Blockchain-based alliance trust distributed identity certificate management authentication method

Abstract

The invention relates to a blockchain-based alliance trust distributed identity certificate management authentication method, which comprises the following steps of: (1) taking a network entity capable of issuing a digital identity certificate in an alliance as a certificate issuer, taking a network entity for verifying the authenticity of the digital identity certificate in the alliance as a certificate verifier, and taking the network entity with the digital identity certificate in the alliance as a certificate holder, wherein the alliance digital identity certificate is a distributed network entity identity attribute set associated with the alliance distributed identity identifier, and therefore the distributed network entity adapts to distributed cross-domain identity authentication indifferent application scenes in the alliance; generating an alliance digital identity certificate through attribute assignment according to the definition of the alliance digital identity certificate; (2) issuing, verifying, updating and cancelling the full life cycle of the alliance digital identity certificate, and providing unified and safe cross-domain identity authentication in different application scenes in the alliance for the distributed heterogeneous network entity in the alliance.

Description

technical field [0001] The invention belongs to the field of identity authentication security in the field of information security, and in particular relates to a block chain-based alliance trust distributed identity credential management authentication method. Background technique [0002] In recent years, with the rapid development of technologies such as the Internet of Things, Internet+, 5G, and big data, the information interaction among distributed heterogeneous network entities such as personnel and equipment in alliance organizations has been increasing, and the multi-party Increased demand for collaboration and data fusion. As the first pass to protect the security of distributed application information systems, identity authentication is becoming more and more important to achieve mutual trust between network entities through reliable identification of the identity information of each distributed network entity. However, due to the lack of interoperability of iden...

AI Technical Summary

Problems solved by technology

[0003] Existing identity authentication schemes based on blockchain technology cannot achieve independent control of user identity information and easy-to-extend cross-domain unified alliance trust for distributed heterogeneous network entities such as personnel, equipment, enterprises, and organizations in alliance organizations Distributed Identity Authentication

The patent "Identity Authentication System Based on Blockchain Technology and Its Implementation Method" (CN202010372661.2) proposes an identity authentication system architecture based on blockchain, and the realization of processes such as real-name registration, identity authentication, and cascade authentication, but in different application scenarios The same digital identity is used for identity authentication, which cannot meet the application requirements of digital identities in different scenarios. At the same time, identity information is easily collected, resulting in the leakage of identity information; Distributed heterogeneous network entities cannot flexibly and autonomously control identity information to prevent the leakage of identity privacy

The patent "A Consortium Chain-Oriented Identity Authentication Method" (CN202010046737.2) provides a scheme for users to jointly participate in key generation and realize identity authentication under the condition of mutual distrust, but users cannot independently control and complete identity generation , registration, update, and revocation; in different application scenarios, the same private key is used to represent the identity, and the identity information is also easily collected, resulting in the leakage of the user's entire identity information and making it face security risks

Images