System and method for mapping decentralized identifiers to real-world entities

1. A computer-implemented method of blockchain-based identity mapping, comprising:

receiving, by a server system, a request for obtaining a DID, the request comprising an identifier of a subject corresponding to the DID and a proof of identity authentication of the subject;

creating, by the server system, a DID document corresponding to the DID, wherein the DID document comprises a mapping relationship between the proof of identity authentication and the DID;

generating, by the server system, one or more blockchain transactions for creating the DID and adding the DID document to a blockchain;

sending, by the server system to one or more blockchain nodes associated with the blockchain, the one or more blockchain transactions for adding to the blockchain;

locating, by the server system, the proof of identity authentication based on the mapping relationship between the proof of identity authentication and the DID in the DID document; and

providing, by the server system, the proof of identity authentication to a computing device of a sender of a request for the proof of identity authentication.

2. The method of claim 1 , wherein the proof of identity authentication comprises:

a proof of real-person authentication; or

a proof of real-name authentication.

3. The method of claim 1 , wherein:

the identifier of the subject comprises an account identifier associated with an account of the subject; and

the request for obtaining the DID comprises a relationship between the proof of identity authentication and the account identifier.

4. The method of claim 1 , further comprising, before creating the DID document, generating a cryptographic key pair that comprises a public key and a private key associated with the subject, wherein:

the DID document comprises the public key associated with the subject;

the generating one or more blockchain transactions comprises:

generating one or more unsigned blockchain transactions for creating the DID and adding the DID document to the blockchain; and

signing the one or more unsigned blockchain transactions using the private key associated with the subject.

5. The method of claim 4 , further comprising:

generating a key alias; and

storing locally, by the server system, a mapping relationship between the proof of identity authentication, the public key, and the key alias.

6. The method of claim 1 , further comprising, prior to the locating the proof of identity authentication:

receiving, by the server system, the request for the proof of identity authentication, the request for the proof of identity authentication comprising the DID; and

obtaining, by the server system from the blockchain, the DID document based on the DID.

7. The method of claim 1 , further comprising:

generating a verifiable claim (VC) based on the proof of identity authentication; and

uploading the VC to a service endpoint associated with the DID.

8. A non-transitory computer-readable storage medium for mapping decentralized identifiers (DIDs) to real-world entities, configured with instructions executable by one or more processors to cause the one or more processors to perform operations comprising:

receiving a request for obtaining a DID, the request comprising an identifier of a subject corresponding to the DID and a proof of identity authentication of the subject;

creating a DID document corresponding to the DID, wherein the DID document comprises a mapping relationship between the proof of identity authentication and the DID;

generating one or more blockchain transactions for creating the DID and adding the DID document to a blockchain;

sending, to one or more blockchain nodes associated with the blockchain, the one or more blockchain transactions for adding to the blockchain;

locating the proof of identity authentication based on the mapping relationship between the proof of identity authentication and the DID in the DID document; and

providing the proof of identity authentication to a computing device of a sender of a request for the proof of identity authentication.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the proof of identity authentication comprises:

a proof of real-person authentication; or

a proof of real-name authentication.

10. The non-transitory computer-readable storage medium of claim 8 , wherein:

the identifier of the subject comprises an account identifier associated with an account of the subject; and

the request for obtaining the DID comprises a relationship between the proof of identity authentication and the account identifier.

11. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise, before creating the DID document, generating a cryptographic key pair that comprises a public key and a private key associated with the subject, wherein:

the DID document comprises the public key associated with the subject;

the generating one or more blockchain transactions comprises:

generating one or more unsigned blockchain transactions for creating the DID and adding the DID document to the blockchain; and

signing the one or more unsigned blockchain transactions using the private key associated with the subject.

12. The non-transitory computer-readable storage medium of claim 11 , wherein the operations further comprise:

generating a key alias; and

storing locally, by the server system, a mapping relationship between the proof of identity authentication, the public key, and the key alias.

13. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise, prior to the locating the proof of identity authentication:

receiving the request for the proof of identity authentication, the request for the proof of identity authentication comprising the DID; and

obtaining, from the blockchain, the DID document based on the DID.

14. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise:

generating a verifiable claim (VC) based on the proof of identity authentication; and

uploading the VC to a service endpoint associated with the DID.

15. A system for mapping decentralized identifiers (DIDs) to real-world entities, comprising a processor and a non-transitory computer-readable storage medium storing instructions executable by the processor to cause the system to perform operations comprising:

receiving a request for obtaining a DID, the request comprising an identifier of a subject corresponding to the DID and a proof of identity authentication of the subject;

creating a DID document corresponding to the DID, wherein the DID document comprises a mapping relationship between the proof of identity authentication and the DID;

generating one or more blockchain transactions for creating the DID and adding the DID document to a blockchain;

sending, to one or more blockchain nodes associated with the blockchain, the one or more blockchain transactions for adding to the blockchain;

locating the proof of identity authentication based on the mapping relationship between the proof of identity authentication and the DID in the DID document; and

providing the proof of identity authentication to a computing device of a sender of a request for the proof of identity authentication.

16. The system of claim 15 , wherein the proof of identity authentication comprises:

a proof of real-person authentication; or

a proof of real-name authentication.

17. The system of claim 15 , wherein:

the identifier of the subject comprises an account identifier associated with an account of the subject; and

the request for obtaining the DID comprises a relationship between the proof of identity authentication and the account identifier.

18. The system of claim 15 , wherein the operations further comprise, before creating the DID document, generating a cryptographic key pair that comprises a public key and a private key associated with the subject, wherein:

the DID document comprises the public key associated with the subject;

the generating one or more blockchain transactions comprises:

generating one or more unsigned blockchain transactions for creating the DID and adding the DID document to the blockchain; and

signing the one or more unsigned blockchain transactions using the private key associated with the subject.

19. The system of claim 18 , wherein the operations further comprise:

generating a key alias; and

storing locally, by the server system, a mapping relationship between the proof of identity authentication, the public key, and the key alias.

20. The system of claim 15 , wherein the operations further comprise:

generating a verifiable claim (VC) based on the proof of identity authentication; and

uploading the VC to a service endpoint associated with the DID.