A method, device, electronic device and computer-readable storage medium for wireless terminal registration authorization verification

Abstract

The present invention discloses a method for wireless terminal registration authorization verification, which relates to the technical field of authorization verification, and includes: registering the wireless terminal to the blockchain through a unique identifier, establishing a block for the wireless terminal and storing it distributively among fog nodes, and issuing a certificate for the wireless terminal through the fog nodes; generating a registration token for the wireless terminal through the certificate and the private key, completing identity verification through the registration token, and then generating a registration certificate through the fog node and sending the registration certificate to the wireless terminal to complete the registration of the wireless terminal; the fog node performs identity verification on each wireless terminal, the wireless terminal sends the registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal; the present invention can solve the problem of low data integrity in registration authorization verification in the existing solution and can also improve privacy.

Description

Technical Field

[0001] The present invention relates to the technical field of authorization verification, and particularly to a method, device, electronic device and computer-readable storage medium for wireless terminal registration authorization verification. Background Art

[0002] The prior art (a patent for invention with the publication number of CN109858202A) discloses a secure and confidential offline software registration authorization method, which can uniformly manage the registration information of authorized software at the management end, and is physically isolated from the host throughout the process, avoiding the security risks of direct contact between the storage medium and the confidential machine during the authorization process. A secure and confidential offline software registration authorization method includes: when software needs to be registered and authorized, obtaining a unique device identifier for special splicing, generating a registration QR code through reversible and irreversible encryption, using a physical device to locally parse and identify the QR code, the management end decrypts and then encrypts it with a private algorithm to generate a registration code, and the software enters the registration code for registration verification and authorization; when the software needs to be migrated or the hardware device is replaced, an unregistration QR code is generated through encryption, using a physical device to locally parse and identify the QR code, the management end parses and recovers the software authorization, and after success, the hardware device can be migrated or replaced, and re-registration is required to use it again. The prior art cannot solve the problem of low integrity of registration authorization verification data in the existing solution during the process, and cannot improve privacy. Summary of the Invention

[0003] The present invention aims to at least solve one of the technical problems existing in the prior art; for this purpose, the present invention provides a method, device and computer-readable storage medium for wireless terminal registration authorization verification, which can solve the problem of low integrity of registration authorization verification data in the existing solution and can also improve privacy.

[0004] To achieve the above object, the first aspect of the present invention provides a method for wireless terminal registration authorization verification, including:

[0005] Registering the wireless terminal to the blockchain through a unique identifier, creating a block for the wireless terminal and storing it distributively among fog nodes, and issuing a certificate for the wireless terminal through the fog nodes;

[0006] Generating a registration token for the wireless terminal through the certificate and the private key, completing identity verification through the registration token, and then generating a registration certificate through the fog node, and sending the registration certificate to the wireless terminal to complete the registration of the wireless terminal;

[0007] The fog node verifies the identity of each wireless terminal, the wireless terminal sends the registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the wireless terminal registration authorization verification;

[0008] Registering the wireless terminal to the blockchain through a unique identifier, creating a block for the wireless terminal and storing it distributively among fog nodes, and issuing a certificate for the wireless terminal through the fog nodes, includes:

[0009] Set a unique identifier SID, and the wireless terminal initiates a transaction T1 to send the unique identifier SID to the fog node F. The expression is:

[0010] T1 = FPK(SID)

[0011] Where T1 represents the transaction result, and FPK represents the public key of the fog node;

[0012] The fog node F verifies the transaction T1 through a smart contract. If it determines that the unique identifier SID has not been used in the blockchain, then the transaction T1 passes the smart contract verification;

[0013] The fog node creates a first new block and stores it distributively on the fog node F;

[0014] The fog node F generates a certificate for the unique identifier SID through its private key FIK, and initiates a transaction T2 to send the certificate to the wireless terminal. The expression is:

[0015] T2 = SPK(FIK(SID))

[0016] Where T2 represents the transaction result, and SPK represents the private key of the wireless terminal;

[0017] The wireless terminal extracts the certificate through its private key SIK;

[0018] Generating a registration token for the wireless terminal through the certificate and the private key, completing identity authentication through the registration token, and then generating a registration certificate through the fog node and sending the registration certificate to the wireless terminal to complete the registration of the wireless terminal, includes:

[0019] Generate a registration token ERT through the private key EIK. The wireless terminal initiates a transaction T3 to send the registration token ERT and the certificate to the fog node F. The expression is:

[0020] T3 = FPK(EIK(EID, EIP, SID), FIK(SID))

[0021] T3 represents the transaction result, EID represents the wireless terminal ID, and EIP represents the public address of the wireless terminal;

[0022] The fog node F verifies the transaction T3 through a smart contract, checks the wireless terminal ID and the unique identifier SID through the smart contract. If the unique identifier SID has a legal record on the blockchain and the wireless terminal ID has not been used, the smart contract checks the public key EPK. If EPK = EIP, the wireless terminal passes the authentication of the smart contract;

[0023] The fog node creates a second block containing the public address EIP of the wireless terminal, the wireless terminal ID and the unique identifier SID, and stores it distributively on the fog node F;

[0024] The fog node F generates a registration certificate through the public address EIP of the wireless terminal, the wireless terminal ID and the unique identifier SID. The wireless terminal initiates a transaction T4, and the expression is:

[0025] T4 = EPK(FIK(SID, EIP, EID))

[0026] Among them, T4 represents the transaction result;

[0027] Send the registration certificate to the wireless terminal to complete the registration of the wireless terminal.

[0028] Preferably, the public key EPK includes: the wireless terminal receives the registration certificate from the fog node F and shares it with other wireless terminals on the blockchain. The wireless terminal shares the address list of the received registration certificate with the fog node F, and uses the address list of the registration certificate as the public key EPK.

[0029] Preferably, the private key EIK includes; the wireless terminal encrypts the public address EIP of the wireless terminal, the wireless terminal ID and the unique identifier SID with the key to form a key.

[0030] Preferably, the fog node verifies the identity of each wireless terminal. The wireless terminal sends the registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal, including:

[0031] The wireless terminal encrypts the registration certificate with the private key EIK and initiates a transaction T5 to send the registration certificate to the fog node F. The expression is:

[0032] T5 = EIK(FIK(SID, EIP, EID))

[0033] Among them, T5 represents the transaction result;

[0034] The fog node F extracts the registration certificate through the public key EPK, and the fog node F extracts the registration certificate through the private key FPK;

[0035] The fog node checks the wireless terminal ID record and the unique identifier SID record on the blockchain;

[0036] If there are wireless terminal ID records and unique identifier SID records on the blockchain, check the validity of the mapping relationship (SID, EIP, EID);

[0037] If the mapping relationship is valid, compare the public address EIP of the wireless terminal with the public key EPK. If EIP = EPK, the registration authorization verification of the wireless terminal is completed.

[0038] A wireless terminal registration authorization verification device, the device includes:

[0039] A certificate issuance module, which registers the wireless terminal to the blockchain through the unique identifier, creates a block for the wireless terminal and stores it distributively among the fog nodes, and issues a certificate for the wireless terminal through the fog node;

[0040] A wireless terminal registration module, which generates a registration token for the wireless terminal through the certificate and the private key, completes the identity verification through the registration token, and then generates a registration certificate through the fog node and sends the registration certificate to the wireless terminal to complete the registration of the wireless terminal;

[0041] A registration authorization verification module, the fog node performs identity verification on each wireless terminal, the wireless terminal sends the registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal;

[0042] The registering the wireless terminal to the blockchain through the unique identifier, creating a block for the wireless terminal and storing it distributively among the fog nodes, and issuing a certificate for the wireless terminal through the fog node includes:

[0043] Set the unique identifier SID, and the wireless terminal initiates a transaction T1 to send the unique identifier SID to the fog node F. The expression is:

[0044] T1 = FPK(SID)

[0045] Wherein, T1 represents the transaction result, and FPK represents the public key of the fog node;

[0046] The fog node F verifies the transaction T1 through the smart contract. If it is determined that the unique identifier SID is not used on the blockchain, the transaction T1 passes the smart contract verification;

[0047] The fog node creates a first new block and stores it distributively on the fog node F;

[0048] The fog node F generates a certificate for the unique identifier SID using the private key FIK, and initiates a transaction T2 to send the certificate to the wireless terminal. The expression is:

[0049] T2 = SPK(FIK(SID))

[0050] Where T2 represents the transaction result, and SPK represents the private key of the wireless terminal;

[0051] The wireless terminal extracts the certificate using the private key SIK;

[0052] A registration token is generated for the wireless terminal using the certificate and the private key. Identity authentication is completed using the registration token, and then a registration certificate is generated by the fog node and sent to the wireless terminal to complete the registration of the wireless terminal, including:

[0053] Generate a registration token ERT using the private key EIK. The wireless terminal initiates a transaction T3 to send the registration token ERT and the certificate to the fog node F. The expression is:

[0054] T3 = FPK(EIK(EID, EIP, SID), FIK(SID))

[0055] T3 represents the transaction result, EID represents the wireless terminal ID, and EIP represents the public address of the wireless terminal;

[0056] The fog node F verifies the transaction T3 through a smart contract, checks the wireless terminal ID and the unique identifier SID through the smart contract. If the unique identifier SID has a legal record on the blockchain and the wireless terminal ID has not been used, the smart contract checks the public key EPK. If EPK = EIP, the wireless terminal passes the identity authentication through the smart contract;

[0057] The fog node creates a second block containing the public address EIP of the wireless terminal, the wireless terminal ID, and the unique identifier SID, and stores it distributively on the fog node F;

[0058] The fog node F generates a registration certificate using the public address EIP of the wireless terminal, the wireless terminal ID, and the unique identifier SID. The wireless terminal initiates a transaction T4. The expression is:

[0059] T4 = EPK(FIK(SID, EIP, EID))

[0060] Where T4 represents the transaction result;

[0061] Send the registration certificate to the wireless terminal to complete the registration of the wireless terminal.

[0062] To solve the above problems, the present invention also provides an electronic device, which includes:

[0063] A memory for storing at least one instruction; and

[0064] A processor for executing the instruction stored in the memory to implement the above-mentioned wireless terminal registration authorization verification method.

[0065] To solve the above problems, the present invention also provides a computer-readable storage medium, in which at least one instruction is stored, and the at least one instruction is executed by a processor in an electronic device to implement the above-mentioned wireless terminal registration authorization verification method.

[0066] Compared with the prior art, the beneficial effects of the present invention are:

[0067] The present invention first registers a wireless terminal to the blockchain through a unique identifier, creates a block for the wireless terminal and stores it distributively among fog nodes, and issues a certificate for the wireless terminal through the fog nodes; generates a registration token for the wireless terminal through the certificate and the private key, completes identity verification through the registration token, generates a registration certificate through the fog node, and sends the registration certificate to the wireless terminal to complete the registration of the wireless terminal; the fog node verifies the identity of each wireless terminal, the wireless terminal sends the registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal, thereby solving the problem of low data integrity in the registration authorization verification of the existing solution and improving privacy. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. Obviously, the following drawings are only some embodiments of the present invention, and those of ordinary skill in the art can obtain other drawings without creative efforts based on these drawings.

[0069] Figure 1 It is a schematic flowchart of a wireless terminal registration authorization verification method provided by an embodiment of the present invention;

[0070] Figure 2 It is a functional module diagram of a wireless terminal registration authorization verification device provided by an embodiment of the present invention;

[0071] Figure 3 It is a schematic structural diagram of an electronic device for implementing the above-mentioned wireless terminal registration authorization verification method provided by an embodiment of the present invention.

[0072] The implementation, functional features and advantages of the present invention will be further described in conjunction with the embodiments with reference to the accompanying drawings. Detailed implementation manners

[0073] The technical solutions of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0074] The embodiments of the present application provide a method for verifying wireless terminal registration authorization. The execution subject of the method for verifying wireless terminal registration authorization includes but is not limited to at least one of electronic devices such as a server, a terminal, etc. that can be configured to execute the method provided by the embodiments of the present application. In other words, the method for verifying wireless terminal registration authorization can be executed by software or hardware installed on a terminal device or a server device, and the software can be a blockchain platform. The server includes but is not limited to: a single server, a server cluster, a cloud server or a cloud server cluster, etc.

[0075] Please refer to Figure 1 , the first aspect embodiments of the present application provide a method for verifying wireless terminal registration authorization, including:

[0076] Register the wireless terminal to the blockchain through a unique identifier, create a block for the wireless terminal and distribute it for storage among fog nodes, and issue a certificate for the wireless terminal through the fog nodes;

[0077] Further, the registering the wireless terminal to the blockchain through a unique identifier, creating a block for the wireless terminal and distributing it for storage among fog nodes, and issuing a certificate for the wireless terminal through the fog nodes includes:

[0078] Set a unique identifier SID, and the wireless terminal initiates a transaction T1 to send the unique identifier SID to the fog node F. The expression is:

[0079] T1 = FPK(SID)

[0080] where T1 represents the transaction result, and FPK represents the public key of the fog node;

[0081] The fog node F verifies the transaction T1 through a smart contract. If it is determined that the unique identifier SID has not been used in the blockchain, the transaction T1 passes the verification of the smart contract;

[0082] The fog node creates a first new block and distributes it for storage on the fog node F;

[0083] The fog node F generates a certificate for the unique identifier SID using its private key FIK, and initiates a transaction T2 to send the certificate to the wireless terminal. The expression is:

[0084] T2 = SPK(FIK(SID))

[0085] Among them, T2 represents the transaction result, and SPK represents the private key of the wireless terminal;

[0086] The wireless terminal extracts the certificate using its private key SIK;

[0087] It should be explained that in the embodiments of the present invention, a smart contract is a programmable script that executes operations based on rules formulated in the network. It supports two-way confirmation of contract terms and ensures that each record in the network will not be changed. A smart contract has the characteristics of self-verification, self-execution, and anti-tampering, and supports code execution without a third party. A smart contract contains values, addresses, functions, and states. Taking a transaction as input, it executes the corresponding code, triggers an output result, and changes the state after the function logic is implemented. The combination of blockchain and smart contract supports peer-to-peer transactions and securely and publicly maintains a database in a trusted environment. The smart contract running on the blockchain is machine-readable code. In addition, the smart contract is distributed and automatically executed code. Once created, it does not require monitoring and is event-driven;

[0088] Fog computing performs data storage and processing operations on a distributed infrastructure near the data source to meet the requirements of quality of service and service experience. Fog computing consists of a large number of distributed and connected fog nodes, which can be regarded as wireless terminals. The fog nodes are located at the network edge near the data source and can collect, analyze, and process data locally, thus significantly offloading the traffic of the core network and improving the data service processing speed.

[0089] Blockchain is defined as a distributed database that maintains tamper-proof permanent transaction data and achieves complete decentralization through a peer-to-peer network. Each node maintains a copy of the ledger to prevent single-point failures and synchronously updates and verifies all copies. Currently, blockchain technology is widely used to create and manage distributed databases and maintain all types of digital transaction records. The blockchain ledger contains multiple blocks, and each block mainly consists of two parts: one is the transaction or fact that the database must save, such as financial transfers, medical data, system logs, or traffic information, etc.; the other is the block header, which contains block information, such as time stamps, transaction hash values, etc. Thus, the current block forms a chain of ordered linked blocks. The longer the blockchain, the stronger the anti-tampering ability. Since the blocks are connected by hash values, if a malicious user attempts to change the transaction content of a block, they must make corresponding changes to all subsequent blocks.

[0090] Generate a registration token for the wireless terminal using the certificate and private key, complete authentication using the registration token, then generate a registration certificate through the fog node, and send the registration certificate to the wireless terminal to complete the registration of the wireless terminal;

[0091] Further, the generating a registration token for the wireless terminal using the certificate and private key, completing authentication using the registration token, then generating a registration certificate through the fog node, and sending the registration certificate to the wireless terminal to complete the registration of the wireless terminal includes:

[0092] Generate a registration token ERT using the private key EIK. The wireless terminal initiates a transaction T3 and sends the registration token ERT and the certificate to the fog node F. The expression is:

[0093] T3 = FPK(EIK(EID, EIP, SID), FIK(SID))

[0094] T3 represents the transaction result, EID represents the wireless terminal ID, and EIP represents the public address of the wireless terminal;

[0095] The fog node F verifies the transaction T3 through a smart contract, checks the wireless terminal ID and the unique identifier SID through the smart contract. If the unique identifier SID has a legal record on the blockchain and the wireless terminal ID has not been used, the smart contract checks the public key EPK. If EPK = EIP, the wireless terminal passes the authentication of the smart contract;

[0096] The fog node creates a second block containing the public address EIP of the wireless terminal, the wireless terminal ID, and the unique identifier SID, and stores it distributively on the fog node F;

[0097] The fog node F generates a registration certificate using the public address EIP of the wireless terminal, the wireless terminal ID, and the unique identifier SID. The wireless terminal initiates a transaction T4. The expression is:

[0098] T4 = EPK(FIK(SID, EIP, EID))

[0099] Among them, T4 represents the transaction result;

[0100] Send the registration certificate to the wireless terminal to complete the registration of the wireless terminal.

[0101] It should be noted that in the embodiment of the present invention, the registration token ERT is unique and includes the public address EIP of the wireless terminal, the wireless terminal ID, and the unique identifier SID.

[0102] Specifically, the public key EPK includes: the wireless terminal receives a registration certificate from the fog node F and shares it with other wireless terminals on the blockchain. The wireless terminal shares the address list of the received registration certificate with the fog node F and uses the address list of the registration certificate as the public key EPK.

[0103] Specifically, the private key EIK includes: the wireless terminal encrypts the public address EIP of the wireless terminal, the wireless terminal ID, and the unique identifier SID with a key to form a key with the public key EPK.

[0104] The fog node performs identity verification on each wireless terminal. The wireless terminal sends the registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal.

[0105] Further, the fog node performs identity verification on each wireless terminal. The wireless terminal sends the registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal, including:

[0106] The wireless terminal encrypts the registration certificate with the private key EIK and initiates a transaction T5 to send the registration certificate to the fog node F. The expression is:

[0107] T5 = EIK(FIK(SID, EIP, EID)0

[0108] where T5 represents the transaction result;

[0109] The fog node F extracts the registration certificate through the public key EPK, and the fog node F extracts the registration certificate through the private key FPK;

[0110] The fog node checks the wireless terminal ID record and the unique identifier SID record on the blockchain;

[0111] If there are wireless terminal ID records and unique identifier SID records on the blockchain, check the validity of the mapping relationship (SID, EIP, EID);

[0112] If the mapping relationship is valid, compare the public address EIP of the wireless terminal with the public key EPK. If EIP = EPK, the wireless terminal completes the registration authorization verification.

[0113] As Figure 2 shown, it is a functional module diagram of a wireless terminal registration authorization verification device provided by an embodiment of the present invention.

[0114] A wireless terminal registration authorization verification device of the present invention can be installed in an electronic device. According to the implemented functions, a wireless terminal registration authorization verification device may include a certificate issuance module, a wireless terminal registration module, and a registration authorization verification module. The modules of the present invention may also be referred to as units, which refer to a series of computer program segments that can be executed by the processor of the electronic device and can complete fixed functions, and are stored in the memory of the electronic device.

[0115] A wireless terminal registration authorization verification device, the device comprising:

[0116] A certificate issuance module that registers a wireless terminal to a blockchain through a unique identifier, creates a block for the wireless terminal and stores it distributively among fog nodes, and issues a certificate for the wireless terminal through the fog nodes;

[0117] A wireless terminal registration module that generates a registration token for the wireless terminal through the certificate and private key, completes identity verification through the registration token, then generates a registration certificate through the fog nodes, and sends the registration certificate to the wireless terminal to complete the registration of the wireless terminal;

[0118] A registration authorization verification module, where the fog nodes perform identity verification on each wireless terminal, the wireless terminal sends the registration certificate to the fog nodes, and the fog nodes check the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal.

[0119] Specifically, in the embodiments of the present invention, each module of a wireless terminal registration authorization verification device uses the same technical means as the Figure 1 in the blockchain-based product supply chain management method described above and can produce the same technical effects, which will not be elaborated here.

[0120] As Figure 3 shown, it is a schematic structural diagram of an electronic device for implementing a wireless terminal registration authorization verification device provided by an embodiment of the present invention.

[0121] The electronic device 1 may include a processor 10, a memory 11, and a bus 12, and may further include a computer program stored in the memory 11 and executable on the processor 10, such as a wireless terminal registration authorization verification program.

[0122] Among them, the memory 11 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, mobile hard disk, multimedia card, card-type memory (such as SD or DX memory, etc.), magnetic memory, magnetic disk, optical disc, etc. In some embodiments, the memory 11 may be an internal storage unit of the electronic device 1, such as the mobile hard disk of the electronic device 1. In some other embodiments, the memory 11 may also be an external storage device of the electronic device 1, such as a plug-in mobile hard disk, Smart Media Card (SMC), Secure Digital (SD) card, Flash Card, etc. equipped on the electronic device 1. Further, the memory 11 may also include both the internal storage unit and the external storage device of the electronic device 1. The memory 11 can be used not only to store application software installed on the electronic device 1 and various types of data, such as the code of a wireless terminal registration authorization verification method program, etc., but also to temporarily store data that has been output or will be output.

[0123] In some embodiments, the processor 10 may be composed of integrated circuits. For example, it may be composed of a single packaged integrated circuit, or may be composed of multiple integrated circuits with the same or different functions, including the combination of one or more central processing units (CPU), microprocessors, digital processing chips, graphics processors, and various control chips, etc. The processor 10 is the control core (Control Unit) of the electronic device, connecting various components of the entire electronic device through various interfaces and lines, and by running or executing programs or modules stored in the memory 11 (such as a wireless terminal registration authorization verification program, etc.), and calling data stored in the memory 11, to execute various functions of the electronic device 1 and process data.

[0124] The bus 12 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. This bus 12 can be divided into an address bus, a data bus, a control bus, etc. The bus 12 is set to realize the connection and communication between the memory 11 and at least one processor 10, etc.

[0125] Figure 3 Only the electronic device with components is shown. Those skilled in the art can understand that, Figure 3The shown structure does not constitute a limitation on the electronic device 1, and may include fewer or more components than those shown, or combine certain components, or have different component arrangements.

[0126] For example, although not shown, the electronic device 1 may further include a power source (such as a battery) for supplying power to each component. Preferably, the power source may be logically connected to the at least one processor 10 through a power management device, so as to implement functions such as charging management, discharging management, and power consumption management through the power management device. The power source may also include any components such as one or more DC or AC power sources, a recharge device, a power failure detection circuit, a power converter or inverter, and a power status indicator. The electronic device 1 may also include a variety of sensors, a Bluetooth module, a Wi-Fi module, etc., which will not be elaborated here.

[0127] Furthermore, the electronic device 1 may further include a network interface. Optionally, the network interface may include a wired interface and / or a wireless interface (such as a WI-FI interface, a Bluetooth interface, etc.), which is generally used to establish a communication connection between the electronic device 1 and other electronic devices.

[0128] Optionally, the electronic device 1 may further include a user interface. The user interface may be a display, an input unit (such as a keyboard), and optionally, the user interface may also be a standard wired interface or a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch liquid crystal display, and an OLED (Organic Light-Emitting Diode) toucher, etc. Among them, the display may also be appropriately referred to as a display screen or a display unit, which is used to display the information processed in the electronic device 1 and to display a visual user interface.

[0129] It should be understood that the embodiments are only for illustration purposes and are not limited by this structure in the scope of the patent application.

[0130] A wireless terminal registration authorization verification method program stored in the memory 11 of the electronic device 1 is a combination of multiple instructions. When running in the processor 10, it can implement:

[0131] Register the wireless terminal to the blockchain through a unique identifier, create a block for the wireless terminal and save it distributively among fog nodes, and issue a certificate for the wireless terminal through the fog nodes;

[0132] Generate a registration token for the wireless terminal through the certificate and the private key, complete the authentication through the registration token, and then generate a registration certificate through the fog nodes, and send the registration certificate to the wireless terminal to complete the registration of the wireless terminal;

[0133] The fog node performs identity verification on each wireless terminal. The wireless terminal sends a registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal.

[0134] Specifically, for the specific implementation method of the above instructions by the processor 10, reference can be made to Figures 1 to 3 the description of the relevant steps in the corresponding embodiments, which will not be elaborated here.

[0135] Furthermore, if the modules / units integrated in the electronic device 1 are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. The computer-readable storage medium can be volatile or non-volatile. For example, the computer-readable medium can include: any entity or device capable of carrying the computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disc, computer memory, read-only memory (ROM, Read-Only Memory).

[0136] The present invention also provides a computer-readable storage medium. The readable storage medium stores a computer program, and when the computer program is executed by the processor of the electronic device, it can implement:

[0137] Register the wireless terminal to the blockchain through a unique identifier, establish a block for the wireless terminal and distribute it for storage among fog nodes, and issue a certificate for the wireless terminal through the fog node;

[0138] Generate a registration token for the wireless terminal through the certificate and the private key, complete the identity verification through the registration token, and then generate a registration certificate through the fog node, and send the registration certificate to the wireless terminal to complete the registration of the wireless terminal;

[0139] The fog node performs identity verification on each wireless terminal. The wireless terminal sends a registration certificate to the fog node, and the fog node checks the registration certificate through the records on the blockchain to complete the registration authorization verification of the wireless terminal.

[0140] In several embodiments provided by the present invention, it should be understood that the disclosed devices, apparatuses, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the modules is only a logical function division, and there can be other division methods in actual implementation.

[0141] The module described as a separation component may or may not be physically separated. The component shown as a module may or may not be a physical unit, that is, it may be located in one place or distributed to multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0142] In addition, in each embodiment of the present invention, each functional module can be integrated in a processing unit, or each unit can exist physically alone, or two or more units can be integrated in one unit. The above integrated unit can be implemented in the form of hardware, or in the form of hardware plus software functional modules.

[0143] For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and without departing from the spirit or basic characteristics of the present invention, the present invention can be implemented in other specific forms.

[0144] Therefore, from any point of view, the embodiments should be regarded as exemplary and non-restrictive. The scope of the present invention is defined by the appended claims rather than the above description. Therefore, all changes falling within the meaning and scope of the equivalent elements of the claims are intended to be included in the present invention. Any associated drawing marks in the claims should not be regarded as limiting the claims involved.

[0145] The blockchain referred to in the present invention is a new application mode of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, and encryption algorithm. Blockchain, essentially a decentralized database, is a string of data blocks generated by using cryptographic methods. Each data block contains information about a batch of network transactions, which is used to verify the validity of the information (anti-counterfeiting) and generate the next block. The blockchain can include a blockchain underlying platform, a platform product service layer, an application service layer, etc.

[0146] In addition, obviously, the word "including" does not exclude other units or steps, and the singular does not exclude the plural. The multiple units or devices stated in the system claims can also be implemented by one unit or device through software or hardware. Words such as second are used to represent names and do not represent any specific order.

[0147] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not restrictive. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be modified or equivalently replaced without departing from the spirit and scope of the technical solutions of the present invention.

[0148] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical method of the present invention can be modified or equivalently replaced without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A wireless terminal registration authorization verification method, characterized in that: include: Registering the wireless terminal to the blockchain through a unique identifier, creating a block for the wireless terminal and distributing it among fog nodes, and issuing a certificate for the wireless terminal through the fog nodes; Generate a registration token for the wireless terminal using the certificate and the private key, complete identity authentication using the registration token, then generate a registration certificate using the fog node, send the registration certificate to the wireless terminal, and complete wireless terminal registration; The fog node verifies the identity of each wireless terminal, and the wireless terminal sends the registration certificate to the fog node. The fog node checks the registration certificate through the records on the blockchain to complete the wireless terminal registration authorization verification; The method of registering the wireless terminal to the blockchain through a unique identifier, establishing a block for the wireless terminal and distributing the block among fog nodes, and issuing a certificate for the wireless terminal through the fog node includes: Set a unique identifier SID, and the wireless terminal initiates transaction T1 to send the unique identifier SID to the fog node F. The expression is: T1=FPK(SID) Among them, T1 represents the transaction result, and FPK represents the public key of the fog node; The fog node F verifies the transaction T1 through the smart contract and determines that the unique identifier SID is not used in the blockchain, then the transaction T1 passes the smart contract verification; The fog node creates a first new block and stores it in a distributed manner on the fog node F; The fog node F generates a certificate of the unique identifier SID through the private key FIK, initiates transaction T2, and sends the certificate to the wireless terminal. The expression is: T2=SPK(FIK(SID)) Wherein, T2 represents the transaction result, SPK represents the private key of the wireless terminal; The wireless terminal extracts the certificate through the private key SIK; The method of generating a registration token for the wireless terminal by using the certificate and the private key, completing identity authentication by using the registration token, and then generating a registration certificate by using the fog node, sending the registration certificate to the wireless terminal, and completing wireless terminal registration includes: The registration token ERT is generated by the private key EIK, and the wireless terminal initiates a transaction T3, sending the registration token ERT and the certificate to the fog node F. The expression is: T3=FPK(EIK(EID,EIP,SID),FIK(SID)) T3 represents the transaction result, EID represents the wireless terminal ID, and EIP represents the wireless terminal public address; The fog node F verifies the transaction T3 through the smart contract, checks the wireless terminal ID and the unique identifier SID through the smart contract, and if the unique identifier SID has a legal record on the blockchain and the wireless terminal ID is not used, the smart contract checks the public key EPK. If EPK = EIP, the wireless terminal passes the identity authentication of the smart contract; The fog node creates a second block including the wireless terminal public address EIP, the wireless terminal ID and the unique identifier SID, and stores it in a distributed manner on the fog node F; The fog node F generates a registration certificate through the wireless terminal public address EIP, wireless terminal ID and unique identifier SID, and the wireless terminal initiates transaction T4, which is expressed as: T4=EPK(FIK(SID,EIP,EID)) Among them, T4 represents the transaction result; The registration certificate is sent to the wireless terminal to complete the registration of the wireless terminal.

2. A wireless terminal registration authorization verification method according to claim 1, characterized in that: Generating the public key EPK includes: the wireless terminal receives a registration certificate from the fog node F and shares it with other wireless terminals on the blockchain; the wireless terminal shares the address list of the received registration certificate with the fog node F, and uses the address list of the registration certificate as the public key EPK.

3. A wireless terminal registration authorization verification method according to claim 1, characterized in that: Generating the private key EIK includes: the wireless terminal encrypts the wireless terminal public address EIP, the wireless terminal ID, the unique identifier SID and the public key EPK by using the key to form a key.

4. A wireless terminal registration authorization verification method according to claim 1, characterized in that: The fog node performs identity verification on each wireless terminal. The wireless terminal sends a registration certificate to the fog node. The fog node checks the registration certificate through the records on the blockchain to complete the wireless terminal registration authorization verification, including: The wireless terminal encrypts the registration certificate with the private key EIK and initiates transaction T5 to send the registration certificate to the fog node F. The expression is: T5=EIK(FIK(SID,EIP,EID)) Among them, T5 represents the transaction result; The fog node F extracts the registration certificate through the public key EPK, and the fog node F extracts the registration certificate through the private key FPK; The fog node checks the wireless terminal ID record and the unique identifier SID record on the blockchain; If there are wireless terminal ID records and unique identifier SID records on the blockchain, check the validity of the mapping relationship (SID, EIP, EID); If the mapping relationship is valid, the wireless terminal public address EIP is compared with the public key EPK. If EIP=EPK, the wireless terminal completes the registration authorization verification.

5. A wireless terminal registration authorization verification device, characterized in that: The device comprises: A certificate issuing module, registering the wireless terminal to the blockchain through a unique identifier, creating a block for the wireless terminal and storing it in a distributed manner among fog nodes, and issuing a certificate to the wireless terminal through the fog nodes; A wireless terminal registration module generates a registration token for the wireless terminal through the certificate and the private key, completes identity authentication through the registration token, generates a registration certificate through the fog node, sends the registration certificate to the wireless terminal, and completes the wireless terminal registration; Registration authorization verification module, the fog node performs identity verification on each wireless terminal, the wireless terminal sends the registration certificate to the fog node, the fog node checks the registration certificate through the records on the blockchain, and completes the wireless terminal registration authorization verification; The method of registering the wireless terminal to the blockchain through a unique identifier, establishing a block for the wireless terminal and distributing the block among fog nodes, and issuing a certificate for the wireless terminal through the fog node includes: Set a unique identifier SID, and the wireless terminal initiates transaction T1 to send the unique identifier SID to the fog node F. The expression is: T1=FPK(SID) Among them, T1 represents the transaction result, and FPK represents the public key of the fog node; The fog node F verifies the transaction T1 through the smart contract and determines that the unique identifier SID is not used in the blockchain, then the transaction T1 passes the smart contract verification; The fog node creates a first new block and stores it in a distributed manner on the fog node F; The fog node F generates a certificate of the unique identifier SID through the private key FIK, initiates transaction T2, and sends the certificate to the wireless terminal. The expression is: T2=SPK(FIK(SID)) Wherein, T2 represents the transaction result, SPK represents the private key of the wireless terminal; The wireless terminal extracts the certificate through the private key SIK; The method of generating a registration token for the wireless terminal by using the certificate and the private key, completing identity authentication by using the registration token, and then generating a registration certificate by using the fog node, sending the registration certificate to the wireless terminal, and completing wireless terminal registration includes: The registration token ERT is generated by the private key EIK, and the wireless terminal initiates a transaction T3, sending the registration token ERT and the certificate to the fog node F. The expression is: T3=FPK(EIK(EID,EIP,SID),FIK(SID)) T3 represents the transaction result, EID represents the wireless terminal ID, and EIP represents the wireless terminal public address; The fog node F verifies the transaction T3 through the smart contract, checks the wireless terminal ID and the unique identifier SID through the smart contract, and if the unique identifier SID has a legal record on the blockchain and the wireless terminal ID is not used, the smart contract checks the public key EPK. If EPK = EIP, the wireless terminal passes the identity authentication of the smart contract; The fog node creates a second block including the wireless terminal public address EIP, the wireless terminal ID and the unique identifier SID, and stores it in a distributed manner on the fog node F; The fog node F generates a registration certificate through the wireless terminal public address EIP, wireless terminal ID and unique identifier SID, and the wireless terminal initiates transaction T4, which is expressed as: T4=EPK(FIK(SID,EIP,EID)) Among them, T4 represents the transaction result; The registration certificate is sent to the wireless terminal to complete the registration of the wireless terminal.

Images