Authentication method and device, and blockchain-based authentication data processing method and device

1. An authentication method, comprising: receiving an authentication request from a user, the authentication request including an identity identifier of the user;

acquiring first authentication data associated with the identity identifier from a blockchain network, a blockchain node of the blockchain network storing identity identifiers, respective authentication data of the identity identifiers, and a mapping relationship between the identity identifiers and the respective authentication data, the respective authentication data stored on the blockchain node including at least one authentication result indicating failed authentication, and the first authentication data including an authentication result indicating successful or failed authentication; and

performing identity authentication for the user according to the first authentication data acquired from the blockchain network and storing new authentication data on the blockchain node, wherein performing the identity authentication comprises:

determining an authentication status of the identity identifier based on the first authentication data acquired from the blockchain network;

in response to the identity identifier being in an abnormal state or an authentication failed state, determining that the identity authentication for the user is not successful; and

in response to the identity identifier not being in an abnormal state or an authentication failed state, determining that the identity authentication for the user is successful.

2. The authentication method according to claim 1 , further comprising:

in response to the authentication request including a public key and a digital signature, verifying whether the digital signature is valid using the public key; and

the acquiring the first authentication data associated with the identity identifier from the blockchain network comprises:

in response to a verification result indicating that the digital signature is valid, acquiring the first authentication data associated with the identity identifier from the blockchain network.

3. The authentication method according to claim 1 , wherein the acquiring the first authentication data associated with the identity identifier from the blockchain network comprises:

obtaining authentication data including the identity identifier from the blockchain network; and

determining the obtained authentication data as the first authentication data associated with the identity identifier.

4. The authentication method according to claim 3 , further comprising:

in response to the obtained authentication data including a plurality of pieces of authentication data, selecting, from the obtained authentication data, a piece of authentication data satisfying a preset condition; and

determining the selected piece of authentication data as the first authentication data associated with the identity identifier.

5. The authentication method according to claim 4 , wherein the preset condition comprises at least one of:

a generation time associated with the selected piece of authentication data satisfies a preset time condition;

an institution identifier associated with the selected piece of authentication data satisfies a preset issuing institution's institution identifier; or

a service type associated with the selected piece of authentication data matches a service type of a service initiated by the user.

6. The authentication method according to claim 1 , further comprising:

generating the first authentication data according to the authentication result, the first authentication data including the identity identifier of the user, an institution identifier of an institution that generates the authentication result, and the authentication result; and

storing the first authentication data to the blockchain node of the blockchain network.

7. The authentication method according to claim 6 , wherein the storing the first authentication data to the blockchain node of the blockchain network comprises:

sending the first authentication data to the blockchain network for consensus processing; and

in response to a consensus being reached, storing the first authentication data to the blockchain node of the blockchain network.

8. The authentication method according to claim 1 , wherein after the determining that the identity authentication for the user is successful, the method further comprises:

acquiring, according to a service type of a service requested by the user, identity feature information of the user associated with the service type from an identity information management server;

generating second authentication data according to an authentication result and the identity feature information, the second authentication data including the identity identifier of the user, an institution identifier of an institution that generates the authentication result, an authentication event of authenticating the identity feature information, and the authentication result; and

storing the second authentication data to the blockchain node of the blockchain network.

9. An authentication device, comprising:

a memory storing instructions; and

at least one processor configured to execute the instructions to:

receive an authentication request from a user, the authentication request including an identity identifier of the user;

acquire first authentication data associated with the identity identifier from a blockchain network, a blockchain node of the blockchain network storing identity identifiers, respective authentication data of the identity identifiers, and a mapping relationship between the identity identifiers and the respective authentication data, the respective authentication data stored on the blockchain node including at least one authentication result indicating failed authentication, and the first authentication data including an authentication result indicating successful or failed authentication; and

perform identity authentication for the user according to the first authentication data acquired from the blockchain network and store new authentication data on the blockchain node, wherein performing the identity authentication comprises:

determining an authentication status of the identity identifier based on the first authentication data acquired from the blockchain network;

in response to the identity identifier being in an abnormal state or an authentication failed state, determining that the identity authentication for the user is not successful; and

in response to the identity identifier not being in an abnormal state or an authentication failed state, determining that the identity authentication for the user is successful.

10. The authentication device according to claim 9 , wherein the at least one processor is further configured to execute the instructions to:

if the authentication request includes a public key and a digital signature, verify whether the digital signature is valid by using the public key;

wherein acquiring the first authentication data associated with the identity identifier from the blockchain network comprises:

if a verification result indicates that the digital signature is valid, acquiring the first authentication data associated with the identity identifier from the blockchain network.

11. The authentication device according to claim 9 , wherein in acquiring the first authentication data associated with the identity identifier from the blockchain network, the at least one processor is further configured to execute the instructions to:

obtain authentication data including the identity identifier from the blockchain network; and

determine the obtained authentication data as the first authentication data associated with the identity identifier.

12. A non-transitory computer readable medium storing a set of instructions that, when executed by a processor of a device, cause the device to perform an authentication method, the method comprising:

receiving an authentication request from a user, the authentication request including an identity identifier of the user;

acquiring first authentication data associated with the identity identifier from a blockchain network, a blockchain node of the blockchain network storing identity identifiers, respective authentication data of the identity identifiers, and a mapping relationship between the identity identifiers and the respective authentication data, the respective authentication data stored on the blockchain node including at least one authentication result indicating failed authentication, and the first authentication data including an authentication result indicating successful or failed authentication; and

performing identity authentication for the user according to the first authentication data acquired from the blockchain network and storing new authentication data on the blockchain node, wherein performing the identity authentication comprises:

determining an authentication status of the identity identifier based on the first authentication data acquired from the blockchain network;

in response to the identity identifier being in an abnormal state or an authentication failed state, determining that the identity authentication for the user is not successful; and

in response to the identity identifier not being in an abnormal state or an authentication failed state, determining that the identity authentication for the user is successful.

13. The authentication device according to claim 11 , wherein the at least one processor is further configured to execute the instructions to:

in response to the obtained authentication data including a plurality of pieces of authentication data, select, from the obtained authentication data, a piece of authentication data satisfying a preset condition; and

determine the selected piece of authentication data as the first authentication data associated with the identity identifier.

14. The authentication device according to claim 13 , wherein the preset condition comprises at least one of:

a generation time associated with the selected piece of authentication data satisfies a preset time condition;

an institution identifier associated with the selected piece of authentication data satisfies a preset issuing institution's institution identifier; or

a service type associated with the selected piece of authentication data matches a service type of a service initiated by the user.

15. The authentication device according to claim 9 , wherein the at least one processor is further configured to execute the instructions to:

generate the first authentication data according to the authentication result, the first authentication data including the identity identifier of the user, an institution identifier of an institution that generates the authentication result, and the authentication result; and

store the first authentication data to the blockchain node of the blockchain network.

16. The authentication device according to claim 15 , wherein in storing the first authentication data to the blockchain node of the blockchain network, the at least one processor is further configured to execute the instructions to:

send the first authentication data to the blockchain network for consensus processing; and

in response to a consensus being reached, store the first authentication data to the blockchain node of the blockchain network.

17. The authentication device according to claim 9 , wherein after the determining that the identity authentication for the user is successful, the at least one processor is further configured to execute the instructions to:

acquire, according to a service type of a service requested by the user, identity feature information of the user associated with the service type from an identity information management server;

generate second authentication data according to an authentication result and the identity feature information, the second authentication data including the identity identifier of the user, an institution identifier of an institution that generates the authentication result, an authentication event of authenticating the identity feature information, and the authentication result; and

store the second authentication data to the blockchain node of the blockchain network.