A blockchain-based Internet of Things identity authentication method

Abstract

The embodiment of the present invention discloses an Internet of Things identity authentication method based on blockchain, which relates to the field of blockchain technology. The method comprises: dividing the digital identity information of the Internet of Things to be stored into multiple first sub-data, and obtaining a corresponding sub-data sequence; specifying a blockchain storage node for each first sub-data; adding the position data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence to each first sub-data, to obtain the second sub-data; encrypting each second sub-data according to a preset encryption algorithm to obtain the third sub-data; storing each third sub-data in the blockchain storage node corresponding to the corresponding first sub-data; decrypting and sequentially splicing the node data stored in the corresponding node of the blockchain according to the identity authentication request, to obtain the digital identity information of the Internet of Things requested for authentication. The present invention effectively improves the security of the digital identity information of the Internet of Things.

Description

Technical Field

[0001] The present invention belongs to the technical field of blockchain, and in particular relates to an Internet of Things identity authentication method based on blockchain. Background Art

[0002] Digital identity information refers to the identifiable portrayal of an individual through digital information; it can also be understood as a key that condenses real identity information into a digital code form, so as to bind, query and verify an individual's real-time behavior information. Traditional digital identity information adopts a centralized control and centralized management model, resulting in user identity information being scattered in the hands of authoritative institutions or alliance identity authenticators. It is not ruled out that some institutions use user digital identity information without user authorization. Secondly, user digital identity information is stored on the servers of various companies. Different companies have different levels of attention to data security and different measures, which leads to the leakage of user digital identity information.

[0003] In order to ensure the security of user digital identity information, the existing method of protecting digital identity information security is mainly to use anonymization methods to protect digital identity information by blurring sensitive information. However, the use of anonymization methods is not absolutely safe. If digital identity information is leaked, it will cause huge losses to enterprises and individuals. Summary of the invention

[0004] In view of this, an embodiment of the present invention provides an Internet of Things identity authentication method based on blockchain, which is used to solve the problem that the existing methods for protecting the security of digital identity information cannot effectively ensure the security of digital identity information. Based on blockchain technology, the present invention encrypts the digital identity information divided into multiple sub-data and stores them in the blockchain storage node. When a subsequent identity authentication request is made, the encrypted multiple sub-data stored in the blockchain are decrypted and spliced ​​to obtain the digital identity information, thereby effectively improving the security of the digital identity information of the Internet of Things.

[0005] The embodiment of the present invention provides an Internet of Things identity authentication method based on blockchain, comprising the following steps:

[0006] Divide the IoT digital identity information to be stored into a plurality of first sub-data to obtain a sub-data sequence corresponding to the IoT digital identity information to be stored;

[0007] Specify a blockchain storage node for each first sub-data;

[0008] Adding the location data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence to each first sub-data to obtain the second sub-data corresponding to each first sub-data;

[0009] Encrypt each second sub-data according to a preset encryption algorithm to obtain third sub-data corresponding to each first sub-data;

[0010] Storing each third sub-data in the blockchain storage node corresponding to the corresponding first sub-data;

[0011] According to the identity authentication request, the node data stored in the corresponding node of the blockchain is decrypted to obtain the fourth sub-data corresponding to each node data, and the fifth sub-data recorded in the fourth sub-data is spliced ​​in sequence to obtain the Internet of Things digital identity information requested for authentication; wherein, the identity authentication information includes the location data of the first blockchain storage node of the Internet of Things digital identity information requested for authentication, and the fourth sub-data includes the fifth sub-data and the location data of the next blockchain storage node.

[0012] In an optional embodiment, the step of dividing the IoT digital identity information to be stored into a plurality of first sub-data to obtain a sub-data sequence corresponding to the IoT digital identity information to be stored includes:

[0013] Calculate the number of parts N for this split according to the first formula;

[0014] Determine the number of data bits L of the first sub-data according to the current split number N and the second formula;

[0015] The binary data of the IoT digital identity information to be stored is segmented from the beginning in the form of segmenting each L bits into one sub-data, to obtain a sub-data sequence corresponding to the IoT digital identity information to be stored;

[0016] Among them, the first formula is:

[0017]

[0018] The second formula is:

[0019]

[0020] In the first formula and the second formula, N represents the number of parts divided this time; L is the number of data bits of the first sub-data; D2 represents the binary data of the IoT digital identity information to be stored; len() represents the number of data bits in the brackets; ln[] represents the logarithm of the value in the brackets with the natural constant e as the base; Indicates rounding down.

[0021] In an optional embodiment, if the binary data of the IoT digital identity information to be stored is segmented from the beginning in the form of segmenting each L bits into one sub-data, and the number of remaining undivided bits is less than L, then the remaining undivided bits will be used as the last sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored.

[0022] In an optional embodiment, adding the location data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence to each first sub-data to obtain the second sub-data corresponding to each first sub-data includes:

[0023] According to the third formula, the location data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence is added to each first sub-data to obtain the second sub-data corresponding to each first sub-data;

[0024] Wherein, the third formula is:

[0025]

[0026] In the third formula, d2(a) represents the ath first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored, and its data form is binary form; G2(a) represents the binary form of the second sub-data corresponding to the ath first sub-data; L0 represents a preset fixed value, and L0 is greater than the number of data bits in the binary form of the position data of all storage nodes of the blockchain; Q2(a+1) represents the binary form of the position data of the blockchain storage node corresponding to the a+1th first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored; E2 represents the binary form of the preset stop data; << represents the left shift symbol; N represents the total number of first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored.

[0027] In an optional embodiment, encrypting each second sub-data according to a preset encryption algorithm to obtain the third sub-data corresponding to each first sub-data includes:

[0028] Encrypt each second sub-data according to the fourth formula to obtain third sub-data corresponding to each first sub-data;

[0029] Wherein, the fourth formula is:

[0030]

[0031] In the fourth formula, H2(a) represents the binary form of the third sub-data corresponding to the a-th first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored; G2(a) represents the binary form of the second sub-data corresponding to the a-th first sub-data; Indicates circular left shift; Indicates rounding up; sum[] means finding the total number of digits with a value of 1 in all the digits of the binary data in the brackets.

[0032] In an optional embodiment, the node data stored in the corresponding node of the blockchain is decrypted according to the identity authentication request to obtain the fourth sub-data corresponding to each node data, and the fifth sub-data recorded in the fourth sub-data are sequentially spliced ​​to obtain the IoT digital identity information requested for authentication, including:

[0033] Obtain the location data of the first blockchain storage node of the IoT digital identity information requested for authentication recorded in the identity authentication request;

[0034] Extract the node data stored in the storage node at the location corresponding to the location data of the currently acquired blockchain storage node as the bth node data; wherein the initial value of b is 1;

[0035] Decrypting the b-th node data to obtain fourth sub-data corresponding to the b-th node data;

[0036] Obtain the fifth sub-data in the fourth sub-data corresponding to the b-th node data, and record it as the b-th fifth sub-data corresponding to this identity authentication request;

[0037] Obtain the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data, and determine whether the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data;

[0038] If the position data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is not the preset stop data, b=b+1 is set, and then the step of extracting the node data stored in the storage node at the position corresponding to the position data of the currently acquired blockchain storage node is returned;

[0039] If the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data, then the first to b-th fifth sub-data corresponding to the recorded identity authentication request are connected end to end in sequence to obtain the IoT digital identity information requested for authentication.

[0040] In an optional embodiment, decrypting the b-th node data to obtain fourth sub-data corresponding to the b-th node data includes:

[0041] Decrypt the b-th node data according to the fifth formula to obtain the fourth sub-data corresponding to the b-th node data;

[0042] Wherein, the fifth formula is:

[0043]

[0044] In the fifth formula, F2(b) represents the fourth sub-data corresponding to the b-th node data obtained by decrypting the b-th node data, which is binary data; E2(b) represents the fifth sub-data in the fourth sub-data corresponding to the b-th node data, which is binary data; q2(b+1) represents the binary form of the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data; f2(b) represents the binary form of the b-th node data; Indicates circular right shift; >> indicates right shift;

[0045] Wherein, the determining whether the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data includes:

[0046] The position data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data calculated according to the sixth formula is the determination value of the preset stop data;

[0047] Determine whether the currently calculated judgment value is equal to 1;

[0048] If the currently calculated determination value is equal to 1, it is determined that the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data; otherwise, it is determined that the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is not the preset stop data;

[0049] Wherein, the sixth formula is:

[0050]

[0051] In the sixth formula, K(b) indicates that the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the determination value of the preset stop data.

[0052] The present invention provides a blockchain-based Internet of Things identity authentication method, which first divides the Internet of Things digital identity information into multiple first sub-data, and adds the location data of the next first sub-data in the blockchain storage node to each first sub-data to obtain the second sub-data; then encrypts each second sub-data and stores it in a designated blockchain storage node, and finally decrypts and splices the node data stored in the corresponding node of the blockchain according to the identity authentication request, thereby obtaining the Internet of Things digital identity information requested for authentication. The present invention can utilize blockchain technology, encryption technology and security algorithms to protect the Internet of Things digital identity information, thereby constructing a more secure and convenient digital identity authentication system in the Internet of Things environment, and effectively improving the security of the Internet of Things digital identity information. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0054] Figure 1 A flowchart of an Internet of Things identity authentication method based on blockchain provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0055] The embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0056] It should be clear that the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0057] Figure 1 A flowchart of a blockchain-based IoT identity authentication method provided by an embodiment of the present invention. Figure 1 The method comprises the following steps S101-S106:

[0058] S101: Divide the IoT digital identity information to be stored into a plurality of first sub-data to obtain a sub-data sequence corresponding to the IoT digital identity information to be stored.

[0059] S102: Specify a blockchain storage node for each first sub-data.

[0060] S103: Add the location data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence to each first sub-data, to obtain the second sub-data corresponding to each first sub-data.

[0061] S104: Encrypt each second sub-data according to a preset encryption algorithm to obtain third sub-data corresponding to each first sub-data.

[0062] S105: Store each third sub-data in the blockchain storage node corresponding to the corresponding first sub-data.

[0063] S106: Decrypt the node data stored in the corresponding node of the blockchain according to the identity authentication request to obtain the fourth sub-data corresponding to each node data, and sequentially splice the fifth sub-data recorded in the fourth sub-data to obtain the IoT digital identity information requested for authentication.

[0064] Among them, the identity authentication information includes the location data of the first blockchain storage node of the IoT digital identity information requested for authentication, and the fourth sub-data includes the fifth sub-data and the location data of the next blockchain storage node.

[0065] The beneficial effects of the above technical solution are as follows: an Internet of Things identity authentication method based on blockchain provided by an embodiment of the present invention first divides the digital identity information of the Internet of Things into multiple first sub-data, and adds the location data of the next first sub-data in the blockchain storage node to each first sub-data to obtain the second sub-data; then encrypts each second sub-data and stores it in a designated blockchain storage node, and finally decrypts and splices the node data stored in the corresponding node of the blockchain according to the identity authentication request, thereby obtaining the digital identity information of the Internet of Things requested for authentication. The present invention can utilize blockchain technology, encryption technology and security algorithms to protect the digital identity information of the Internet of Things, thereby constructing a more secure and convenient digital identity authentication system in the Internet of Things environment, and effectively improving the security of the digital identity information of the Internet of Things.

[0066] As an optional embodiment, the step S101 may include the following steps S201-S203:

[0067] S201: Calculate the number of parts N for this segmentation according to the first formula;

[0068] Among them, the first formula is:

[0069]

[0070] In the first formula (1), N represents the number of copies of this division; D2 represents the binary data of the IoT digital identity information to be stored; len() represents the number of bits of the data in the brackets; ln[] represents the logarithm of the value in the brackets with the natural constant e as the base; Indicates rounding down.

[0071] S202: Determine the number of data bits L of the first sub-data according to the current split number N and the second formula;

[0072] The second formula is:

[0073]

[0074] In the second formula (2), L is the number of data bits of the first sub-data.

[0075] In this embodiment, if the binary data of the IoT digital identity information to be stored is segmented from the beginning in the form of segmenting each L bits into one sub-data, and the number of remaining unsegmented bits is less than L, the remaining unsegmented bits are used as the last sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored, thereby ensuring data consistency to the greatest extent and facilitating improving computing efficiency.

[0076] S203: Segment the binary data of the IoT digital identity information to be stored into sub-data in the form of segmenting each L bits from the beginning to obtain a sub-data sequence corresponding to the IoT digital identity information to be stored.

[0077] The beneficial effect of the above technical solution is: using the first formula (1) and the second formula (2), the digital identity information is segmented into multiple sub-data according to its own characteristics, which is convenient for subsequent encryption at the designated blockchain storage node location to ensure the reliability of encryption.

[0078] As an optional embodiment, step S103 may include: adding the location data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence to each first sub-data according to the third formula to obtain the second sub-data corresponding to each first sub-data;

[0079] Wherein, the third formula is:

[0080]

[0081] In the third formula, d2(a) represents the ath first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored, and its data form is binary form; G2(a) represents the binary form of the second sub-data corresponding to the ath first sub-data; L0 represents a preset fixed value, and L0 is greater than the number of data bits in the binary form of the position data of all storage nodes of the blockchain; Q2(a+1) represents the binary form of the position data of the blockchain storage node corresponding to the a+1th first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored; E2 represents the binary form of the preset stop data; << represents the left shift symbol; N represents the total number of first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored.

[0082] The beneficial effect of the above technical solution is: using the third formula (3) according to the order of each sub-data, the location data of the blockchain storage node corresponding to the next sub-data in the order is added to each sub-data, so that the data are linked together, and the data can be quickly extracted and combined on the basis of ensuring the security of the data.

[0083] As an optional embodiment, the step S104 may include: encrypting each second sub-data according to the fourth formula to obtain third sub-data corresponding to each first sub-data;

[0084] Wherein, the fourth formula is:

[0085]

[0086] In the fourth formula, H2(a) represents the binary form of the third sub-data corresponding to the a-th first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored; G2(a) represents the binary form of the second sub-data corresponding to the a-th first sub-data; Indicates circular left shift; Indicates rounding up; sum[] means finding the total number of digits with a value of 1 in all the digits of the binary data in the brackets.

[0087] The beneficial effect of the above technical solution is: the sub-data of the location data of each added blockchain storage node is encrypted through a security algorithm using the fourth formula (4), thereby ensuring the security of the data.

[0088] As an optional embodiment, the step S106 may include the following steps S301-S307:

[0089] S301: Obtain the location data of the first blockchain storage node of the IoT digital identity information requested for authentication recorded in the identity authentication request;

[0090] S302: extracting the node data stored in the storage node at the position corresponding to the position data of the currently acquired blockchain storage node as the bth node data; wherein the initial value of b is 1;

[0091] S303: decrypt the b-th node data to obtain fourth sub-data corresponding to the b-th node data;

[0092] Preferably, this step S303 may include: decrypting the b-th node data according to the fifth formula to obtain fourth sub-data corresponding to the b-th node data;

[0093] Wherein, the fifth formula is:

[0094]

[0095] In the fifth formula, F2(b) represents the fourth sub-data corresponding to the b-th node data obtained by decrypting the b-th node data, which is binary data; E2(b) represents the fifth sub-data in the fourth sub-data corresponding to the b-th node data, which is binary data; q2(b+1) represents the binary form of the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data; f2(b) represents the binary form of the b-th node data; Indicates circular right shift; >> indicates right shift.

[0096] S304: Obtain the fifth sub-data in the fourth sub-data corresponding to the b-th node data, and record it as the b-th fifth sub-data corresponding to this identity authentication request;

[0097] S305: Obtain the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data, and determine whether the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data; otherwise, execute step S306; if yes, execute step S307;

[0098] S306: Set b=b+1, and then return to step S302;

[0099] S307: Connect the first to the bth fifth sub-data corresponding to the recorded identity authentication request in sequence to obtain the IoT digital identity information requested for authentication, and then restore b to its initial value for next use.

[0100] Preferably, the step S305 of determining whether the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data may include the following steps S401-S404:

[0101] S401: Calculating, according to the sixth formula, whether the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is a determination value of the preset stop data;

[0102] S402: Determine whether the currently calculated determination value is equal to 1; if yes, execute step S403; otherwise, execute step S404;

[0103] S403: Determine that the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data;

[0104] S404: Determine that the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is not the preset stop data;

[0105] Wherein, the sixth formula is:

[0106]

[0107] In the sixth formula, K(b) indicates that the position data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the determination value of the preset stop data, K(b)=1, indicating that the position data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data, and K(b)=0 indicates that the position data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is not the preset stop data.

[0108] The beneficial effects of the above technical solution are: using the fifth formula (5) to decrypt the extracted node data and extract the corresponding node sub-data and the next node position data, so as to quickly extract the data according to the characteristics of data association; finally, using the sixth formula (6) to judge the next node position data extracted each time, to judge whether to stop the data extraction, to ensure that the extracted data is accurate, fast and reliable.

[0109] From the content of the above embodiment, it can be seen that the embodiment of the present invention utilizes blockchain technology, and uses encryption technology and security algorithms to protect digital identity information, thereby constructing a more secure and convenient digital identity authentication system under the Internet of Things environment; specifically: the digital identity information is first divided into multiple sub-data according to its own characteristics, and then the node position of each sub-data stored in the blockchain is preferentially specified, and then the node position information of the next sub-data in sequence is added to each sub-data according to the order of each sub-data, and each sub-data to which the node position information is added is encrypted by a security algorithm. If the digital identity information is to be called, it is necessary to preferentially input the node position of the first sub-data and then extract the first node data according to the node position, then decrypt the first node data and extract the first node sub-data and the second node position data, and extract the second node data according to the node position of the next node position data, then decrypt again and obtain the second node sub-data and the next node position data, and so on until the next node position data obtained is the preset stop data, and finally each node sub-data obtained is connected head to tail in the order obtained to obtain the digital identity information, thereby protecting the digital identity information from being affected and ensuring the security of the information.

[0110] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 An apparatus for the method specified in one or more blocks.

[0111] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 The method specified in one or more boxes.

[0112] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps of a method specified in one or more boxes.

[0113] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these changes and variations. The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by those skilled in the art within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A blockchain-based Internet of Things identity authentication method, characterized in that: The following steps are involved: Divide the IoT digital identity information to be stored into a plurality of first sub-data to obtain a sub-data sequence corresponding to the IoT digital identity information to be stored; Specify a blockchain storage node for each first sub-data; Adding the location data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence to each first sub-data to obtain the second sub-data corresponding to each first sub-data; Encrypt each second sub-data according to a preset encryption algorithm to obtain third sub-data corresponding to each first sub-data; Storing each third sub-data in the blockchain storage node corresponding to the corresponding first sub-data; Decrypt the node data stored in the corresponding node of the blockchain according to the identity authentication request to obtain the fourth sub-data corresponding to each node data, and sequentially splice the fifth sub-data recorded in the fourth sub-data to obtain the IoT digital identity information requested for authentication; wherein the identity authentication request includes the location data of the first blockchain storage node of the IoT digital identity information requested for authentication, and the fourth sub-data includes the fifth sub-data and the location data of the next blockchain storage node; The step of dividing the IoT digital identity information to be stored into a plurality of first sub-data to obtain a sub-data sequence corresponding to the IoT digital identity information to be stored includes: Calculate the number of parts N for this split according to the first formula; Determine the number of data bits L of the first sub-data according to the current split number N and the second formula; The binary data of the IoT digital identity information to be stored is segmented from the beginning in the form of segmenting each L bits into one sub-data, to obtain a sub-data sequence corresponding to the IoT digital identity information to be stored; Among them, the first formula is: The second formula is: In the first formula and the second formula, N represents the number of parts divided this time; L is the number of bits of the first sub-data; D2 represents the binary data of the IoT digital identity information to be stored; len() represents the number of bits of data in the brackets; ln[] represents the logarithm of the value in the brackets with the natural constant e as the base; Indicates rounding down.

2. The blockchain-based IoT identity authentication method according to claim 1, characterized in that: If the binary data of the IoT digital identity information to be stored is segmented from the beginning in the form of segmenting each L bits into one sub-data, and the number of remaining undivided bits is less than L, then the remaining undivided bits will be used as the last sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored.

3. The blockchain-based IoT identity authentication method according to claim 1, characterized in that: The adding the location data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence to each first sub-data to obtain the second sub-data corresponding to each first sub-data includes: According to the third formula, the location data of the blockchain storage node corresponding to the next first sub-data in the sub-data sequence is added to each first sub-data to obtain the second sub-data corresponding to each first sub-data; Wherein, the third formula is: In the third formula, d2(a) represents the ath first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored, and its data form is binary form; G2(a) represents the binary form of the second sub-data corresponding to the ath first sub-data; L0 represents a preset fixed value, and L0 is greater than the number of data bits in the binary form of the position data of all storage nodes of the blockchain; Q2(a+1) represents the binary form of the position data of the blockchain storage node corresponding to the a+1th first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored; E2 represents the binary form of the preset stop data; << represents the left shift symbol; N represents the total number of first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored.

4. The blockchain-based IoT identity authentication method according to claim 3, characterized in that: The step of encrypting each second sub-data according to a preset encryption algorithm to obtain third sub-data corresponding to each first sub-data includes: Encrypt each second sub-data according to the fourth formula to obtain third sub-data corresponding to each first sub-data; Wherein, the fourth formula is: In the fourth formula, H2(a) represents the binary form of the third sub-data corresponding to the a-th first sub-data in the sub-data sequence corresponding to the IoT digital identity information to be stored; G2(a) represents the binary form of the second sub-data corresponding to the a-th first sub-data; Indicates circular left shift; Indicates rounding up; sum[] means finding the total number of digits with a value of 1 in all the digits of the binary data in the brackets.

5. The blockchain-based IoT identity authentication method according to claim 4, characterized in that: The node data stored in the corresponding node of the blockchain is decrypted according to the identity authentication request to obtain the fourth sub-data corresponding to each node data, and the fifth sub-data recorded in the fourth sub-data are sequentially spliced ​​to obtain the IoT digital identity information requested for authentication, including: Obtain the location data of the first blockchain storage node of the IoT digital identity information requested for authentication recorded in the identity authentication request; Extract the node data stored in the storage node at the location corresponding to the location data of the currently acquired blockchain storage node as the bth node data; wherein the initial value of b is 1; Decrypting the b-th node data to obtain fourth sub-data corresponding to the b-th node data; Obtain the fifth sub-data in the fourth sub-data corresponding to the b-th node data, and record it as the b-th fifth sub-data corresponding to this identity authentication request; Obtain the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data, and determine whether the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data; If the position data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is not the preset stop data, b=b+1 is set, and then the step of extracting the node data stored in the storage node at the position corresponding to the position data of the currently acquired blockchain storage node is returned; If the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data, then the first to b-th fifth sub-data corresponding to the recorded identity authentication request are connected end to end in sequence to obtain the IoT digital identity information requested for authentication.

6. The blockchain-based IoT identity authentication method according to claim 5, characterized in that: The decrypting the b-th node data to obtain fourth sub-data corresponding to the b-th node data includes: Decrypt the b-th node data according to the fifth formula to obtain the fourth sub-data corresponding to the b-th node data; Wherein, the fifth formula is: In the fifth formula, F2(b) represents the fourth sub-data corresponding to the b-th node data obtained by decrypting the b-th node data, which is binary data; E2(b) represents the fifth sub-data in the fourth sub-data corresponding to the b-th node data, which is binary data; q2(b+1) represents the binary form of the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data; f2(b) represents the binary form of the b-th node data; Indicates circular right shift; >> indicates right shift; Wherein, the determining whether the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data includes: The position data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data calculated according to the sixth formula is the determination value of the preset stop data; Determine whether the currently calculated judgment value is equal to 1; If the currently calculated determination value is equal to 1, it is determined that the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the preset stop data; otherwise, it is determined that the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is not the preset stop data; Wherein, the sixth formula is: In the sixth formula, K(b) indicates that the location data of the next blockchain storage node recorded in the fourth sub-data corresponding to the b-th node data is the determination value of the preset stop data.

Images