TECHNICAL FIELD

This specification relates to identity authentication technology and data security.

BACKGROUND

Identity authentication technology is commonly used in computer networks to verify user identity and ensure data security. Identity information, as other information digitally stored or communicated in the computer networks, can be represented by a set of data. Computers can identify and authenticate a user based on a digital identity of the user. For data security, it is important to ensure that a digital identity belongs to an authorized user, or in other words, the digital identity matches the actual identity.

As technology has evolved, decentralized systems, such as blockchain networks and Internet of things (IoT) networks have emerged. Under decentralized systems, it is possible for individuals to safely self-store their own identity information. For example, a user can hold a digital wallet, which stores a private key that the user can use to add a digital signature to authorize transactions in a blockchain network or on IoT devices. The private key is normally stored as a data string with cryptographic semantics on a computing device and is intended to be only accessible to the user. As other data strings, the private key can potentially be copied and shared. Any users who have the private key can control digital assets associated with the private key. Moreover, the digital assets cannot be retrieved if the private key is lost. Therefore, secure storage and efficient use of cryptographic keys can be important.

It would be desirable to develop a key management technology that can safely manage cryptographic keys based on the true identity of a user.

SUMMARY

This specification describes technologies for managing cryptographic keys based on user identity information. These technologies generally involve receiving, by an identity cryptographic chip (ICC), biometric information and a request for storing a user key pair to a memory on the ICC, determining that the biometric information matches biometric information pre-stored on the chip, and encrypting and storing the user key pair to the memory on the ICC.

This specification also provides one or more non-transitory computer-readable storage media coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations in accordance with embodiments of the methods provided herein.

This specification further provides a system for implementing the methods provided herein. The system includes one or more processors, and a computer-readable storage medium coupled to the one or more processors having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations in accordance with embodiments of the methods provided herein.

It is appreciated that methods in accordance with this specification may include any combination of the aspects and features described herein. That is, methods in accordance with this specification are not limited to the combinations of aspects and features specifically described herein, but also include any combination of the aspects and features provided.

The details of one or more embodiments of this specification are set forth in the accompanying drawings and the description below. Other features and advantages of this specification will be apparent from the description and drawings, and from the claims.

