Decentralized identity authentication system based on block chain

Abstract

The invention provides a decentralized identity authentication system based on a block chain. The decentralized identity authentication system mainly solves the problems that in the prior art, user identity information is likely to be illegally used and leaked, and the system stability is poor. The system comprises a plurality of server nodes with the same function and power, namely authentication nodes, and each authentication node comprises an identity information acquisition module, a real name authentication module, a data storage module, an identity information signature module and an access verification module. The identity information acquisition module is responsible for acquiring identity registration information of a user, the real-name authentication module is responsible for performing real-name authentication and encryption on the identity registration information of the user, the data storage module is used for storing the encrypted identity information of the user by adopting a block + chain structure, and the identity information signature module is responsible for acquiring identity signature information of the user; and the access verification module is responsible for performing access verification on the identity signature module of the user. According to the invention, the security and stability of the decentralized identity authentication system are improved, and the method can be used for computers and computer networks.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a decentralized identity authentication system, which can be used in computers and computer networks. Background technique [0002] Network identity authentication refers to the process of confirming the identity of the operator in the computer and computer network system. It is mainly used to judge whether the user can access or use certain resources, so as to effectively prevent attackers from obtaining resources by pretending to be identities, and ensure system security and visitor security. legal rights. [0003] Network identity authentication systems (referred to as identity authentication systems) can be divided into three types according to different system architectures: centralized, distributed, and decentralized. A central identity authentication system refers to a system with only a single authentication server in the system. Its advantages lie i...

AI Technical Summary

Problems solved by technology

However, the central identity authentication system has the following disadvantages: 1) The carrying capacity of the system is limited; 2) The authentication server may have a single point of failure or failure; 3) There are risks such as loss, disclosure, and tampering of user information; 4) ) The credibility of the server directly affects the identity authentication results, once the server is attacked, it will produce wrong identity authentication results

However, the distributed authentication system still has the following disadvantages: 1) There are still central servers in the system, such as load balancing servers, global data dictionaries, etc. Once the central server is attacked or paralyzed, the system will not work normally; 2) Single authentication The process is still completed on an authentication server alone, which means that any authentication server in the authentication server cluster will be attacked and some authentication results will be wrong; 3) There are still data loss, tampering, and forgery. risk

Patent CN109218319A discloses a blockchain-based identity authentication system and method, which combines blockchain with identity authentication, and realizes complete decentralization by designing key modules, identity authentication modules, and service modules in the system This system can solve the problem that the central server is attacked or paralyzed in the distributed system, and improves the stability of the system, but the system still has the following disadvantages: 1) The user's identity information credential is completely dependent on the user's Private key, once the private key is stolen, there is a risk of fraudulent use of identity information;

[0006] 2) There is a lack of consideration of the divergence of authentication results generated by the authentication server cluster, that is, when the authentication server disagrees on the authentication results, the authentication server cluster will not be able to reach consistency and poor stability; 3) Directly store user identity information in the blockchain, Since the blockchain has the characteristics of data transparency, there is a risk that user data is easily leaked

Images