• H04L9/50 Primary

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/30

  Authentication, i.e. establishing the identity or authorisation of security principals · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title