Digital certificate management method and apparatus, and electronic device

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

• receiving a linking request from a node requesting to be linked to a blockchain network, the linking request comprising a to-be-verified digital certificate indicating identity information of the node, wherein the to-be-verified digital certificate comprises one or more of a validity period of the to-be-verified digital certificate or a version number of the to-be-verified digital certificate;
• receiving a plurality of consensus verification messages from a plurality of blockchain nodes of the blockchain network, each consensus verification message indicating whether a respective blockchain node of the plurality of blockchain nodes approves or denies the linking request, wherein each blockchain node of the plurality of blockchain nodes performs a portion of a verification process based on a pre-agreed verification standard, and wherein at least one blockchain node of the plurality of blockchain nodes performs the portion of the verification process by verifying the validity period of the to-be-verified digital certificate or by verifying the version number of the to-be-verified digital certificate;
• determining, based on the plurality of consensus verification messages, a ratio of a total number of blockchain nodes that approve the linking request to a total number of all blockchain nodes in the blockchain network is greater than a threshold number;
• in response to determining that the ratio of the total number of blockchain nodes that approve the linking request to the total number of all blockchain nodes in the blockchain network is greater than the threshold number, determining that the linking request is approved by the plurality of blockchain nodes;
• in response to determining that the linking request is approved by the plurality of blockchain nodes, storing the to-be-verified digital certificate into the blockchain network, the to-be-verified digital certificate being stored as a digital certificate of the node;
• receiving a revocation request from a blockchain node of the blockchain network, the revocation request comprising a digital certificate of a target node that is being requested to be revoked;
• receiving one or more revocation consensus messages from at least one blockchain node of the blockchain network, each revocation consensus message indicating whether a respective blockchain node of the blockchain network approves or denies the revocation request;
• determining a revocation consensus result based on the one or more revocation consensus messages;
• determining, based on the revocation consensus result, that the revocation request is approved by the at least one blockchain node of the blockchain network;
• and
• in response to determining that the revocation request is approved by the at least one block node, revoking the digital certificate of the target node from digital certificates stored in the blockchain network.

A computer-implemented system, comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• receiving a linking request from a node requesting to be linked to a blockchain network, the linking request comprising a to-be-verified digital certificate indicating identity information of the node, wherein the to-be-verified digital certificate comprises one or more of a validity period of the to-be-verified digital certificate or a version number of the to-be-verified digital certificate;
• receiving a plurality of consensus verification messages from a plurality of blockchain nodes of the blockchain network, each consensus verification message indicating whether a respective blockchain node of the plurality of blockchain nodes approves or denies the linking request, wherein each blockchain node of the plurality of blockchain nodes performs a portion of a verification process based on a pre-agreed verification standard, and wherein at least one blockchain node of the plurality of blockchain nodes performs the portion of the verification process by verifying the validity period of the to-be-verified digital certificate or by verifying the version number of the to-be-verified digital certificate;
• determining, based on the plurality of consensus verification messages, a ratio of a total number of blockchain nodes that approve the linking request to a total number of all blockchain nodes in the blockchain network is greater than a threshold number;
• in response to determining that the ratio of the total number of blockchain nodes that approve the linking request to the total number of all blockchain nodes in the blockchain network is greater than the threshold number, determining, based on the consensus verification result, that the linking request is approved by the plurality of blockchain nodes;
• in response to determining that the linking request is approved by the plurality of blockchain nodes, storing the to-be-verified digital certificate into the blockchain network, the to-be-verified digital certificate being stored as a digital certificate of the node;
• receiving a revocation request from a blockchain node of the blockchain network, the revocation request comprising a digital certificate of a target node that is being requested to be revoked;
• receiving one or more revocation consensus messages from at least one blockchain node of the blockchain network, each revocation consensus message indicating whether a respective blockchain node of the blockchain network approves or denies the revocation request;
• determining a revocation consensus result based on the one or more revocation consensus messages;
• determining, based on the revocation consensus result, that the revocation request is approved by the at least one blockchain node of the blockchain network;
• and
• in response to determining that the revocation request is approved by the at least one block node, revoking the digital certificate of the target node from digital certificates stored in the blockchain network.