A system and method for credible authentication of container images based on blockchain technology

Abstract

The invention discloses a system and method for credible authentication of container images based on blockchain technology. The system includes image signature registration components, decentralized image trusted authentication components, image signature verification components, and image warehouses; the method includes: Step 1: The original author uploads the image to the image signature registration component, and the image signature registration component calculates the image author information, digital signature, image name, and image ID based on the image and integrates them into trusted authentication information, then writes the image to the decentralized image In the trusted authentication component, the mirror image and trusted authentication information are combined into a smart contract and written into the blockchain network, and the mirror image is uploaded to the mirror warehouse; Step 2: The downloader downloads the mirror image from the mirror warehouse, and performs digital signature calculation on the mirror image , and obtain the image and digital signature from the decentralized image trusted authentication component; Step 3: Compare and verify the two digital signatures, if they are the same, allow the image to be used, if not, deny the image to be used.

Description

technical field [0001] The present invention relates to the field of cloud native, in particular to a system and method for credible authentication of container images based on block chain technology. Background technique [0002] In the cloud-native field, application development and application deployment based on container technology need to be based on container images downloaded from remote locations, but the credibility authentication of downloaded images is an important security issue, as well as an issue of intellectual property protection. , At present, it is necessary to solve the problem of how to prevent the image from being tampered with after the image is uploaded to the server and when a user downloads and uses the image. Therefore, this patent application proposes a decentralized technology based on blockchain smart contract technology , to authenticate the container image. This method can solve the above problems well. The same technology can also perform co...

AI Technical Summary

Problems solved by technology

[0030] The technical problem to be solved by the present invention is that all existing image trust guarantee mechanisms are more or less defective, such as relying on centralized servers, etc. In the existing container image distribution technology, it is impossible to guarantee that the image in the image warehouse is the original image. The original version uploaded by the author cannot be guaranteed not to be tampered with in the middle. If it is tampered with, it will bring about hidden dangers of image security and intellectual property issues. The container image signature technology still relies on centralized authentication, and there are still risks. This system proposes a A blockchain-based decentralized trusted authentication mechanism to strengthen and solve image security authentication. The present invention provides a system for container image trusted authentication based on blockchain technology. The image publisher calculates the value of the image on the local computer Digital signature, and then write the image trusted authentication information including the digital signature into the trusted authentication component based on blockchain technology. The distributed cryptographic algorithm on the blockchain can ensure that no forgery will be made in the process , so publishers can safely share images on public mirror warehouses to solve the defects caused by existing technologies

Images