System and method for blockchain-based data management

Patent metadata

Field	Value
Publication number	US-11258778-B2
Application number	US-201916472807-A
Country	US
Kind code	B2
Filing date	Feb 28, 2019
Priority date	Feb 28, 2019
Publication date	Feb 22, 2022
Grant date	Feb 22, 2022

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for performing data management. One of the methods includes: obtaining authentication information of a login user; generating a digital abstract of the authentication information of the login user; and authenticating the login user based on a comparison between the digital abstract of the authentication information of the login user and one or more digital abstracts stored on a blockchain.

First claim

The invention claimed is:

1. A computer-implemented method for data management, comprising:
collecting user data comprising authentication information of a registration user and user detail information of the registration user, wherein the authentication information comprises an account identification and password combination, and the user detail information comprises a contact, an address, and/or a payment method of the registration user;
storing a blockchain transaction comprising a digital abstract of the authentication information of the registration user to a blockchain;
storing, in a centralized storage system separate from the blockchain, the user detail information of the registration user in association with a transaction identification of the blockchain transaction stored to the blockchain;
obtaining authentication information of a login user;
generating a digital abstract of the authentication information of the login user;
obtaining a first authentication result that the login user is the registration user based on a first comparison between the digital abstract of the authentication information of the login user and one or more digital abstracts stored on the blockchain including the digital abstract of the authentication information of the registration user;
based on the first authentication result, obtaining an operation from the login user, wherein execution of the operation requires at least a portion of the user detail information;
based on the operation, obtaining the authentication information of the login user and obtaining a second authentication result that the login user is the registration user based on a second comparison between a digital abstract of the authentication information of the login user obtained based on the operation and one or more digital abstracts stored on the blockchain including the digital abstract of the authentication information of the registration user;
based on the second authentication result, obtaining, from the centralized storage system separate from the blockchain, at least the portion of the user detail information according to the transaction identification; and
executing the operation off the blockchain based at least on the portion of the obtained user detail information.

2. The method of claim 1 , wherein:
the operation is an online purchase.

3. The method of claim 1 , wherein:
the digital abstract of the authentication information comprises a hash value of the authentication information.

4. The method of claim 1 , wherein the user detail information excludes account and password information.

5. The method of claim 1 , wherein collecting the user data comprises:
receiving a registration request of the registration user;
providing a redirect address to render a registration page corresponding to the redirect address; and
collecting the authentication information of the registration user through the registration page.

6. The method of claim 1 , wherein collecting the user data comprises:
obtaining a permission from the registration user to use the authentication information of the registration user for user authentication across a plurality of service systems.

7. The method of claim 1 , wherein obtaining the first authentication result comprises:
comparing the digital abstract of the authentication information of the login user with the one or more digital abstracts stored on the blockchain; and
determining that the login user is the registration user in response to the digital abstract of the authentication information of the login user matching the digital abstract of the authentication information of the registration user.

8. The method of claim 1 , wherein obtaining the second authentication result comprises:
comparing the digital abstract of the authentication information of the login user with the one or more digital abstracts stored on the blockchain; and
determining that the login user is the registration user in response to the digital abstract of the authentication information matching the digital abstract of the authentication information of the registration user.

9. The method of claim 1 , wherein obtaining the first authentication result comprises:
obtaining the first authentication result from one or more nodes of a blockchain system of the blockchain, the first authentication result comprising the transaction identification; and
wherein the first authentication result is based on the blockchain system finding the digital abstract of the authentication information matching the digital abstract of the authentication information of the registration user.

10. The method of claim 1 , wherein obtaining the second authentication result comprises:
obtaining the first authentication result from one or more nodes of a blockchain system of the blockchain, the first authentication result comprising the transaction identification; and
wherein the first authentication result is based on the blockchain system finding the digital abstract of the authentication information matching the digital abstract of the authentication information of the registration user.

11. A data management system, comprising one or more processors and one or more non-transitory computer-readable memories coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the system to perform operations comprising:
collecting user data comprising authentication information of a registration user and user detail information of the registration user, wherein the authentication information comprises an account identification and password combination, and the user detail information comprises a contact, an address, and/or a payment method of the registration user;
storing a blockchain transaction comprising a digital abstract of the authentication information of the registration user to a blockchain;
storing, in a centralized storage system separate from the blockchain, the user detail information of the registration user in association with a transaction identification of the blockchain transaction stored to the blockchain;
obtaining authentication information of a login user;
generating a digital abstract of the authentication information of the login user;
obtaining a first authentication result that the login user is the registration user based on a first comparison between the digital abstract of the authentication information of the login user and one or more digital abstracts stored on the blockchain including the digital abstract of the authentication information of the registration user;
based on the first authentication result, obtaining an operation from the login user, wherein execution of the operation requires at least a portion of the user detail information;
based on the operation, obtaining the authentication information of the login user and obtaining a second authentication result that the login user is the registration user based on a second comparison between a digital abstract of the authentication information of the login user obtained based on the operation and one or more digital abstracts stored on the blockchain including the digital abstract of the authentication information of the registration user;
based on the second authentication result, obtaining, from the centralized storage system separate from the blockchain, at least the portion of the user detail information according to the transaction identification; and
executing the operation off the blockchain based at least on the portion of the obtained user detail information.

12. The system of claim 11 , wherein:
the operation is an online purchase.

Assignees

• Advanced New Technologies Co Ltd

Inventors

• Cheng Long
• Li Yanpeng

Classifications

• H04L67/563

  Data redirection of data network streams · CPC title

• H04L61/45

  Network directories; Name-to-address mapping · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• G06F21/31

  User authentication · CPC title