Unified authentication method for users under multi-node conditions in self-organizing network environment

Abstract

The present invention discloses a unified authentication method for users under multi-node conditions in a self-organizing network environment, which performs triple authentication based on the permission authentication node in the content chain when the user registers, the reading device joins, and the registration node joins the content chain; including: user authentication when the user registers in the content chain: device authentication when the reading device joins the content chain: node identity authentication when the node joins the content chain. The present invention realizes that when obtaining the content itself, the triple authentication of node authentication, device authentication, and user authentication needs to be performed through the authentication permission node, which ensures the security of the content chain and the security of the content chain data, and allows other nodes in the content chain to focus on specific business, thereby reducing the security verification pressure of other nodes in the content chain.

Description

Technical Field

[0001] The present invention relates to the technical field of distributed self-organizing networks, and in particular to a unified authentication method for users under multi-node conditions in a self-organizing network environment. Background Art

[0002] A self-organizing network is a network that combines mobile communications and computer networks. It is a type of mobile computer network. In a self-organizing network, all nodes are equal, and it is a peer-to-peer network. Nodes can join and leave the network at any time, and the failure of any node will not affect the operation of the entire network. It has strong anti-destruction capabilities.

[0003] Node authentication in a self-organizing network is mainly manifested as: the authentication of a new node and an adjacent node requires a three-way authentication handshake process, that is, the new node obtains authentication from the authentication server, the new node authenticates the adjacent node, and the adjacent node authenticates the new node. The above authentication method of the prior art requires each node to have an authentication function.

[0004] The main method of user authentication today is 2FA (Two Factor Authentication), which means that two factors (information you know: password and information you have: verification code) are used together to authenticate the user's identity. The information you have is used to verify whether someone or something is who they claim to be. Two-factor authentication reduces the possibility of an intruder posing as an authorized user.

[0005] Currently, the most widely used user authorization mechanism is OAuth2.0, which is used to authorize third-party applications to obtain user data. OAuth2.0 defines four authorization modes: authorization code mode, simplified mode, password mode, and client mode. The authorization code mode is the most complete and rigorous authorization mode. Its characteristics are that it interacts with the authentication server of the "service provider" through the client's backend server to avoid information leakage caused by the interaction between the user's browser and the authentication server. The authorization and authentication process is also that the resource owner directly authenticates through the authorization server, avoiding the possibility of sharing the resource owner's identity credentials with the client. Other modes are simplified modes of this mode.

[0006] In order to start from the bottom-level technology perspective, the applicant independently developed a blockchain open source architecture that meets the content publishing application scenario and developed the content chain. The content chain is a self-organizing network for content distribution that absorbs the advantages of distributed autonomous networks. Therefore, it is necessary to absorb the advantages of the current authentication mechanism and design a secure and unified authentication mechanism in a distributed network environment based on the characteristics of the content chain itself. Summary of the invention

[0007] The purpose of the present invention is to provide a unified authentication method for users under multi-node conditions in a self-organizing network environment in order to address the technical defects in the prior art.

[0008] The technical solution adopted to achieve the purpose of the present invention is:

[0009] A unified authentication method for users in a self-organizing network environment with multiple nodes, based on a permission authentication node in a content chain, performs triple authentication when a user registers, a reading device joins, and a registration node joins the content chain, so that when a user obtains content data in a content chain, they need to pass node authentication, device authentication, and user authentication, thereby achieving the security of content chain operation and data transmission; including:

[0010] User authentication when registering in the content chain: After the license authentication node verifies the identity information submitted by the registered user, it returns a unique user ID and generates a public and private key for the registered user, which is used for identity authentication and automatic authentication in the process of uploading and obtaining content objects.

[0011] Device authentication when a reading device joins the content chain: To join the content chain, the reading device submits the app program to the license authentication node, and then tests it. After the license authentication node verifies and approves it, the reading device is trusted. The license authentication node distributes the device public and private keys to the reading device to be added. The device public and private keys are used to authenticate the device. The transmitted data is encrypted by the device public key, and the reading device obtains the private key to decrypt it.

[0012] Node authentication when a node joins a content chain: After the node registration information is filled in, it is submitted to the root node. After receiving the registration application, the root node randomly generates a symmetric key as a password and returns it to the registration node in the form of an email; after the root node passes the verification, all the information and the randomly generated password are sent to the license authentication node; after receiving the information, the license authentication node generates public and private keys for the registration node, registers the node type to the information list of the license authentication node, and then uses the password sent by the root node to encrypt the node public and private keys and the node registration information into an encrypted package, which is sent to the registration node in the form of an email; the node registration information is used to confirm the current node information, and the node public and private keys are used for signing and verification during content chain consensus.

[0013] Among them, the license authentication node acts as a trusted CA organization, issuing CA certificates required for HTTPS transmission to nodes in the content chain that require CA certificates. The nodes that require CA certificates add the CA certificate of the license authentication node to their own trusted CA certificates and trust all CA certificates issued by the license authentication node.

[0014] Among them, the license authentication node includes a primary license authentication node and a secondary license authentication node; the secondary license authentication node fully backs up the content of the primary license authentication node; when the primary license authentication node fails, the secondary license authentication node is switched to a working state.

[0015] Among them, through the heartbeat detection between the root node and the main licensing authentication node and the secondary licensing authentication node, the main licensing authentication node and the secondary licensing authentication node are in normal state: when the heartbeat of the main licensing authentication node cannot be detected, the secondary licensing authentication node is switched to the working state; when the main licensing authentication node is restored, a full backup is performed from the secondary licensing authentication node and it runs as a secondary licensing authentication node; when the heartbeat of the secondary licensing authentication node cannot be detected, the secondary licensing authentication node is repaired, and after the secondary licensing authentication node returns to normal, a full backup is performed from the main licensing authentication node.

[0016] Among them, when the secondary licensing authentication node is started, the full backup method is used to synchronize data from the main licensing authentication node. During the operation, in order to make the data in the secondary licensing authentication node consistent with that in the main licensing authentication node, the secondary licensing authentication node performs real-time incremental backup; when the main licensing authentication node has data updates, it sends a synchronization message to the secondary licensing authentication node.

[0017] When using an authenticated reading device for reading, the content chain sends the encrypted content object and content license, where the content license is used to decrypt the content object, and the content license is doubly encrypted by the device public key and the user public key; the reading device that has passed the authentication of the license authentication node can use the device private key and the user private key to decrypt and read.

[0018] When the user is authenticated and registered, the content chain is connected to the publishing system, and the user account in the publishing system is automatically associated with the user account in the content chain through the user association mechanism.

[0019] The steps of automatically associating the user account in the publishing system with the user account in the content chain through the user association mechanism are as follows:

[0020] The login and registration information is stored in two parts, one in the publishing system and one in the content chain, which is uniquely identified by an email address. When a new user registers, first check whether the user information exists in the publishing system. If not, send a request to the license authentication node to check the user information. If the license authentication node does not have the user information, register the user information in both the license authentication node and the local publishing end. If the user information exists in the license authentication node, register it in the publishing system and associate it with the user on the content chain. When logging in, query the publishing system and content chain. When the publishing system does not have the user but the content chain does, the user will log in directly and then implicitly register and associate the user in the publishing system.

[0021] The existence of the license authentication node in the content chain of the present invention reduces the security requirements of other nodes, and other nodes in the network do not store the content data itself, but only store encrypted copies, ensuring that the stored content will not be lost after the node is attacked; when obtaining the content itself in the content chain, it is necessary to pass the triple authentication of node authentication, device authentication, and user authentication. This design method allows other nodes to focus on specific services, thereby reducing the pressure on other nodes. When accessing the content chain externally, first connect to other nodes, and then other nodes access the license authentication node, further reducing the possibility of the license authentication node being attacked. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 It is a schematic diagram of the principle of unified authentication of users under multi-node conditions in a self-organizing network environment of an embodiment of the present invention.

[0023] Figure 2 It is a schematic diagram of a user account association process during user registration according to an embodiment of the present invention.

[0024] Figure 3 It is a schematic diagram of the node authentication process of an embodiment of the present invention. DETAILED DESCRIPTION

[0025] The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0026] In the embodiment of the present invention, the self-organizing network is a content chain with blockchain as the open source architecture. It is a self-organizing network for content distribution that absorbs the advantages of distributed autonomous networks. It is a network that combines mobile communications and computer networks, and is a type of mobile computer network. In the self-organizing network of the content chain, there are multiple nodes, and the status of all nodes is equal. It is a peer-to-peer network. Each node can join and leave the self-organizing network at any time. The failure of any node will not affect the operation of the entire network, and it has strong anti-destruction capabilities. The content chain includes a license authentication node and other nodes, such as a content node for storing content object data. Other nodes in the content chain synchronize transaction records to the license authentication node, and the license authentication node verifies whether the user has content licensing authority based on the transaction records.

[0027] In the embodiment of the present invention, a node represents a plurality of unit structures that are interconnected to form a digital content chain network. The plurality of unit structures constituting the content chain communicate with each other to form a network structure, which is different from the meaning of the sequentially arranged nodes in the traditional blockchain.

[0028] In the embodiment of the present invention, the unified authentication of users under the condition of multiple nodes in the self-organizing network environment is as follows: Figure 1 As shown in the figure, the authentication process is realized by the recognition authentication node in the content chain self-organizing network, and the permission authentication node performs triple authentication when the user registers, the reading device joins, and the registration node joins the content chain, so as to realize the security of the content chain operation and the security of data transmission. The permission authentication node provides authentication function in the self-organizing network to ensure the security of content data. The existence of the permission authentication node reduces the security requirements of other nodes, and other nodes in the network do not store the content data itself, but only store encrypted copies, so as to ensure that the stored content will not be lost after the node is attacked; when obtaining the content itself, it is necessary to pass the node authentication, device authentication, and user authentication triple authentication. This design method allows other nodes to focus on specific business, thereby reducing the pressure on other nodes. When accessing the content chain externally, first connect to other nodes, and then other nodes access the permission authentication node, which further reduces the possibility of the permission authentication node being attacked.

[0029] In the embodiment of the present invention, the license authentication node distributes the following types of keys:

[0030] User identity public and private key: User identity public and private key is an asymmetric key. The public key in the user identity public and private key is called the user public key, and the private key in the user identity public and private key is called the user private key. It is used to authenticate the reader's identity and authorize the reader when reading. The user public key is used to encrypt the content encryption key. If the reader has the right to use a certain content object data, the user private key is used to decrypt the content encryption key and decrypt the content object data for reading.

[0031] Node public and private keys: Node public and private keys are asymmetric keys, which are composed of public and private key pairs of other nodes in the content chain. The public key in the node public and private keys is called the node public key, and the private key in the node public and private keys is called the node private key. The node public and private keys are used for identity authentication of content chain nodes in the consensus process, including signing and verifying transactions by nodes, to ensure the safety and reliability of nodes joining the content chain. Since the transaction information of readers purchasing content is synchronized from other nodes in the content chain to the license authentication node, the safety and reliability of user transaction information is guaranteed.

[0032] Device public and private keys: Device public and private keys are asymmetric keys. The public key in the device public and private keys is called the device public key, and the private key in the device public and private keys is called the device private key. The device public and private keys are used to authenticate and authorize the device used by the user to read copyrighted content. Authorized devices can read copyrighted content, prevent unauthorized devices from maliciously obtaining copyrighted content, and protect the security of copyrighted content. When readers use reading devices to read, devices that have been authenticated by the license authentication node can use the device private key to decrypt the content encryption key.

[0033] The embodiment of the present invention provides a user authentication method, in which a license authentication node distributes public and private user identity keys to registered users of a content chain, and is used to handle user identity authentication issues between various functional modules of the content chain. User identity authentication is achieved by decryption or signature verification, and a user association mechanism between content chain users and users of other publishing systems is provided.

[0034] Among them, when a user registers in the content chain, he needs to provide the necessary information to prove his identity according to the prompts and send the information to the license authentication node. After the license authentication node reviews the identity information submitted by the registered user, it returns a unique user ID. At the same time, the license authentication node generates a user identity public and private key for the registered user, which is used for identity authentication in the subsequent functional modules of the content chain. The user identity public and private key encryption and decryption method is used to automatically authenticate during the process of uploading and obtaining content objects.

[0035] In addition, the content chain can be connected to the publishing system. At this time, the user association mechanism can be used to automatically associate a user's account in the publishing system with the user account in the content chain. The specific process is as follows: Figure 2 See Figure 2 As shown, the information of the login and registration function is stored in two parts, one in the publishing system and the other in the content chain, which is uniquely identified by an email address. The specific functional flow is as follows: when a new user registers, first check whether the user information exists in the publishing system. If not, send a request to the license authentication node to check the user information. If the license authentication node does not have the user information, register the user information in both the license authentication node and the local publishing end. If the user information exists in the license authentication node, register it in the publishing system and associate it with the user on the content chain. Similarly, the publishing system and the content chain must be queried when logging in. When the publishing system does not have the user but the content chain has the user, the user will log in directly and then implicitly register and associate it in the publishing system.

[0036] The embodiment of the present invention provides a device authentication method, which distributes device public and private keys to devices trusted by the content chain. All transmission data is encrypted by the device public key, and the private key is decrypted after the device obtains it, so as to prevent illegal devices from maliciously obtaining content. In the content chain, different types of reading devices are allowed to join and read. In order to prevent illegal devices from maliciously obtaining content, if a new type of device wants to join the content chain, it needs to submit an app program to the license authentication node, and then test it. After passing the manual review, the device is trusted, and the license authentication node distributes the device public and private keys to the device to be added.

[0037] Among them, the device public and private keys are used to authenticate the device. When the reader uses the reading device to read, the content chain sends the encrypted content object and content license. The content license is used to decrypt the content object. The content license itself must also be doubly encrypted by the device public key and the user public key. Only the reading device that has been authenticated by the license authentication node can use the device private key and the user private key to decrypt and read.

[0038] Among them, the user's private key cannot be used directly by the reading device. Its usage process is as follows:

[0039] Step 11. After logging into the device, the user can view the user's basic information. When the user obtains the content object, the (reading) device first checks whether it has an encrypted user key. If not, it obtains it from the CA (approved authentication node), and the CA returns the encrypted user private key (the encryption password is the user content chain password); if it has it, it will not be obtained.

[0040] Step 12. After the user requests the content object, the user needs to enter his or her content chain password when he or she agrees for the device to use the private key to decrypt and read it for the first time, verify his or her identity, enter the password on the page provided by the CA organization, decrypt the user's private key after the password is successful, and use the user's private key to decrypt the content license.

[0041] Step 13. The user chooses whether to trust the device. If trusted, the device will no longer require a password. Otherwise, the password will be required every time.

[0042] The embodiment of the present invention provides a node authentication method to ensure the credibility of nodes added to the content chain; that is, when a new node wants to be added to the content chain, it is necessary to authenticate the identity of the node to ensure that the node added to the content chain is not a malicious node, thereby ensuring the safe and stable operation of the content chain. Figure 3 As shown:

[0043] Step 21. The user downloads the content chain installation program: When a new node is to be added to the content chain, the code is first downloaded, and then the content chain is installed.

[0044] Step 22. Install the content chain: During the code installation process, a configurable script is automatically generated, including basic configuration information:

[0045] License Agreement: Users can continue with the installation after accepting or agreeing to the license agreement.

[0046] Installation path: The directory where the installation code is set by the user.

[0047] User password: The password set by the user to log in to the administrator configuration interface.

[0048] Write ccnoder as the user name and the password entered by the user as the user password into the configuration file so that the user can perform identity authentication when logging into the administrator configuration interface later. The user password is encrypted and saved using sha256.

[0049] Step 23. Program Startup

[0050] After the code is successfully installed, the user starts it, and the administrator configuration interface is started. The user can apply for node registration on this interface.

[0051] Step 24. Log in

[0052] The user logs in using the username and password generated during the installation process. After passing the identity authentication, he enters the administrator configuration interface.

[0053] Step 25. Node registration

[0054] After entering the administrator configuration interface, fill in the corresponding information according to the prompts. If you already have relevant information, just fill it in directly. If not, apply. The application process is as follows:

[0055] Step 251. Fill in basic information as required, including organization name, organization abbreviation, organization code, address, contact person, contact phone number, email, etc. After completing, submit the information.

[0056] Step 252. The information is submitted to the root node. After receiving the registration application, the root node randomly generates a symmetric key as a password and returns it to the registration node in the form of an email. The email includes the following content: "The information has been submitted to the root node for verification. Please wait. You will be notified by email after the verification is passed. After receiving the notification, you can use the password contained in this email to view the encrypted package (the encrypted form of the node's public and private keys and the node's related registration information)".

[0057] Step 252. The root node performs manual verification. After the verification is passed, all information and the randomly generated password in the previous step are sent to the license authentication node.

[0058] Step 253. After receiving the information, the license authentication node generates public and private keys for the node, and registers the node type to the information list of the license authentication node. Then, it uses the password sent by the root node to encrypt the node public and private keys and the node-related registration information into an encrypted package, and sends it to the registration node in the form of an email. The node-related registration information is used to confirm the current node information, and the node public and private keys are used for signing and verification during content chain consensus.

[0059] Furthermore, an embodiment of the present invention provides a certificate issuance mechanism for HTTPS to ensure the security of data during transmission; in the content chain system, HTTPS needs to be used for secure transmission. In traditional solutions, it is necessary to generate a self-signed certificate, and then use the self-signed certificate in the http server. Since the browser does not trust the self-signed certificate, in order to solve the browser's trust problem, the CA certificate used by the self-signed certificate needs to be added to the trusted CA certificate of the system or browser, thereby circumventing this problem. Therefore, in the content chain, the license authentication node acts as a trusted CA organization to issue the CA certificate required for HTTPS transmission to other nodes that require CA certificates. Other nodes that require CA certificates add the CA certificate of the license authentication node to their own trusted CA certificates, thereby trusting all CA certificates issued by the license authentication node.

[0060] In order to ensure that the normal operation of the content chain is not affected when the license authentication node fails, a backup mechanism for the primary and secondary license authentication nodes is proposed, which can prevent network paralysis caused by node failure and ensure the anti-destruction of the license authentication node itself. The secondary license authentication node fully backs up the content of the primary license authentication node. Except for the different working states, the other functions of them in the content chain network are the same.

[0061] The backup methods include full backup and incremental backup. Full backup refers to backing up all data in the main license authentication node; incremental backup refers to backing up the modified data based on the last data backup.

[0062] Specifically, the backup process of the primary license authentication node and the secondary license authentication node is as follows:

[0063] When the secondary node is started, the data is synchronized from the primary node by full backup. Afterwards, in order to ensure that the data in the secondary node is consistent with that in the primary node to the greatest extent, the secondary node needs to perform real-time incremental backup. During operation, when the primary node has data updated, it sends a synchronization message to the secondary node.

[0064] Specifically, the process of switching the primary license authentication node and the secondary license authentication node is as follows:

[0065] When the main license authentication node fails, the secondary license authentication node must be switched to the working state in time, so it is necessary to monitor whether the main and secondary license authentication nodes are in normal state at all times. The heartbeat detection between the root node in the content chain and the main and secondary license authentication nodes is used to ensure that the main and secondary license authentication nodes are in normal state. When the heartbeat of the main license authentication node cannot be detected, the secondary license authentication node is switched to the working state. After the main license authentication node is restored, a full backup is first performed from the secondary license authentication node, and then it runs as a secondary license authentication node. When the heartbeat of the secondary license authentication node cannot be detected, the secondary license authentication node is repaired in time. After the secondary license authentication node is restored to normal, a full backup is also performed from the main license authentication node.

[0066] In the embodiment of the present application, the root node is the node with the highest management authority in the content chain, which can ensure the control of backup switching of the primary and secondary licensing authentication nodes, the verification of the joining nodes in the content chain, and the generation of related keys.

[0067] The basic principles and main features of the present invention and the advantages of the present invention are shown and described above. It is obvious to those skilled in the art that the present invention is not limited to the details of the above exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic features of the present invention.

[0068] Therefore, the embodiments should be considered in all respects as illustrative and non-restrictive, and the scope of the invention is defined by the appended claims rather than the foregoing description, and it is therefore intended that all changes falling within the meaning and range of equivalent elements of the claims are included in the present invention.

[0069] In addition, it should be understood that although the present specification is described according to implementation modes, not every implementation mode contains only one independent technical solution. This description of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each embodiment may also be appropriately combined to form other implementation modes that can be understood by those skilled in the art.

Claims

1. A unified authentication method for users in a multi-node self-organizing network environment, characterized in that: Based on the permission authentication node in the content chain, triple authentication is performed when the user registers, the reading device joins, and the registration node joins the content chain, so that when the user obtains the content data in the content chain, it needs to pass the node authentication, device authentication, and user authentication to achieve the security of content chain operation and data transmission; including: User authentication when registering in the content chain: After the license authentication node verifies the identity information submitted by the registered user, it returns a unique user ID and generates a public and private key for the registered user, which is used for identity authentication and automatic authentication in the process of uploading and obtaining content objects. Device authentication when a reading device joins the content chain: To join the content chain, the reading device submits the app program to the license authentication node, and then tests it. After the license authentication node verifies and approves it, the reading device is trusted. The license authentication node distributes the device public and private keys to the reading device to be added. The device public and private keys are used to authenticate the device. The transmitted data is encrypted by the device public key, and the reading device obtains the private key to decrypt it. Node authentication when a node joins a content chain: After the node registration information is filled in, it is submitted to the root node. After receiving the registration application, the root node randomly generates a symmetric key as a password and returns it to the registration node in the form of an email; after the root node passes the verification, all the information and the randomly generated password are sent to the license authentication node; after receiving the information, the license authentication node generates public and private keys for the registration node, registers the node type to the information list of the license authentication node, and then uses the password sent by the root node to encrypt the node public and private keys and the node registration information into an encrypted package, which is sent to the registration node in the form of an email; the node registration information is used to confirm the current node information, and the node public and private keys are used for signing and verification during content chain consensus.

2. According to claim 1, the unified authentication method for users in a multi-node self-organizing network environment is characterized in that: The license authentication node acts as a trusted CA organization and issues CA certificates required for HTTPS transmission to nodes in the content chain that require CA certificates. Nodes that require CA certificates add the CA certificate of the license authentication node to their own trusted CA certificates and trust all CA certificates issued by the license authentication node.

3. According to claim 1, the unified authentication method for users in a multi-node self-organizing network environment is characterized in that: The license authentication node includes the primary license authentication node and the secondary license authentication node; The secondary licensing authentication node fully backs up the contents of the primary licensing authentication node; when the primary licensing authentication node fails, the secondary licensing authentication node is switched to a working state.

4. According to claim 1, the unified authentication method for users in a multi-node self-organizing network environment is characterized in that: Through the heartbeat detection between the root node and the main licensing authentication node and the secondary licensing authentication node, the main licensing authentication node and the secondary licensing authentication node are kept in normal state: when the heartbeat of the main licensing authentication node cannot be detected, the secondary licensing authentication node is switched to working state; when the main licensing authentication node is restored, a full backup is performed from the secondary licensing authentication node and it runs as a secondary licensing authentication node; when the heartbeat of the secondary licensing authentication node cannot be detected, the secondary licensing authentication node is repaired, and after the secondary licensing authentication node returns to normal, a full backup is performed from the main licensing authentication node.

5. According to claim 4, the unified authentication method for users in a self-organizing network environment with multiple nodes is characterized in that: When the secondary licensing authentication node is started, the full backup method is used to synchronize data from the primary licensing authentication node. During operation, in order to make the data in the secondary licensing authentication node consistent with that in the primary licensing authentication node, the secondary licensing authentication node performs real-time incremental backup; when the primary licensing authentication node has data updated, a synchronization message is sent to the secondary licensing authentication node.

6. According to claim 1, the unified authentication method for users in a multi-node self-organizing network environment is characterized in that: When reading with a certified reading device, the content chain sends the encrypted content object and content license, where the content license is used to decrypt the content object. The content license is doubly encrypted with the device public key and the user public key. Reading devices that have passed the license authentication node authentication can use the device private key and the user private key to decrypt and read.

7. According to claim 1, the unified authentication method for users in a multi-node self-organizing network environment is characterized in that: During user authentication and registration, the content chain is connected to the publishing system, and through the user association mechanism, the user account in the publishing system and the user account in the content chain are automatically associated.

8. According to claim 7, the unified authentication method for users in a self-organizing network environment with multiple nodes is characterized in that: The steps to automatically associate the user account in the publishing system with the user account in the content chain through the user association mechanism are as follows: The login and registration information is stored in two parts, one in the publishing system and the other in the content chain, which is uniquely identified by an email address. When a new user registers, first check whether the user information exists in the publishing system. If not, send a request to the license authentication node to check the user information. If the license authentication node does not have the user information, register the user information in both the license authentication node and the local publishing end. If the user information exists in the license authentication node, register it in the publishing system and associate it with the user on the content chain. When logging in, query the publishing system and content chain. When the publishing system does not have the user but the content chain does, the user will log in directly and then implicitly register and associate it with the user in the publishing system.

Images