A Blockchain-based Identity Information Authorization Mechanism Design And System Implementation

Identity information is the basic social attribute of people,directly or indirectly related to personal home address,work,wealth,health and other information.Most social services or companies need to obtain personal identity authorization to confirm their validity and legitimacy.Copy of the user's identity certificate is usually kept by the service provider.The security of identity information depends on the trustworthiness of the service provider.It is easy to leak the user's identity information due to a single point of security failure or untrustworthy service provider,and then cause various social problems.On the one hand,duplicate identity documents can be copied without restriction,resulting in insecure personal information.On the other hand,there are some illegal individuals who use other personally identifiable information to obtain illegal benefits,which also brings trouble to social governance.In the current social system,there is an urgent need for a mechanism or technical means to achieve credible,safe,reliable,and traceable authentication of identity information authorization records.On the one hand,it requires that identity information authorization is effective and confidential;on the other hand,it requires identity information Information authorization records are reliable and verifiable.The blockchain uses distributed storage of transaction records and collective maintenance as its technical characteristics,which provides ideas for the management of identity information authorization.Its advantages are: First,the blockchain distributed consistency technology is easy to realize the collection and storage of identity authorization information in social business,and it is convenient for individuals to inquire about the use of identity information;secondly,through signature technology,it can be realized without personal permission.Under circumstances,the business party cannot use personal identification information,even if it is used,it is easy to prove that it is not authorized by the person and is not recognized;third,in the event of a dispute,the authorization information recorded by the blockchain can provide strong evidence for public security,courts and other social management agencies,which is conducive to the fair resolution of disputes.Therefore,this paper proposes a blockchain-based identity information authorization mechanism(BIA)to effectively solve the security and reliability of identity information authorization records.First,this paper designs an identity authentication module,which is used to read the identity information certificate file and convert the identity plaintext into ciphertext under the authorization of the user's identity certificate and password.The identity authentication module ensures the security of identity information by keeping its identity information data offline.Secondly,this paper designs a business contract module to provide a general smart contract framework that can be used by most social or corporate services for identity information authorization.Third,this article developed a dual-chain blockchain infrastructure to record encrypted identity information and business authorization contracts in a tamper-proof,undeniable and publicly verifiable manner.Finally,a prototype system was developed to verify the security,feasibility and effectiveness of the identity authorization mechanism(BIA)proposed in this paper.