An autonomous valet parking user identity cross-domain self-authentication method based on a consortium chain

Abstract

The application discloses a kind of self-help parking user identity cross-domain self-authentication method based on alliance chain, which comprises the following steps: 1) system initialization;2) the deployment of user identity-based alliance chain and smart contract;3) user anonymous cross-domain self-authentication.The application divides users into two categories, namely new users and old users.For new users, a decentralized identity authentication method based on authentication parameters is used, and their legal anonymous identity and public key are recorded as transaction records on the alliance blockchain and stored distributedly between servers, realizing secret sharing of user identity information between multiple end servers.For old users, local on-chain information is queried through a smart contract to quickly verify the legality of their identity.Through the self-help parking user identity cross-domain self-authentication method based on alliance chain, the "data silo" problem of multiple end servers and the user redundant identity registration problem are solved, and the security and efficiency of user identity authentication are improved.

Description

Technical Field

[0001] This invention relates to the fields of autonomous valet parking, blockchain, and identity authentication protocol design, and particularly to the field of cross-domain self-authentication schemes for user identities based on consortium blockchains. Background Technology

[0002] In recent years, due to the rapid increase in car ownership, the contradiction between supply and demand for urban parking spaces has become increasingly prominent. Finding a parking space is time-consuming and fuel-intensive, and collisions are prone to occur when parking in narrow spaces. The problems of "difficulty in finding parking" and "difficulty in finding parking" urgently need to be solved. Autonomous valet parking is an advanced intelligent driver assistance technology that has great advantages and potential in improving parking lot utilization, reducing parking time, reducing energy consumption during parking, avoiding accidents and losses during the parking process, and improving the user's "last mile" driving experience. It has received widespread attention from all sectors of society and the attention of vehicle engineering technicians.

[0003] Currently, research on AVP in domestic and international industry and academia focuses on: (1) AVP system architecture research, which mainly consists of three parts: user end, site end, and vehicle end. The content of their service requests is basically the same, the difference lies in the order of the service request process and the different requesters; (2) Research on key technologies of autonomous valet parking systems, such as path planning, obstacle detection, vehicle indoor positioning technology, high-precision maps, etc. There is relatively little research on the many information security issues faced by various parts of the AVP system in the process of information interaction. Summary of the Invention

[0004] To address the aforementioned issues, this invention proposes a cross-domain self-authentication scheme for autonomous valet parking users based on a consortium blockchain, specifically targeting the "data silo" problem across multiple server locations and the problem of redundant user identity registration. This scheme employs a decentralized, two-way anonymous authentication method to alleviate the service pressure on the trusted central authority. Furthermore, to improve the efficiency of user authentication, users are divided into two categories: for new users, a decentralized authentication method based on authentication parameters is used, and their legitimate anonymous identity and public key are distributed and stored as transaction records on the consortium blockchain across servers, enabling the secret sharing of user identity information among multiple server locations; for existing users, a smart contract allows for querying local on-chain information to quickly verify the legitimacy of their identity.

[0005] To achieve the above objectives, the technical solution of the present invention is as follows:

[0006] A method for cross-domain self-authentication of user identity in autonomous valet parking based on consortium blockchain mainly includes three steps: 1) system initialization, establishing an autonomous valet parking system model based on edge cloud computing; 2) deployment of consortium blockchain and smart contracts based on user identity; and 3) anonymous cross-domain self-authentication of users.

[0007] Furthermore, in step 1) system initialization, an autonomous valet parking system model based on edge cloud computing was established, which consists of the following layers from top to bottom: (1.1) Cloud layer: composed of the authoritative TA and AVP service provider AVPprov; (1.2) Edge layer: composed of the field server Serv; (1.3) Terminal layer: composed of users User; among which, the authoritative TA is responsible for issuing system parameters and the system registration work of the other entities: AVPprov, Serv and User, and also undertakes arbitration work such as accident accountability.

[0008] Furthermore, in step 2) the deployment of the consortium blockchain and smart contract based on user identity, a consortium blockchain is used and deployed among field servers at the system edge layer to store the temporary pseudonym PID and temporary public key PK of legitimate users, thereby realizing the secret sharing of user identity information; at the same time, a smart contract is designed to manage the anonymous identity of users, thereby realizing decentralized, anonymous, and efficient two-way authentication between users and multiple field servers.

[0009] Furthermore, step 3) anonymous cross-domain self-authentication of users includes: (3.1) information release, (3.2) service selection, (3.3) cross-domain authentication of user identity and (3.4) on-chain storage and management of the anonymous identity information of legitimate users.

[0010] Furthermore, (3.1) Information publishing is Serv publishing parking lot-related information based on its public key, geographic location (Loc), available parking space information (AvailPLhe certificate Cert).

[0011] Furthermore, (3.2) the service selection allows users to select their preferred parking lot based on the information published by the Serv and verify the authenticity of their certificate, while generating a temporary pseudonym PID for enjoying services such as parking space reservation and online payment.

[0012] Furthermore, (3.3) cross-domain user identity authentication: consists of two parts: (3.3.1) decentralized new user identity authentication based on authentication parameters and (3.3.2) cross-domain old user identity authentication based on consortium blockchain, wherein:

[0013] (3.3.1) Decentralized identity authentication based on authentication parameters includes the following steps:

[0014] a) User authentication parameters obtained during system initialization and Send the first service request FirstReq to the Serv, where The private key of the authoritative TA, G is the base point of the elliptic curve. To generate a unique identifier for users Hash function;

[0015] b) After receiving the request FirstReq, the Serv first verifies the validity and integrity of the message, then decrypts the request message FirstReq and obtains and stores the symmetric key Key, the user's temporary pseudonym PID, and the temporary public key PK, and then calculates the parameters. Send to the user. It is a random number. It is the base point of the elliptic curve;

[0016] c) User receives parameters Then, calculate Use bilinear functions to calculate user parameters , Public key pair, Represents a bilinear mapping. For random numbers, where , To generate a unique identifier for the field server Hash function;

[0017] d) Serv receives and And use bilinear functions to calculate the parameters of the field server. and judge and If they are equal, then the user's identity is legitimate. , G is the private key of the authoritative TA, and G is the base point of the elliptic curve.

[0018] (3.3.2) Cross-domain old user ID authentication based on consortium blockchain includes the following steps:

[0019] a) Existing users send a service request (Req) containing their temporary public key (PK) and temporary pseudonym (PID);

[0020] b) After receiving the request, the Serv obtains the user's temporary public key (PK) and temporary pseudonym (PID), calls the query function of the smart contract to perform on-chain data query to determine the legitimacy of the user's identity. If the user's temporary public key (PK) and temporary pseudonym (PID) exist, the user is a legitimate user, and the Serv then receives the user's service request and provides the relevant services.

[0021] Furthermore, (3.4) the on-chain storage and management of the anonymous identity information of legitimate users is as follows: when the Serv verifies that the identity of a new user is legitimate, the server uses the temporary pseudonym PID and temporary public key PK information of the legitimate user as the transaction record of the consortium blockchain, and periodically packages multiple transaction records to generate blocks. The consensus mechanism is used to complete the auditing of the blocks among consortium members (different servers) and update the blockchain.

[0022] This paper proposes a cross-domain self-authentication method for autonomous valet parking user identities based on consortium blockchains. This method has the following beneficial effects:

[0023] 1) For new users, a decentralized identity authentication method based on authentication parameters is adopted, and their legitimate anonymous identity and public key are distributed and stored as transaction records of the consortium blockchain among servers, so as to realize the secret sharing of user identity information among multiple terminal servers.

[0024] 2) Allow existing users to query on-chain information locally via smart contracts to quickly verify the legitimacy of their identity.

[0025] 3) Based on the above characteristics, the "data silo" problem of multiple terminal servers and the problem of redundant user identity registration were further solved. Attached Figure Description

[0026] Figure 1 This is a system model diagram of the present invention;

[0027] Figure 2 This is a design diagram of the cross-domain self-authentication of user anonymity in this invention. Detailed Implementation

[0028] The method of the present invention mainly includes the following parts:

[0029] 1) System Initialization

[0030] Before implementation, all entities (site servers and users) in this scheme must register their real identity information with the Authoritative Center (TA) to become legitimate entities and obtain their own unique identity identifier, public-private key pair, and corresponding digital signature and certificate.

[0031] (1) TA

[0032] TA selects random numbers , ( The set of non-zero natural numbers is used to generate its own public key using the ECC elliptic curve cryptography algorithm. Private key Choose two hash functions ( and ), and then generate system parameters. .

[0033] (2) Serv registration

[0034] First, the system parameter Para is downloaded to the field server, and at the same time, a unique server identifier is generated for the field server. Private key Public key Service location ,Certificate and authentication parameters and ,in To generate a unique identifier for the field server hash function G is the private key of the authoritative TA, and G is the base point of the elliptic curve.

[0035] 3) User Registration

[0036] The system parameter Para is first downloaded to the user's device, and a unique identifier is generated for the user at the same time. Temporary private key Temporary public key Temporary anonymous identity And authentication parameters used for initial authentication and , among which The private key of the authoritative TA, G is the base point of the elliptic curve. To generate a unique identifier for users The hash function.

[0037] Table 1. Symbols and Definitions:

[0038] .

[0039] 2) Deployment of user-identity-based consortium blockchains and smart contracts

[0040] like Figure 1 As shown, this paper builds an AVP system model based on edge computing, enabling the site server to perceive the status of all parking spaces in the parking lot in real time. Users can also flexibly reserve preferred parking spaces and change existing reservations at any time. The system consists of a cloud layer, an edge layer, and a terminal layer from top to bottom. The user anonymity identity consortium blockchain PseIDChain and the smart contract PseIDContract are deployed at the edge layer.

[0041] a) Deployment of PseIDChain, a blockchain for anonymous user identities

[0042] Consortium blockchains are specific blockchains that maintain a distributed shared database through authorized nodes. New blocks can be generated with just over half of the consortium members reaching a consensus, resulting in lower system overhead and cost. Compared to public and private blockchains, they better meet the needs of AVP (Automated Guided Vehicle) scenarios. Therefore, this paper adopts a consortium approach and deploys it among edge servers to store temporary pseudonyms (PIDs) and temporary public keys (PKs) of legitimate users, enabling the secret sharing of user identity information.

[0043] b) Design of the PseIDContract smart contract for user anonymity management

[0044] The deployment of consortium blockchains solves the "information silo" problem between servers. Building on this, this paper designs a smart contract, PseIDContract, to manage anonymous user identities, thereby achieving decentralized, anonymous, and efficient two-way authentication between users and multiple end-servers. PseIDContract includes functions for adding anonymous user identity information (PseIDAdd), querying (PseIDSearch), deleting (PseIDDelete), and updating (PseIDUpdate), and manages on-chain user information on PseIDChain through the interfaces interface.GetState, interface.PutState, and interface.DelState.

[0045] 3) Anonymous cross-domain requests

[0046] Information Release

[0047] Serv publishing information .

[0048] Service Selection

[0049] Users select a target parking lot as needed and authenticate their identity with the parking lot's on-site server in order to submit an AVP service request to the server.

[0050] a) User based on message Select the target parking lot, and then use the public key in the message. Verify Certificate This ensures the validity and correctness of the message itself.

[0051] b) After the user successfully authenticates with the server, a symmetric key Key and their own temporary private key are generated. and temporary public key Meanwhile, based on the regulations issued by TA. and TA's public key Generate temporary anonymous identity .

[0052] Cross-domain self-authentication scheme for user identity

[0053] This paper designs a cross-domain self-authentication scheme for user identity, which is divided into decentralized identity authentication based on authentication parameters (for new users) and cross-domain ID card authentication based on consortium blockchains (for existing users). Figure 2 As shown.

[0054] New user AVP service request: Decentralized identity authentication based on authentication parameters

[0055] (1) The user's identity authentication parameters are based on the authentication parameters issued by the TA during the initialization phase. and Send a request FirstReq to the Serv: .

[0056] (2) After receiving a service request, the Serv first verifies the validity of the message based on the timestamp TS, and then... Verify the integrity of the message, and then use your private key. Decrypting the message yields the symmetric key Key and the user's temporary anonymity. and public key And save it, select a random number. ,calculate ,send .

[0057] (3) The user receives the message Then, select a random number. ,calculate And calculate according to formula (1) Send message Give it to the server.

[0058] (1)

[0059] (4) Serv receives Calculate according to formula (2) and judge and If they are equal, then the user's identity is legitimate.

[0060] (2)

[0061] On-chain storage and management of anonymous identity information of legitimate users

[0062] When the server verifies that the new user's identity is valid, the server will use the valid user's temporary pseudonym. and public key Information serves as a transaction record for PseIDChain, and multiple transaction records are periodically packaged into blocks. Through a consensus mechanism, the block auditing work is completed among alliance members (different servers), and PseIDChain is updated.

[0063] To prevent users from being targeted by guessing attacks due to prolonged use of the same pseudonym, users need to use different pseudonyms to enjoy AVP services in different regions. The steps are as follows.

[0064] (1) After the service ends, the user will regenerate their own temporary private key. Temporary public key and temporary anonymous identity Then send an anonymous update request: .

[0065] (2) After receiving the request, the server uses the original public key and pseudonym information to call the smart contract query function to look up on-chain data, and then calls the update function to... For the original information Update.

[0066] Existing user AVP service request: Cross-domain identity authentication based on consortium blockchain

[0067] (1) Existing users send AVP service request Req: .

[0068] (2) After receiving the request, the Serv decrypts it to obtain the result. and The system calls the smart contract's query function to perform on-chain data queries to verify the legitimacy of the user's identity. If... and If the user's identity exists, their AVP service request is valid, and the relevant service will be provided. Otherwise, the service request will be rejected.

[0069] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "illustrative embodiment," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0070] Although embodiments of the invention have been shown and described, those skilled in the art will understand that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the claims and their equivalents.

Claims

1. A method for cross-domain self-authentication of user identity in autonomous valet parking based on consortium blockchain, characterized in that, The system includes three main steps: 1) system initialization, establishing an autonomous valet parking system model based on edge cloud computing; 2) deployment of a consortium blockchain and smart contracts based on user identity; and 3) anonymous cross-domain self-authentication of users. In step 1) system initialization, an autonomous valet parking system model based on edge cloud computing was established, which is as follows from top to bottom: (1.1) Cloud layer: composed of the authoritative TA and AVP service provider AVPprov; (1.2) Edge layer: composed of the field server Serv; (1.3) Terminal layer: composed of users User; among which, the authoritative TA is responsible for issuing system parameters and the system registration work of the other entities: AVPprov, Serv and User, and also undertakes the work of accident accountability arbitration. In step 2) the deployment of the consortium blockchain and smart contract based on user identity, a consortium blockchain is used and deployed among field servers at the system edge layer to store the temporary pseudonym PID and temporary public key PK of legitimate users, so as to realize the secret sharing of user identity information; at the same time, a smart contract is designed to manage the anonymous identity of users, so as to realize decentralized, anonymous and efficient two-way authentication between users and multiple field servers. Step 3) User anonymous cross-domain self-authentication includes: (3.1) Information publishing, (3.2) Service selection, (3.3) User identity cross-domain authentication and (3.4) On-chain storage and management of the anonymous identity information of legitimate users; Among them, (3.3) cross-domain user identity authentication consists of two parts: (3.3.1) decentralized new user identity authentication based on authentication parameters and (3.3.2) cross-domain old user identity authentication based on consortium blockchain. (3.3.1) Decentralized identity authentication based on authentication parameters includes the following steps: a) User authentication parameters obtained during system initialization and Send the first service request FirstReq to the Serv, where The private key of the authoritative TA, G is the base point of the elliptic curve. To generate a unique identifier for users Hash function; b) After receiving the request FirstReq, the Serv first verifies the validity and integrity of the message, then decrypts the request message FirstReq and obtains and stores the symmetric key Key, the user's temporary pseudonym PID, and the temporary public key PK, and then calculates the parameters. Send to the user. It is a random number. It is the base point of the elliptic curve; c) User receives parameters Then, calculate Use bilinear functions to calculate user parameters , It is the public key of the authoritative TA. Represents a bilinear mapping. For random numbers, where , To generate a unique identity ID for the field server Serv Hash function; d) Serv receives and And use bilinear functions to calculate the parameters of the field server. and judge and If they are equal, then the user's identity is legitimate. , G is the private key of the authoritative TA, and G is the base point of the elliptic curve. (3.3.2) Cross-domain old user ID authentication based on consortium blockchain includes the following steps: a) Existing users send a service request (Req) containing their temporary public key (PK) and temporary pseudonym (PID); b) After receiving the request, the Serv obtains the user's temporary public key (PK) and temporary pseudonym (PID), calls the query function of the smart contract to perform on-chain data query to determine the legitimacy of the user's identity. If the user's temporary public key (PK) and temporary pseudonym (PID) exist, the user is a legitimate user, and the Serv then receives the user's service request and provides the relevant services.

2. The method for cross-domain self-authentication of user identity in autonomous valet parking based on consortium blockchain as described in claim 1, characterized in that, (3.1) Information publishing is Serv publishing parking lot related information based on its public key, geographical location (Loc), available parking space information, AvailPLhe certificate (Cert).

3. The method for cross-domain self-authentication of user identity in autonomous valet parking based on consortium blockchain as described in claim 1, characterized in that, (3.2) Service selection allows users to select their preferred parking lot based on the information published by the Serv and verify the authenticity of their certificate. At the same time, a temporary pseudonym PID is generated for enjoying parking space reservation and online payment services.

4. The method for cross-domain self-authentication of user identity for autonomous valet parking based on consortium blockchain as described in claim 1, characterized in that, (3.4) On-chain storage and management of anonymous identity information of legitimate users: When the Serv verifies that the identity of a new user is legitimate, the server uses the temporary pseudonym PID and temporary public key PK information of the legitimate user as the transaction record of the consortium blockchain, and periodically packages multiple transaction records to generate blocks. The block auditing work is completed among consortium members through the consensus mechanism, and the blockchain is updated.

Images