CN108989354A - A kind of auth method and device - Google Patents

Abstract

The disclosure provides an identity verification method and device, which relate to the technical field of identity verification. In the identity verification method and device provided by this disclosure, the server and the user end store a block chain related to the user's login information. Perform decryption to obtain the time interval, generate a new block according to the time interval, and send the block to the server. After receiving the login request and the block sent by the client, the server generates a block corresponding to the client. The new block is compared with the block sent by the user to verify the user's identity and ensure the security of the user's identity verification.

Description

A method and device for identity verification

technical field

The present disclosure relates to the technical field of identity authentication, and in particular, to an identity authentication method and device.

Background technique

With the development of science and technology, when people use network resources and access network application systems, in order to ensure the security of information, they often verify the user's identity. At present, there are many ways of identity verification, but most of them are , the user needs to change the login password frequently, and the security of identity verification cannot be guaranteed.

Contents of the invention

In view of this, the present disclosure provides an identity verification method and device.

An identity verification method provided by the present disclosure is applied to a server interacting with a client; the server stores a block chain related to user login information, the block chain includes a plurality of blocks, and the block The block includes a second field and a third field, the second field is the data of the block, including the user's identity information, the user's current login information and the time interval, and the third field is the generation time of the block; The methods described include:

Receive the user's login request and the first block sent by the client.

Searching for a second block generated by the user's last login according to the login request and the first block.

Decrypt the second field and the third field of the second block to obtain the first time interval.

A third block is generated according to the first time interval.

The third block is compared with the first block, and if the third block is consistent with the first block, it is determined that the user identity verification is passed.

Further, the method further includes: setting a new time interval after the user identity verification is passed.

A new block is generated again according to the new time interval and current login information, and the second field and the third field of the new block are encrypted.

Save the new block locally.

Further, the block also includes a first field and a fourth field; wherein,

The first field is the hash value of the previous block.

The fourth field is a hash value of the block itself, and the hash value is calculated from the first field, the second field and the third field through a hash function.

Further, the step of generating a third block according to the first time interval includes:

Get the fields of the block generated by the user's last login.

Adding the field value in the field to the first time interval to generate a new field.

A hash value is calculated on the new field by using a hash function to generate a third block.

The disclosure provides an identity verification method, which is applied to a client interacting with a server; the client stores a block chain related to user login information, and the block chain includes a plurality of blocks, and the block Including a second field and a third field, the second field is the data of the block, including the user's identity information, the user's current login information and the time interval, the third field is the generation time of the block; the Methods include:

Sending a login request to the server, receiving a fourth block sent by the server, the fourth block was generated during the last login and stored in the server.

The second field and the third field of the fourth block are decrypted to obtain a second time interval.

Generate a new block according to the second time interval, and send the new block to the server for identity verification.

Further, the method also includes:

After the user authentication is passed, a new time interval is set, so that the server generates a new block according to the new time interval and saves it locally at the server, and sends it to the client for the next login.

Further, the block further includes a first field and a fourth field; wherein.

The first field is the hash value of the previous block.

The fourth field is a hash value of the block itself, and the hash value is calculated from the first field, the second field and the third field through a hash function.

Further, the step of generating a new block according to the second time interval, and sending the new block to the server for identity verification includes:

Obtain the third field in the fourth block sent by the server.

Adding the field value in the third field to the second time interval to generate a new third field.

Calculate a hash value for the new third field according to a hash function to generate the new block.

Comparing the third field value in the new block with the current time, if within the set range, sending the new block to the server; if not within the set range, repeating The process of generating the new third field is to continue to generate new blocks until the comparison value between the value of the third field in the generated new block and the current time is within a set range.

The disclosure provides an identity verification device, which is applied to a server interacting with a client; the identity verification device includes a receiving module, a search module, a first storage module, a first execution module, a verification module and a first generation module.

The first storage module is used to store a block chain related to user login information, the block chain includes a plurality of blocks, and the block includes a first field, a second field, a third field and a fourth field , the first field is the hash value of the previous block, the second field is the data of the block, including the user’s identity information, the user’s current login information and time interval, and the third field is Block generation time, the fourth field is the hash value of the block itself, and the hash value is calculated by hashing the first field, the second field and the third field.

The receiving module is configured to receive the user's login request and the first block sent by the client.

The searching module is used for searching the second block generated by the user's last login according to the login request and the first block.

The first execution module is used to decrypt the second field and the third field of the second block to obtain a first time interval.

The first generation module is used for generating a third block according to the first time interval.

The verification module is used for comparing the first block with the third block to perform identity verification.

An identity verification device provided by the present disclosure is applied to a user end interacting with a server, and the identity verification device includes a second storage module, a second execution module, and a second generation module.

The second storage module is used to store a block chain related to user login information, the block chain includes a plurality of blocks, and the block includes a first field, a second field, a third field and a fourth field , the first field is the hash value of the previous block, the second field is the data of the block, including the user’s identity information, the user’s current login information and time interval, and the third field is Block generation time, the fourth field is the hash value of the block itself, and the hash value is calculated by hashing the first field, the second field and the third field.

The second execution module is used to send a login request to the server, and decrypt the second field and the third field of the fourth block to obtain a second time interval, and the fourth block passes the service The terminal sends it to the user terminal to obtain it during this login; the fourth block is generated and saved in the server terminal during the previous login.

The second generation module is used to generate a new block according to the second time interval, and send the new block to the server for identity verification.

In the identity verification method and device provided in this disclosure, the server stores a block chain related to user login information, and after receiving the login request and the first block sent by the user, the server searches for The second block generated by the user's last login, and decrypt the second field and the third field of the second block to obtain the first time interval; generate the third block through the first time interval, and convert the third block Compared with the first block to verify the user's identity, the security of identity verification can be guaranteed without the user frequently changing the login password, and the malicious login can be tracked according to the blockchain.

In order to make the above-mentioned objects, features and advantages of the present disclosure more comprehensible, preferred embodiments will be described in detail below together with the accompanying drawings.

Description of drawings

In order to illustrate the technical solutions of the present disclosure more clearly, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present disclosure, and therefore should not As a limitation of the scope, those skilled in the art can also obtain other related drawings based on these drawings without creative work.

FIG. 1 is a schematic flowchart of an identity verification method provided by the present disclosure.

FIG. 2 is a schematic block diagram of the identity verification method provided by the present disclosure.

Fig. 3 is a block chain schematic diagram of the identity verification method provided by the present disclosure.

Fig. 4 is another schematic flowchart of the identity verification method provided by the present disclosure.

Fig. 5 is another schematic flowchart of the identity verification method provided by the present disclosure.

Fig. 6 is another schematic flowchart of the identity verification method provided by the present disclosure.

Fig. 7 is another schematic flowchart of the identity verification device provided by the present disclosure.

FIG. 8 is a schematic block diagram of an identity verification device provided by the present disclosure.

FIG. 9 is another schematic block diagram of an identity verification device provided by the present disclosure.

Icons: 10 - first identity verification device; 11 - first storage module; 12 - receiving module; 13 - search module; 14 - first execution module; 15 - first generation module; 16 - verification module; 20 - second Identity verification device; 21-second storage module; 22-second execution module; 23-second generation module.

Detailed ways

The technical solutions in the present disclosure will be clearly and completely described below in conjunction with the drawings in the present disclosure. Obviously, the described embodiments are only some of the embodiments of the present disclosure, not all of them. The components of the present disclosure generally described and illustrated in the figures herein may be arranged and designed in a variety of different configurations. Accordingly, the following detailed description of the embodiments of the present disclosure provided in the accompanying drawings is not intended to limit the scope of the claimed disclosure, but merely represents selected embodiments of the present disclosure. Based on the embodiments of the present disclosure, all other embodiments obtained by those skilled in the art without creative effort shall fall within the protection scope of the present disclosure.

It should be noted that like numerals and letters denote similar items in the following figures, therefore, once an item is defined in one figure, it does not require further definition and explanation in subsequent figures.

Identity authentication technology is an effective solution to the process of confirming the identity of the operator in the computer network. All information in the computer network world, including the user's identity information, is represented by a specific set of data. Computers can only identify the user's digital identity, and all authorizations to users are also authorizations for the user's digital identity. How to ensure that the operator who operates with a digital identity is the legal owner of this digital identity, that is to say, to ensure that the physical identity of the operator corresponds to the digital identity. Identity authentication technology is to solve this problem, as the first way to protect network assets At the gateway, identity authentication plays a pivotal role.

At present, there are many authentication methods, but most of them require the user to frequently change the login password to ensure the security of the authentication, and even if there are loopholes in the system, when malicious login occurs, it is impossible to detect malicious login or malicious login in time. Malicious logins are tracked.

Based on the above research, the present disclosure provides an identity verification method and device.

Please refer to Figure 1, which is a schematic flow diagram of an identity verification method provided by the present disclosure. The method is applied to a server interacting with a client; the server stores a block chain related to user login information, so The block chain includes a plurality of blocks, the block includes a second field and a third field, the second field is the data of the block, including the user's identity information, the user's current login information and the time interval , the third field is block generation time. The specific process shown in FIG. 1 will be described in detail below.

Step S10: Receive the user's login request and the first block sent by the client.

Step S11: Find the second block generated by the user's last login according to the login request and the first block.

Step S12: Decrypt the second field and the third field of the second block to obtain a first time interval.

Wherein, the user sets a login password when logging in for the first time, and the server calculates a key according to a set calculation method, and the calculated key is shared by the server and the user, and the calculated key Save in the server and the user. When the user logs in next time, after the server receives the login request and the first block, it decrypts the second field and the third field of the second block with a key to obtain the first block. time interval.

Step S13: Generate a third block according to the first time interval.

Step S14: comparing the third block with the first block, and judging whether the third block is consistent with the first block.

Wherein, if the third block is consistent with the first block, that is, the information included in the third block is consistent with the information included in the first block, it is determined that the user identity verification is passed, Execute step S15, if the third block is inconsistent with the first block, that is, the information included in the third block is inconsistent with the information included in the first block, then execute step S141.

Step S141: Identity verification fails.

Step S15: Set a new time interval after the user identity verification is passed.

If no new time interval is set, the server defaults that the new time interval is the same as the first time interval.

Step S16: Generate a new block again according to the new time interval and the current login information.

Wherein, when a new block is generated, in addition to the new time interval and current login information, the new block also includes user information, etc., and the new time interval is used as a new login condition for the next user Register the conditions for generating a new block. The current login information includes the login time, which is based on the local time.

Step S17: Save the new block locally.

Wherein, the new block is saved locally, and when the user logs in next time, the server sends the new block to the client, and the server also performs the new block again according to the new block. User identity is verified.

Further, please refer to FIG. 2, the block also includes a first field and a fourth field; wherein, the first field is the hash value of the previous block; the second field is the hash value of the block The data, including the user's identity information, user's current login information and time interval; the third field is the block generation time; the fourth field is the hash value of the block itself, and the hash value Calculated from the first field, the second field, and the third field through a hash function.

The second field is the data of the block, wherein the user's identity information is the information recorded by the user's first login, such as the user name; the user's current login information includes the time of this login; the time interval is used as the next A login condition. Wherein, when the block is being saved, the second field will be encrypted with a key to ensure data security.

The third field is the time when the block is generated, and the time precision can be set to hours, minutes, seconds, milliseconds, etc., which is determined by the server itself. When the block is being saved, the The third field is encrypted with a key to ensure data security.

The hash value of the block is obtained by calculating the fields of the block through a hash function, and the hash function may be MD4, MD5, SHA-1, SHA-256 and the like. Since the first field is the hash value of the previous block, and the fourth field is the hash value of this block, in order to prevent the block from being maliciously tampered with, the block can be formed into a chain, as shown in Figure 3 In turn, the legitimacy of each block can be verified.

Further, please refer to Fig. 3. Fig. 3 is a schematic diagram of the block chain of the identity verification method provided by the present disclosure. When verifying the block, the first field, the second field and the third field can be calculated. Hash value, compare the calculated hash value with the fourth field, if the calculated hash value is equal to the fourth field, it is considered that the block has not been maliciously tampered with, and it is a normal calculation by a legitimate client As a result, if the calculated hash value is not equal to the fourth field, it is considered that the block has been maliciously tampered with, and it is not a normal calculation result of the legal client. Furthermore, the entire blockchain can be verified by comparing whether the first field is equal to the fourth field of the previous block, and if the first field is equal to the fourth field of the previous block, then It is considered that the block is legal, and when the block is legal, the validity of the previous block can be verified by the same method, and then it can be verified all the way to the initial module to track the entire blockchain.

Please refer to FIG. 4, the step of the server generating the third block according to the first time interval includes:

Step S131: Obtain the fields of the block generated by the user's last login.

Wherein, a plurality of blocks will be generated during the last login process of the user, and the generated blocks will be stored in the server together. When the server receives the login request sent by the user and the first area After the block, find the last block generated in the user's last login, that is, the second block, and decrypt the second field and the third field of the block to obtain the first time interval stored in the second field and the generation time in the third field.

Step S132: adding the field value in the field to the first time interval to generate a new field.

Wherein, the server uses the third field of the last block generated by the user's last login, that is, the time when the block was generated, and adds the first time interval to this time to form a new first time interval. Three fields, the new third field is used as the third field of the third block, for example, the last time the user logged in, the block was generated at 9:00, and the time interval is 5 minutes, then at 9:00 Add five minutes to the basis, which is 9:05, and the new third field will be 9:05. For another example, if the user logged in last time, the block was generated at 10:00 of the previous day, and the time interval is 5 minutes, then add five minutes to the 10:00 of the previous day, that is, 10:00 of the previous day :05, the new third field is 10:05 of the previous day, and then the minute is added on the basis of 10:05 of the previous day, that is, 10:10 of the previous day, and a new third field is generated again , repeat adding the time interval on the basis of the previous time, and continuously generate a new third field until the current time.

Step S133: Calculate a hash value for the new field by using a hash function to generate a third block.

Calculate the hash value for the new third field, the second field of the second block, and the fourth field of the second block, use the calculated hash value as the new fourth field, and use the hash value of the second block The fourth field is used as the first field of the new block, the second field of the second block is used as the second field of the new block, the new third field is used as the third field of the new block, and the new fourth field is used as the first field of the new block Four fields, thus forming a new block.

Among them, every time a new third field is generated, the hash value will be calculated by the hash function to generate a new block, and the new block will be generated repeatedly until the generation time of the block is close to the current time , and use this block as the third block, and compare the third block with the first block sent by the client, and then verify the identity of the user.

The identity verification method provided by this disclosure is applied to the server interacting with the client. The server stores the block chain related to the user’s login information. After receiving the login request and the first block sent by the client, the server , according to the login request and the first block to find the second block generated by the user's last login, and decrypt the second field and the third field of the second block to obtain the first time interval; generate through the first time interval The third block compares the third block with the first block to verify the identity of the user. It does not require the user to frequently change the login password to ensure the security of the identity verification, and can verify the block according to the blockchain. legitimacy, tracking malicious logins,

Please refer to FIG. 5 , which is a schematic flow diagram of an identity verification method provided by the present disclosure. The method is applied to a client interacting with a server; the client has a block chain related to user login information, so The block chain includes a plurality of blocks, the block includes a second field and a third field, the second field is the data of the block, including the user's identity information, the user's current login information and the time interval , the third field is block generation time. The specific process shown in FIG. 5 will be described in detail below.

Step S20: Send a login request to the server, and receive the fourth block sent by the server.

Wherein, the fourth block is generated and saved in the server during the last login, and when the server sends the fourth block to the client, the server also saves the The same block as the fourth block, the fourth block is the last block generated during the user's last login process. When the user logs in, the server sends the fourth block to the client after receiving the user's log-in request. Furthermore, when the user changes to a different client, the identity can also be identified through the block. Authenticate to allow users to log in normally, providing authentication security.

Step S21: Decrypt the second field and the third field of the fourth block to obtain a second time interval.

Wherein, the user sets a login password when logging in for the first time, and the server calculates a key according to a set calculation method according to the password, and the calculated key is shared by the server and the user. The outgoing key is stored in the server and the client, and the user cannot know the key. Wherein, the calculation method set can be a hash function, and the login password is a, and Hash(a)=b , and then use b as the key, when the user logs in, he needs to input the login password set by himself, and the user end detects that the login password is the correct login password, and restores the login password to the key according to the hash function, and then Decrypt the block.

For example, the user sets the login password as 123456 when logging in for the first time, and the key calculated according to the hash function is 654321. The password 123456 is restored to the key 654321, and then the second field and the third field of the block are decrypted.

Understandably, the second time interval is the same as the first time interval.

Step S22: Generate a new block according to the second time interval, and send the new block to the server for identity verification.

Wherein, it can be understood that the new block is the first block mentioned in the above process, and after receiving the new block and the login request sent by the client, the server searches for the last For the blocks generated by the server during login, the corresponding processes from the above steps S10 to S17 are executed.

Step S23: User identity verification is passed, and a new time interval is set, so that the server generates a new block according to the new time interval and saves the local of the server, which is sent to the client for the next login .

Wherein, the new time interval can be set by the user himself, if the user does not set it by himself, it can be set by the server.

Further, the block stored at the client includes a first field, a second field, a third field and a fourth field; the first field is the hash value of the previous block; the second field is the hash value of the previous block; The data of the block, including the user's identity information, the user's current login information and the time interval; the third field is the block generation time; the fourth field is the hash value of the block itself, and the The hash value is calculated on the first field, the second field and the third field through a hash function.

Since the blocks stored on the client end are consistent with the blocks stored on the server end, and can also form a block chain, reference can be made to the above description of the block on the server end and the block chain.

Please refer to FIG. 6, the steps of the client generating a new block according to the second time interval and sending the new block to the server for identity verification include:

Step S221: Obtain the third field in the fourth block sent by the server.

Wherein, the client receives the fourth block sent by the server, and inputs a login password, and the client recovers the login password into a key according to a set calculation method, and then performs an encryption of the fourth block. The second field and the third field are decrypted to obtain the second time interval and the time generated by the third field.

Step S222: Add the field value in the third field to the second time interval to generate a new third field.

Wherein, the client uses the third field of the fourth block, that is, the block generation time, and adds the second time interval to this time to form a new third field, and the new third field is used as the third field of the new block, for example, the block generation time is 9:00, and the time interval is 5 minutes, then add five minutes on the basis of 9:00, that is, 9:05, then the new The third field is 9:05. For another example, if the user logged in last time, the block was generated at 10:00 of the previous day, and the time interval is 5 minutes, then add Last five minutes, that is, 10:05 of the previous day, the new third field is 10:05 of the previous day, and then add minutes on the basis of 10:05 of the previous day, that is, 10 of the previous day: 10. Generate a new third field again, repeat adding a time interval on the basis of the last time, and continuously generate a new third field until the current time.

Step S223: Calculate a hash value on the new third field by using a hash function to generate the new block.

Calculate the hash value for the new third field, the second field of the fourth block, and the fourth field of the fourth block, use the calculated hash value as the new fourth field, and use the hash value of the fourth block The fourth field is used as the first field of the new block, the second field of the fourth block is used as the second field of the new block, the new third field is used as the third field of the new block, and the new fourth field As the fourth field of the new block, this constitutes a new block.

Step S224: Compare the value of the third field in the new block with the current time, and determine whether it is within the set range.

Among them, every time a new third field is generated, the hash value will be calculated by the hash function to generate a new block, and the new block will be generated repeatedly until the generation time of the block is close to the current time , and compare the third field of the block with the current time.

The setting range can be set by yourself. If it is within the setting range, step S225 is executed to send the new block to the server. If not within the set range, return to step S221 and continue to generate new blocks until the comparison value of the third field value in the generated new block and the current time is within the set range.

Step S225: Send the new block to the server.

Wherein, it can be understood that the new block is the first block mentioned in the above process, and when the new block is sent to the server, the server executes the above steps S10 to S14 The corresponding process, and then to verify the identity. During this process, the client will also save multiple regenerated blocks, and the blocks stored by the client include the blocks sent by the server to the client and multiple blocks generated by itself .

The above process is the process of identity verification for the user's normal login. When the user logs in for the first time, please refer to Figure 7, which is a schematic diagram of the user's first login process. The specific process shown in Figure 7 will be described in detail below.

Step S30: user registration.

When a new user registers, the user needs to set his own login password, and the server and the user end calculate the key according to the calculation method set according to the login password. The key is based on a symmetric cipher (you can choose a cipher algorithm when the system is implemented), which is used to encrypt future information and block fields in the above process, and is shared between the user and the verifier.

For another example, when a user uses a public computer to log in, the server will store the identity information blockchain of multiple people, and then when the user logs in, the server needs to find the user's corresponding ID information from the blockchain of multiple people's identity information. The identity information blockchain, in order to provide the security of identity verification, users can set a specific user name in addition to setting a login password when logging in for the first time. For example, when a user logs in, he sends a login request to the server. The login request includes the user's username. Search the identity information block chain corresponding to the user name in the chain, and after finding the identity information block chain corresponding to the user name, send the last block generated by the last login to the client.

Step S31: initialization.

The server is initialized to generate an initial block for the subsequent verification process, wherein the first field of the block is specified by the server, for example fixed to 0 or other values.

Step S32: The user logs in automatically for the first time.

After successful registration, the user will automatically log in to the system.

Step S33: setting of the next login condition.

After the user logs in successfully, the time interval needs to be set. The server generates the initial block according to the time interval and the current login information. The server saves the initial block locally and sends it to the client for storage. When logging in next time, a new block will be generated through the time interval, and the generation of this block will be used for the verification of user login.

The generation of the initial block is in the memory. Only after the user successfully logs in and sets the conditions for the generation of the next block, that is, after the time interval, will it be generated and written to the hard disk for storage. The generation time of the initial block The user's first login time.

Step S35: the user logs in next time.

Step S36: Judging whether the verification is passed.

For this step, refer to the above-mentioned identity verification process. If the verification is passed, set the conditions for the next login. If verification fails, authentication fails.

An identity verification method provided by this disclosure is applied to the client interacting with the server. The client stores a blockchain related to the user’s login information. The client sends a login request and retrieves the fourth area generated by the user’s last login. block, and decrypt the second field and the third field of the fourth block to obtain the second time interval; a new block is generated through the second time interval, and the new block is sent to the server. Blocks are generated at intervals, and the new block is compared with the block generated by the server to verify the user's identity. It does not require the user to frequently change the login password to ensure the security of the identity verification, and can be verified according to the blockchain. The legitimacy of the block to track malicious logins.

Please refer to FIG. 8 , the first identity verification device 10 provided for the present disclosure is applied to the server interacting with the client, and the first identity verification device 10 is used to execute step S10 in the flowchart shown in FIG. 1 Go to step S17. The first identity verification device 10 includes a receiving module 12 , a search module 13 , a first storage module 11 , a first execution module 14 , a verification module 16 and a first generation module 15 .

The first storage module 11 is used to store a block chain related to user login information, the block chain includes a plurality of blocks, and the block includes a first field, a second field, a third field and a fourth field. field, the first field is the hash value of the previous block, the second field is the data of the block, including the user's identity information, the user's current login information and time interval, the third field is the generation time of the block, and the fourth field is the hash value of the block itself, and the hash value is calculated from the first field, the second field and the third field through a hash function.

The receiving module 12 is configured to receive the user's login request and the first block sent by the client.

The searching module 13 is configured to search the second block generated by the user's last login according to the login request and the first block.

The first executing module 14 is configured to decrypt the second field and the third field of the second block to obtain a first time interval.

The first generating module 15 is configured to generate a third block according to the first time interval.

The verification module 16 is used for comparing the first block with the third block to perform identity verification.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the first identity verification device 10 described above can refer to the corresponding process in the aforementioned method step S10 to step S17, which will not be repeated here. Too much to repeat.

Please refer to FIG. 9 in conjunction with the second identity verification device 20 provided by the present disclosure, which is applied to the client side of the server interaction, and the second identity verification device 20 is used to execute steps S20 to Step S25. The second identity verification device 20 includes a second storage module 21 , a second execution module 22 and a second generation module 23 .

The second storage module 21 is used to store a block chain related to user login information, the block chain includes a plurality of blocks, and the block includes a first field, a second field, a third field and a fourth field. field, the first field is the hash value of the previous block, the second field is the data of the block, including the user's identity information, the user's current login information and time interval, the third field is the generation time of the block, and the fourth field is the hash value of the block itself, and the hash value is calculated from the first field, the second field and the third field through a hash function.

The second execution module 22 is used to send a login request to the server, and decrypt the second field and the third field of the fourth block to obtain a second time interval, and the fourth block passes the The server sends it to the client to obtain it during this login, and the fourth block is generated and saved in the server during the previous login.

The second generation module 23 is used to generate a new block according to the second time interval, and send the new block to the server for identity verification. It can be understood that the new block is It is the first block mentioned in the above process.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the second identity verification device 20 described above can refer to the corresponding process in the aforementioned method step S20 to step S25, which will not be repeated here. Too much to repeat.

To sum up, in the identity verification method and device provided by the present disclosure, the server and the user end simultaneously store the block chain related to the user's login information. And decrypt the second field and the third field of the block to obtain the time interval, generate a new block according to the time interval, and send the block to the server, and the server receives the login request and the area sent by the client. After the block, a new block is generated by the same process as that of the client, and the new block is compared with the block sent by the user to verify the user's identity, which can ensure that the user does not need to frequently change the login password. The security of identity verification, and the ability to track malicious logins based on the blockchain.

In the several embodiments provided in the present disclosure, it should be understood that the disclosed devices and methods may also be implemented in other ways. The device and method embodiments described above are only illustrative, for example, the flowcharts and block diagrams in the accompanying drawings show possible implementation architectures of devices, methods and computer program products according to multiple embodiments of the present disclosure, function and operation. In this regard, each block in a flowchart or block diagram may represent a module, program segment, or part of code that includes one or more Executable instructions. It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks in succession may, in fact, be executed substantially concurrently, or they may sometimes be executed in the reverse order, depending upon the functionality involved. It should also be noted that each block of the block diagrams and/or flowchart illustrations, and combinations of blocks in the block diagrams and/or flowchart illustrations, can be implemented by a dedicated hardware-based system that performs the specified function or action , or may be implemented by a combination of dedicated hardware and computer instructions.

In addition, each functional module in each embodiment of the present disclosure may be integrated together to form an independent part, each module may exist independently, or two or more modules may be integrated to form an independent part. If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present disclosure is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, an electronic device 10, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present disclosure. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes. .

It should be noted that, in this document, the terms "comprising", "comprising" or any other variation thereof are intended to cover a non-exclusive inclusion such that a process, method, article or apparatus comprising a set of elements includes not only those elements, It also includes other elements not expressly listed, or elements inherent in the process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element. In addition, the terms "first", "second", etc. are only used for distinguishing descriptions, and should not be construed as indicating or implying relative importance.

The above descriptions are only optional embodiments of the present disclosure, and are not intended to limit the present disclosure. For those skilled in the art, the present disclosure may have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present disclosure shall be included within the protection scope of the present disclosure.

Claims (10)

1. An identity verification method, characterized in that it is applied to a server interacting with a client; the server has a block chain related to user login information, and the block chain includes a plurality of blocks, so The block includes a second field and a third field, the second field is the data of the block, including the user's identity information, the user's current login information and the time interval, and the third field is the block generation time ; the method comprising: receiving the user's login request and the first block sent by the client; Searching for the second block generated by the user's last login according to the login request and the first block; Decrypting the second field and the third field of the second block to obtain a first time interval; generating a third block according to the first time interval; The third block is compared with the first block, and if the third block is consistent with the first block, it is determined that the user identity verification is passed. 2. The identity verification method according to claim 1, wherein the method further comprises: After the user authentication is passed, a new time interval is set; Generate a new block again according to the new time interval and current login information, and encrypt the second field and the third field of the new block; Save the new block locally. 3. The identity verification method according to claim 1, wherein the block further includes a first field and a fourth field; wherein, The first field is the hash value of the previous block; The fourth field is a hash value of the block itself, and the hash value is calculated from the first field, the second field and the third field through a hash function. 4. The identity verification method according to claim 3, wherein the step of generating a third block according to the first time interval comprises: Obtain the fields of the block generated by the user's last login; adding field values in said field to said first time interval to generate a new field; A hash value is calculated on the new field by using a hash function to generate a third block. 5. An identity verification method, characterized in that it is applied to a user end interacting with a server; the user end has a block chain related to user login information, and the block chain includes a plurality of blocks, so The block includes a second field and a third field, the second field is the data of the block, including the user's identity information, the user's current login information and the time interval, and the third field is the block generation time ; the method comprising: Sending a login request to the server, receiving the fourth block sent by the server, the fourth block was generated and saved in the server during the last login; Decrypting the second field and the third field of the fourth block to obtain a second time interval; Generate a new block according to the second time interval, and send the new block to the server for identity verification. 6. The identity verification method according to claim 5, wherein the method further comprises: After the user authentication is passed, set a new time interval, so that the server generates a new block according to the new time interval and saves it locally on the server, and sends it to the user for the next login . 7. The identity verification method according to claim 5, wherein the block further includes a first field and a fourth field; wherein, The first field is the hash value of the previous block; The fourth field is a hash value of the block itself, and the hash value is calculated from the first field, the second field and the third field through a hash function. 8. The identity verification method according to claim 7, wherein the step of generating a new block according to the second time interval, and sending the new block to the server for identity verification includes : Obtain the third field in the fourth block sent by the server; adding a field value in the third field to the second time interval to generate a new third field; calculating a hash value for the new third field according to a hash function to generate the new block; Comparing the third field value in the new block with the current time, if within the set range, sending the new block to the server; if not within the set range, repeating The process of generating the new third field is to continue to generate new blocks until the comparison value between the value of the third field in the generated new block and the current time is within a set range. 9. An identity verification device, characterized in that it is applied to a server interacting with a client; the identity verification device includes a receiving module, a search module, a first storage module, a first execution module, a verification module and a first generation module; The first storage module is used to store a block chain related to user login information, the block chain includes a plurality of blocks, and the block includes a first field, a second field, a third field and a fourth field , the first field is the hash value of the previous block, the second field is the data of the block, including the user’s identity information, the user’s current login information and time interval, and the third field is block generation time, the fourth field is the hash value of the block itself, and the hash value is calculated from the first field, the second field and the third field through a hash function; The receiving module is used to receive the user's login request and the first block sent by the client; The search module is used to search for the second block generated by the user's last login according to the login request and the first block; The first execution module is used to decrypt the second field and the third field of the second block to obtain a first time interval; The first generating module is configured to generate a third block according to the first time interval; The verification module is used for comparing the first block with the third block to perform identity verification. 10. An identity verification device, characterized in that it is applied to a user end interacting with a server, and the identity verification device includes a second storage module, a second execution module, and a second generation module; The second storage module is used to store a block chain related to user login information, the block chain includes a plurality of blocks, and the block includes a first field, a second field, a third field and a fourth field , the first field is the hash value of the previous block, the second field is the data of the block, including the user’s identity information, the user’s current login information and time interval, and the third field is block generation time, the fourth field is the hash value of the block itself, and the hash value is calculated from the first field, the second field and the third field through a hash function; The second execution module is used to send a login request to the server, and decrypt the second field and the third field of the fourth block to obtain a second time interval, and the fourth block passes the service The terminal sends it to the user terminal to obtain it during this login; the fourth block is generated and saved in the server terminal during the previous login; The second generation module is used to generate a new block according to the second time interval, and send the new block to the server for identity verification.