Identity authentication method, electronic device and computer-readable storage medium

An electronic device, comprising:

• at least one processor;
• and
• a memory in communication connection with the at least one processor, wherein
• the memory stores instructions which are executed by the at least one processor, and the instructions are executed by the at least one processor, so that the at least one processor executes the following operations:
• acquiring an identity proof of a user, wherein the identity proof comprises an identity attribute of the user and a Merkle root verification path, and the Merkle root verification path in the identity proof is a verification path obtained when the identity proof is generated and based on an identity attribute selected by the user to be disclosed;
• deducing the Merkle root verification path according to the disclosed identity attribute in the identity proof;
• and
• authenticating the identity proof of the user according to the deduced verification path and the verification path in the identity proof;
• wherein the identity proof is generated in the following manner:
• determining an identity credential issued to the user, wherein the identity proof comprises:
• all the identity attributes of the user, a Merkle root of all the identity attributes, and an institution signature made by the issuing institution of the identity credential on the Merkle root by using the private key of the issuing institution;
• determining, among all the identity attributes in the identity credential, an identity attribute selected by the user to be disclosed;
• obtaining the verification path according to the identity attribute selected by the user to be disclosed;
• and
• generating the identity proof according to the identity attribute selected by the user to be disclosed, the verification path and the institution signature, and signing the identity proof by using the private key of the user to obtain a user signature, so as to obtain an identity proof including the user signature.

A non-transitory computer readable storage medium, storing a computer program, wherein the computer program, when executed by a processor causes the processor to execute the following operations:

• acquiring an identity proof of a user, wherein the identity proof comprises an identity attribute of the user and a Merkle root verification path, and the Merkle root verification path in the identity proof is a verification path obtained when the identity proof is generated and based on an identity attribute selected by the user to be disclosed;
• deducing the Merkle root verification path according to the disclosed identity attribute in the identity proof;
• and
• authenticating the identity proof of the user according to the deduced verification path and the verification path in the identity proof;
• wherein the identity proof is generated in the following manner:
• determining an identity credential issued to the user, wherein the identity proof comprises:
• all the identity attributes of the user, a Merkle root of all the identity attributes, and an institution signature made by the issuing institution of the identity credential on the Merkle root by using the private key of the issuing institution;
• determining, among all the identity attributes in the identity credential, an identity attribute selected by the user to be disclosed;
• obtaining the verification path according to the identity attribute selected by the user to be disclosed;
• and
• generating the identity proof according to the identity attribute selected by the user to be disclosed, the verification path and the institution signature, and signing the identity proof by using the private key of the user to obtain a user signature, so as to obtain an identity proof including the user signature.