Distributed identity authentication method, node, providing end, equipment, medium and product

Abstract

The invention provides a distributed identity authentication method, a node, a providing end, equipment, a medium and a product, and relates to the technical field of block chains, the method comprises the following steps: a proxy node generates a first public key and a first private key; the proxy node obtains first decentration identification information and digital identity management information of the user equipment; the proxy node verifies the distributed digital identity ownership of the user equipment according to the proxy signature entrustment and the second public key, and generates a URL (Uniform Resource Locator); the proxy node sends the URL of the user equipment to the service provider and receives a first verifiable statement; and the proxy node sends an identity verification request generated based on the first verifiable statement to the user equipment, and generates a complete second verifiable statement after knowing that the user equipment confirms the identity verification request. According to the invention, selective disclosure of privacy information by the user is supported, so that identity authentication does not depend on a traditional centralized mechanism any more, and the problems of single-point failure, privacy disclosure and the like are avoided.

Description

TECHNICAL FIELD

[0001] The embodiment of the present application relates to the technical field of block chain, and particularly relates to a distributed identity authentication method and device, a providing end, equipment, a medium and a product. BACKGROUND

[0002] In a traditional identity authentication scheme, an account password is generally used to determine whether a user equipment is legal, and the account password of the user equipment is stored by a website application accessed by the user, so that the user needs to remember different account password information for different websites. This way challenges the user to safely and properly remember and store multiple account passwords, especially when the number of website applications used by the user gradually increases, the user needs to pay a higher cost of memory and storage, and all data is centralized in one or several servers for centralized storage. If these servers are attacked, malfunction or data leakage, all user data may be affected, and the user's personal data is controlled by the centralized service provider, and the user often cannot fully control his own data, and the service provider can arbitrarily use, share or sell user data, which may lead to privacy invasion.

[0003] However, the existing scheme mainly aims to ensure the security and reliability of user identity authentication, resist behaviors such as replay attacks and impersonation of user equipment identity, but the centralized storage of user data always threatens the privacy and security of the user. SUMMARY

[0004] The embodiment of the present application provides a distributed identity authentication method, device node, providing end, equipment, medium and product to solve the problem that the existing centralized storage of user data threatens the privacy and security of the user.

[0005] In order to solve the above technical problems, the present application is implemented as follows:

[0006] In a first aspect, the embodiment of the present application provides a distributed identity authentication method, comprising:

[0007] The proxy node generates a first public key and a first private key using a key generation algorithm according to a specified security parameter;

[0008] The proxy node obtains first decentralized identification information of a user equipment and digital identity management information generated by the user equipment according to the first public key, wherein the first decentralized identification information is generated by an identity registration authority according to a second public key of the user equipment; and the digital identity management information includes proxy signature delegation, selective disclosure policy, first verifiable credential and revocation list.

[0009] The proxy node searches a first decentralized identification document of the user equipment in a block chain according to the first decentralized identification information, wherein the first decentralized identification document is constructed by the identity registration authority according to the first decentralized identification information and the second public key; and verifies the ownership of the distributed digital identity of the user equipment according to the proxy signature delegation and the second public key, and generates a unique identity authentication entry URL;

[0010] The proxy node sends the unique identity authentication entry URL of the user equipment to a service provider, and receives a first verifiable claim sent by the service provider;

[0011] The proxy node sends an identity verification request generated based on the first verifiable claim to the user equipment, and generates a complete second verifiable claim according to the selective disclosure policy, the first verifiable credential, the revocation list, the first private key and the first verifiable claim after learning that the user equipment confirms the identity verification request.

[0012] Optionally, the second verifiable claim is further sent to the service provider, so that the proxy signature service between the user equipment and the service provider is performed.

[0013] Optionally, the proxy node further acquires a new revocation list sent by the user equipment, wherein the proxy node is included in the revocation list, and the revocation list is used to revoke the proxy signature service of the proxy node.

[0014] Optionally, the verification of the ownership of the distributed digital identity of the user equipment according to the proxy signature delegation and the second public key, and the generation of the unique identity authentication entry URL, comprise:

[0015] The proxy node generates a one-time random challenge, signs the generated one-time random challenge according to the proxy signature delegation of the user equipment, and verifies the signature using the second public key, and if the verification is passed, the unique identity authentication entry URL of the user equipment is generated.

[0016] Optionally, the generation of the complete second verifiable claim according to the selective disclosure policy, the first verifiable credential, the revocation list, the first private key and the first verifiable claim, comprise:

[0017] The proxy node generates attribute disclosure content according to the first verifiable credential of the user equipment and a selective disclosure policy, and signs the attribute disclosure content using a proxy signature delegation, a revocation list and the first private key, integrates the signed attribute disclosure content into the first verifiable statement to obtain a complete second verifiable statement. The generated one-time random challenge is signed according to the proxy signature delegation of the user equipment.

[0018] In a second aspect, an embodiment of the present application provides a distributed identity authentication method, comprising:

[0019] The service providing end generates a third public key and a third private key using a key generation algorithm according to specified security parameters, obtains a second decentralized identification information registered and generated by an identity registration authority according to the third public key, and obtains a second decentralized identification document constructed by the identity registration authority according to the second decentralized identification information and the third public key, and stores the second decentralized identification document in a block chain.

[0020] The service providing end obtains a second verifiable credential signed and generated by the identity registration authority according to the second decentralized identification document and the third public key.

[0021] The service providing end receives a unique identity authentication entry URL of the user equipment sent by the proxy node, wherein the unique identity authentication entry URL is generated by searching, in the block chain, a first decentralized identification document of the user equipment according to the first decentralized identification information of the user equipment through the proxy node, obtaining a second public key of the user equipment in the first decentralized identification document, and verifying the distributed digital identity ownership of the user equipment according to the digital identity management information of the user equipment and the second public key.

[0022] The service providing end generates a first verifiable statement according to the unique identity authentication entry URL, the third private key and the second verifiable credential, and sends the first verifiable statement to the proxy node, so that the proxy node generates a complete second verifiable statement according to the digital identity management information and the first verifiable statement after obtaining an identity authentication request of the user equipment confirming generation of the first verifiable statement.

[0023] Optionally, the service providing end further receives the complete verifiable statement, thereby performing proxy signature service between the user equipment and the service providing end.

[0024] Optionally, the method further comprises:

[0025] The service providing end verifies the identity and the disclosable attribute of the user equipment according to the second verifiable claim, generates an access token, encrypts the access token using the second public key of the user equipment to obtain encrypted information, and sends the encrypted information to the user equipment, so that the user equipment decrypts the encrypted information using the second private key and obtains the service of the service providing end using the decrypted access token.

[0026] In a third aspect, an embodiment of the present application provides a proxy node, comprising:

[0027] A generating module is configured to generate a first public key and a first private key using a key generation algorithm according to specified security parameters;

[0028] A first obtaining module is configured to obtain first decentralized identification information of a user equipment and digital identity management information generated by the user equipment according to the first public key, wherein the first decentralized identification information is generated by an identity registration authority according to a second public key of the user equipment; and the digital identity management information comprises proxy signature delegation, a selective disclosure policy, a first verifiable credential, and a revocation list.

[0029] A first processing module is configured to search a first decentralized identification document of the user equipment in a blockchain according to the first decentralized identification information, wherein the first decentralized identification document is constructed by the identity registration authority according to the first decentralized identification information and the second public key; and verify the ownership of the distributed digital identity of the user equipment according to the proxy signature delegation and the second public key, and generate a unique identity authentication entry URL.

[0030] A second processing module is configured to send the unique identity authentication entry URL of the user equipment to a service providing end, and receive a first verifiable claim sent by the service providing end.

[0031] A third processing module is configured to send an identity verification request based on the first verifiable claim to the user equipment by the proxy node, and generate a complete verifiable claim according to the selective disclosure policy, the first verifiable credential, the revocation list, the first private key, and the first verifiable claim after learning that the user equipment confirms the identity verification request, and send the complete verifiable claim to the service providing end, so as to perform proxy signature service between the user equipment and the service providing end.

[0032] Optionally, the proxy node further comprises:

[0033] A verifiable claim sending module is configured to send the second verifiable claim to the service providing end, so as to perform proxy signature service between the user equipment and the service providing end.

[0034] Optionally, further comprising:

[0035] a revocation module, configured to acquire a new revocation list sent by the user equipment, wherein the proxy node is included in the revocation list, and the revocation list is used to revoke the proxy signature service of the proxy node.

[0036] Optionally, the first processing module comprises:

[0037] a first processing submodule, configured to generate a one-time random challenge, sign the generated one-time random challenge according to the proxy signature delegation of the user equipment, verify the signature using the second public key, and generate the unique identity authentication entry URL for the user equipment if the verification is passed.

[0038] Optionally, the third processing module comprises:

[0039] a second processing submodule, configured to generate attribute disclosure content according to the first verifiable credential of the user equipment and the selective disclosure policy, sign the attribute disclosure content using the proxy signature delegation, the revocation list and the first private key, integrate the signed attribute disclosure content into the first verifiable statement, and obtain the complete second verifiable statement.

[0040] In a fourth aspect, an embodiment of the present application provides a service providing end, comprising:

[0041] a fourth processing module, configured to generate a third public key and a third private key using a key generation algorithm according to a specified security parameter, acquire a second decentralized identifier information registered and generated by an identity registration authority according to the third public key, and acquire a second decentralized identifier document constructed by the identity registration authority according to the second decentralized identifier information and the third public key, and store the second decentralized identifier document in a block chain;

[0042] a second acquisition module, configured to acquire a second verifiable credential signed and generated by the identity registration authority according to the second decentralized identifier document and the third public key;

[0043] a receiving module, configured to receive a unique identity authentication entry URL of the user equipment sent by the proxy node, wherein the unique identity authentication entry URL is generated by searching the first decentralized identifier document of the user equipment in the block chain according to the first decentralized identifier information of the user equipment, acquiring the second public key of the user equipment in the first decentralized identifier document of the user equipment, and verifying the distributed digital identity ownership of the user equipment according to the digital identity management information of the user equipment and the second public key.

[0044] a fifth processing module, configured to generate a first verifiable claim according to the unique identity authentication entry URL, the third private key and the second verifiable credential, and send the first verifiable claim to the proxy node, so that the proxy node generates a complete second verifiable claim according to the digital identity management information and the first verifiable claim after obtaining an identity authentication request generated by the user equipment after confirming the first verifiable claim.

[0045] Optionally, the method further comprises:

[0046] a verifiable claim receiving module, configured to receive the complete second verifiable claim, so as to perform the proxy signature service between the user equipment and the service provider.

[0047] Optionally, the method further comprises:

[0048] a verification module, configured to verify the identity and the disclosable attribute of the user equipment according to the complete verifiable claim, generate an access token, encrypt the access token by using the second public key of the user equipment to obtain encrypted information, and send the encrypted information to the user equipment, so that the user equipment decrypts the encrypted information by using the second private key, and obtains the service of the service provider by using the decrypted access token.

[0049] In a fifth aspect, an embodiment of the present application provides an electronic device, including a processor, a memory, and a program or instructions stored in the memory and executable on the processor, and the program or instructions are executed by the processor to implement the method for distributed identity authentication according to any one of the first aspect, or the steps in the method for distributed identity authentication according to any one of the second aspect.

[0050] In a sixth aspect, an embodiment of the present application provides a readable storage medium, and the readable storage medium stores a program or instructions, and the program or instructions are executed by a processor to implement the method for distributed identity authentication according to any one of the first aspect, or the steps in the method for distributed identity authentication according to any one of the second aspect.

[0051] In a seventh aspect, an embodiment of the present application provides a computer program product, including computer instructions, and the computer instructions are executed by a processor to implement the method for distributed identity authentication according to any one of the first aspect, or the steps in the method for distributed identity authentication according to any one of the second aspect.

[0052] In the present application, the proxy node can obtain the first decentralized identification information of the user equipment and the digital identity management information generated by the user equipment according to the first public key, wherein the first decentralized identification information is generated by the identity registration authority according to the second public key of the user equipment; the digital identity management information includes proxy signature delegation, selective disclosure policy, first verifiable credential and revocation list; the user equipment saves the distributed digital identity by means of the first decentralized identification document, thereby performing fine-grained identity authentication on the user, the proxy node searches the first decentralized identification document of the user equipment in the blockchain according to the first decentralized identification information, verifies the ownership of the distributed digital identity of the user equipment according to the proxy signature delegation and the second public key, and generates a complete verifiable claim according to the selective disclosure policy, the first verifiable credential, the first private key and the verifiable claim after learning that the user equipment confirms the identity authentication request, formulates a selective attribute disclosure policy through the user equipment, issues a proxy signature authorization to the proxy node, and grants it proxy signature rights within a specified period, so that the proxy node provides one-stop distributed digital identity authentication proxy for the user equipment, thereby performing proxy signature service between the user equipment and the service provider, and supporting selective disclosure of private information by the user through the distributed identity authentication method based on revocable proxy signature, so that identity authentication no longer depends on traditional centralized institutions, avoiding single point failure and privacy leakage and other problems, and solving the problem that the existing centralized storage of user data threatens the privacy and security of the user. BRIEF DESCRIPTION OF DRAWINGS

[0053] Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The accompanying drawings are included to provide a description of the preferred embodiments and are not intended to limit the scope of the application. Moreover, like reference numerals designate like parts throughout the several views in the drawings. In the drawings:

[0054] Figure 1 is a flowchart of a distributed identity authentication method provided by an embodiment of the present application applied to a proxy node;

[0055] Figure 2 is an architecture diagram of a distributed identity authentication method provided by an embodiment of the present application;

[0056] Figure 3 is a general flowchart of a distributed identity authentication method provided by an embodiment of the present application;

[0057] Figure 4 is a flowchart of a distributed identity authentication method provided by an embodiment of the present application applied to a service provider;

[0058] Figure 5 is a structural schematic diagram of a proxy node provided by an embodiment of the present application;

[0059] Figure 6 is a structural schematic diagram of a service providing end provided by an embodiment of the present application;

[0060] Figure 7 is a structural schematic diagram of an electronic device provided by an embodiment of the present application.

[0061] Reference signs:

[0062] a generating module 51, a first obtaining module 52, a first processing module 53, a second processing module 54, a third processing module 55, a fourth processing module 61, a second obtaining module 62, a receiving module 63, a fifth processing module 64, an electronic device 70, a processor 71, and a memory 72. DETAILED DESCRIPTION

[0063] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some but not all of the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of the present application.

[0064] Please refer to Figure 1 The embodiment of the present application provides a distributed identity authentication method, which comprises the following steps:

[0065] Step S11: The proxy node generates a first public key and a first private key according to a specified security parameter using a key generation algorithm.

[0066] In the embodiment of the present application, please refer to Figure 2 and Figure 3The method for realizing distributed identity authentication needs the following devices: a user device (User, U), a service providing end (Relying Party, RP), an identity registration authority (Decentralized Identifiers Register, DR), a proxy node (Proxy Node, PN) and a block chain. The user device U is used to register and hold a distributed digital identity, access a website application of the service providing end RP, complete identity authentication by means of the proxy node PN, establish a session with the RP to obtain the website application service of the RP; the service providing end RP is used to provide services for users, initiate an identity verification challenge to the users, also register a distributed digital identity and provide identity proof, that is, interact with the user-specified proxy node for identity authentication, and complete identity authentication of the users; the identity registration authority DR is used to register the distributed digital identity of the user and the service providing end, is assumed by an authoritative and trustworthy agency, is used to handle the registration and management of the distributed digital identity, is responsible for on-chain storage of Decentralized Identifiers (DID) document information, and provides a search entry of the DID document information; the proxy node PN is used to be responsible for identity authentication of the user agent, uses the verifiable credential VC certificate of the user, generates a verifiable statement VP according to the selective disclosure strategy of the user and the proxy signature delegation, interacts with the service providing end to complete identity authentication, verifies the identity information of the service providing end, and guarantees the security and reliability of the identity authentication behavior; and the block chain is a trusted cornerstone of the entire proposal, and is used to store the distributed digital identity of the user.

[0067] In the initialization phase, the identity registration authority DR (Decentralized Identifiers Register) initializes to generate a system public key PK and a master key MSK; the user device U (User), the service providing end RP (Relying Party) and the proxy node PN (Proxy Node) each perform initialization to generate a respective public-private key pair; and the user device U and the service providing end RP each need to register a distributed digital identity;

[0068] Specifically:

[0069] The identity registration authority DR uses an initialization algorithm Setup(1 k ) to generate a public key PK and a master key MSK: Setup(1 k )→(PK,MSK).

[0070] The identity registration authority DR performs the initialization algorithm Setup(1 k )→(PK,MSK) step as follows: a security parameter k is selected, and two multiplicative cyclic groups G0 and G T , and G0 and GT satisfying the bilinear pairing e:G0xG0→G T Then, the PK and MSK are generated according to the algorithm (a, b∈Z P ), wherein:

[0071] PK={g, h=g β , e(g, g) a};

[0072] MSK={b, g α};

[0073] The final identity registration authority DR completes system initialization by means of an initialization algorithm Setup(1 k ), to generate a public-private key pair (PK, MSK), containing the public key PK (public) and the authority master key MSK (private).

[0074] The user equipment U, the service provider RP and the proxy node PN use the key generation algorithm KeyGen(1 λ ) to initialize the key, to generate a public-private key pair for each role: KeyGen(1 λ )→(PK, SK).

[0075] Taking the proxy node PN as an example, the proxy node PN uses the key generation algorithm KeyGen(1 λ ), while specifying a security parameter λ pn , to output a pair of public-private keys (PK pn , SK pn ) and save them, and similarly, the user equipment U and the service provider RP each specify a security parameter λ u and λ rp , to generate their own public-private key pairs, wherein the public-private key pair output by the user equipment U is (PK u , SK u ), and the public-private key pair obtained by the service provider RP is (PK rp , SK rp ).

[0076] The user equipment U and the service provider RP also need to register the distributed digital identity with the identity registration authority DR:

[0077] Specifically, taking the user equipment U as an example, the user equipment U prepares information Info of its own user registration decentralized identifier (DID) identity, i.e., the first decentralized identifier information, while providing its own public key information PK uThe above information is sent to the identity registration authority DR, the identity registration authority DR checks the information after receiving the information, and constructs the DID document corresponding to the information, that is, the first decentralized identity document, the first decentralized identity document includes the public key PK of the user equipment U u And identity information Info; the identity registration authority DR generates the DID document of the user equipment U, and stores the DID document on chain by means of a smart contract, after that, the identity registration authority DR also generates the verifiable credential VC corresponding to the identity information for the user equipment U, signs the VC using the master key MSK, and sends the signed VC to the user equipment U using the public key PK of the user u Encrypted, the encrypted VC is sent to the user equipment U;

[0078] Similarly, the service provider RP registers its own distributed digital identity, that is, the second decentralized identity information, with the identity registration authority DR, and provides its own public key PK rp And the detailed information for registering the DID identity, the identity registration authority DR registers and uploads the DID document of the service provider RP, that is, the second decentralized identity document, and issues a signed verifiable credential, which is sent to the service provider RP after being signed using the public key of the service provider RP.

[0079] Step S12: the proxy node obtains the first decentralized identity information of the user equipment and the digital identity management information generated by the user equipment according to the first public key, wherein the first decentralized identity information is generated by the identity registration authority according to the second public key of the user equipment; and the digital identity management information includes proxy signature delegation, selective disclosure policy, first verifiable credential and revocation list;

[0080] In the embodiment of the application, the user equipment U accesses and obtains the first public key of the proxy node PN, and sends the DID information, that is, the first decentralized identity information, to the proxy node PN, the user equipment U generates proxy signature delegation using the first public key of the proxy node PN, and sends the selective disclosure policy, the verifiable credential and the revocation list to the proxy node PN at the same time, so that the proxy node PN tests and verifies the ownership of the identity of the user equipment U by testing the proxy signature delegation;

[0081] Specifically:

[0082] The user equipment U accesses the proxy node PN using a browser tool, and obtains the first public key PK of the proxy node PN pnThe unique identifier id of the distributed digital identity information registered by the user equipment U at the identity registration authority DR, that is, the first decentralized identifier information, is sent to the proxy node PN. For example, the user equipment U sends the unique identifier of the DID, that is, did: example: 123456789abcdefghi, to the proxy node PN;

[0083] The user equipment U obtains the public key PK of the proxy node PN pn , and generates a proxy signature delegation T using a proxy signature delegation algorithm Delegation(PK pn , PK u , SK u ): Delegation(PK pn , PK u , SK u , w i ) → T;

[0084] Wherein, (PK u , SK u ) is the public-private key pair of the user equipment U, PK pn is the first public key of the target proxy node PN granting the proxy signature delegation T, and the delegation letter w i is a detailed description of the user equipment U and the proxy node PN delegation relationship;

[0085] T = (PK u , PK pn , w i , d); wherein, T is the corresponding proxy signature delegation label of the target proxy node PN, and d is the hierarchical private key calculated by running the hierarchical private key generation algorithm Δ.KeyGen:

[0086] d←Δ.KeyGen(PK u , SK do , PK pn , w i , h);

[0087] Wherein, the hierarchical private key generation algorithm Δ.KeyGen(pk o , sk o , pk i , w i , id)→(d id ) is given the public-private key pair (pk o , sk o ) of the original signer o, the public key pk i of the proxy signer, the authorization letter w i and the label value id in the hierarchy. The output hierarchical private key d idPrivate key d id comprises decryption key (D1, D2) and delegation key (K2,... K l-|id|+1 );

[0088] d id = (D1, D2, K2,..., K l-|id|+1 );

[0089]

[0090] D2 = g r ;

[0091]

[0092] Revocation (PK u , SK u , t, R t ) to generate a revocation list RL t valid within the revocation period t:

[0093] Revocation (PK u , SK u , t, R t ) → RL t ;

[0094] The revocation list RL t contains the following contents:

[0095]

[0096] Wherein, PK u is the public key of the user device U, that is, the second public key; t represents the revocation period; R t contains revoked authorized objects, recording the revoked proxy node set; represents the encoding value of each non-revoked proxy signer and the corresponding signature, and the generation steps are as follows: using the union set of disjoint subsets to construct a non-revoked user set represents a non-revoked proxy signer, and each non-revoked proxy signer is given a label Hash calculation is performed on the label to obtain its encoding value C i , and the private key SK u is used to sign the label and the encoding value C i using a signature algorithm, outputting the signature θ i , and finally, the proxy signature delegation T, the revocation list RL t and the formulated selective disclosure strategy Ads are sent to the proxy node PN.

[0097] In the embodiment of the present application, the information of the user equipment and the service provider is no longer stored in a centralized organization, the user equipment and the service provider have complete autonomous control over their own identity, and the identity verification process no longer passes through a centralized organization, so there is no phenomenon of facing privacy threats caused by being snooped and analyzed by a centralized organization, greatly enhancing the trust level of the user and the service provider.

[0098] Step S13: The proxy node searches the first decentralized identification document of the user equipment in the blockchain according to the first decentralized identification information, wherein the first decentralized identification document is constructed by the identity registration organization according to the first decentralized identification information and the second public key; and the ownership of the distributed digital identity of the user equipment is verified according to the proxy signature delegation and the second public key, and a unique identity authentication entry URL is generated.

[0099] In the embodiment of the present application, the ownership of the distributed digital identity of the user equipment is verified according to the proxy signature delegation and the second public key, and the unique identity authentication entry URL is generated, which comprises:

[0100] The proxy node generates a one-time random challenge, signs the generated one-time random challenge according to the proxy signature delegation of the user equipment, and verifies the signature using the second public key, if the verification is passed, the unique identity authentication entry URL is generated for the user equipment.

[0101] In the embodiment of the present application, the proxy node PN indexes the DID document of the user equipment U on the blockchain according to the first decentralized identification information, and reads the public key information PK u of the user equipment in the DID document, that is, the second public key; the proxy node PN uses a one-time random challenge generation algorithm, signs the generated one-time random challenge using the proxy signature delegation of the user equipment, and verifies the signature using the second public key PK u of the user equipment in the DID document, thus the proxy node PN completes the verification of the ownership of the distributed digital identity of the user equipment U, and generates a unique identity authentication entry uniform resource locator (URL) for the user equipment, the unique identity authentication entry URL is used for the proxy to complete the distributed digital identity authentication of the user.

[0102] In the embodiment of the present application, there is no centralized node, and the agent node does not store any information of any user, only performs calculation operation, any participant with strong calculation ability can apply to become an agent node, avoiding excessive dependence on the agent node in the authentication process, and when the user considers that the agent node is unreliable, the user can select other nodes to generate an agent signature.

[0103] Step S14: the agent node sends the unique identity authentication entry URL of the user equipment to the service provider, and receives the first verifiable presentation sent by the service provider;

[0104] In the embodiment of the present application, the user equipment U transfers the identity authentication process to the agent node PN; the service provider RP accesses the URL specified by the user equipment U, and sends the information containing the proof of its own legitimacy to the agent node PN, specifically:

[0105] The user uses a browser tool to access the website application provided by the service provider RP; when the user equipment U uses a service function that needs to verify the identity, the service provider will start the identity login process and initiate an identity authentication request to the user equipment U;

[0106] When the user equipment U receives the identity authentication challenge initiated by the service provider RP, the user equipment U forwards the unique identity authentication entry URL address information provided by the agent node PN for the identity authentication of the user equipment U to the service provider RP, transfers the identity authentication process to the agent node PN, and lets the agent node PN interact with the service provider RP and complete the identity agent signature;

[0107] After receiving the unique identity authentication entry URL address information provided by the user equipment U for the agent identity authentication, the service provider RP uses the third private key stored privately and the verifiable credential (VC) issued by the identity registration authority DR to construct a first verifiable presentation (VP), and sends the first verifiable presentation VP to the agent node PN to start the identity authentication interaction with the agent node PN.

[0108] In the embodiment of the present application, fine-grained identity authentication of the user is supported, the user only needs to provide the identity attribute DID to be verified, the user equipment U formulates a selective attribute disclosure strategy, issues a proxy signature authorization to the proxy node PN, and grants the proxy signature right of the proxy node PN within a specified period, the proxy node PN provides one-stop distributed digital identity authentication proxy for the user equipment U, when the user equipment U accesses the service providing end RP and needs to perform identity authentication, only needs to provide the proxy verification address URL information generated by the proxy node PN, the authentication behavior can be transferred to the proxy node PN and the service providing end RP for interaction, the proxy node PN helps the user equipment U to verify the legality of the identity of the service providing end RP, and after receiving the confirmation verification instruction of the user equipment U, helps the user to complete all subsequent identity verification operations and docking steps.

[0109] Step S15: The proxy node sends an identity verification request generated based on the first verifiable claim to the user equipment, and after learning that the user equipment confirms the identity verification request, generates a complete second verifiable claim according to the selective disclosure strategy, the first verifiable credential, the revocation list, the first private key and the first verifiable claim.

[0110] In the embodiment of the present application, optionally, the second verifiable claim is sent to the service providing end, so that the proxy signature service between the user equipment and the service providing end is performed.

[0111] In the embodiment of the present application, optionally, the proxy node generates a complete second verifiable claim according to the selective disclosure strategy, the first verifiable credential, the revocation list, the first private key and the first verifiable claim, including:

[0112] The proxy node generates attribute disclosure content according to the first verifiable credential and the selective disclosure strategy of the user equipment, and uses the proxy signature delegation, the revocation list and the first private key to sign the attribute disclosure content, integrates the signed attribute disclosure content into the first verifiable claim, and obtains the complete second verifiable claim.

[0113] In the embodiment of the present application, after the proxy node PN receives the first verifiable claim VP of the service providing end RP, the unique identifier id information in VP is searched, the corresponding DID document is indexed from the block chain according to the id information, and the public key PK rp , that is, the third public key, and the signature verification algorithm ∑.Verify pk (m,σ) is used to verify the verifiable claim VP, and the legality of the verifiable claim signature is confirmed: ∑.Verify pk (m,σ)→[0,1];

[0114] Among them, VP is used as the information to be verified m, proof in VP is used as signature σ, and public key PK is used rp Verify the signature, specifically:

[0115] 1. When ∑.Verify pk If (m,σ)→0, the identity information transmitted by the service provider is marked as illegal and the identity certificate provided by the service provider is rejected;

[0116] 2. If ∑.Verify pk (m,σ)→1, then the identity information transmitted by the service provider is marked as legal, and the identity certification of the service provider RP is recognized;

[0117] After completing the verification of the service provider RP signature, read the signature information of the identity registration agency DR in the VP, and index the public key PK of the identity registration agency DR. Using the VP and the public key PK of the identity registration agency DR as parameters, use the signature verification algorithm ∑.Verify pk (m,σ) Verify that the information provided by the service provider RP is signed by the identity registration authority DR.

[0118] After the proxy node PN confirms the legitimacy of the service provider RP, it sends an identity authentication notification to the user device U, notifying the user device U of the identification information used to represent the RP and initiating an authentication confirmation request. When the user confirms the information and allows the proxy signature identity authentication, the proxy node PN begins the proxy signature.

[0119] The proxy node PN follows the selective disclosure policy defined by the user device U, extracts the distributed digital identity attribute C from the verifiable certificate VC provided by the user device U, integrates the distributed digital identity attribute C into the first verifiable statement VP, and obtains the complete second verifiable statement, ensuring the accuracy and completeness of its content. In this process, the proxy node PN ensures that the disclosed attributes meet the user's policy requirements, meet the user's identity authentication purpose and privacy protection requirements, and then uses the signature algorithm Sign (SK pn ,T,RL t ,C) Proxy signature of attribute disclosure content C to generate signature σ: Sign(SK pn ,T,RL t ,C)→σ;

[0120] The delegate tag T:

[0121] T i =(PK u ,PK pn ,w i ,d);

[0122] Revocation List RL t :

[0123]

[0124] Return the proxy signature σ = (PK u , PK pn , w i , d, σ M ), where σ M is the signature confirmation of (PK pn , PK u , w pn , d) by the proxy node using the private key SK i ; the proxy node PN constructs a complete second verifiable claim VP consisting of the attribute disclosure content C and the signature σ thereon, while ensuring that it complies with the user's privacy policy, sends the verifiable claim VP to the service provider RP, thereby performing the proxy signature service between the user device and the service provider.

[0125] Specifically, after receiving the second verifiable claim VP sent by the proxy node PN, the service provider RP retrieves the unique identifier id of the user, obtains the corresponding DID document from the blockchain according to the identifier index, retrieves the public key information PK u , i.e., the second public key, of the user device from the DID document, and uses the proxy signature verification algorithm Ver VP (PK pn , PK u , t, VP) to verify the signature, confirming the legality of the proxy signature of the verifiable claim VP: Ver VP (PK pn , PK u , t, VP) → [0, 1]; obtain the signature σ stored in VP, where σ = (PK u , PK pn , w i , d, σ M ), and verify the signature of σ pn using the public keys PK u and PK M :

[0126] When the signature is verified as illegal or no longer within the valid range of the revocation period t, Ver VP (PK pn , PK u , t, VP) outputs the result 0, i.e., rejects the identity authentication of the user device U, and determines that the proxy signature is illegal;

[0127] When the signature is verified as legal and still within the valid range of the revocation period t, Ver VP (PKpn ,PK u , the VP output result 1, that is, accepting the identity authentication of the user equipment U, and determining that the proxy signature is legal;

[0128] After confirming that the proxy signature of the verifiable statement VP is legal, the RP verifies the disclosure attribute. The RP indexes the public key PK of the identity registration authority DR, verifies the content of the verifiable statement VP using the public key of the identity registration authority DR, and verifies that the disclosure attribute information is authenticated by the signature of the identity registration authority DR. After the service provider RP completes the verification, an access token is generated, the access token is encrypted using the public key PK of the user u , the encrypted information is sent to the user equipment U, the user equipment U receives the encrypted information, decrypts the encrypted information using the private key SK u , that is, the second private key, and uses the decrypted token to access the website application of the service provider RP and obtain services.

[0129] In the embodiment of the application, the user is helped by the proxy node to perform proxy signature, and the cumbersome identity authentication steps are completed. The user only needs to complete proxy authorization in the initialization step, and does not need to participate in complex calculation tasks and cumbersome authentication steps in subsequent distributed digital identity authentication steps. The user only needs to confirm the service provider RP identity request sent by the proxy node, which is authenticated by the proxy node, to complete the identity authentication process. The internal identity verification of the service provider RP, the generation of the verifiable statement according to the user's selective attribute disclosure strategy, and the generation of the signature of the statement using the proxy signature delegation are all invisible to the user. These cumbersome but extremely important steps for ensuring the security of distributed digital identity authentication do not require the user to participate, greatly reducing the device performance requirements of the user participating in digital activities, thereby facing a wider range of users and being suitable for more digital activity scenarios. At the same time, based on the revocable proxy signature scheme, the user can effectively supervise the signature behavior of the proxy node. Once abnormal dereliction of duty occurs, the user can revoke the proxy signature authorization, thereby avoiding further threats to the user's rights and interests.

[0130] In an embodiment of the present invention, the proxy node is capable of obtaining the first decentralized identification information of the user device and the digital identity management information generated by the user device according to the first public key, wherein the first decentralized identification information is generated by the identity registration agency according to the second public key registration of the user device; the digital identity management information includes: proxy signature delegation, selective disclosure policy, first verifiable certificate and revocation list; the user device saves the distributed digital identity with the help of the first decentralized identification document, thereby performing fine-grained identity authentication on the user, and the proxy node searches the blockchain for the first decentralized identification document of the user device according to the first decentralized identification information, verifies the distributed digital identity ownership of the user device according to the proxy signature delegation and the second public key, and verifies the ownership of the distributed digital identity of the user device according to the proxy signature delegation and the second public key, and verifies the ownership of the distributed digital identity of the user device according to the proxy signature delegation and the second public key. After the user device confirms the identity authentication request, a complete verifiable statement is generated based on the selective disclosure policy, the first verifiable credential, the first private key and the verifiable statement. A selective attribute disclosure policy is formulated through the user device, and a proxy signature authorization is issued to the proxy node, granting it the proxy signature right for a specified period, so that the proxy node provides a one-stop distributed digital identity authentication agent for the user device, thereby performing a proxy signature service between the user device and the service provider. Through a distributed identity authentication method based on revocable proxy signatures, users are supported to selectively disclose private information, so that identity authentication no longer relies on traditional centralized institutions, avoiding problems such as single point failure and privacy leakage, and solving the problem that the existing centralized storage of user data poses a threat to user privacy and security.

[0131] In the embodiment of the present invention, optionally, the method further includes:

[0132] The proxy node obtains a new revocation list sent by the user equipment, wherein the revocation list includes the proxy node, and the revocation list is used to revoke the proxy signature service of the proxy node.

[0133] In the embodiment of the present invention, when executing the personal proxy authorization policy, the user device U can supervise and review the proxy node PN in the existing authorization list. If necessary, the user device U can revoke the proxy signature authorization for the target proxy node PN. When the user device U needs to revoke, use Revocation (PK u ,SK u ,t)→RL t Generate a new revocation list RL t That’s it, undo list This includes the revocation object set R t , when revoking, in the revocation list RL t The revocation object set R tThe target proxy node PN to be revoked is added into the revocation list, and the proxy signature authorization revocation of the target proxy node PN is completed.

[0134] In the embodiment of the present application, the distributed identity authentication method based on the revocable proxy signature can make the identity authentication no longer rely on the traditional centralized organization, avoid single point failure and privacy leakage, and the user can supervise the signature behavior of the proxy node while authorizing the proxy node to perform proxy signature, and when the proxy node has a rule-breaking proxy signature behavior, the user can issue a revocation list to revoke the proxy signature authorization of the proxy node, avoid the rule-breaking proxy node from causing greater threat to its own interests, and with the reliable and effective revocation means, the trust level of the user to the authentication scheme can be improved, the legal rights and interests of the user can be more safely protected, and the proxy node can be ensured to perform the compliant proxy signature behavior under supervision.

[0135] Please refer to Figure 4 The embodiment of the present application provides a distributed identity authentication method, which comprises the following steps:

[0136] In step S41, the service providing end generates a third public key and a third private key according to a specified security parameter using a key generation algorithm, and obtains second decentralized identification information registered by an identity registration authority according to the third public key, and obtains a second decentralized identification document constructed by the identity registration authority according to the second decentralized identification information and the third public key, and stores the second decentralized identification document in a block chain.

[0137] In the embodiment of the present application, please refer to Figure 2 and Figure 3 In the initialization stage, the identity registration authority DR (Decentralized Identifiers Register) initializes to generate a system public key PK and a master key MSK, and the user equipment U (User), the service providing end RP (Relying Party) and the proxy node PN (Proxy Node) each perform initialization to generate a respective public-private key pair, and the user equipment U and the service providing end RP each need to register a distributed digital identity;

[0138] Specifically:

[0139] The identity registration authority DR uses an initialization algorithm Setup(1 k ) to generate a public key PK and a master key MSK: Setup(1 k )→(PK,MSK).

[0140] Among them, the identity registration authority DR executes the initialization algorithm Setup(1 k)→(PK,MSK) is as follows: select a security parameter k, and two multiplicative cyclic groups G0 and G T , and G T satisfy the bilinear pair e: G0xG0→G T , then generate PK and MSK according to the algorithm (α, β∈Z P ), where:

[0141] PK = {g, h = g β , e(g, g) a};

[0142] MSK = {β, g α};

[0143] The final identity registration authority DR completes system initialization by means of the initialization algorithm Setup(1 k ), and generates a public-private key pair (PK, MSK), which contains the public key PK (public) and the authority master key MSK (private).

[0144] The user equipment U, the service provider RP, and the proxy node PN use the key generation algorithm KeyGen(1 λ ) to perform key initialization, and generate a respective public-private key pair for each role: KeyGen(1 λ )→(PK, SK);

[0145] Taking the proxy node PN as an example, the proxy node PN uses the key generation algorithm KeyGen(1 λ ) and specifies a security parameter λ pn , outputs a pair of public-private keys (PK pn , SK pn ) and saves them, and similarly, the user equipment U and the service provider RP each specify a security parameter λ u and λ rp , and generate a respective public-private key pair, where the public-private key pair output by the user equipment U is (PK u , SK u ), and the public-private key pair obtained by the service provider RP is (PK rp , SK rp ).

[0146] Step S42: The service provider obtains a second verifiable credential generated by the identity registration authority according to the second decentralized identification document and the third public key signature;

[0147] In the embodiment of the application, the user equipment U and the service provider RP also need to register the distributed digital identity with the identity registration authority DR: specifically, taking the user equipment U as an example, the user equipment U prepares the information Info of the user's own registration of the decentralized identifier (Decentralized Identifiers, DID) identity, that is, the first decentralized identifier information, and provides the public key information PK of the user's own u The above information is sent to the identity registration authority DR, and the identity registration authority DR checks the information after receiving the information and constructs the DID document corresponding to the information, that is, the first decentralized identifier document, which contains the public key PK of the user equipment U u and the identity information Info; the identity registration authority DR generates the DID document of the user equipment U, and stores the DID document on the chain by means of the smart contract, after which the identity registration authority DR also generates the verifiable credential VC corresponding to the identity information of the user equipment U, signs the VC using the master key MSK, and sends the encrypted VC to the user equipment U using the public key PK of the user u of the user; similarly, the service provider RP registers its own distributed digital identity with the identity registration authority DR, that is, the second decentralized identifier information, and provides its own public key PK rp and the detailed information for registering the DID identity, the identity registration authority DR registers and uploads the DID document of the service provider RP, that is, the second decentralized identifier document, and at the same time issues a signed verifiable credential, which is sent to the service provider RP after being signed using the public key of the service provider RP.

[0148] Step S43: the service provider receives the unique identity authentication entry URL of the user equipment sent by the proxy node, wherein the unique identity authentication entry URL is generated by searching the first decentralized identifier document of the user equipment in the blockchain according to the first decentralized identifier information of the user equipment through the proxy node, obtaining the second public key of the user equipment in the first decentralized identifier document, and verifying the ownership of the distributed digital identity of the user equipment according to the digital identity management information of the user equipment and the second public key;

[0149] In the embodiment of the present application, the user equipment U transfers the identity authentication process to the proxy node PN; the service provider RP accesses the URL specified by the user equipment U, and sends the information containing the proof of its own legitimacy to the proxy node PN. Specifically, the user uses the browser tool to access the website application provided by the service provider RP; when the user equipment U uses the service function that needs to verify the identity, the service provider will start the identity login process and initiate an identity authentication request to the user equipment U; when the user equipment U receives the identity authentication challenge initiated by the service provider RP, the user equipment U forwards the unique identity authentication entry URL address information provided by the proxy node PN for the identity authentication of the user equipment U to the service provider RP, transfers the identity authentication process to the proxy node PN, and lets the proxy node PN interact with the service provider RP and complete the identity proxy signature;

[0150] Step S44: The service provider generates a first verifiable claim according to the unique identity authentication entry URL, the third private key and the second verifiable credential, and sends the first verifiable claim to the proxy node, so that the proxy node generates a complete second verifiable claim according to the digital identity management information and the first verifiable claim after obtaining the identity verification request of the user equipment confirming the generation of the first verifiable claim.

[0151] In the embodiment of the present application, the service provider RP receives the unique identity authentication entry URL address information provided by the user equipment U for proxy identity authentication, and uses the third private key stored privately and the verifiable credential (Verifiable Credentials, VC) issued by the identity registration authority DR to construct a verifiable claim (Verifiable presentation, VP). The service provider RP sends the verifiable claim VP to the proxy node PN and starts the identity authentication interaction with the proxy node PN.

[0152] In the embodiment of the present application, fine-grained identity authentication of the user is supported, and the user only needs to provide the identity attribute DID to be verified. The user equipment U formulates a selective attribute disclosure strategy, issues a proxy signature authorization to the proxy node PN, and grants the proxy signature right within a specified period. The proxy node PN provides one-stop distributed digital identity authentication proxy for the user equipment U. When the user equipment U accesses the service provider RP and needs to perform identity authentication, it only needs to provide the proxy verification address URL information generated by the proxy node PN, so as to transfer the authentication behavior to the proxy node PN and the service provider RP for interaction. The proxy node PN helps the user equipment U to verify the legitimacy of the identity of the service provider RP, and helps the user to complete all subsequent identity verification operations and interfacing steps after receiving the confirmation verification instruction of the user equipment U.

[0153] In the embodiment of the present invention, optionally, the method further includes: the service provider receiving the complete verifiable statement, thereby performing a proxy signature service between the user equipment and the service provider.

[0154] In the embodiment of the present invention, after receiving the verifiable declaration VP sent by the proxy node PN, the service provider RP retrieves the user's unique identifier id, obtains the corresponding DID document based on the identifier index blockchain, and retrieves the public key information PK of the user device from it. u , that is, the second public key, and use the proxy signature verification algorithm Ver VP (PK pn ,PK u ,t,VP) verifies the signature and confirms the legitimacy of the verifiable statement VP agent signature: Ver VP (PK pn ,PK u ,t,VP)→[0,1]; obtain the signature σ stored in VP, where σ=(PK u ,PK pn ,w i ,d,σ M ), using the public key PK pn and PK u σ M The signature is verified:

[0155] When the verification signature is illegal or is no longer within the scope of the revocation period t, Ver VP (PK pn ,PK u ,t,VP) outputs the result 0, which means that the identity authentication of the user device U is rejected and the proxy signature is deemed illegal;

[0156] When the verification signature is valid and still within the effective range of the revocation period t, Ver VP (PK pn ,PK u ,t,VP) outputs result 1, which means accepting the identity authentication of user device U and determining that the proxy signature is legal;

[0157] After confirming that the proxy signature of the verifiable declaration VP is legal, the RP verifies the disclosure attribute. The RP obtains the public key PK of the identity registration authority DR and uses the public key of the identity registration authority DR to verify the content of the verifiable declaration VP and verify that the disclosure attribute information is authenticated by the signature of the identity registration authority DR. After the service provider RP completes the verification, it generates an access token and uses the user public key PK to access the access token. u Encrypt and send the encrypted information to the user device U. The user device U receives the encrypted information and uses the private key SKu , i.e. the second private key, access the website application of the service provider RP using the decrypted token and obtain services.

[0158] In the embodiment of the application, fine-grained identity authentication is performed on the user, and the trusted agency issues a DID to the user, for example, the Ministry of Public Security issues a DID for identity certification to the user. If the RP wants to verify whether the user is over 18 years old, the user only needs to provide an age-related verifiable claim when initiating a website access request, and the PN generates a verifiable credential and sends it to the RP for verification.

[0159] In the embodiment of the application, optionally, the method further comprises:

[0160] The service provider verifies the identity and disclosable attributes of the user equipment according to the complete verifiable claim, generates an access token, encrypts the access token using the second public key of the user equipment to obtain encrypted information, and sends the encrypted information to the user equipment, so that the user equipment decrypts the encrypted information using the second private key and obtains services of the service provider using the decrypted access token.

[0161] In the embodiment of the application, after the service provider RP receives the identity certification of the proxy node PN, the proxy signature is verified; whether the disclosed attribute is signed by the identity registration agency DR is verified; the identity of the user equipment U is verified and an access token is generated, which is encrypted using the second public key of the user equipment U and sent; the user equipment U obtains and decrypts the access token, and uses the token to access the application service of the service provider RP; finally, the user equipment U can revoke the proxy signature authority of the target proxy node PN according to the personal proxy authorization policy.

[0162] In the embodiment of the application, after the service provider RP receives the identity certification, the proxy signature is verified. Specifically, after the service provider RP receives the verifiable claim VP sent by the proxy node PN, the unique identifier id of the user is retrieved, the corresponding DID document is obtained from the blockchain according to the identifier index, and the public key information PK u , i.e. the second public key, and the proxy signature verification algorithm Ver VP (PK pn , PK u , t, VP) is used to verify the signature, to confirm the legality of the proxy signature of the verifiable claim VP: Ver VP (PK pn , PK u , t, VP)→[0,1]; the signature σ stored in VP is obtained, wherein σ=(PK u , PK pn , w i , d, σM ), using the public key PK pn and PK u , verify the signature of σ M :

[0163] When the signature is verified as illegal, or is no longer within the effective range of the revocation period t, Ver VP (PK pn , PK u , t, VP) outputs a result of 0, i.e. rejects the identity authentication of the user device U, and determines that the proxy signature is illegal.

[0164] When the signature is verified as legal, and is still within the effective range of the revocation period t, Ver VP (PK pn , PK u , t, VP) outputs a result of 1, i.e. accepts the identity authentication of the user device U, and determines that the proxy signature is legal.

[0165] The service provider RP verifies the disclosed attributes, specifically: after confirming that the proxy signature of the verifiable statement VP is legal, the RP verifies the disclosed attributes. The RP indexes the public key PK of the identity registration authority DR, and verifies the content of the verifiable statement VP using the public key of the identity registration authority DR, to verify that the disclosed attribute information is authenticated via the signature of the identity registration authority DR; the service provider RP provides a token for the user device U to access the website application service:

[0166] After the service provider RP completes the verification, an access token is generated, the access token is encrypted using the public key PK u of the user, and the encrypted information is sent to the user device U. The user device U receives the encrypted information, decrypts it using the private key SK u , i.e. the second private key, and uses the decrypted token to access the website application of the service provider RP and obtain services.

[0167] In the embodiment of the present application, the user is helped by the proxy node to perform proxy signature, completes the cumbersome identity authentication step, and only needs to complete proxy authorization in the initialization step, and does not need to participate in complex calculation tasks and cumbersome authentication steps in subsequent distributed digital identity authentication steps. The user only needs to confirm the service providing end RP identity request sent by the proxy node and authenticated by the proxy node, and the identity authentication process can be completed. The internal identity verification of the service providing end RP, the generation of verifiable statements according to the user selective attribute disclosure strategy, and the generation of the signature of the statement by using the proxy signature delegation are all invisible to the user. These cumbersome but extremely important steps for ensuring the security of distributed digital identity authentication do not need the user to participate, greatly reducing the device performance requirement of the user participating in digital activities, so as to face a wider range of users and be suitable for more digital activity scenarios. At the same time, based on the revocable proxy signature scheme, the user can effectively supervise the signature behavior of the proxy node. Once abnormal dereliction of duty occurs, the user can revoke the authorization of the proxy signature, so as to avoid further threat to the user's rights and interests.

[0168] Please refer to Figure 2 and Figure 3 , the specific process of the distributed identity authentication method is as follows:

[0169] Step 1: The system performs initialization; the identity registration authority DR initializes to generate a system public key PK and a master key MSK; the user equipment U, the service providing end RP and the proxy node PN each perform initialization to generate respective public and private key pairs; and the user equipment U and the service providing end RP register a distributed digital identity;

[0170] Step 2: The user equipment U accesses the proxy node PN, generates a proxy signature delegation using the first public key of the proxy node PN, and sends the proxy signature delegation to the proxy node PN together with the formulated selective disclosure policy and revocation list;

[0171] Step 3: The proxy node PN uses the proxy signature delegation to test the proxy signature, verifies the identity of the user equipment U, and provides a user proxy authentication unique identity authentication entry URL after verification;

[0172] Step 4: The user equipment U accesses the website application of the service providing end RP, and the service providing end RP performs identity verification on the user equipment U; the user equipment U sends the unique identity authentication entry URL provided by the proxy node PN to the service providing end RP, and transfers the identity authentication to the proxy node;

[0173] Step 5: The service providing end RP sends an authentication request containing its own identity proof to the specified proxy node PN according to the unique identity authentication entry URL provided by the user equipment U;

[0174] Step 6: The proxy node PN accepts the identity of the service provider RP and verifies the identity, and after verification, informs the user equipment U of the authentication request from the service provider RP, and after the user equipment U confirms, the proxy signature can be performed;

[0175] Step 7: The proxy node PN uses the verifiable credentials of the user equipment U to generate attribute disclosure content according to the attribute disclosure policy of the user equipment U, and signs the attribute disclosure content by means of the proxy signature delegation of the user equipment U, the revocation list and the first private key of the proxy node PN, to generate the proof part of the VP;

[0176] Step 8: The proxy node constructs a complete verifiable statement VP and sends it to the service provider RP;

[0177] Step 9: The service provider RP indexes in the blockchain to obtain the DID document of the user equipment U, and verifies the identity signature of the user equipment U;

[0178] Step 10: The service provider RP verifies the identity of the user equipment U, formulates an access token, and sends it to the user after encryption by the public key of the user equipment U;

[0179] Step 11: The user equipment U uses the second private key to decrypt the token to obtain the website application service of the service provider RP;

[0180] Step 12: The user can update the revocation list according to the self-defined policy and revoke the proxy signature authorization of the original user agent.

[0181] In the embodiment of the application, the user completes the cumbersome identity authentication steps with the help of the proxy node, and only needs to complete the proxy authorization in the initialization step, and does not need to participate in complex calculation tasks and cumbersome authentication steps in the subsequent distributed digital identity authentication steps. The user only needs to confirm the service provider RP identity request sent by the proxy node after being authenticated by the proxy node, and the identity authentication process can be completed. The internal identity verification of the service provider RP generates a verifiable statement according to the user's selective attribute disclosure policy, and signs the statement using the proxy signature delegation, which is invisible to the user. These cumbersome but extremely important steps for ensuring the security of distributed digital identity authentication do not require the user to participate, greatly reducing the device performance requirements of the user participating in digital activities, thereby facing a wider range of users and being suitable for more digital activity scenarios. At the same time, based on the revocable proxy signature scheme, the user can effectively supervise the proxy signature behavior of the proxy node, and can revoke the proxy signature authorization once abnormal dereliction of duty occurs, thereby avoiding further threats to the user's rights and interests.

[0182] The privacy leakage when identity authentication is performed in an open network environment and the problem of weak device performance when a user participates in a digital activity are solved, and the trust problem of the user and a service provider for a centralized identity authentication institution is avoided, thereby providing the user and the service provider with highly autonomous and controllable identity control sovereignty, and achieving highly safe, privacy-protected, and accurate and reliable user identity authentication effects. Specifically, the privacy-protected distributed identity authentication scheme is applied in financial authentication services, medical data access, and intelligent city infrastructure construction, ensuring the privacy and security of user identity information and authentication records, and having a wide application scenario. For example, in financial service authentication, a user performs secure login and transaction through a distributed identity authentication system, ensuring the confidentiality and integrity of personal information; in medical data access, the scheme allows patients to securely share personal information through a decentralized identity authentication mechanism, protecting privacy and avoiding data leakage; and in intelligent city infrastructure, residents can securely access honest services through a distributed identity authentication system, ensuring the security and privacy protection of identity data. Through decentralization and cryptography technology, a secure authentication environment without trust in a centralized institution is provided, ensuring honest participation of all parties. Malicious behavior will be punished. The present application not only improves user privacy protection, but also ensures the transparency and credibility of the system through smart contracts and blockchain technology, providing an innovative identity authentication solution for the medical, financial, and intelligent city fields.

[0183] Please refer to Figure 5 The embodiment of the present application provides a proxy node, comprising:

[0184] A generating module 51 is configured to generate a first public key and a first private key by using a key generation algorithm according to specified security parameters;

[0185] A first obtaining module 52 is configured to obtain first decentralized identification information of a user device and digital identity management information of the user device generated according to the first public key, wherein the first decentralized identification information is generated by an identity registration institution according to a second public key of the user device; and the digital identity management information comprises proxy signature delegation, a selective disclosure policy, a first verifiable credential, and a revocation list;

[0186] A first processing module 53 is configured to search a first decentralized identification document of the user device in a blockchain according to the first decentralized identification information, wherein the first decentralized identification document is constructed by the identity registration institution according to the first decentralized identification information and the second public key; and verify the ownership of the distributed digital identity of the user device according to the proxy signature delegation and the second public key, and generate a unique identity authentication entry URL;

[0187] The second processing module 54 is configured to send a unique identity authentication entry URL of the user equipment to a service providing end, and receive a first verifiable claim sent by the service providing end;

[0188] The third processing module 55 is configured to send an identity authentication request generated based on the first verifiable claim to the user equipment by the proxy node, and after learning that the user equipment confirms the identity authentication request, generate a complete verifiable claim according to the selective disclosure policy, the first verifiable credential, the revocation list, the first private key and the first verifiable claim, and send the complete verifiable claim to the service providing end, so as to perform the proxy signature service between the user equipment and the service providing end.

[0189] In the embodiment of the application, the method further comprises the following steps:

[0190] The verifiable claim sending module is configured to send the second verifiable claim to the service providing end, so as to perform the proxy signature service between the user equipment and the service providing end.

[0191] In the embodiment of the application, the method further comprises the following steps:

[0192] The revocation module is configured to obtain a new revocation list sent by the user equipment, wherein the proxy node is included in the revocation list, and the revocation list is used to revoke the proxy signature service of the proxy node.

[0193] In the embodiment of the application, the first processing module comprises:

[0194] The first processing submodule is configured to generate a one-time random challenge, sign the generated one-time random challenge according to the proxy signature delegation of the user equipment, and verify the signature using the second public key, and if the verification is passed, generate the unique identity authentication entry URL for the user equipment.

[0195] In the embodiment of the application, the third processing module comprises:

[0196] The second processing submodule is configured to generate attribute disclosure content according to the first verifiable credential and the selective disclosure policy of the user equipment, sign the attribute disclosure content using the proxy signature delegation, the revocation list and the first private key, integrate the signed attribute disclosure content into the first verifiable claim to obtain the complete second verifiable claim.

[0197] The proxy node provided by the embodiment of the application can realize Figure 1 The method embodiment realizes various processes and achieves the same technical effects, and thus details are not repeated here.

[0198] Reference is made to Figure 6 The embodiment of the present application provides a service providing end, comprising:

[0199] The fourth processing module 61 is configured to generate a third public key and a third private key according to a designated security parameter using a key generation algorithm, acquire second decentralized identification information registered by an identity registration authority according to the third public key, and acquire a second decentralized identification document constructed by the identity registration authority according to the second decentralized identification information and the third public key, and store the second decentralized identification document in a block chain;

[0200] The second acquisition module 62 is configured to acquire a second verifiable credential signed by the identity registration authority according to the second decentralized identification document and the third public key;

[0201] The receiving module 63 is configured to receive a unique identity authentication entry URL of a user equipment sent by a proxy node, wherein the unique identity authentication entry URL is generated by searching, by the proxy node, a first decentralized identification document of the user equipment in a block chain according to first decentralized identification information of the user equipment, acquiring a second public key of the user equipment in the first decentralized identification document, and verifying distributed digital identity ownership of the user equipment according to digital identity management information of the user equipment and the second public key;

[0202] The fifth processing module 64 is configured to generate a first verifiable claim according to the unique identity authentication entry URL, the third private key and the second verifiable credential, and send the first verifiable claim to the proxy node, so that the proxy node generates a complete second verifiable claim according to the digital identity management information and the first verifiable claim after acquiring an identity authentication request of the user equipment confirming generation of the first verifiable claim.

[0203] Optionally, the embodiment of the present application further comprises:

[0204] The verifiable claim receiving module is configured to receive the complete second verifiable claim, so as to perform proxy signature service between the user equipment and the service providing end.

[0205] The verification module is configured to verify the identity and the disclosable attribute of the user equipment according to the complete verifiable claim, generate an access token, encrypt the access token by using the second public key of the user equipment to obtain encrypted information, and send the encrypted information to the user equipment, so that the user equipment decrypts the encrypted information by using the second private key, and acquires the service of the service providing end by using the decrypted access token.

[0206] The service providing end provided by the embodiment of the present application can realize Figure 4 the processes of the method embodiment and achieve the same technical effects. To avoid repetition, the details are not described herein.

[0207] The embodiment of the present application provides an electronic device 70, referring to Figure 7 , Figure 7 is a principle block diagram of the electronic device 70, including a processor 71, a memory 72 and a program or instruction stored in the memory 72 and capable of running on the processor 71, the program or instruction is executed by the processor to realize the steps in any one of the distributed identity authentication methods of the present application.

[0208] The embodiment of the present application provides a readable storage medium, the readable storage medium stores a program or instruction, the program or instruction is executed by the processor to realize the processes of the embodiment of the distributed identity authentication method as described above, and the same technical effects can be achieved. To avoid repetition, the details are not described herein.

[0209] The embodiment of the present application also provides a computer program product, including computer instructions, which are executed by the processor to realize the processes of the method embodiments as shown in Figure 1 or Figure 4 , and the same technical effects can be achieved. To avoid repetition, the details are not described herein.

[0210] The computer readable medium includes permanent and non-permanent, removable and non-removable media, and can be realized by any method or technology. The information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette, magnetic tape disk storage or other magnetic storage device, or any other non-transmission medium that can be used to store information accessible by a computing device. According to the definition in this paper, the computer readable medium does not include transitory computer readable media, such as modulated data signals and carriers.

[0211] It should be noted that in the technical solutions of the present disclosure, the collection, collection, updating, analysis, processing, use, transmission, storage and the like of user personal information are in line with the provisions of relevant laws and regulations, are used for legal purposes, and do not violate public order and good customs. Necessary measures are taken for user personal information to prevent illegal access to user personal information data and maintain user personal information security and network security.

[0212] It should be noted that in this paper, the term "includes", "contains" or any other variant thereof is intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed, or includes elements inherent to such process, method, article or device. Without more limitations, the element defined by the sentence "includes a" does not exclude the presence of another identical element in the process, method, article or device including the element.

[0213] The above-mentioned serial numbers of the embodiments of the present application are only for description, not representing the advantages and disadvantages of the embodiments.

[0214] From the above description of the embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be realized by software and necessary general hardware platform, of course, they can also be realized by hardware, but in many cases, the former is a better embodiment. Based on such understanding, the technical solutions of the present application can be embodied in the form of software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), including a plurality of instructions for making a service classification device (which can be a mobile phone, computer, server, air conditioner or network device, etc.) execute the methods described in various embodiments of the present application.

[0215] The above-mentioned only is the preferred embodiment of the present application, it should be pointed out that, for those skilled in the art, without departing from the principle of the present application, can make a number of improvements and refinements, these improvements and refinements should be regarded as the protection scope of the present application.

Claims

1. A distributed identity authentication method, characterized in that: include: The proxy node generates a first public key and a first private key using a key generation algorithm according to specified security parameters; The proxy node obtains first decentralized identification information of a user device and digital identity management information generated by the user device based on the first public key, wherein the first decentralized identification information is generated by an identity registration authority based on the second public key of the user device; the digital identity management information includes: a proxy signature delegation, a selective disclosure policy, a first verifiable credential, and a revocation list; The proxy node searches the blockchain for a first decentralized identification document of the user device based on the first decentralized identification information, where the first decentralized identification document is constructed by the identity registration authority based on the first decentralized identification information and the second public key; and verifies the distributed digital identity ownership of the user device based on the proxy signature delegation and the second public key, generating a unique identity authentication entry URL; The proxy node sends the unique identity authentication entry URL of the user device to the service provider, and receives the first verifiable statement sent by the service provider; The proxy node sends an authentication request generated based on the first verifiable statement to the user device, and after learning that the user device has confirmed the authentication request, generates a complete second verifiable statement based on the selective disclosure policy, the first verifiable credential, the revocation list, the first private key and the first verifiable statement.

2. The distributed identity authentication method according to claim 1, characterized in that: Also includes: The second verifiable statement is sent to the service provider, thereby performing a proxy signing service between the user equipment and the service provider.

3. The distributed identity authentication method according to claim 1, characterized in that: Also includes: The proxy node obtains a new revocation list sent by the user equipment, wherein the revocation list includes the proxy node, and the revocation list is used to revoke the proxy signature service of the proxy node.

4. The distributed identity authentication method according to claim 1, characterized in that: The verifying the distributed digital identity ownership of the user device according to the proxy signature delegation and the second public key to generate a unique identity authentication entry URL includes: The proxy node generates a one-time random challenge, signs the generated one-time random challenge according to the proxy signature delegation of the user device, and verifies the signature using the second public key. If the verification passes, the unique identity authentication entry URL is generated for the user device.

5. The distributed identity authentication method according to claim 1, characterized in that: The proxy node generates a complete second verifiable statement based on the selective disclosure policy, the first verifiable credential, the revocation list, the first private key, and the first verifiable statement, including: The proxy node generates attribute disclosure content based on the first verifiable credential and selective disclosure policy of the user device, and signs the attribute disclosure content using the proxy signature delegation, the revocation list and the first private key, and integrates the signed attribute disclosure content into the first verifiable statement to obtain a complete second verifiable statement.

6. A distributed identity authentication method, characterized in that: include: The service provider generates a third public key and a third private key using a key generation algorithm according to specified security parameters, obtains second decentralized identification information generated by the identity registration authority based on the third public key, obtains a second decentralized identification document constructed by the identity registration authority based on the second decentralized identification information and the third public key, and stores the second decentralized identification document in the blockchain; The service provider obtains a second verifiable credential generated by the identity registration authority based on the second decentralized identification document and the third public key signature; The service provider receives a unique identity authentication entry URL of the user device sent by the proxy node, wherein the unique identity authentication entry URL is generated by the proxy node searching for the first decentralized identification document of the user device in the blockchain based on the first decentralized identification information of the user device, obtaining the second public key of the user device in the first decentralized identification document, and verifying the distributed digital identity ownership of the user device based on the digital identity management information of the user device and the second public key; The service provider generates a first verifiable statement based on the unique identity authentication entry URL, the third private key and the second verifiable credential, and sends the first verifiable statement to the proxy node, so that the proxy node generates a complete second verifiable statement based on the digital identity management information and the first verifiable statement after obtaining the user device's identity authentication request generated by confirming the first verifiable statement.

7. The distributed identity authentication method according to claim 6, characterized in that: Also includes: The service provider receives the complete second verifiable statement, thereby performing a proxy signing service between the user equipment and the service provider.

8. The distributed identity authentication method according to claim 6, characterized in that: Also includes: The service provider verifies the identity and disclosable attributes of the user device based on the second verifiable statement, generates an access token, encrypts the access token using the second public key of the user device to obtain encrypted information, and sends the encrypted information to the user device, so that the user device uses the second private key to decrypt the encrypted information and uses the decrypted access token to obtain the services of the service provider.

9. A proxy node, characterized in that: include: A generating module, configured to generate a first public key and a first private key using a key generation algorithm according to specified security parameters; A first acquisition module, configured to acquire first decentralized identification information of a user device and digital identity management information generated by the user device based on the first public key, wherein the first decentralized identification information is generated by an identity registration authority based on the second public key of the user device; the digital identity management information includes: a proxy signature delegation, a selective disclosure policy, a first verifiable credential, and a revocation list; a first processing module, configured to search a blockchain for a first decentralized identification document of the user device based on the first decentralized identification information, wherein the first decentralized identification document is constructed by the identity registration authority based on the first decentralized identification information and the second public key; and to verify ownership of the distributed digital identity of the user device based on the proxy signature delegation and the second public key, and generate a unique identity authentication entry URL; A second processing module is configured to send a unique identity authentication entry URL of the user device to a service provider, and receive a first verifiable statement sent by the service provider; A third processing module is configured for the proxy node to send an authentication request generated based on the first verifiable statement to the user device, and after learning that the user device has confirmed the authentication request, to generate a complete verifiable statement based on the selective disclosure policy, the first verifiable credential, the revocation list, the first private key and the first verifiable statement, and to send the complete verifiable statement to the service provider, thereby performing a proxy signature service between the user device and the service provider.

10. A service provider, characterized in that: include: a fourth processing module, configured to generate a third public key and a third private key using a key generation algorithm according to specified security parameters, obtain second decentralized identification information generated by an identity registration authority based on the third public key, obtain a second decentralized identification document constructed by the identity registration authority based on the second decentralized identification information and the third public key, and store the second decentralized identification document in a blockchain; A second acquisition module is configured to obtain a second verifiable credential generated by an identity registration authority based on the second decentralized identification document and the third public key signature; a receiving module, configured to receive a unique identity authentication entry URL of a user device sent by a proxy node, wherein the unique identity authentication entry URL is generated by the proxy node searching for a first decentralized identification document of the user device in a blockchain based on the first decentralized identification information of the user device, obtaining a second public key of the user device in the first decentralized identification document, and verifying the distributed digital identity ownership of the user device based on the digital identity management information of the user device and the second public key; a fifth processing module, configured to generate a first verifiable statement based on the unique identity authentication entry URL, the third private key, and the second verifiable credential, and send the first verifiable statement to the proxy node, so that the proxy node, after obtaining the user device's authentication request generated by confirming the first verifiable statement, generates a complete second verifiable statement based on the digital identity management information and the first verifiable statement; The sixth processing module is configured to receive the complete verifiable statement, thereby performing a proxy signing service between the user equipment and the service provider.

11. An electronic device, characterized in that: It includes a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein when the program or instruction is executed by the processor, the method for distributed identity authentication as described in any one of claims 1 to 5 or the steps in the method for distributed identity authentication as described in any one of claims 6 to 8 are implemented.

12. A readable storage medium, characterized in that: The readable storage medium stores a program or instruction, which, when executed by a processor, implements the method for distributed identity authentication as described in any one of claims 1 to 5, or the steps in the method for distributed identity authentication as described in any one of claims 6 to 8.

13. A computer program product, characterized in that The method comprises computer instructions, which, when executed by a processor, implement the method for distributed identity authentication according to any one of claims 1 to 5, or the steps in the method for distributed identity authentication according to any one of claims 6 to 8.

Images