Blockchain-based user element authorization methods and apparatuses

A computer-implemented system comprising a node device in a blockchain, wherein the node device comprises:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• receiving, by the node device in the blockchain, a smart contract invocation transaction, wherein the smart contract invocation transaction comprises (i) an encrypted to-be-authenticated user element that is provided by a user client and that is used to determine authenticity of a user identity and (ii) an identifier of a target user element authentication authority specified by the user client, wherein a smart contract used to manage a user element authentication procedure is deployed in the blockchain, and wherein the target user element authentication authority is one of a plurality of user element authentication authorities connected to the node device;
• in response to the smart contract invocation transaction, invoking, by the node device in the blockchain, encryption conversion logic in the smart contract;
• decrypting, by the node device in the blockchain, the encrypted to-be-authenticated user element in a trusted computing environment on the node device to obtain a decrypted to-be-authenticated user element;
• querying, by the node device in the blockchain, using the identifier of the target user element authentication authority specified by the user client, a predetermined encryption key table to determine a target secondary encryption key corresponding to the target user element authentication authority;
• performing, by the node device in the blockchain, secondary encryption processing on the decrypted to-be-authenticated user element based on the target secondary encryption key to obtain a re-encrypted to-be-authenticated user element, wherein a target decryption key corresponding to the target secondary encryption key used to perform the secondary encryption processing is maintained by the target user element authentication authority;
• obtaining, by the node device in the blockchain, an authentication result submitted by the target user element authentication authority to the smart contract for the encrypted to-be-authenticated user element, wherein the authentication result is obtained by the target user element authentication authority by decrypting the re-encrypted to-be-authenticated user element based on the target decryption key to obtain a re-decrypted to-be-authenticated user element, and performing user element authentication based on the re-decrypted to-be-authenticated user element;
• and
• storing, by the node device in the blockchain, the authentication result in a distributed ledger of the blockchain, wherein the authentication result is received from the distributed ledger of the blockchain by an authentication result user connected to the blockchain to determine authenticity of the user identity provided by the user client.

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

• receiving, by a node device in a blockchain, a smart contract invocation transaction, wherein the smart contract invocation transaction comprises (i) an encrypted to-be-authenticated user element that is provided by a user client and that is used to determine authenticity of a user identity and (ii) an identifier of a target user element authentication authority specified by the user client, wherein a smart contract used to manage a user element authentication procedure is deployed in the blockchain, and wherein the target user element authentication authority is one of a plurality of user element authentication authorities connected to the node device;
• in response to the smart contract invocation transaction, invoking, by the node device in the blockchain, encryption conversion logic in the smart contract;
• decrypting, by the node device in the blockchain, the encrypted to-be-authenticated user element in a trusted computing environment on the node device to obtain a decrypted to-be-authenticated user element;
• querying, by the node device in the blockchain, using the identifier of the target user element authentication authority specified by the user client, a predetermined encryption key table to determine a target secondary encryption key corresponding to the target user element authentication authority;
• performing, by the node device in the blockchain, secondary encryption processing on the decrypted to-be-authenticated user element based on the target secondary encryption key to obtain a re-encrypted to-be-authenticated user element, wherein a target decryption key corresponding to the target secondary encryption key used to perform the secondary encryption processing is maintained by the target user element authentication authority;
• obtaining, by the node device in the blockchain, an authentication result submitted by the target user element authentication authority to the smart contract for the encrypted to-be-authenticated user element, wherein the authentication result is obtained by the target user element authentication authority by decrypting the re-encrypted to-be-authenticated user element based on the target decryption key to obtain a re-decrypted to-be-authenticated user element, and performing user element authentication based on the re-decrypted to-be-authenticated user element;
• and
• storing, by the node device in the blockchain, the authentication result in a distributed ledger of the blockchain, wherein the authentication result is received from the distributed ledger of the blockchain by an authentication result user connected to the blockchain to determine authenticity of the user identity provided by the user client.