User identity authentication method and system for supply chain data collaboration
By encrypting and authenticating supply chain user identity information through blockchain technology and encryption algorithms, the security risks in the process of sharing user identity information in the supply chain are resolved, the security and authenticity of user identity are achieved, and the effectiveness of legitimate user identity management in the supply chain is improved.
Patent Information
- Application Number
- CN202310663364.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-06-06
- Publication Date
- 2025-09-09
- Estimated Expiration
- 2043-06-06
AI Technical Summary
There are security risks in the process of sharing user identity information in the existing supply chain, which makes it impossible to fully guarantee the security and authenticity of identity information, hinders the secure identification and reliable traceability of user identities of upstream and downstream enterprises in the supply chain, and limits the full realization of the value of the supply chain.
Blockchain technology is used to build an identity management server, which encrypts user identity information to generate ciphertext and digital signatures, performs identity authentication through hash functions and public key encryption algorithms, and utilizes the blockchain's tamper-proof characteristics and consensus mechanism to achieve anonymous sharing, ensuring the security and authenticity of user identity information.
It improves the security and effectiveness of legitimate user identity management in the supply chain, ensures the privacy and authenticity of user identity information, realizes trusted interconnection and anonymous sharing of user identities, and solves the problems of identity information forgery and tampering.
Smart Images

Figure CN116668036B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of blockchain and information security technology, and particularly to a user identity authentication method and system for supply chain data collaboration. Background Art
[0002] Intelligent manufacturing, by achieving comprehensive interconnection between people, machines, and objects, has realized intelligent factory management and analysis, smart park monitoring and facility management, and supply chain collaboration and control, building a new industrial production and manufacturing system that is fully connected with all factors, the entire industrial chain, the entire value chain, and has gradually become the key to success for China's manufacturing industry to go global, and will have an all-round, profound, and revolutionary impact on future industrial development.
[0003] The rapid acceleration of informatization in the intelligent manufacturing industry is leading to explosive growth in manufacturing big data. The increasing diversification of upstream and downstream supply chain companies and significant adjustments to the industrial division of labor are driving information security challenges in supply chain user authentication and trusted identity traceability in an environment characterized by significantly increased complexity, instability, and uncertainty. These challenges are becoming a bottleneck hindering the digital and intelligent transformation of my country's automotive industry.
[0004] Current data sharing, interaction, and usage models lack effective foundational technical measures and a global approach to identity data protection. This leads to multiple potential security risks in the access, calculation, and service delivery of user identity information within the existing supply chain. This makes it impossible to fully guarantee the security of identity information sharing, significantly hindering the secure identification and trusted traceability of user identities across upstream and downstream enterprises in the collaborative manufacturing context and limiting the full potential of the supply chain within the industry. Therefore, a method that can improve the security and effectiveness of user identity authentication is urgently needed. Summary of the Invention
[0005] In view of the above-mentioned deficiencies of the existing technology, the technical problem to be solved by the present invention is: how to provide a user identity authentication method for supply chain data collaboration, which can ensure the security and authenticity of user identity information through blockchain technology and encryption technology, and effectively realize the identity authentication of legitimate users on the supply chain, thereby improving the security and effectiveness of legitimate user identity management on the supply chain.
[0006] In order to solve the above technical problems, the present invention adopts the following technical solutions:
[0007] User identity authentication methods for supply chain data collaboration include:
[0008] S1: Builds an identity management server for the supply chain based on blockchain technology;
[0009] S2: Receive a supply chain registration request containing the registrant's identity information at the identity registration end;
[0010] S3: Encrypt the registrant's identity information to generate identity information ciphertext; then generate the corresponding digital signature based on the identity information ciphertext;
[0011] S4: Upload the registrant's identity information ciphertext and digital signature to the identity management server and obtain the corresponding data storage address; then associate the registrant's identity information with the corresponding data storage address;
[0012] S5: receiving a supply chain access request including the visitor's identity information at the access application end;
[0013] S6: Obtain the corresponding data storage address through the visitor's identity information, and call the corresponding identity information ciphertext and digital signature from the identity management server based on the data storage address; then authenticate the visitor based on the identity information ciphertext and digital signature, and allow the visitor to access the supply chain after the verification is passed.
[0014] Preferably, after receiving the supply chain registration request, the identity registration end generates a set of public and private key pairs through an asymmetric encryption algorithm.
[0015] Preferably, the identity information of the registrant is encrypted by a public key to generate a ciphertext of the identity information.
[0016] Preferably, the registrant's identity information ciphertext is encrypted using a private key to generate a digital signature.
[0017] Preferably, when generating a digital signature: firstly, the identity information ciphertext is hashed by a hash function to generate an identity ciphertext hash value; and then the identity ciphertext hash value is encrypted by a private key to generate a digital signature.
[0018] Preferably, identity authentication is achieved through the following steps:
[0019] S601: Perform hash calculation on the identity information ciphertext through a hash function to generate a real-time identity ciphertext hash value;
[0020] S602: Decrypt the digital signature using the public key to obtain the pre-stored identity ciphertext hash value;
[0021] S603: Determine whether the real-time identity ciphertext hash value is consistent with the pre-stored identity ciphertext hash value: If so, the visitor passes the identity authentication and is a legitimate user on the supply chain; otherwise, the visitor identity authentication fails.
[0022] Preferably, after uploading the registrant's identity information ciphertext and digital signature to the identity management server, the registrant's identity information ciphertext and digital signature are published through a consensus mechanism to achieve anonymous sharing of the registrant's identity information.
[0023] Preferably, the identity management server stores the registrant's identity information ciphertext and digital signature via a data block;
[0024] The data block includes a block header and a block body; the block header includes the merkle root of the previous data block, the registrant's chain timestamp and identity ciphertext; the block body includes the registrant's digital signature and the merkle root of the data block itself.
[0025] The present invention also discloses a user identity authentication system for supply chain data collaboration, which is implemented based on the user identity authentication method for supply chain data collaboration in the present invention and includes:
[0026] Identity management server, building supply chain based on blockchain technology;
[0027] Identity registration terminal, used to receive supply chain registration requests containing the registrant's identity information;
[0028] The access request terminal is used to receive supply chain access requests containing the visitor's identity information;
[0029] The information encryption module is used to encrypt the registrant's identity information and generate identity information ciphertext;
[0030] The signature generation module is used to generate a corresponding digital signature based on the ciphertext of the identity information;
[0031] The data upload module is used to upload the registrant's identity information ciphertext and digital signature to the identity management server and obtain the corresponding data storage address;
[0032] A data association module, used to associate the registrant's identity information with the corresponding data storage address;
[0033] The identity authentication module is used to obtain the corresponding data storage address through the visitor's identity information, and call the corresponding identity information ciphertext and digital signature from the identity management server according to the data storage address; then authenticate the visitor based on the identity information ciphertext and digital signature.
[0034] The present invention also discloses a readable storage medium on which a computer management program is stored. When the computer management program is executed by a processor, the steps of the user identity authentication method for supply chain data collaboration in the present invention are implemented.
[0035] Compared with the existing technology, the user identity authentication method for supply chain data collaboration in this invention has the following advantages:
[0036] The present invention encrypts the identity information of the registrant to generate an identity information ciphertext, and generates a digital signature based on the identity information ciphertext, so that encryption technology can be used to ensure the privacy of the user's identity information; at the same time, the present invention constructs an identity management server based on blockchain technology, and writes the registrant's identity ciphertext and digital signature into the identity management server when the registrant issues a supply chain registration request, so that the transparency and non-tamperability of blockchain technology can be used to solve the problems of identity information forgery, tampering, and difficulty in tracing the source faced in the current collaborative sharing of supply chain data, and can ensure the security and authenticity of the user's identity information; and the present invention realizes anonymous sharing of the registrant's identity information through a consensus mechanism, which can realize trusted interconnection and anonymous sharing of user identities on the supply chain, and ensure the security of user identity data sharing, thereby improving the effect of legitimate user identity management on the supply chain.
[0037] The present invention associates the registrant's identity information with the corresponding data storage address in advance, and retrieves the visitor's identity ciphertext and digital signature through the data storage address corresponding to his or her identity information when the visitor visits the supply chain, and then performs hash calculation on the visitor's identity ciphertext to generate a real-time identity ciphertext hash value, and then decrypts the visitor's digital signature to obtain a pre-stored identity ciphertext hash value. Finally, the visitor's identity authentication (verification of legitimacy) is achieved by comparing the consistency of the real-time identity ciphertext hash value and the pre-stored identity ciphertext hash value, so that the blockchain technology and encryption technology can be used to effectively realize the identity authentication of legitimate users on the supply chain, thereby further improving the effectiveness of identity management of legitimate users on the supply chain. BRIEF DESCRIPTION OF THE DRAWINGS
[0038] In order to make the purpose, technical solutions and advantages of the invention more clear, the present invention will be further described in detail below with reference to the accompanying drawings, in which:
[0039] Figure 1 This is a logical block diagram of a user identity authentication method for supply chain data collaboration;
[0040] Figure 2 Functional diagram for key generation and distribution;
[0041] Figure 3 Flowchart for calculating identity ciphertext and digital signature
[0042] Figure 4 Schematic diagram of the identity authentication process.
[0043] Figure 5 It is the overall structure diagram of the data block;
[0044] Figure 6 This is a schematic diagram of the blockchain consensus mechanism process;
[0045] Figure 7 This is the logical block diagram of the user identity authentication system for supply chain data collaboration. DETAILED DESCRIPTION
[0046] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. The components of the embodiments of the present invention generally described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present invention provided in the drawings is not intended to limit the scope of the invention claimed for protection, but only represents selected embodiments of the present invention. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.
[0047] It should be noted that similar reference numerals and letters denote similar items in the following figures. Therefore, once an item is defined in one figure, it does not require further definition or explanation in subsequent figures. In the description of the present invention, it should be noted that the terms "center," "upper," "lower," "left," "right," "vertical," "horizontal," "inner," and "outer," etc., indicating orientations or positional relationships, are based on the orientations or positional relationships shown in the figures, or the orientations or positional relationships in which the inventive product is typically placed when in use. These terms are intended solely to facilitate the description of the present invention and simplify the description. They do not indicate or imply that the devices or components referred to must have a specific orientation, be constructed, or operate in a specific orientation, and are therefore not to be construed as limiting the present invention. Furthermore, the terms "first," "second," and "third," etc., are used solely to distinguish descriptions and are not to be construed as indicating or implying relative importance. Furthermore, terms such as "horizontal" and "vertical" do not imply that a component is absolutely horizontal or overhanging, but rather may be slightly tilted. For example, "horizontal" simply means that its orientation is more horizontal than "vertical," and does not imply that the structure must be completely horizontal, but rather may be slightly tilted. In the description of the present invention, it should also be noted that, unless otherwise expressly specified or limited, the terms "disposed," "installed," "connected," and "connected" should be understood in a broad sense. For example, they may refer to fixed connections, detachable connections, or integral connections; they may refer to mechanical connections or electrical connections; they may refer to direct connections or indirect connections through an intermediate medium; and they may refer to internal communication between two components. Those skilled in the art will understand the specific meanings of the above terms in the present invention based on the specific circumstances.
[0048] The following is a further detailed description through specific implementation methods:
[0049] Example 1:
[0050] This embodiment discloses a user identity authentication method for supply chain data collaboration.
[0051] like Figure 1 As shown in FIG, the user identity authentication method for supply chain data collaboration includes:
[0052] S1: Builds an identity management server for the supply chain based on blockchain technology;
[0053] S2: Receive a supply chain registration request containing the registrant's identity information at the identity registration end;
[0054] S3: Encrypt the registrant's identity information to generate identity information ciphertext; then generate the corresponding digital signature based on the identity information ciphertext;
[0055] S4: Upload the registrant's identity information ciphertext and digital signature to the identity management server and obtain the corresponding data storage address; then associate the registrant's identity information with the corresponding data storage address;
[0056] S5: receiving a supply chain access request including the visitor's identity information at the access application end;
[0057] S6: Obtain the corresponding data storage address through the visitor's identity information, and call the corresponding identity information ciphertext and digital signature from the identity management server based on the data storage address; then authenticate the visitor based on the identity information ciphertext and digital signature, and allow the visitor to access the supply chain after the verification is passed.
[0058] The present invention encrypts the identity information of the registrant to generate identity information ciphertext, and generates a digital signature based on the identity information ciphertext, so that encryption technology can be used to ensure the privacy of the user's identity information; at the same time, the present invention constructs an identity management server based on blockchain technology, and writes the registrant's identity ciphertext and digital signature into the identity management server when the registrant issues a supply chain registration request, so that the transparency and non-tamperability of blockchain technology can be used to solve the problems of identity information forgery, tampering, and difficulty in tracing the source faced in the current collaborative sharing of supply chain data, and can ensure the security and authenticity of user identity information, thereby improving the security of legitimate user identity management on the supply chain.
[0059] The present invention associates the registrant's identity information with the corresponding data storage address in advance, and retrieves the visitor's identity ciphertext and digital signature through the data storage address corresponding to his or her identity information when the visitor accesses the supply chain, and then authenticates the visitor based on the identity information ciphertext and digital signature, so that the blockchain technology and encryption technology can be used to effectively realize the identity authentication of legitimate users on the supply chain, thereby improving the effectiveness of legitimate user identity management on the supply chain.
[0060] Combine Figure 2 As shown in the figure, after the identity registration end receives the supply chain registration request, the key server generates a public-private key pair (pk, sk) using an asymmetric encryption algorithm. The private key (sk) is kept by the registrant, while the public key (pk) is written into the smart contract of the identity management server.
[0061] In this embodiment, a public-private key pair is generated through the following steps:
[0062] S101: Select two large prime numbers p and q, satisfying p≠q, and calculate the integer n;
[0063] n=p*q;
[0064] N=n 2 ;
[0065] S102: Calculate the least common multiple λ of p-1 and q-1;
[0066] λ=lcm(p-1,q-1);
[0067] Where lcm is the least common multiple function;
[0068] S103: Select a positive integer g smaller than N so that gcd(g λ mod N,n)=1;
[0069] Where gcd is the greatest common divisor function, and there exists
[0070] S104: Generate public and private keys;
[0071] Public key: pk = (n, g); private key: sk = (λ, μ).
[0072] The public and private keys generated by the present invention through the above steps have semantic security. Semantic security means that without obtaining the private key, an attacker cannot deduce any useful information in the plaintext through the ciphertext, thereby helping to improve the security of legitimate user identity management in the supply chain.
[0073] Combine Figure 3As shown, the registrant's identity information is encrypted using the public key to generate the identity information ciphertext Enc(ID).
[0074] The registrant's identity information is encrypted using the private key to generate a digital signature.
[0075] When generating a digital signature: first, the identity information ciphertext Enc(ID) is hashed using a hash function to generate the identity ciphertext hash value H(Enc(ID)), defined as H(MID); then the identity ciphertext hash value H(MID) is encrypted using the private key to generate the digital signature Sig(H(MID)).
[0076] In the subsequent identity authentication process, the visitor's digital signature is decrypted using the public key to obtain the pre-stored identity ciphertext hash value.
[0077] The core point of data privacy protection is to ensure the security of keys.
[0078] The present invention encrypts user identity information through asymmetric encryption technology. Asymmetric encryption technology uses the irreversibility of one-way functions to generate keys. It has the characteristics of different encryption and decryption keys, and public encryption keys do not expose decryption keys. This can ensure the security of decryption keys and simplify key management. In turn, it can further ensure the security of user identity data sharing based on blockchain technology. At the same time, the present invention compresses the identity information ciphertext through hash functions (calculations) during the encryption process to reduce storage space. The hash calculation can further improve the security of user identity information, thereby improving the security of legitimate user identity management in the supply chain.
[0079] Combine Figure 4 As shown, identity authentication is achieved through the following steps:
[0080] S601: Perform hash calculation on the identity information ciphertext through a hash function to generate a real-time identity ciphertext hash value;
[0081] S602: Decrypt the digital signature using the public key to obtain the pre-stored identity ciphertext hash value;
[0082] S603: Determine whether the real-time identity ciphertext hash value is consistent with the pre-stored identity ciphertext hash value: If so, the visitor passes the identity authentication and is a legitimate user on the supply chain; otherwise, the visitor identity authentication fails.
[0083] The present invention associates the registrant's identity information with the corresponding data storage address in advance, and retrieves the visitor's identity ciphertext and digital signature through the data storage address corresponding to his or her identity information when the visitor visits the supply chain, and then performs hash calculation on the visitor's identity ciphertext to generate a real-time identity ciphertext hash value, and then decrypts the visitor's digital signature to obtain a pre-stored identity ciphertext hash value. Finally, the visitor's identity authentication (verification of legitimacy) is achieved by comparing the consistency of the real-time identity ciphertext hash value and the pre-stored identity ciphertext hash value, so that the blockchain technology and encryption technology can be used to effectively realize the identity authentication of legitimate users on the supply chain, thereby further improving the effectiveness of identity management of legitimate users on the supply chain.
[0084] In specific implementations, the identity management server is built on blockchain technology, storing encrypted identity information and digital signatures of registrants in data blocks. Blockchain technology is a decentralized distributed ledger that combines distributed data storage, peer-to-peer transmission, consensus mechanisms, and encryption algorithms to achieve consistent data storage, tamper resistance, and non-repudiation.
[0085] The blockchain is a chain structure composed of multiple ordered data blocks connected in series, and each block contains the same structural components. Each data block consists of two parts: the block header and the block body. The specific structure is as follows Figure 5 As shown: the block header includes the merkle root of the previous data block, the registrant's on-chain timestamp and identity ciphertext; the block body includes the registrant's digital signature and the merkle root of the data block itself.
[0086] In this embodiment, the Merkle root is a well-established data structure. It is a binary tree composed of a series of hash values, where each non-leaf node is the combination of the hash values of its two child nodes. Merkle roots are commonly used to verify the integrity of large data sets. During the verification process, only the root hash value needs to be compared, rather than the entire data set. Storing the Merkle root in the data block effectively verifies whether the information of the leaf nodes under the root has deviated, ensuring data immutability and path traceability.
[0087] During the specific implementation process, after uploading the registrant's identity information ciphertext and digital signature to the identity management server, the registrant's identity information ciphertext and digital signature are published through the consensus mechanism to achieve anonymous sharing of the registrant's identity information.
[0088] In order to safely publish the user identity ciphertext and digital signature on the chain, the consensus mechanism in blockchain technology is combined for information sharing. Among them, the consensus mechanism ensures that each node in the system spontaneously and honestly abides by the pre-set rules in the protocol, judges the authenticity of each record, and finally records the records judged to be true in their respective blockchains. The consensus mechanism is the core of blockchain technology and determines the security, scalability and distributed characteristics of the blockchain system at a basic level. Sharing data through the consensus mechanism in the blockchain In the supply chain, the consensus mechanism process is as follows Figure 6 The consensus mechanism is equivalent to the process of information synchronization. Once a legitimate user registers information, the registration information will be synchronized on the platform (usually implemented using code).
[0089] The present invention constructs an identity management server based on blockchain technology, and writes the registrant's identity ciphertext and digital signature into the identity management server when the registrant issues a supply chain registration request, so that the transparency and non-tamperability of blockchain technology can be used to solve the problems of identity information forgery, tampering, and difficulty in tracing the source faced in the current collaborative sharing of supply chain data, and can ensure the security and authenticity of user identity information; and the present invention realizes anonymous sharing of registrant identity information through a consensus mechanism, can realize trusted interconnection and anonymous sharing of user identities in the supply chain, and ensure the security of user identity data sharing process, thereby improving the effect of legitimate user identity management in the supply chain.
[0090] Example 2:
[0091] This embodiment discloses a user identity authentication system for supply chain data collaboration, which is implemented based on the user identity authentication method for supply chain data collaboration in the first embodiment.
[0092] like Figure 7 As shown in the figure, the user identity authentication system for supply chain data collaboration includes:
[0093] Identity management server, building supply chain based on blockchain technology;
[0094] Identity registration terminal, used to receive supply chain registration requests containing the registrant's identity information;
[0095] The access request terminal is used to receive supply chain access requests containing the visitor's identity information;
[0096] The information encryption module is used to encrypt the registrant's identity information and generate identity information ciphertext;
[0097] The signature generation module is used to generate a corresponding digital signature based on the ciphertext of the identity information;
[0098] The data upload module is used to upload the registrant's identity information ciphertext and digital signature to the identity management server and obtain the corresponding data storage address;
[0099] A data association module, used to associate the registrant's identity information with the corresponding data storage address;
[0100] The identity authentication module is used to obtain the corresponding data storage address through the visitor's identity information, and call the corresponding identity information ciphertext and digital signature from the identity management server according to the data storage address; then authenticate the visitor based on the identity information ciphertext and digital signature.
[0101] The present invention encrypts the identity information of the registrant to generate an identity information ciphertext, and generates a digital signature based on the identity information ciphertext, so that encryption technology can be used to ensure the privacy of the user's identity information; at the same time, the present invention constructs an identity management server based on blockchain technology, and writes the registrant's identity ciphertext and digital signature into the identity management server when the registrant issues a supply chain registration request, so that the transparency and non-tamperability of blockchain technology can be used to solve the problems of identity information forgery, tampering, and difficulty in tracing the source faced in the current collaborative sharing of supply chain data, and can ensure the security and authenticity of the user's identity information; and the present invention realizes anonymous sharing of the registrant's identity information through a consensus mechanism, which can realize trusted interconnection and anonymous sharing of user identities on the supply chain, and ensure the security of user identity data sharing, thereby improving the effect of legitimate user identity management on the supply chain.
[0102] The present invention associates the registrant's identity information with the corresponding data storage address in advance, and retrieves the visitor's identity ciphertext and digital signature through the data storage address corresponding to his or her identity information when the visitor visits the supply chain, and then performs hash calculation on the visitor's identity ciphertext to generate a real-time identity ciphertext hash value, and then decrypts the visitor's digital signature to obtain a pre-stored identity ciphertext hash value. Finally, the visitor's identity authentication (verification of legitimacy) is achieved by comparing the consistency of the real-time identity ciphertext hash value and the pre-stored identity ciphertext hash value, so that the blockchain technology and encryption technology can be used to effectively realize the identity authentication of legitimate users on the supply chain, thereby further improving the effectiveness of identity management of legitimate users on the supply chain.
[0103] Example 3:
[0104] This embodiment discloses a readable storage medium.
[0105] A readable storage medium stores a computer management program that, when executed by a processor, implements the steps of the user identity authentication method for supply chain data collaboration of the present invention. The readable storage medium can be a device with readable storage capabilities, such as a USB flash drive or a computer.
[0106] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit the technical solutions. Those skilled in the art should understand that modifications or equivalent replacements of the technical solutions of the present invention that do not depart from the purpose and scope of the technical solutions of the present invention should be included in the scope of the claims of the present invention.
Claims
1. A user identity authentication method for supply chain data collaboration, characterized by: include: S1: Builds an identity management server for the supply chain based on blockchain technology; S2: Receive a supply chain registration request containing the registrant's identity information at the identity registration end; S3: Encrypt the registrant's identity information to generate identity information ciphertext; then generate the corresponding digital signature based on the identity information ciphertext; S4: Upload the registrant's identity information ciphertext and digital signature to the identity management server and obtain the corresponding data storage address; then associate the registrant's identity information with the corresponding data storage address; S5: receiving a supply chain access request including the visitor's identity information at the access application end; S6: Obtain the corresponding data storage address through the visitor's identity information, and call the corresponding identity information ciphertext and digital signature from the identity management server based on the data storage address; then authenticate the visitor based on the identity information ciphertext and digital signature, and allow the visitor to access the supply chain after the verification is passed.
2. The user identity authentication method for supply chain data collaboration according to claim 1, characterized in that: In step S2, after the identity registration end receives the supply chain registration request, a set of public and private key pairs is generated through an asymmetric encryption algorithm.
3. The user identity authentication method for supply chain data collaboration according to claim 2, characterized in that: In step S3, the registrant's identity information is encrypted using the public key to generate identity information ciphertext.
4. The user identity authentication method for supply chain data collaboration according to claim 3, characterized in that: In step S3, the registrant's identity information ciphertext is encrypted using the private key to generate a digital signature.
5. The user identity authentication method for supply chain data collaboration according to claim 4, characterized in that: When generating a digital signature: first, the identity information ciphertext is hashed using a hash function to generate the identity ciphertext hash value; The identity ciphertext hash value is then encrypted using the private key to generate a digital signature.
6. The user identity authentication method for supply chain data collaboration according to claim 5, characterized in that: In step S6, identity authentication is achieved through the following steps: S601: Perform hash calculation on the identity information ciphertext through a hash function to generate a real-time identity ciphertext hash value; S602: Decrypt the digital signature using the public key to obtain the pre-stored identity ciphertext hash value; S603: Determine whether the real-time identity ciphertext hash value is consistent with the pre-stored identity ciphertext hash value: If so, the visitor has passed the identity authentication and is a legitimate user in the supply chain; Otherwise, the visitor authentication fails.
7. The user identity authentication method for supply chain data collaboration according to claim 1, characterized in that: In step S4, after uploading the registrant's identity information ciphertext and digital signature to the identity management server, the registrant's identity information ciphertext and digital signature are published through the consensus mechanism to achieve anonymous sharing of the registrant's identity information.
8. The user identity authentication method for supply chain data collaboration according to claim 1, characterized in that: In step S4, the identity management server stores the registrant's identity information ciphertext and digital signature in the data block; The data block includes a block header and a block body; the block header includes the merkle root of the previous data block, the registrant's chain timestamp and identity ciphertext; the block body includes the registrant's digital signature and the merkle root of the data block itself.
9. User identity authentication system for supply chain data collaboration, characterized by: The user identity authentication method for supply chain data collaboration described in claim 1 is implemented, including: Identity management server, building supply chain based on blockchain technology; Identity registration terminal, used to receive supply chain registration requests containing the registrant's identity information; The access request terminal is used to receive supply chain access requests containing the visitor's identity information; The information encryption module is used to encrypt the registrant's identity information and generate identity information ciphertext; The signature generation module is used to generate a corresponding digital signature based on the ciphertext of the identity information; The data upload module is used to upload the registrant's identity information ciphertext and digital signature to the identity management server and obtain the corresponding data storage address; A data association module, used to associate the registrant's identity information with the corresponding data storage address; The identity authentication module is used to obtain the corresponding data storage address through the visitor's identity information, and call the corresponding identity information ciphertext and digital signature from the identity management server according to the data storage address; then authenticate the visitor based on the identity information ciphertext and digital signature.
10. A readable storage medium, characterized in that: A computer management program is stored thereon, and when the computer management program is executed by the processor, the steps of the user identity authentication method for supply chain data collaboration as described in any one of claims 1 to 8 are implemented.
Citation Information
Patent Citations
File storage method and device and file downloading method and device
CN115913569A
KR20200000978A