Method and device employing smart contract to realize identity-based key management
Provided are a method and device employing a smart contract to realize identity-based key management. The method comprises: running a smart contract, and executing a key management process, wherein the key management process comprises: when a key of a target user requires an update and the target user is not a supervised user, generating a master public key and a master private key pertaining to the target user; acquiring, from a blockchain, identity information of the target user; generating a first target private key according to the master public key and the master private key pertaining to the target user and the identity information of the target user; and replacing a current private key of the target user with the first target private key.
1. A method for implementing identity-based key management by using a smart contract, comprising:
running the smart contract to execute a key management process, wherein the key management process comprises:
responsive to that a key of a target user needs to be updated and the target user is an unsupervised user, generating a master public key and a master private key belonging to the target user;
acquiring identity information of the target user from a blockchain;
generating a first target private key based on the master public key and the master private key belonging to the target user and the identity information of the target user; and
replacing a present private key of the target user with the first target private key.
2. The method of claim 1 , wherein the key management process further comprises:
responsive to that the target user is an unsupervised user and the present private key of the target user is leaked, or responsive to that the target user is a supervised user, acquiring the identity information of the target user from the blockchain;
updating the identity information of the target user, and taking the updated identity information as target identity information;
generating a second target private key by using the target identity information; and
replacing the present private key of the target user with the second target private key.
3. The method of claim 2 , wherein updating the identity information of the target user comprises:
updating a variable part of the identity information of the target user.
4. The method of claim 1 , wherein the key management process further comprises:
querying the blockchain for state information of first target identity information of a user stored in the blockchain.
5. The method of claim 1 , wherein the key management process further comprises:
signing, with a historical private key used by the target user, state information associated with the first target private key.
6. A device for implementing identity-based key management by using a smart contract, comprising:
a processor; and
a memory configured to store instructions that, when executed by the processor, cause the processor to run the smart contract to execute a key management process, wherein the key management process comprises:
responsive to that a key of a target user needs to be updated and the target user is an unsupervised user, generating a master public key and a master private key belonging to the target user;
acquiring identity information of the target user from a blockchain;
generating a first target private key based on the master public key and the master private key belonging to the target user and the identity information of the target user; and
replacing a present private key of the target user with the first target private key.
7. The device of claim 6 , wherein the key management process further comprises:
responsive to that the target user is an unsupervised user and the present private key of the target user is leaked, or responsive to that the target user is a supervised user, acquiring the identity information of the target user from the blockchain;
updating the identity information of the target user, and taking the updated identity information as target identity information;
generating a second target private key by using the target identity information; and
replacing the present private key of the target user with the second target private key.
8. The device of claim 7 , wherein in the key management process, updating the identity information of the target user comprises:
updating a variable part of the identity information of the target user.
9. The device of claim 6 , wherein the key management process further comprises:
querying the blockchain for state information of first target identity information of a user stored in the blockchain.
10. The device of claim 6 , wherein the key management process further comprises:
signing, with a historical private key used by the target user, state information associated with the first target private key.
11. A non-transitory computer-readable storage medium having stored thereon instructions, wherein the instructions, when executed by a processor, cause the processor to implement a method for implementing identity-based key management by using a smart contract, comprising:
running the smart contract to execute a key management process, wherein the key management process comprises:
responsive to that a key of a target user needs to be updated and the target user is an unsupervised user, generating a master public key and a master private key belonging to the target user;
acquiring identity information of the target user from a blockchain;
generating a first target private key based on the master public key and the master private key belonging to the target user and the identity information of the target user; and
replacing a present private key of the target user with the first target private key.
12. The non-transitory computer-readable storage medium of claim 11 , wherein the key management process further comprises:
responsive to that the target user is an unsupervised user and the present private key of the target user is leaked, or responsive to that the target user is a supervised user, acquiring the identity information of the target user from the blockchain;
updating the identity information of the target user, and taking the updated identity information as target identity information;
generating a second target private key by using the target identity information; and
replacing the present private key of the target user with the second target private key.
13. The non-transitory computer-readable storage medium of claim 12 , wherein updating the identity information of the target user comprises:
updating a variable part of the identity information of the target user.
14. The non-transitory computer-readable storage medium of claim 11 , wherein the key management process further comprises:
querying the blockchain for state information of first target identity information of a user stored in the blockchain.
15. The non-transitory computer-readable storage medium of claim 11 , wherein the key management process further comprises:
signing, with a historical private key used by the target user, state information associated with the first target private key.