SYSTEM AND METHOD FOR BLOCKCHAIN-BASED AUTHENTICATION

• US 20200134614A1
• Filed: 12/23/2019
• Published: 04/30/2020
• Est. Priority Date: 02/28/2019
• Status: Abandoned Application

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: CHENG, Long, LI, Yanpeng
• Application Number:
  US16/725,937
• Publication Number:
  US 20200134614A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/2308 Concurrency control transaction processing G06F9/466
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for performing authentication. One of the methods includes: obtaining audit data for authentication against operation information associated with an executed transaction; generating a digital abstract of the audit data; retrieving a digital abstract of the operation information from a blockchain; and determining authenticity of the audit data by verifying the generated digital abstract of the audit data against the retrieved digital abstract of the operation information.

Claims

1. A computer-implemented authentication method, comprising:

obtaining a blockchain transaction identification of a blockchain transaction for storing a digital abstract of operation information to a blockchain;

obtaining audit data for authentication against the operation information;

generating a digital abstract of the audit data;

retrieving the digital abstract of the operation information from the blockchain according to the obtained blockchain transaction identification; and

determining authenticity of the audit data by verifying the generated digital abstract of the audit data against the retrieved digital abstract of the operation information.

2. The method of claim 1, wherein determining the authenticity of the audit data by verifying the generated digital abstract of the audit data against the retrieved digital abstract of the operation information comprises:

in response to determining that the generated digital abstract of the audit data is consistent with the retrieved digital abstract of the operation information, determining that the audit data is authentic; and

in response to determining that the generated digital abstract of the audit data is inconsistent with the retrieved digital abstract of the operation information, determining that the audit data is unauthentic.

3. The method of claim 1, before obtaining the audit data, further comprising:

in response to a login, generating a digital abstract of identity information for the login;

transmitting the digital abstract of the identity information to one or more nodes of the blockchain for storage in the blockchain;

obtaining a blockchain transaction identification associated with the digital abstract of the identity information;

executing the transaction;

generating the digital abstract of the operation information, wherein the operation information includes transaction information of the transaction and one or more of;

the digital abstract of the identity information, the identity information, and the blockchain transaction identification associated with the digital abstract of the identity information; and

transmitting the digital abstract of the operation information to one or more nodes of the blockchain for storage in the blockchain.

4. The method of claim 3, wherein transmitting the digital abstract of the operation information to one or more nodes of the blockchain for storage in the blockchain comprises:

writing the digital abstract of the operation information and a cryptographic process used for generating the digital abstract of the operation information into a blockchain contract; and

causing the one or more nodes to initiate a blockchain transaction to deploy the blockchain contact.

5. The method of claim 4, wherein:

generating the digital abstract of the audit data comprises generating the digital abstract of the audit data based on the cryptographic process used for generating the digital abstract of the operation information.

6. The method of claim 1, wherein the digital abstract of the operation information comprises a hash value of the operation information.

7. The method of claim 1, wherein:

the operation information comprises transaction information of the transaction.

8. An authentication system, comprising one or more processors and one or more non-transitory computer-readable memories coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the system to perform operations comprising:

obtaining a blockchain transaction identification of a blockchain transaction for storing a digital abstract of operation information to a blockchain;

obtaining audit data for authentication against the operation information;

generating a digital abstract of the audit data;

retrieving the digital abstract of the operation information from the blockchain according to the obtained blockchain transaction identification; and

determining authenticity of the audit data by verifying the generated digital abstract of the audit data against the retrieved digital abstract of the operation information.

9. The system of claim 8, wherein determining the authenticity of the audit data by verifying the generated digital abstract of the audit data against the retrieved digital abstract of the operation information comprises:

in response to determining that the generated digital abstract of the audit data is consistent with the retrieved digital abstract of the operation information, determining that the audit data is authentic; and

in response to determining that the generated digital abstract of the audit data is inconsistent with the retrieved digital abstract of the operation information, determining that the audit data is unauthentic.

10. The system of claim 8, wherein, before obtaining the audit data, the operations further comprise:

in response to a login, generating a digital abstract of identity information for the login;

transmitting the digital abstract of the identity information to one or more nodes of the blockchain for storage in the blockchain;

obtaining a blockchain transaction identification associated with the digital abstract of the identity information;

executing the transaction;

generating the digital abstract of the operation information, wherein the operation information includes transaction information of the transaction and one or more of;

the digital abstract of the identity information, the identity information, and the blockchain transaction identification associated with the digital abstract of the identity information; and

transmitting the digital abstract of the operation information to one or more nodes of the blockchain for storage in the blockchain.

11. The system of claim 10, wherein transmitting the digital abstract of the operation information to one or more nodes of the blockchain for storage in the blockchain comprises:

writing the digital abstract of the operation information and a cryptographic process used for generating the digital abstract of the operation information into a blockchain contract; and

causing the one or more nodes to initiate a blockchain transaction to deploy the blockchain contact.

12. The system of claim 11, wherein:

generating the digital abstract of the audit data comprises generating the digital abstract of the audit data based on the cryptographic process used for generating the digital abstract of the operation information.

13. The system of claim 8, wherein the digital abstract of the operation information comprises a hash of the operation information.

14. The system of claim 8, wherein the operation information comprises transaction information of the transaction.

15. A non-transitory computer-readable storage medium configured with instructions executable by one or more processors to cause the one or more processors to perform operations comprising:

obtaining a blockchain transaction identification of a blockchain transaction for storing a digital abstract of operation information to a blockchain;

obtaining audit data for authentication against the operation information;

generating a digital abstract of the audit data;

retrieving the digital abstract of the operation information from the blockchain according to the obtained blockchain transaction identification; and

determining authenticity of the audit data by verifying the generated digital abstract of the audit data against the retrieved digital abstract of the operation information.

16. The storage medium of claim 15, wherein determining the authenticity of the audit data by verifying the generated digital abstract of the audit data against the retrieved digital abstract of the operation information comprises:

in response to determining that the generated digital abstract of the audit data is consistent with the retrieved digital abstract of the operation information, determining that the audit data is authentic; and

in response to determining that the generated digital abstract of the audit data is inconsistent with the retrieved digital abstract of the operation information, determining that the audit data is unauthentic.

17. The storage medium of claim 15, wherein, before obtaining the audit data, the operations further comprise:

in response to a login, generating a digital abstract of identity information for the login;

transmitting the digital abstract of the identity information to one or more nodes of the blockchain for storage in the blockchain;

obtaining a blockchain transaction identification associated with the digital abstract of the identity information;

executing the transaction;

generating the digital abstract of the operation information, wherein the operation information includes transaction information of the transaction and one or more of;

the digital abstract of the identity information, the identity information, and the blockchain transaction identification associated with the digital abstract of the identity information; and

transmitting the digital abstract of the operation information to one or more nodes of the blockchain for storage in the blockchain.

18. The storage medium of claim 17, wherein transmitting the digital abstract of the operation information to one or more nodes of the blockchain for storage in the blockchain comprises:

writing the digital abstract of the operation information and a cryptographic process used for generating the digital abstract of the operation information into a blockchain contract; and

causing the one or more nodes to initiate a blockchain transaction to deploy the blockchain contact.

19. The storage medium of claim 18, wherein:

generating the digital abstract of the audit data comprises generating the digital abstract of the audit data based on the cryptographic process used for generating the digital abstract of the operation information.

20. The storage medium of claim 15, wherein the digital abstract of the operation information comprises a hash of the operation information.