A system for implementing trusted interaction of intelligent devices by distributed network identification

Abstract

The application discloses a kind of distributed network identification system for realizing trusted interaction of intelligent equipment, including trusted authentication of distributed identifier and trusted verification of point-to-point interaction.The application belongs to the technical field of network interaction, specifically a kind of distributed network identification system for realizing trusted interaction of intelligent equipment, the trusted authentication of distributed network identification is the important guarantee for the trusted interaction of equipment, etc., needs to complete the authentication process from node authentication to distributed network identification;At the same time, the trusted authentication node of blockchain is an important participant in the trusted authentication process of distributed network identification, and the authentication and authentication certificate storage of distributed network identification by the trusted authentication node provide the advantages of de-trust, traceability and tamper resistance for the trusted authentication of distributed network identification;Finally, the point-to-point trusted interaction process uses blockchain technology, solves the trust and management cost problems caused by traditional centralized third-party institutions, and provides security for interaction.

Description

Technical Field

[0001] This invention belongs to the field of network interaction technology, specifically referring to a system for enabling trusted interaction between smart devices using distributed network identifiers. Background Technology

[0002] Trusted interaction of distributed network identifiers is a crucial component of the industrial internet security system, an essential facility for establishing decentralized trust models, and a key research area for addressing trust issues in industrial internet device interactions. The trusted interaction system for industrial internet identifiers primarily consists of trusted authentication of distributed identifiers and peer-to-peer trusted interaction. Distributed identifiers act as a device's "ID card," possessing global uniqueness and encryption capabilities. Utilizing technologies such as blockchain, the trusted interaction system for industrial internet identifiers performs trusted authentication and identity verification, providing crucial safeguards against data silos, centralized security issues, and trusted device interaction problems, laying the foundation for realizing the Internet of Things.

[0003] The overall goal of my country's industrial internet development is to initially establish an industrial internet infrastructure and industrial system by the end of 2020. One of the key tasks in achieving this goal is to enhance the level of security. Therefore, trusted interaction of industrial internet identifiers, as an important component of the industrial internet security system, has become an important research point for achieving the development goal.

[0004] Currently, trusted interaction of distributed network identifiers, in scenarios of trusted authentication of distributed network identifiers between devices and trusted interaction between devices, mainly relies on traditional centralized authentication methods. Centralized authentication methods establish trust relationships between entities on trust anchors. While this approach solves many real-world problems, its shortcomings are also obvious. In addition to requiring unconditional trust anchors with high requirements for their honesty and security, this model, which depends on a central node, severely limits the flexibility of applications for complex trust relationships in the real world.

[0005] Taking the home appliance industry as an example, suppose there are two home appliances, A and B. To achieve interconnection, whether it is the trusted authentication of their distributed network identifiers or the trusted interaction between the devices, the traditional approach relies on centralized third-party institutions. This not only poses risks of privacy leaks and operational termination, but also increases the management costs of centralized institutions for the large number of authentication and interaction needs of users. Summary of the Invention

[0006] To address the aforementioned issues and overcome the shortcomings of existing technologies, this invention proposes a system for trusted interaction between smart devices using distributed network identifiers. This invention is based on distributed network identifiers, with blockchain nodes and trusted authentication nodes acting as key participants in trusted device interaction. The trusted authentication nodes are direct participants in the distributed network identifier authentication of devices, providing decentralized authentication. After device authentication and trusted distributed network identifier authentication, trusted authentication of the device is completed. The trusted authentication node provides a trusted authentication certificate to the device and writes the information into the blockchain. Furthermore, trusted interaction between cross-domain devices no longer relies on centralized third-party institutions but directly achieves point-to-point trusted interaction. Besides relying on smart contracts to mutually verify each other's identities and permissions, the transmission of encrypted interaction information ensures the security and trustworthiness of the cross-domain interaction process. Through this invention, not only is the business scenario value of devices based on distributed network identifiers realized, but the security of inter-device interaction is also maximized, achieving the goal of secure and effective interconnection of devices.

[0007] The technical solution adopted by this invention is as follows: This invention proposes a trusted interaction between devices based on distributed identifiers, including trusted authentication of distributed identifiers and trusted verification of peer-to-peer interaction. The trusted authentication of distributed identifiers includes completing trusted authentication of distributed network identifiers, node authentication process, and trusted authentication process of distributed network identifiers. The trusted verification of peer-to-peer interaction includes trusted interaction between devices based on distributed network identifiers and trusted verification process of peer-to-peer interaction. The trusted authentication of distributed identifiers mainly refers to completing the trusted authentication process from node authentication to distributed network identifier authentication; the trusted verification of peer-to-peer interaction refers to completing the verification of device identity and trusted verification of content interaction between devices.

[0008] Furthermore, the trusted authentication of the distributed network identifier includes the following steps:

[0009] Step 1.1: From node authentication to distributed network identifier authentication, complete the trusted authentication of the distributed network identifier:

[0010] Trusted authentication of distributed network identifiers includes node authentication and the distributed network identifier authentication process. It is one of the main features of the secure and trusted protection method for distributed network identifiers and a prerequisite for secure device interaction. Before ensuring trusted interaction between devices, trusted authentication of the device identity and its distributed network identifier should be completed.

[0011] a) To complete the authentication of device identity and ensure its trustworthiness, so as to ensure that other devices can verify its identity when interacting with each other;

[0012] b) Implement trusted authentication of distributed network identifiers and grant corresponding authentication certificates to trusted distributed network identifiers for subsequent verification;

[0013] c) Nodes participating in device identity authentication should be trusted, and nodes participating in distributed network identity authentication should be trusted;

[0014] d) The identity verification information of the authenticated distributed network identifier should be stored on a blockchain to ensure its immutability and traceability of updates. The trusted authentication information of the distributed network identifier should be stored on the blockchain.

[0015] While current industrial internet-based trusted authentication methods have solved many real-world problems, their centralized authentication model requires an unconditional trust anchor. Besides demanding high levels of honesty and security, this reliance on a central node severely limits application flexibility given the complex trust relationships in the real world. Therefore, utilizing trusted authentication nodes in a blockchain to complete the distributed identification of devices is one of the highlights of this invention.

[0016] Step 1.2: Node Authentication Process:

[0017] a) This method focuses on node, enterprise, or user identity authentication. Using blockchain nodes as the root of trust, it completes a multi-layered authentication process where trusted blockchain authentication nodes directly authenticate user identities, ultimately achieving enterprise or user identity authentication. During the authentication process, lower-level nodes submit identity materials to upper-level nodes, which then verify them, completing the enterprise or user authentication process. The specific authentication process is as follows: Each blockchain node self-signs a root certificate, which is the root of trust for the entire chain. Each block stores the identity information of the blockchain node.

[0018] b) The trusted authentication node submits its public key, organization code, and other verification information to the blockchain node, which then completes the application for trusted authentication permissions. The blockchain node first confirms the identity information of the authentication node, then signs the public key of the authentication node with its private key, issues a certificate to the authentication node to prove that its identity is trustworthy, and finally writes the information into the blockchain.

[0019] c) Enterprises or users submit enterprise information, site information and their public keys to trusted authentication nodes. The trusted authentication nodes complete the trusted authentication of enterprises or users. After confirming their identity, the trusted authentication nodes use their private keys to sign the public keys of the enterprise or user nodes and issue corresponding authentication certificates to prove that their identity is trustworthy. Finally, the information is written into the blockchain.

[0020] d) Blockchain nodes have the authority to authorize other nodes to act as authentication nodes. Other nodes submit their public keys to the blockchain node, which then verifies the public key using its private key and issues a certificate. For example, when other nodes are quality authentication nodes, they can be used to provide quality authentication services.

[0021] Step 1.3: Distributed Network Identity Trusted Authentication Process:

[0022] This method primarily revolves around trusted authentication of nodes' distributed network identifiers. The trusted authentication of these distributed network identifiers is issued by trusted authentication nodes within the blockchain. The specific implementation process is as follows:

[0023] a) Users apply for a distributed identifier authentication certificate from a trusted authentication node and submit the signed distributed network identifier and its authentication materials;

[0024] b) Trusted authentication nodes verify the user and distributed network identification information stored on the blockchain;

[0025] c) Upon successful verification, a distributed network identifier authentication certificate is generated by the trusted authentication node;

[0026] d) The trusted authentication node signs the certificate and issues it to the user;

[0027] e) The user verifies the authenticity of the trusted authentication certificate and signs it;

[0028] f) The user saves the signed authentication certificate to the blockchain;

[0029] g) The blockchain returns a list of certified entities to the user for searching.

[0030] Furthermore, the trusted verification of the peer-to-peer interaction includes the following steps:

[0031] Step 2.1: Trusted interaction between devices based on distributed network identifiers:

[0032] Trusted interaction between devices no longer relies on traditional centralized methods but instead engages in direct peer-to-peer interaction. To achieve trusted interaction between devices, the following effects should be achieved:

[0033] a) The distributed network identifiers of both devices should be verified in a trusted manner to ensure the credibility of their identities;

[0034] b) Devices can set permissions for their own identity information and interactive content, allowing them to control how much information to share in a specific context;

[0035] c) For cross-domain interactive information, the interaction process must be secure and reliable.

[0036] Traditional trusted interaction between devices relies on a centralized model. Trust relationships between entities are established based on trust anchors, which form the source and build a trust transmission tree. This approach places high demands on the honesty and security of the trust anchors, and lacks flexibility in the face of the complex trust relationships in the world. Therefore, the aforementioned point-to-point direct interaction based on distributed network identifiers is one of the highlights of this invention.

[0037] Step 2.2: Trusted verification process for peer-to-peer interaction:

[0038] This method utilizes distributed network identifiers and trusted authentication certificates to achieve trusted interaction between devices. The specific implementation process is as follows:

[0039] a) Device A sends an interaction request to Device B and submits a certificate allowing interaction;

[0040] b) Upon receiving the message, device B sends a request to the blockchain to find device A's authentication certificate;

[0041] c) The blockchain returns the authentication certificate of device A to device B;

[0042] d) Upon receiving the certificate, Device B verifies the identity information, such as the distributed network identifier, in Device A's certificate;

[0043] e) After successful verification, device B responds to device A's interaction request and submits an interaction permission certificate;

[0044] f) Upon receiving the message, device A sends a request to the blockchain to find the authentication certificate of device B;

[0045] g) The blockchain returns the authentication certificate of device B to device A;

[0046] h) After successful verification, device A receives a response from device B.

[0047] In the above process, while performing distributed network identifier trusted authentication between devices, each device sets information about its interaction partners, interaction content, and permissions in its DID document. When devices interact across domains, both parties use smart contracts to verify each other's identity and permissions, and then transmit encrypted interaction information to the other party, ensuring the security and trustworthiness of information during the interaction process.

[0048] In addition, the certificates issued in step 1.2 are all stored in the blockchain.

[0049] The beneficial effects achieved by the present invention using the above structure are as follows: This solution proposes a system for trusted interaction of intelligent devices using distributed network identifiers. The specific scenario for trusted interaction of distributed network identifiers is as follows: In an industrial sector, for a series of devices to perform trusted interaction, node authentication and distributed network identifier authentication must first be completed. Node authentication begins with the root of trust formed by blockchain nodes, completing the trusted authentication authorization of trusted authentication nodes in the blockchain. Then, the device applies for trusted authentication from the authentication node, submitting site information and its public key. After verifying the identity, the authentication node issues an authentication certificate to the device. After completing node authentication, trusted authentication is performed on the distributed network identifier of the device. The device submits a distributed network identifier trusted authentication application and a signed distributed network identifier and its authentication materials to the trusted authentication node. The trusted authentication node verifies the evidence storage device and distributed network identifier information on the blockchain. After successful verification, it generates a distributed network identifier authentication certificate, signs it, and issues it to the device. During the device interaction phase, the distributed network identifier of the device is first trusted to ensure its trustworthiness. The information of the interaction object, the interaction content, and the permissions are set in their respective DID documents. When the devices perform cross-domain interaction, they verify each other's identity and permissions through smart contracts. The two parties then transmit encrypted interaction information to ensure that the cross-domain interaction process is secure and trustworthy.

[0050] Throughout the process, the following points need to be noted: First, the authentication of the distributed network identifier consists of two parts: node authentication and distributed network identifier authentication. The purpose of node authentication is to ensure that the identity and permissions of nodes can be verified through authentication certificates during interactions between nodes, thus ensuring the trustworthiness of the authenticated nodes, enterprises, or users. Second, the storage of authentication certificates: Whether in the distributed network identifier trusted authentication process or the peer-to-peer trusted interaction process, the authentication certificates obtained by participating nodes should be stored in the blockchain so that anyone can use the issuer's public key to verify the authenticity of the certificate, and then use the public key in the certificate to verify the user's signature and confirm their identity.

[0051] In addition, in this invention, the formation of trusted authentication nodes participating in distributed network identifier authentication is achieved by the authentication node in the blockchain submitting identity materials to the blockchain node and applying for trusted authentication permissions, which are then approved by the blockchain node. The blockchain node can also authorize other nodes as authentication nodes. For example, when other nodes are quality authentication nodes, they can be used to provide quality authentication services. Attached Figure Description

[0052] Figure 1 This is a diagram illustrating the overall framework of a distributed network identifier trusted interaction system for realizing trusted interaction between smart devices, as proposed in this invention.

[0053] Figure 2 This invention presents a flowchart of the node authentication process for a system that enables trusted interaction between smart devices using distributed network identifiers.

[0054] Figure 3 This invention presents a flowchart of a distributed network identifier trusted authentication system for enabling trusted interaction between smart devices.

[0055] Figure 4 This is a flowchart illustrating the trusted verification process for point-to-point interaction in a system for trusted interaction between smart devices using distributed network identifiers, as proposed in this invention. Detailed Implementation

[0056] The technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0057] Example 1:

[0058] Taking the home appliance industry as an example, it involves home appliance A and home appliance B. As smart home appliances, they need to achieve interconnection. Assume that home appliance A and home appliance B have completed the generation of distributed network identifiers, that is, they have unique distributed identifiers ZID and DID documents. Their attributes can be verified through the distributed network identifiers. The distributed identifier code assigned to home appliance A is X, and the distributed identifier code assigned to home appliance B is Y.

[0059] For appliance A and appliance B to interact, they must first undergo node authentication. The blockchain node, acting as a trust anchor, authorizes the trusted authentication node in the blockchain with trusted authentication permissions. Appliance A and appliance B submit their site information and public keys to the trusted authentication node. After the trusted authentication node confirms the identities of appliance A and appliance B, it issues authentication certificates to them respectively. Appliance A and appliance B then store the certificates in the blockchain.

[0060] After completing node authentication, home appliances A and B need to submit a distributed network identifier trusted authentication application to the trusted authentication node, and submit the signed distributed network identifiers X and Y and the corresponding authentication materials. The trusted authentication node verifies the information of X and Y based on the evidence stored on the blockchain. After the verification is successful, it issues a signed distributed network identifier authentication certificate to home appliances A and B. Home appliances A and B save the certificate to the blockchain.

[0061] After distributed network identifier authentication is completed, appliance A sends an interaction request to appliance B and sets the information, interaction content, and permissions of its interaction object in appliance A's DID document. Simultaneously, appliance B sets the information, interaction content, and permissions of its interaction object in appliance B's DID document. B checks A's authentication certificate; if the verification is successful, B responds to A's interaction request and submits a certificate allowing interaction. Upon receiving the message, A checks B's authentication certificate; if the verification is successful, A receives B's response.

[0062] After verifying the identities and permissions of home appliances A and B, home appliances A and B exchange encrypted interactive information to complete point-to-point data interaction.

[0063] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

[0064] The present invention and its embodiments have been described above. This description is not restrictive, and the accompanying drawings are only one embodiment of the present invention; the actual structure is not limited thereto. In conclusion, if those skilled in the art are inspired by this description and design similar structures and embodiments without departing from the spirit of the invention, such designs should fall within the protection scope of the present invention.

Claims

1. A method for achieving trusted interaction between devices based on distributed identifiers, characterized in that: It includes trusted authentication of distributed identifiers and trusted verification of peer-to-peer interactions. The trusted authentication of distributed identifiers includes a node authentication process and a trusted authentication process of distributed network identifiers. The trusted verification of peer-to-peer interactions includes trusted interactions between devices based on distributed network identifiers and trusted verification processes for peer-to-peer interactions. The node authentication and distributed network identifier authentication processes constitute the trusted authentication of distributed network identifiers. Trusted authentication of distributed network identifiers is one of the characteristics of the secure and trusted protection method of distributed network identifiers, and it is also a prerequisite for secure device interaction. Before ensuring trusted interaction between devices, trusted authentication of the device identity and its distributed network identifier should be completed. The identity verification information of the authenticated distributed network identifier should be stored on the blockchain to ensure that it is tamper-proof and that the update record is traceable. Step 1.1: Node Authentication Process: a) This method focuses on node, enterprise, or user identity in node authentication. With the blockchain node as the root of trust, it completes a multi-level authentication process in which the trusted authentication node of the blockchain directly completes the user identity authentication, and the trust relationship is passed down layer by layer. In the end, the identity authentication of the enterprise or user is realized. In the authentication process, the lower-level node submits identity materials to the upper-level node, and the upper-level node verifies them, and finally completes the authentication process of the enterprise or user. The specific authentication process is as follows: The blockchain node self-signs a root certificate, which is the root of trust of the entire chain. The identity information of the blockchain node is stored in each block. b) The trusted authentication node submits its public key and organization code verification information to the blockchain node, which then completes the application for its trusted authentication authority. The blockchain node first verifies the identity information of the authentication node, then signs the authentication node's public key with its private key, issues a certificate to the authentication node to prove that its identity is trustworthy, and finally writes the information into the blockchain. c) Enterprises or users submit enterprise information, site information and their public keys to trusted authentication nodes. The trusted authentication nodes complete the trusted authentication of enterprises or users. After confirming their identity, the trusted authentication nodes use their private keys to sign the public keys of the enterprise or user nodes and issue corresponding authentication certificates to prove that their identity is trustworthy. Finally, the information is written into the blockchain. d) Blockchain nodes have the authority to authorize other nodes to act as authentication nodes. Other nodes submit public keys to the blockchain node. After the blockchain node completes the verification, it signs the submitted public key with its private key and issues a certificate. When other nodes are quality authentication nodes, they are used to provide quality authentication services. Step 1.2: Distributed Network Identity Trusted Authentication Process: This method revolves around trusted authentication of nodes based on their distributed network identifiers. The trusted authentication of these distributed network identifiers is issued by trusted authentication nodes in the blockchain. The specific implementation process is as follows: a) Users apply for a distributed identifier authentication certificate from a trusted authentication node and submit the signed distributed network identifier and its authentication materials; b) Trusted authentication nodes verify the user and distributed network identification information stored on the blockchain; c) Upon successful verification, a distributed network identifier authentication certificate is generated by the trusted authentication node; d) The trusted authentication node signs the certificate and issues it to the user; e) The user verifies the authenticity of the trusted authentication certificate and signs it; f) The user saves the signed authentication certificate to the blockchain, which serves as a credible proof of the distributed network identifier's authentication information. g) The blockchain returns a list of certified entities to the user for lookup; The trusted verification of the peer-to-peer interaction includes the following steps: Step 2.1: Trusted interaction between devices based on distributed network identifiers: a) The distributed network identifiers of both devices should be verified in a trusted manner to ensure the credibility of their identities; b) Devices set permissions for their own identity information and interactive content to control how much information should be shared in a specific context; c) For cross-domain interactive information, the interaction process must be guaranteed to be secure and reliable; Step 2.2: Trusted verification process for peer-to-peer interaction: This method utilizes distributed network identifiers and trusted authentication certificates to achieve trusted interaction between devices. The specific implementation process is as follows: a) Device A sends an interaction request to Device B and submits a certificate allowing interaction; b) Upon receiving the message, device B sends a request to the blockchain to find the authentication certificate of device A; c) The blockchain returns the authentication certificate of device A to device B; d) Upon receiving the certificate, Device B verifies the identity information of the distributed network identifier in Device A's certificate; e) After successful verification, device B responds to device A's interaction request and submits an interaction permission certificate; f) Upon receiving the message, device A sends a request to the blockchain to find the authentication certificate of device B; g) The blockchain returns the authentication certificate of device B to device A; h). After successful verification, device A receives a response from device B.

2. The method for trusted interaction between devices based on distributed identifiers according to claim 1, characterized in that: The certificates issued in step 1.2 are all stored in the blockchain.

Images