Trusted hardware-based identity management methods, apparatuses, and devices

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

• determining personal identity information of a user of a trusted hardware;
• determining hardware identifier information of the trusted hardware;
• generating, by a target application, a decentralized identifier (DID) binding request based on the personal identity information, the hardware identifier information, and application identification information obtained during registration of a target DID registered by the user, wherein the DID binding request is configured to request to establish a corresponding relationship between the trusted hardware and the target DID using the target application;
• sending the DID binding request to a decentralized identity service (DIS);
• receiving a private key from the DIS, wherein the private key and a corresponding public key are generated by the DIS based on the corresponding relationship, and wherein the public key is stored in a DID document of the user;
• and
• storing the private key in the trusted hardware.

A computer-implemented system, comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• determining personal identity information of a user of a trusted hardware;
• determining hardware identifier information of the trusted hardware;
• generating, by a target application, a decentralized identifier (DID) binding request based on the personal identity information, the hardware identifier information, and application identification information obtained during registration of a target DID registered by the user, wherein the DID binding request is configured to request to establish a corresponding relationship between the trusted hardware and the target DID using the target application;
• sending the DID binding request to a decentralized identity service (DIS);
• receiving a private key from the DIS, wherein the private key and a corresponding public key are generated by the DIS based on the corresponding relationship, and wherein the public key is stored in a DID document of the user;
• and
• storing the private key in the trusted hardware.