A blockchain-based edge computing platform identity authentication method and device

Abstract

The present invention provides an edge computing platform identity authentication method and device based on blockchain. The method includes: receiving a connection establishment request from a user terminal, and determining whether the user terminal is a legitimate user, and if so, obtaining the transaction hash value of the user terminal; based on a block query service embedded in a mobile edge computing platform in a preset edge computing alliance chain, verifying whether the transaction hash value is valid, and if so, determining that the user terminal has completed the authentication. The edge computing platform identity authentication method based on blockchain disclosed in the present invention is adopted, and the unique identity authentication of the user on the mobile edge computing platform is completed by using the edge computing alliance chain constructed by using the mobile edge computing platform as a blockchain node, thereby ensuring the credibility of user information and the security of user information, improving the authentication efficiency of the user terminal, and enhancing the user experience.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and more particularly to a method and device for authenticating an edge computing platform based on blockchain. In addition, the present invention also relates to an electronic device and a processor-readable storage medium. Background Art

[0002] In recent years, with the rapid development of network technology, more and more business transactions are being carried out with the help of the Internet. How to ensure the security of online business is the main problem currently faced.

[0003] The mainstream authentication method in the prior art generally adopts the OpenID authentication method. OpenID is a decentralized service that separates authentication from business. It uses a user to apply for a subdomain name (i.e. OpenId) from a third-party server (i.e. OpenId server). After the user logs in to OpenId, the user can access the business applications owned by the OpenId server with the OpenId identity assigned by the OpenId server. However, when using the OpenId method for authentication, the authentication information is provided by a third-party server. After the user registers an account, the server will assign an OpenId to the user. This method weakens the user's real information and obviously has certain disadvantages for industries that require real information authentication. In addition, if the stability of the third-party platform does not meet the standards, it will cause the user to log in and fail, and the third-party server administrator has the authority to modify the authentication information and view the user information. Therefore, the security, credibility, distributed storage and anti-tampering mechanism of the authentication information data are a huge challenge for OpenId authentication.

[0004] At present, edge computing technology is becoming more and more important in the future applications of big video, Internet of Vehicles, cloud games, etc. As a distributed computing power and intelligent center, there is currently no complete set of distributed, decentralized, highly reliable, and secure authentication methods to solve the authentication problems between mobile edge computing platforms (MEC; Mobile Edge Computing) and 5G networks. With the continuous development of blockchain technology, how to design and implement a secure and efficient blockchain-based edge computing platform identity authentication solution has become an important research topic in this field. Summary of the invention

[0005] To this end, the present invention provides an edge computing platform identity authentication method and device based on blockchain to solve the problems of high limitations, poor security and authentication efficiency of identity authentication schemes in the prior art.

[0006] In a first aspect, the present invention provides an edge computing platform identity authentication method based on blockchain, comprising:

[0007] Receive a connection establishment request from a user terminal, and determine whether the user terminal is a legitimate user, and if so, obtain a transaction hash value of the user terminal;

[0008] Based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, verify whether the transaction hash value is valid. If so, determine that the user terminal has completed the authentication.

[0009] In one embodiment, the blockchain-based edge computing platform identity authentication method further includes:

[0010] If the transaction hash value is invalid, obtaining the public key information and user identification card information of the user terminal;

[0011] Based on the public key information and the user identity card information, a corresponding authentication hash value is generated by using the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain;

[0012] The authentication hash value is written into the blockchain node of the edge computing alliance chain, and the transaction hash value corresponding to the authentication hash value is transmitted back to the user terminal to update the transaction hash value of the user terminal and complete the authentication of the user terminal; wherein the blockchain node corresponds to the mobile edge computing platform.

[0013] In one embodiment, the blockchain-based edge computing platform identity authentication method further includes: before receiving a connection establishment request from a user terminal, using the mobile edge computing platform as a blockchain node to build an edge computing alliance chain; wherein the mobile edge computing platform is a multi-access mobile edge computing platform corresponding to each telecom operator.

[0014] In one embodiment, the determining whether the user terminal is a legitimate user, and if so, obtaining the transaction hash value of the user terminal, specifically includes: based on the session management module, using the unified data management function module to determine whether the user terminal is a legitimate user, and if so, notifying the user terminal to send the transaction hash value, and obtaining the transaction hash value forwarded by the user plane function module;

[0015] The block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain verifies whether the transaction hash value is valid, specifically including: based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, querying whether there is a corresponding authentication hash value in the blockchain node, and if so, determining that the transaction hash value is valid; wherein, the blockchain node corresponds to the mobile edge computing platform.

[0016] In one embodiment, the generating of the corresponding authentication hash value based on the public key information and the user identity card information by using the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain specifically includes: based on the public key information and the user identity card information, using the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain, and using the method of generating a transaction hash value using Bitcoin to generate the corresponding authentication hash value;

[0017] The step of writing the authentication hash value into the blockchain node of the edge computing alliance chain specifically includes: using a practical Byzantine fault-tolerant algorithm to perform blockchain node consensus on the edge computing alliance chain, and writing the authentication hash value into the blockchain node.

[0018] In a second aspect, the present invention also provides an edge computing platform identity authentication method based on blockchain, comprising:

[0019] Send a connection establishment request to the mobile edge computing platform in the edge computing alliance chain;

[0020] When the legitimacy verification is passed, receiving a notification message returned by the mobile edge computing platform, and sending a corresponding transaction hash value to the mobile edge computing platform according to the notification message;

[0021] Receiving identity authentication result information returned by the mobile edge computing platform;

[0022] When the identity authentication result information is unauthenticated, sending corresponding public key information and user identity card information to the mobile edge computing platform in the edge computing alliance chain;

[0023] Receive a transaction hash value generated by the mobile edge computing platform based on the public key information and the user identity card information and using an authentication service on an embedded blockchain smart contract, and update the locally stored transaction hash value.

[0024] In a third aspect, the present invention further provides an edge computing platform identity authentication device based on blockchain, comprising:

[0025] A transaction hash value acquisition unit, configured to receive a connection establishment request from a user terminal, and determine whether the user terminal is a legitimate user, and if so, acquire the transaction hash value of the user terminal;

[0026] The transaction hash value authentication unit is used to verify whether the transaction hash value is valid based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain. If so, it is determined that the user terminal has completed the authentication.

[0027] In one embodiment, the blockchain-based edge computing platform identity authentication device further includes:

[0028] A target information acquisition unit, configured to acquire the public key information and user identity card information of the user terminal if the transaction hash value is invalid;

[0029] An authentication hash value generation unit, configured to generate a corresponding authentication hash value based on the public key information and the user identity card information, using an authentication service on a blockchain smart contract embedded in a mobile edge computing platform in the edge computing alliance chain;

[0030] An authentication processing unit is used to write the authentication hash value into the blockchain node of the edge computing alliance chain, and transmit the transaction hash value corresponding to the authentication hash value back to the user terminal to update the transaction hash value of the user terminal and complete the authentication of the user terminal; wherein the blockchain node corresponds to the mobile edge computing platform.

[0031] In one embodiment, the blockchain-based edge computing platform identity authentication device further includes: a consortium chain construction unit, which is used to build an edge computing consortium chain using the mobile edge computing platform as a blockchain node before receiving a connection establishment request from the user terminal; wherein the mobile edge computing platform is a multi-access mobile edge computing platform corresponding to each telecom operator.

[0032] In one embodiment, the transaction hash value acquisition unit is specifically used to: based on the session management module, use the unified data management function module to determine whether the user terminal is a legitimate user, if so, notify the user terminal to send the transaction hash value, and obtain the transaction hash value forwarded by the user plane function module;

[0033] The transaction hash value authentication unit is specifically used to: based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, query whether there is a corresponding authentication hash value in the blockchain node, and if so, determine that the transaction hash value is valid; wherein, the blockchain node corresponds to the mobile edge computing platform.

[0034] In one embodiment, the authentication hash value generation unit is specifically used to: based on the public key information and the user identity card information, use the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain, and use Bitcoin to generate a transaction hash value to generate a corresponding authentication hash value;

[0035] The authentication processing unit is specifically used to: use a practical Byzantine fault-tolerant algorithm to perform blockchain node consensus on the edge computing alliance chain, and write the authentication hash value into the blockchain node.

[0036] In a fourth aspect, the present invention further provides an edge computing platform identity authentication device based on blockchain, comprising:

[0037] A connection establishment request sending unit, used to send a connection establishment request to a mobile edge computing platform in an edge computing alliance chain;

[0038] A transaction hash value sending unit, which receives a notification message returned by the mobile edge computing platform after the legitimacy verification is passed, and sends a corresponding transaction hash value to the mobile edge computing platform according to the notification message;

[0039] An identity authentication result information receiving unit, used to receive the identity authentication result information returned by the mobile edge computing platform;

[0040] A target information sending unit, configured to send corresponding public key information and user identity card information to the mobile edge computing platform in the edge computing alliance chain when the identity authentication result information is unauthenticated;

[0041] A transaction hash value updating unit is used to receive a transaction hash value generated by the mobile edge computing platform based on the public key information and the user identity card information and using the authentication service on the embedded blockchain smart contract, and to update the locally stored transaction hash value.

[0042] In a fifth aspect, the present invention also provides an electronic device comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the blockchain-based edge computing platform identity authentication method as described in any one of the above items are implemented.

[0043] In a sixth aspect, the present invention also provides a processor-readable storage medium, on which a computer program is stored. When the computer program is executed by the processor, the steps of the blockchain-based edge computing platform identity authentication method as described in any one of the above items are implemented.

[0044] By adopting the blockchain-based edge computing platform identity authentication method described in the present invention, the user's unique identity authentication on the mobile edge computing platform is completed by using the edge computing alliance chain constructed by using the mobile edge computing platform as a blockchain node, thereby ensuring the credibility and security of user information, improving the authentication efficiency of the user end, and enhancing the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0046] Figure 1 One of the flow charts of the edge computing platform identity authentication method based on blockchain provided by an embodiment of the present invention;

[0047] Figure 2 A schematic diagram of the architecture corresponding to the edge computing alliance chain in the edge computing platform identity authentication method based on blockchain provided in an embodiment of the present invention;

[0048] Figure 3 A schematic diagram of a practical Byzantine algorithm used by an edge computing alliance chain provided in an embodiment of the present invention;

[0049] Figure 4 An authentication flow chart based on a hash value sent by a user terminal provided in an embodiment of the present invention;

[0050] Figure 5 A flowchart of user terminal registration authentication information provided by an embodiment of the present invention;

[0051] Figure 6 A schematic diagram of a mobile edge computing platform address generated by a random number according to an embodiment of the present invention;

[0052] Figure 7 One of the structural schematic diagrams of the edge computing platform identity authentication device based on blockchain provided by an embodiment of the present invention;

[0053] Figure 8 A second flow chart of the edge computing platform identity authentication method based on blockchain provided in an embodiment of the present invention;

[0054] Fig. 9 The second structural diagram of the edge computing platform identity authentication device based on blockchain provided by an embodiment of the present invention;

[0055] Fig.10 A schematic diagram of the physical structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0056] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0057] The following is a detailed description of the embodiment of the edge computing platform identity authentication method based on blockchain according to the present invention. Figure 1 As shown, it is one of the flow diagrams of the edge computing platform identity authentication method based on blockchain provided by an embodiment of the present invention. The specific implementation process includes the following steps:

[0058] Step 101: Receive a connection establishment request from a user terminal, and determine whether the user terminal is a legitimate user. If so, obtain the transaction hash value of the user terminal.

[0059] In an embodiment of the present invention, the decentralized characteristics of blockchain can be utilized to implement a cross-platform authentication mechanism for the mobile edge computing platforms of major operators through distributed storage, and the user identity card (USIM; Universal Subscriber Identity Module) information provided by the operator can be used to implement high-trust data encryption authentication for 5G network users on the mobile edge computing platform.

[0060] Before receiving the connection establishment request from the user, it is necessary to build an edge computing alliance chain with the mobile edge computing platform as a blockchain node and design the storage information on the user equipment (UE). Figure 2 As shown, each mobile edge computing platform of each major operator can be used as a blockchain node in the alliance chain according to actual needs to form the required edge computing alliance chain, and the unique identifier of the encrypted data after user authentication can be sunk to the edge computing alliance chain.

[0061] It should be noted that the consensus algorithm used by the edge computing alliance chain is the Practical Byzantine Fault Tolerance (FBFT). The specific principle of this consensus algorithm is as follows: Figure 3As shown. Among them, the number of invalid or malicious nodes tolerated by the Practical Byzantine Algorithm is f. In order to ensure the normal operation of the entire system, 2f+1 normal nodes are required, and the total number of nodes in the system is: |R|=3f+1. In other words, the PBFT algorithm can tolerate less than 1 / 3 invalid or malicious nodes, that is, a mobile edge computing platform with vulnerabilities. Among them, the mobile edge computing platform refers to the MEC platform corresponding to each telecom operator, that is, the multi-access edge computing platform (MEC, Mobile Edge Computing).

[0062] Among them, the information stored on the user end (UE) side can be divided into user private key information, public key information, USIM card information, and the transaction hash value generated by the UE on the edge computing blockchain (which is equivalent to the transaction hash value of Bitcoin). The user's private key information is a 256-bit binary private key obtained by a number through a hash algorithm, and the private key can be used to obtain a public key through an elliptic encryption algorithm. The generation of the hash value is introduced in the re-registration authentication process, so it will not be repeated here.

[0063] like Figure 4 As shown, in this step, before obtaining the transaction hash value of the user terminal, it is necessary to first determine whether the user terminal is a legitimate user through the access and mobility management function module (AMF), the session management function module (SMF), and the unified data management function module (UDM). If it is a legitimate user, the user terminal (UE) is notified to send the transaction hash value (transaction hash value), and the transaction hash value forwarded by the user terminal through the user plane function module (UPF) is obtained for verification. After the verification is completed, the verification result is returned to the user terminal.

[0064] It should be noted that the mobility management function module is used to perform registration, connection, reachability, and mobility management, and can provide a session management message transmission channel for the user terminal and the session management module, and provide authentication and authorization functions for user access. The session management module is responsible for tunnel maintenance, IP address allocation and management, UP function selection, policy implementation and QoS control, billing data collection, roaming, etc. It can select user plane function modules based on the granularity of the user terminal or session, allocate IP addresses, collect billing data, and connect to the billing center. The user plane function module is used for packet routing forwarding, policy implementation, traffic reporting, QoS processing, etc. The unified data management function module is used for 3GPP AKA authentication, user identification, access authorization, registration, mobility, subscription, SMS management, etc.

[0065] Step 102: Based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, verify whether the transaction hash value is valid. If so, determine that the user terminal has completed the authentication.

[0066] Specifically, based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, it is possible to query whether there is a corresponding authentication hash value in the blockchain node to verify the validity of the authentication information hash value. If the corresponding target data can be found, it is determined that the transaction hash value is valid. At this time, the user end can be notified that it has been authenticated, otherwise, the user end needs to initiate a re-registration authentication process.

[0067] In an embodiment of the present invention, if the transaction hash value is invalid, the public key information and user identity card information (USIM card information) of the user terminal are obtained; based on the public key information and the user identity card information, the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain is used to generate a corresponding authentication hash value; the authentication hash value is written into the blockchain node of the edge computing alliance chain, and the corresponding transaction hash value is transmitted back to the user terminal to update the transaction hash value of the user terminal and complete the authentication of the user terminal.

[0068] Specifically, based on the public key information and the user identity card information, the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain is utilized, and the corresponding authentication hash value is generated in the same way as Bitcoin generates transaction hash values. The practical Byzantine fault-tolerant algorithm is used to perform blockchain node consensus of the edge computing alliance chain, and the authentication hash value is written into the blockchain node.

[0069] like Figure 5As shown, in this embodiment of the present invention, the re-registration authentication process specifically includes: the user end (UE) side actively sends USIM card information (which may also include the user's identity information, such as ID number, passport number, etc.) and public key, forwards the data through UPF, and requests the authentication service on the mobile edge computing platform (MEC) embedded blockchain smart contract. In the blockchain smart contract, a one-time transaction of Bitcoin is adopted. The UE and the MEC platform simulate the transaction without the digital signature. The value of the transaction defaults to 0. The user's data is encapsulated into a json object, and then the json object is encrypted with the public key. The encrypted data uses account as the key and value as the encrypted user data. For the sender address, the public key can be encrypted by an encryption algorithm to obtain the UE address. For the recipient address, the MEC platform can set a fixed value to calculate the MEC platform address. The specific process is as follows: Figure 6 As shown in the figure. After the UE and the MEC platform have completed a transaction, the authentication hash value is generated in the same way as Bitcoin, and then the practical Byzantine algorithm is used for block consensus and written into the blockchain node. Finally, the transaction hash value is sent back to the user end through the UPF, the transaction hash value of the user end is updated, and the user end's security registration authentication is completed.

[0070] The edge computing platform identity authentication method based on blockchain described in the embodiment of the present invention is adopted. The edge computing alliance chain constructed by using the mobile edge computing platform as a blockchain node adopts a decentralized method to complete the unique identity authentication of the user on the mobile edge computing platform, that is, the authentication of 5G users is completed by encrypting the SIM card information, thereby ensuring the credibility of user information and the security of user information, improving the authentication efficiency of the user end, and enhancing the user experience. Through the edge computing alliance chain composed of various operators, users can switch arbitrarily among the edge computing platforms operated by major operators to realize cross-platform authentication in the Internet of Vehicles.

[0071] Corresponding to the above-mentioned blockchain-based edge computing platform identity authentication method, the present invention also provides a blockchain-based edge computing platform identity authentication device. Since the embodiment of the device is similar to the above-mentioned method embodiment, the description is relatively simple. For relevant details, please refer to the description of the above-mentioned method embodiment. The embodiment of the blockchain-based edge computing platform identity authentication device described below is only illustrative. Please refer to Figure 7 As shown, it is one of the structural diagrams of an edge computing platform identity authentication device based on blockchain provided by an embodiment of the present invention.

[0072] The edge computing platform identity authentication device based on blockchain described in the present invention specifically includes the following parts:

[0073] The transaction hash value acquisition unit 701 is used to receive a connection establishment request from a user terminal and determine whether the user terminal is a legitimate user. If so, acquire the transaction hash value of the user terminal.

[0074] The transaction hash value authentication unit 702 is used to verify whether the transaction hash value is valid based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain. If so, it is determined that the user terminal has completed the authentication.

[0075] By adopting the blockchain-based edge computing platform identity authentication device described in the embodiment of the present invention, the user's unique identity authentication on the mobile edge computing platform is completed by using the edge computing alliance chain constructed by using the mobile edge computing platform as a blockchain node, thereby ensuring the credibility and security of user information, improving the authentication efficiency of the user end, and enhancing the user experience.

[0076] Accordingly, the present invention also provides a method for authenticating an edge computing platform based on blockchain on the user side. Figure 8 As shown, it is the second flow chart of the edge computing platform identity authentication method based on blockchain provided in an embodiment of the present invention.

[0077] Step 801: Send a connection establishment request to the mobile edge computing platform in the edge computing alliance chain.

[0078] Step 802: When the legitimacy verification is passed, a notification message returned by the mobile edge computing platform is received, and a corresponding transaction hash value is sent to the mobile edge computing platform according to the notification message.

[0079] The legitimacy verification passed means that the mobile edge computing platform in the edge computing alliance chain verifies the user terminal to determine whether it meets the preset verification conditions. If so, it is considered that the legitimacy verification of the user terminal has passed, and then the notification message returned by the mobile edge computing platform is received, and the corresponding transaction hash value is sent to the mobile edge computing platform according to the notification message.

[0080] Step 803: Receive the identity authentication result information returned by the mobile edge computing platform.

[0081] Step 804: When the identity authentication result information is unauthenticated, send the corresponding public key information and user identity card information to the mobile edge computing platform in the edge computing alliance chain.

[0082] Step 805: Receive the transaction hash value generated by the mobile edge computing platform based on the public key information and the user identity card information and using the authentication service on the embedded blockchain smart contract, and update the locally stored transaction hash value.

[0083] Corresponding to the above-mentioned blockchain-based edge computing platform identity authentication method, the present invention also provides a blockchain-based edge computing platform identity authentication device. Since the embodiment of the device is similar to the above-mentioned method embodiment, the description is relatively simple. For relevant details, please refer to the description of the above-mentioned method embodiment. The embodiment of the blockchain-based edge computing platform identity authentication device described below is only illustrative. Please refer to Fig. 9 As shown, it is the second structural diagram of an edge computing platform identity authentication device based on blockchain provided by an embodiment of the present invention.

[0084] The connection establishment request sending unit 901 is used to send a connection establishment request to the mobile edge computing platform in the edge computing alliance chain.

[0085] The transaction hash value sending unit 902 receives a notification message returned by the mobile edge computing platform when the legitimacy verification is passed, and sends a corresponding transaction hash value to the mobile edge computing platform according to the notification message.

[0086] The identity authentication result information receiving unit 903 is used to receive the identity authentication result information returned by the mobile edge computing platform.

[0087] The target information sending unit 904 is used to send corresponding public key information and user identity card information to the mobile edge computing platform in the edge computing alliance chain when the identity authentication result information is unauthenticated.

[0088] The transaction hash value updating unit 905 is used to receive the transaction hash value generated by the mobile edge computing platform based on the public key information and the user identity card information and using the authentication service on the embedded blockchain smart contract, and update the locally stored transaction hash value.

[0089] By adopting the blockchain-based edge computing platform identity authentication method and device described in the embodiments of the present invention, the user's unique identity authentication on the mobile edge computing platform is completed by using the edge computing alliance chain constructed by using the mobile edge computing platform as a blockchain node, thereby ensuring the credibility and security of user information, improving the authentication efficiency of the user end, and enhancing the user experience.

[0090] Corresponding to the blockchain-based edge computing platform identity authentication method provided above, the present invention also provides an electronic device. Since the embodiment of the electronic device is similar to the above method embodiment, the description is relatively simple. For relevant details, please refer to the description of the above method embodiment. The electronic device described below is only exemplary. Fig.10As shown, it is a schematic diagram of the physical structure of an electronic device disclosed in an embodiment of the present invention. The electronic device may include: a processor 1001, a memory 1002 and a communication bus 1003, wherein the processor 1001 and the memory 1002 complete mutual communication through the communication bus 1003, and communicate with the outside through the communication interface 1004. The processor 1001 can call the logic instructions in the memory 1002 to execute the edge computing platform identity authentication method based on the blockchain, the method comprising: receiving a connection establishment request from the user end, and determining whether the user end is a legitimate user, if so, obtaining the transaction hash value of the user end; based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, verify whether the transaction hash value is valid, and if so, determine that the user end has completed the authentication. Alternatively, it includes: sending a connection establishment request to a mobile edge computing platform in an edge computing alliance chain; when the legitimacy verification is passed, receiving a notification message returned by the mobile edge computing platform, and sending a corresponding transaction hash value to the mobile edge computing platform according to the notification message; receiving identity authentication result information returned by the mobile edge computing platform; when the identity authentication result information is unauthenticated, sending corresponding public key information and user identity card information to the mobile edge computing platform in the edge computing alliance chain; receiving a transaction hash value generated by the mobile edge computing platform based on the public key information and the user identity card information and using the authentication service on the embedded blockchain smart contract, and updating the locally stored transaction hash value.

[0091] In addition, the logic instructions in the above-mentioned memory 1002 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on such an understanding, the technical solution of the present invention can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: a storage chip, a U disk, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a disk or an optical disk, and other media that can store program codes.

[0092] On the other hand, an embodiment of the present invention also provides a computer program product, which includes a computer program stored on a processor-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the blockchain-based edge computing platform identity authentication method provided by the above-mentioned method embodiments, the method including: receiving a connection establishment request from a user terminal, and determining whether the user terminal is a legitimate user, and if so, obtaining the transaction hash value of the user terminal; based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, verifying whether the transaction hash value is valid, and if so, determining that the user terminal has completed the authentication. Alternatively, it includes: sending a connection establishment request to a mobile edge computing platform in an edge computing alliance chain; when the legitimacy verification is passed, receiving a notification message returned by the mobile edge computing platform, and sending a corresponding transaction hash value to the mobile edge computing platform according to the notification message; receiving identity authentication result information returned by the mobile edge computing platform; when the identity authentication result information is unauthenticated, sending corresponding public key information and user identity card information to the mobile edge computing platform in the edge computing alliance chain; receiving a transaction hash value generated by the mobile edge computing platform based on the public key information and the user identity card information and using the authentication service on the embedded blockchain smart contract, and updating the locally stored transaction hash value.

[0093] On the other hand, an embodiment of the present invention further provides a processor-readable storage medium, on which a computer program is stored. When the computer program is executed by the processor, it is implemented to execute the blockchain-based edge computing platform identity authentication method provided by the above-mentioned embodiments, the method comprising: receiving a connection establishment request from a user terminal, and determining whether the user terminal is a legitimate user, and if so, obtaining the transaction hash value of the user terminal; based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, verifying whether the transaction hash value is valid, and if so, determining that the user terminal has completed the authentication. Alternatively, it includes: sending a connection establishment request to a mobile edge computing platform in an edge computing alliance chain; when the legitimacy verification is passed, receiving a notification message returned by the mobile edge computing platform, and sending a corresponding transaction hash value to the mobile edge computing platform according to the notification message; receiving identity authentication result information returned by the mobile edge computing platform; when the identity authentication result information is unauthenticated, sending corresponding public key information and user identity card information to the mobile edge computing platform in the edge computing alliance chain; receiving a transaction hash value generated by the mobile edge computing platform based on the public key information and the user identity card information and using the authentication service on the embedded blockchain smart contract, and updating the locally stored transaction hash value.

[0094] The processor-readable storage medium can be any available medium or data storage device that can be accessed by the processor, including but not limited to magnetic storage (such as floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO), etc.), optical storage (such as CD, DVD, BD, HVD, etc.), and semiconductor storage (such as ROM, EPROM, EEPROM, non-volatile memory (NANDFLASH), solid-state drive (SSD)), etc.

[0095] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0096] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0097] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A blockchain-based edge computing platform identity authentication method, characterized in that: include: Receive a connection establishment request from a user terminal, and determine whether the user terminal is a legitimate user, and if so, obtain a transaction hash value of the user terminal; Before receiving a connection establishment request from a user terminal, the mobile edge computing platform is used as a blockchain node to build an edge computing alliance chain; wherein the mobile edge computing platform is a multi-access mobile edge computing platform corresponding to each telecom operator; Based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, verify whether the transaction hash value is valid, and if so, determine that the user terminal has completed the authentication; the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain verifies whether the transaction hash value is valid, specifically including: based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, query whether there is a corresponding authentication hash value in the blockchain node, and if so, determine that the transaction hash value is valid; wherein the blockchain node corresponds to the mobile edge computing platform; The blockchain-based edge computing platform identity authentication method further includes: If the transaction hash value is invalid, obtaining the public key information and user identity card information of the user terminal; the user identity card information is USIM card information; Based on the public key information and the user identity card information, a corresponding authentication hash value is generated by using the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain; The authentication hash value is written into the blockchain node of the edge computing alliance chain, and the transaction hash value corresponding to the authentication hash value is transmitted back to the user terminal to update the transaction hash value of the user terminal and complete the authentication of the user terminal; wherein the blockchain node corresponds to the mobile edge computing platform.

2. The edge computing platform identity authentication method based on blockchain according to claim 1 is characterized in that: The determining whether the user terminal is a legitimate user, and if so, obtaining the transaction hash value of the user terminal specifically includes: based on the session management module, using the unified data management function module to determine whether the user terminal is a legitimate user, and if so, notifying the user terminal to send the transaction hash value, and obtaining the transaction hash value forwarded by the user surface function module.

3. The edge computing platform identity authentication method based on blockchain according to claim 1 is characterized in that: The method of generating a corresponding authentication hash value based on the public key information and the user identity card information and using the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain specifically includes: based on the public key information and the user identity card information, using the authentication service on the blockchain smart contract embedded in the mobile edge computing platform in the edge computing alliance chain, and using Bitcoin to generate a transaction hash value to generate a corresponding authentication hash value; The step of writing the authentication hash value into the blockchain node of the edge computing alliance chain specifically includes: using a practical Byzantine fault-tolerant algorithm to perform blockchain node consensus on the edge computing alliance chain, and writing the authentication hash value into the blockchain node.

4. A blockchain-based edge computing platform identity authentication device, characterized in that: include: A transaction hash value acquisition unit, configured to receive a connection establishment request from a user terminal, and determine whether the user terminal is a legitimate user, and if so, acquire the transaction hash value of the user terminal; The edge computing platform identity authentication device based on blockchain also includes: a consortium chain construction unit, which is used to construct an edge computing consortium chain using the mobile edge computing platform as a blockchain node before receiving a connection establishment request from the user terminal; wherein the mobile edge computing platform is a multi-access mobile edge computing platform corresponding to each telecom operator; A transaction hash value authentication unit, used to verify whether the transaction hash value is valid based on a block query service embedded in a mobile edge computing platform in a preset edge computing alliance chain, and if so, determine that the user terminal has completed the authentication; the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain verifies whether the transaction hash value is valid, specifically including: based on the block query service embedded in the mobile edge computing platform in the preset edge computing alliance chain, query whether there is a corresponding authentication hash value in the blockchain node, and if so, determine that the transaction hash value is valid; wherein the blockchain node corresponds to the mobile edge computing platform; The edge computing platform identity authentication device based on blockchain also includes: A target information acquisition unit, configured to acquire the public key information and user identity card information of the user terminal if the transaction hash value is invalid; An authentication hash value generation unit, configured to generate a corresponding authentication hash value based on the public key information and the user identity card information, using an authentication service on a blockchain smart contract embedded in a mobile edge computing platform in the edge computing alliance chain; An authentication processing unit is used to write the authentication hash value into the blockchain node of the edge computing alliance chain, and transmit the transaction hash value corresponding to the authentication hash value back to the user terminal to update the transaction hash value of the user terminal and complete the authentication of the user terminal; wherein the blockchain node corresponds to the mobile edge computing platform.

5. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the blockchain-based edge computing platform identity authentication method as described in any one of claims 1 to 3 are implemented.

6. A processor-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the blockchain-based edge computing platform identity authentication method as described in any one of claims 1 to 3 are implemented.

Images