A blockchain identity authentication method based on integrity reward

Abstract

The application discloses a blockchain identity authentication method based on credit reward, which comprises the following steps: a user client sends an identity authentication processing request to an authentication blockchain network; the authentication blockchain network arranges three nodes that first snatch the processing right to perform identity authentication processing; if the number of suspicious nodes in the three authentication nodes that first snatch the processing right is greater than the number of trusted nodes, or the authentication results of the three authentication nodes are inconsistent, then a trusted degree random algorithm is used to randomly select a plurality of nodes from the trusted nodes to perform second identity authentication, so that the number of trusted nodes in the authentication nodes is greater than the number of suspicious nodes, and the number of votes of the final result is the majority; finally, the authentication blockchain network returns the final result to the client and performs identity authentication processing reward work.

Description

TECHNICAL FIELD

[0001] The application belongs to the field of blockchain public chain application, and particularly relates to a blockchain identity authentication method based on credit reward. BACKGROUND

[0002] With the development and application of computer networks, the decentralization, openness, autonomy, information tamper resistance and anonymity of the blockchain technology are gradually valued by people. Therefore, the blockchain gradually enters the vision of the public. However, some applications or websites now require users to log in using existing accounts before providing a series of services due to user privacy or property security. When the user logs in to the application or website, the system needs to authenticate the identity of the user. Most of the current blockchain technology identity verification technologies use third-party identity verification, that is, there is a third-party agency trusted by both parties for authentication, which issues identity information for both parties of authentication, and uses the identity information as the basis for confirming the identity of both parties. However, this centralized identity verification method has some security vulnerabilities. If the authorized server or identity provider is damaged or cannot be used for any reason, the client will not be able to authenticate the identity. For example, suppose a website allows users to log in using their WeChat account, but if the WeChat identity authentication system itself has been hacked and cannot be used, the users of the website will not be able to log in, and this situation is completely out of the control of the website and can only wait for WeChat to fix their identity authentication system, thereby causing huge losses.

[0003] Traditional centralized identity verification relies on a third-party central identity verification system, but this also has some security risks. For example, if the third-party central identity verification system itself has low security, its central server is easy to be attacked or controlled by outsiders, causing the third-party central identity verification system to be unusable or maliciously controlled by others, and the economic loss will be incalculable.

[0004] Non-centralized identity authentication is a means to improve identity security. It abandons the traditional third-party central identity authentication and transfers the identity authentication processing work to each node in the blockchain network, uses each node to judge the identity authentication, and finally returns the final result to the user client. Although this uses the characteristics of the blockchain information, such as non-revocable and non-arbitrary destruction, information openness and transparency, to greatly improve the security of identity authentication, if there are too many nodes in the authentication blockchain network, the entire node in the authentication blockchain network will be mobilized every time the identity authentication is performed, which will cause a serious waste of resources. SUMMARY

[0005] The present application is based on the above background and problems existing in the prior art, and aims to design a blockchain identity authentication method based on integrity reward, which can replace the central server authentication with a non-centralized identity authentication blockchain, improve the reliability and robustness of the identity authentication system, and improve the resource utilization rate of the blockchain identity authentication, thereby avoiding the waste of resources when there are too many nodes in the authentication blockchain network.

[0006] A blockchain identity authentication method based on integrity reward, comprising:

[0007] The user client sends an identity authentication processing request to the authentication blockchain network, and the authentication blockchain network arranges the first three nodes that successfully grab the processing right to perform identity authentication processing.

[0008] If the number of suspicious nodes in the first three authentication nodes that successfully grab the processing right is greater than the number of trusted nodes, or the authentication results of the three authentication nodes are inconsistent, a number of nodes are randomly selected from the trusted nodes using a trustworthiness random algorithm to ensure that the number of trusted nodes is greater than the number of suspicious nodes, and a second round of identity authentication is performed.

[0009] If the identity authentication work ends after the first round of identity authentication processing, the authentication blockchain network returns the consistent result of the three nodes to the client as the final result; if the identity authentication work ends after the second round of identity authentication processing, the authentication blockchain network returns the result with the majority of votes according to the voting results of the nodes to the client as the final result.

[0010] The authentication blockchain network performs identity authentication processing reward work.

[0011] Preferably, the method for the authentication blockchain network to arrange the first three nodes that successfully grab the processing right is:

[0012] The blockchain network first broadcasts the identity authentication processing request among the nodes, the authentication nodes give a response and record the time stamp of the response, and the authentication blockchain network sorts the time stamps from the earliest and arranges the first three nodes to perform identity authentication work.

[0013] Preferably, the method for the authentication blockchain network to arrange the first three nodes that successfully grab the processing right is:

[0014] The blockchain network first broadcasts the identity authentication processing request among the nodes, the authentication nodes give a response and record the time stamp of the response, and the authentication blockchain network sorts the time stamps from the earliest and arranges the first three nodes to perform identity authentication work.

[0015] Preferably, the identity authentication processing work performed by the nodes comprises:

[0016] The authentication blockchain network node decrypts the encrypted identity authentication information sent by the client using the public key published by the user client, and then obtains the identity authentication information of the user stored in the node itself and performs a preliminary authentication operation with the authentication operation function. After the authentication operation is completed, the node generates an authentication block to save the hash value of the authentication process information; or

[0017] The authentication blockchain network node can also encrypt the identity authentication information of the user stored in the node itself after being operated by the operation function, using the public key published by the user client, and perform an authentication operation with the encrypted information sent by the user client. After the authentication operation is completed, the node generates an authentication block to save the hash value of the authentication process information.

[0018] If the identity authentication is passed, the node broadcasts the authentication pass information and the hash value representing the authentication block process information to the authentication blockchain network. If the two information do not match, the identity authentication is not passed, and the node broadcasts the authentication fail information and the hash value representing the authentication block process information to the authentication blockchain network.

[0019] Further preferably, the message broadcast to the authentication blockchain network includes:

[0020] When the authentication node of each round completes the identity authentication work, it does not immediately broadcast the result and the hash value representing the block process information to the authentication blockchain network, but broadcasts the result and the hash value representing the block process information in the authentication blockchain network at a specific time period recognized by all nodes of the authentication blockchain network;

[0021] Preferably, the judgment method of the suspicious node and the trusted node is:

[0022] The authentication node records each time it completes an identity authentication processing work, and calculates the risk value of the node according to the ratio of the number of times of identity authentication processing failure and the number of times of success. The risk value (N F represents the number of times of identity authentication processing failure of the authentication node, N T is the number of times of identity authentication processing success of the authentication node); when the risk value of the node is higher than 0.2, the node is determined as a suspicious node; when the risk value of the node is less than or equal to 0.2, the node is determined as a trusted node.

[0023] Preferably, the trustworthiness random algorithm is:

[0024] The authentication node in the identity authentication blockchain network accumulates the total number of work processing N i in the node after each correct completion of the identity authentication processing work.

[0025] The probability that a trusted node is selected is: (where m is the total number of trusted nodes in the authentication blockchain network);

[0026] Then, the probabilities are converted into a range of 1-100 using a roulette selection algorithm, and a random number is randomly generated between 1-100. The trusted node is selected according to the range in which the random number falls.

[0027] Preferably, when the first round of identity authentication is performed, when the number of trusted nodes is greater than the number of suspicious nodes and the results of the three identity authentications are consistent, the identity authentication processing work is completed, and the authentication blockchain network returns the consistent result as the final result to the client.

[0028] Preferably, the method for the authentication blockchain network to perform identity authentication processing reward work is:

[0029] When the identity authentication blockchain network completes a round of identity authentication processing work, the authentication nodes with consistent results and final results are rewarded, and the total amount of these rewards is only related to the identity authentication processing difficulty, and is unrelated to the number of nodes that are equally rewarded. At the same time, the number of successful identity authentications and the number of failed identity authentications of these nodes are updated.

[0030] Preferably, the total number of nodes in the authentication blockchain network should not be less than 7, so as to ensure that there are enough nodes in the authentication blockchain network to perform the second round of identity authentication. At the same time, when the authentication blockchain network performs the second round of identity authentication, if there is no trusted node in the entire network, the authentication blockchain network will specify the authentication according to the risk values of the nodes in the entire network from low to high.

[0031] The present application at least includes the following beneficial effects:

[0032] (1) The authentication blockchain network realizes a decentralized authentication method, making the entire identity authentication system more secure, robust, and resistant to malicious attacks.

[0033] (2) When there are too many authentication nodes in the authentication blockchain network, the system avoids resource waste, reduces system redundancy, and improves resource utilization.

[0034] (3) The integrity reward mechanism can improve the work efficiency of the authentication nodes, punish the suspicious nodes to a certain extent, reduce the income and the opportunity to obtain income, and let the trusted nodes share the work rewards of the suspicious nodes, have more income and the opportunity to obtain income.

[0035] Other advantages, objects, and features of the application will be apparent to those skilled in the art from the following specification. BRIEF DESCRIPTION OF DRAWINGS

[0036] Figure 1 An implementation structure schematic diagram of a blockchain identity authentication method based on integrity reward;

[0037] Figure 2 A workflow of a blockchain identity authentication method based on integrity reward; DETAILED DESCRIPTION

[0038] In order to clearly set forth the present application, make the purpose, technical scheme and advantages of the embodiments of the present application more clear, the technical scheme in the embodiments of the present application is described clearly and completely below in combination with the drawings in the embodiments of the present application, so as to enable those skilled in the art to implement the present application according to the description. The technical scheme of the present application will be described in detail below in combination with the specific embodiments and the drawings.

[0039] Figure 1 An implementation structure of a non-central identity authentication method based on integrity reward is shown, which comprises a user client and an identity authentication blockchain network, and the identity authentication blockchain network is composed of eight identity authentication nodes, i.e., node A, node B, node C, node D, node E, node F, node G and node H.

[0040] Preferably, the user client first sends an identity authentication request to the authentication blockchain network, and transmits the request information and identity authentication related data to the identity authentication blockchain network through an encrypted channel.

[0041] Preferably, the identity authentication blockchain network is composed of organizations or individuals participating in identity authentication, each authentication unit serves as an identity authentication node, the more identity authentication nodes in an identity authentication blockchain network, the better, and the total number of nodes in an identity authentication blockchain network should not be less than eight.

[0042] Figure 2The workflow of a blockchain identity authentication method based on integrity reward is shown. In this embodiment, the user client first sends an identity authentication processing request, and transmits the request message and identity authentication related data to the identity authentication blockchain network through an encrypted channel. When the identity authentication blockchain network accepts the request from the client, it broadcasts the identity authentication request to all network nodes, i.e., node A, node B, node C, node D, node E, node F, node G, and node H. It is assumed that node A, node B, and node C first obtain the processing right of identity authentication. First, node A, node B, and node C need to obtain and decrypt the identity authentication data transmitted by the user client to the identity authentication blockchain network through the encrypted channel, decrypt the encrypted information using the public key published by the user client, and then obtain the identity authentication data of the user in their own nodes to perform the first round of identity authentication operation. Then, node A, node B, and node C generate an authentication block to save the hash value of the authentication process information, providing traceable information storage for identity authentication. If the decrypted identity authentication information matches the original identity authentication information in the node, the identity authentication is passed.

[0043] If the number of trusted nodes in node A, node B, and node C is greater than the number of suspicious nodes and the identity results of the three nodes are consistent, the consistent identity authentication result will be returned to the client as the final identity authentication result. It is assumed that node A is a suspicious node, node B and node C are trusted nodes, the authentication results of node A and node B are passed, and the authentication result of node C is not passed. Then, the authentication blockchain network will randomly select two trusted nodes from other trusted nodes in the network using the trustworthiness random algorithm to perform the second round of identity authentication work. It is assumed that node D and node E are selected to perform the second round of identity authentication work. Node D and node E also need to obtain and decrypt the identity authentication data transmitted by the user client to the identity authentication blockchain network through the encrypted channel, decrypt the encrypted information using the public key published by the user client, and then obtain the identity authentication data of the user in their own nodes to perform the second round of identity authentication operation. Then, node D and node E generate an authentication block to save the hash value of the authentication process information, providing traceable information storage for identity authentication.

[0044] The authentication blockchain network returns the result with the majority of votes in the second round of identity authentication to the client. It is assumed that the results of node D and node E are both passed, so the number of passed votes in this identity authentication process is 4, and the number of failed votes is 1. Therefore, the authentication blockchain network returns the identity authentication pass result to the client.

[0045] After the identity authentication processing work is completed, the node integrity reward work is finally carried out. The final result of the identity authentication work is pass, the identity authentication results of node A, node B, node D and node E are pass, and the authentication result of node C is not pass, so the identity certificate reward is divided by node A, node B, node D and node E. At the same time, since the authentication results of node A, node B, node D and node E are consistent with the final result, it is determined that these nodes successfully complete an identity authentication and update the number of successful identity authentication in these nodes, while the authentication result of node C is inconsistent with the final result, so it is determined that the node is unfaithful and the number of incorrect identity authentication is updated.

[0046] In this process, the final identity authentication result meets the condition that the number of trusted nodes is greater than the number of suspicious nodes in the identity authentication process, and the number of votes in the final result accounts for the majority. It improves the efficiency of identity authentication, reduces resource waste while ensuring a certain accuracy. At the same time, more trusted nodes participate in the identity authentication process, and suspicious nodes can only obtain income by occupying the first round of identity authentication, thereby reducing the income of suspicious nodes, maintaining the integrity and stability of the blockchain network.

[0047] The above description of the embodiments is to facilitate the understanding and application of the present application by those skilled in the art. Those skilled in the art can easily make various modifications to the above embodiments, and apply the general principles described herein to other embodiments without creative labor. Therefore, the present application is not limited to the above embodiments, and the improvements and modifications of the present application made by those skilled in the art according to the disclosure of the present application should be within the protection of the present application.

Claims

1.A blockchain identity authentication method based on integrity reward, characterized in that, Comprise: The user client sends an identity authentication processing request to the authentication blockchain network, and the authentication blockchain network arranges three nodes that first grab the processing right to perform identity authentication processing; If the number of suspicious nodes in the three authentication nodes that first grab the processing right is greater than the number of trusted nodes, a trustworthiness random algorithm is used to randomly select a number of nodes from the trusted nodes so that the number of trusted nodes is greater than the number of suspicious nodes, and the authentication blockchain network performs a second round of identity authentication processing; When the first round of identity authentication is performed, if the number of trusted nodes is greater than the number of suspicious nodes and the three identity authentication results are consistent, the identity authentication processing is completed, and the authentication blockchain network returns the consistent result to the user client as the final result; When the second round of identity authentication is performed, if the number of suspicious nodes in the first round of identity authentication is less than three, two random trusted nodes are added for authentication; if the number of suspicious nodes in the first round of identity authentication is three, four random trusted nodes are added for authentication; the final result of the second round of identity authentication is the result with the majority of votes; When the first round of identity authentication processing is completed, the authentication blockchain network returns the consistent result of the three nodes to the client as the final result; When the second round of identity authentication processing is completed, the authentication blockchain network returns the result with the majority of votes according to the voting results of the nodes to the user client as the final result; The authentication blockchain network performs identity authentication processing reward work. 2.The blockchain identity authentication method based on integrity reward according to claim 1, characterized in that, The authentication blockchain network arranges three nodes that first grab the processing right to perform identity authentication processing, comprising the following steps: The authentication blockchain network broadcasts the identity authentication processing request to the authentication nodes; The authentication nodes give a response and record the timestamp of the response; The authentication blockchain network sorts the timestamps from the earliest, and arranges three nodes that first grab the processing right to perform identity authentication processing. 3.The integrity-based reward blockchain identity authentication method of claim 1 or 2, wherein, The arrangement of three nodes that first grab the processing right to perform identity authentication processing comprises the following steps: The authentication nodes use the public key published by the user client to decrypt the encrypted identity authentication information sent by the client; Obtain the identity authentication information stored in the authentication nodes and perform preliminary authentication operation on the authentication operation function, and after the authentication operation is completed, the authentication nodes generate an authentication block to save the hash value of the authentication process information; or The authentication blockchain network node uses the public key published by the user client to encrypt the identity authentication information stored in the node after the operation function operation, and performs authentication operation with the encrypted information sent by the user client, and after the authentication operation is completed, the authentication node generates an authentication block to save the hash value of the authentication process information; If the two information matches, the identity authentication is passed, and the authentication node broadcasts the authentication pass information and the hash value representing the authentication block process information to the authentication blockchain network; if the two information does not match, the identity authentication is not passed, and the authentication node broadcasts the authentication failure information and the hash value representing the authentication block process information to the authentication blockchain network. 4.The blockchain identity authentication method based on integrity reward according to claim 3, characterized in that, The message broadcast to the authentication blockchain network comprises: When each round of authentication node completes the identity authentication work, the result and the hash value representing the block process information are broadcasted in the authentication blockchain network at a specific time period recognized by all nodes in the authentication blockchain network. 5.The integrity-based reward blockchain identity authentication method of claim 1, wherein, The judgment method of the suspicious node and the trusted node is as follows: The authentication node records each time the identity authentication processing is completed, and calculates the risk value of the node according to the ratio of the number of times of failure and the number of times of success of the identity authentication processing, wherein the risk value , represents the number of times of failure of the identity authentication processing of the authentication node, represents the number of times of success of the identity authentication processing of the authentication node; when the risk value of the node is higher than 0.2, the node is determined as a suspicious node; and when the risk value of the node is less than or equal to 0.2, the node is determined as a trusted node. 6.The integrity-based reward blockchain identity authentication method of claim 1, wherein, The credibility random algorithm is: The authentication node in the identity authentication blockchain network accumulates the total number of work processing amounts in the node after each correct completion of an identity authentication processing work on the upper side The probability that a trusted node is selected is: where m is the total number of trusted nodes in the authentication blockchain network; A random number is randomly generated between 1-100 by using the roulette selection algorithm, and the range of the random number is the range of the selected trusted node. 7.The integrity-based reward blockchain identity authentication method of claim 1, wherein, The authentication blockchain network performs identity authentication processing reward work, including the following steps: When the identity authentication blockchain network completes each identity authentication processing work, the authentication nodes with the consistent result and final result are rewarded, and the total amount of the reward is related to the identity authentication processing difficulty; the successful identity authentication times and the failed identity authentication times of the authentication nodes are updated. 8.The integrity-based reward blockchain identity authentication method of claim 1, wherein, The total number of nodes in the authentication blockchain network is not less than 7, so that there are enough authentication nodes in the authentication blockchain network for the second round of identity verification. When the authentication blockchain network performs the second round of identity authentication, if there is no trusted node in the whole network, the authentication blockchain network will specify the authentication according to the risk value of each authentication node in the whole network from low to high.

Images