A fast consensus method and system for identity authentication based on blockchain

Abstract

The present invention discloses a fast consensus method and system for identity authentication based on blockchain, including: obtaining user identity information of blockchain network; encrypting the user identity information using an improved encryption variant algorithm to generate a digital identity certificate; building an improved identity consensus signature framework by closely combining multiple Schnorr signature technology with blockchain consensus mechanism; introducing an optimized consensus algorithm to realize the special needs of identity authentication under multi-entity secure access to shared resources; introducing an adaptive intelligent dynamic weight distribution system to identify the user identity information; and encrypting and protecting it through an advanced encryption algorithm of the Sovrin architecture. The present invention not only realizes technical innovation through the improved algorithm, but also brings significant improvements in practical applications, meeting the needs of modern digital society for efficient, secure and scalable identity authentication solutions.

Description

Technical Field

[0001] The present invention relates to the fields of blockchain and identity authentication technology, and in particular to a blockchain-based identity authentication fast consensus method and system. Background Art

[0002] In the current information society, identity authentication technology has become an important means to ensure information security and maintain the order of cyberspace. Although traditional identity authentication methods, such as username and password, biometric recognition, etc., meet the needs of identity authentication to a certain extent, they also have problems such as easy leakage, easy to be cracked, and low authentication efficiency.

[0003] Distributed identity authentication plays a vital role in ensuring the security and reliability of distributed systems, especially in scenarios where multiple entities need to securely access shared resources. However, traditional consensus algorithms often ignore the special needs of identity authentication, leading to potential security vulnerabilities and efficiency issues.

[0004] Existing consensus algorithms, such as the distributed consensus algorithm Raft, the distributed consensus algorithm Paxos, and the Byzantine consensus algorithm Practical Byzantine Fault Tolerance (PBFT), provide powerful mechanisms for achieving consistency between nodes in the network. However, these algorithms mainly focus on data consistency and do not address the specific needs of identity authentication. In recent years, some studies have attempted to integrate identity management systems with consensus algorithms, but there are often limitations in terms of security, efficiency, and scalability. Summary of the invention

[0005] In view of the problems such as the limitations of security, efficiency and scalability in the integration of existing identity management systems and consensus algorithms, the present invention proposes a blockchain-based identity authentication fast consensus method and system.

[0006] In order to achieve the above object, the present invention is implemented by the following technical solutions:

[0007] A fast consensus method for identity authentication based on blockchain, the method comprising:

[0008] Step S1: Obtain user identity information of the blockchain network, which includes but is not limited to Token, signature and timestamp. The Token is stored in a secure cache with a validity period of 10 minutes. The signature is used to verify the integrity of the information. The timestamp is used to verify the timeliness of the request with the current time. The time difference threshold is set to 60 seconds. Requests exceeding the threshold are deemed invalid.

[0009] Step S2: Encrypt the user identity information using the improved encryption variant algorithm to generate a digital identity certificate;

[0010] Step S3: The digital identity certificate is submitted to the blockchain network, and an improved identity consensus signature framework is constructed by closely combining the multi-Schnorr signature technology with the blockchain consensus mechanism;

[0011] Step S4: Based on the improved identity consensus signature framework, an optimized SecureRaftID-lky consensus algorithm is introduced, and the optimized SecureRaftID-lky consensus algorithm realizes the special requirements of identity authentication under the secure access of multiple entities to shared resources;

[0012] Step S5: Identify the user identity information by introducing an adaptive intelligent dynamic weight allocation system, and the identified identity information data is recorded in the blockchain network;

[0013] Step S6: Encryption protection is performed through the advanced encryption algorithm of the Sovrin architecture to jointly implement a fast consensus method for identity authentication based on blockchain.

[0014] 3. As a preferred solution of the present invention, in step S2, the improved encryption variant algorithm is as follows:

[0015] S21, calculate the first layer encryption A = (x 3 +ax+b)mod p;

[0016] S22, calculate the second layer encryption B = (x 3 +a′x 2 +b′)mod p′;

[0017] S23, deriving a bilinear pairing function C=(A+B) mod p″ based on the values ​​of A and B;

[0018] Where x is the input value; a, a′ and b′, ​​b′ are all parameters, p and p′ are large prime numbers, and p″ is the bilinear pairing result;

[0019] S24, obtaining a loop body based on the bilinear pairing function C and the above parameters;

[0020] S25. Configure common private key;

[0021] S26. Calculate a public key based on the common private key;

[0022] S27, introducing a temporary private key and using the bilinear pairing function C for encryption;

[0023] S28. Use the common private key to derive a temporary public key for decryption.

[0024] As a preferred solution of the present invention, the improved identity consensus signature framework includes: optimizing identity authentication and signature, optimizing

[0025] Consensus process and optimized signature verification;

[0026] The optimized identity authentication and signature are:

[0027] In the key generation, the node is defined as i, the private key is si, then the public key Q i =s i ×P, where P is the base point;

[0028] a. Define the random number k i ;

[0029] b. According to the random number k i Generate a temporary signature R i =k i ×P;

[0030] c. Generate a collective signature S=∑s based on the temporary signature i ;

[0031] The optimized consensus process is as follows: verifying the block, and after the consensus is met, the block is submitted to the blockchain network and verified by all nodes;

[0032] The optimized signature verification is: optimized by combining aggregate signature and asynchronous verification.

[0033] As a preferred solution of the present invention, the improved identity consensus signature framework also includes an optimized QuickChainID fast chain identity authentication algorithm, and the steps are as follows:

[0034] Verify the validity of the Token:

[0035] T now <T exp

[0036] Verify the validity of the signature:

[0037] Verify(T,S)=True

[0038] Verify the validity of the timestamp:

[0039] ∣T rec -T req ∣≤threshold

[0040] Where: T represents Token, S represents signature, T req Indicates the request timestamp, T rec Indicates that the server receives the timestamp, and the threshold is set to threshold.

[0041] Obtain user identity information in the blockchain including: Token, signature and timestamp data;

[0042] Verify the validity of user identity information through the Verify algorithm.

[0043] Input: Token, signature and request timestamp data,

[0044] Output: Whether the authentication is successful;

[0045] Verify the validity of the Token and set the current time to be less than the expiration time of the Token;

[0046] Verify the validity of the signature and set Token and Signature to True;

[0047] Verify the validity of the timestamp, set the difference between the current timestamp and the request timestamp to be no greater than the threshold, and return authentication success. Otherwise, return: if the request timestamp exceeds the threshold, authentication fails; if the signature verification fails, authentication fails; if the token expires, authentication fails.

[0048] Request identity information through the main algorithm and output the identity authentication result;

[0049] Get the token, signature and request timestamp data in the requesting user identity information respectively;

[0050] Call the Verify algorithm to verify the validity of the identity information.

[0051] As a preferred solution of the present invention, the optimized SecureRaftID-lky consensus algorithm includes: identity authentication nodes IANs, identity authentication transactions IATs and dynamic member management DMM;

[0052] The identity authentication nodes IANs are responsible for managing identity information and participating in the consensus process;

[0053] The identity authentication transactions IATs are used for replication and negotiation operations in the network;

[0054] The dynamic membership management DMM is used for nodes to seamlessly join or leave the network;

[0055] The optimized SecureRaftID-lky consensus algorithm process is as follows:

[0056] A1. Set the node type of the blockchain to identity authentication node and non-identity authentication node respectively;

[0057] A2. Set the data structure in the block chain authentication;

[0058] A3. Set the node class in the block chain authentication;

[0059] A4. Set the algorithm class in the block chain authentication;

[0060] A5. Set the main function in the blockchain authentication.

[0061] As a preferred solution of the present invention, the adaptive intelligent dynamic weight allocation system is as follows:

[0062] W i represents the initial weight of node i, T i A represents the number of user authentication transactions successfully processed by node i in a given time window, i is the activity of node i, C i is the network contribution of node i, and the weight adjustment of node i is calculated by the following formula:

[0063] W i new =f(T i , A i , C i )

[0064] Where f is a function used to calculate the new weight based on the performance and contribution of the node.

[0065] The f function is:

[0066] W i new =W i +α×T i +β×A i +γ×C i

[0067] Among them, α, β and γ are pre-defined parameters.

[0068] Calculate the new weight W i new When , set the upper limit of weight W max and the lower limit W min ,

[0069] The final weight adjustment formula should be:

[0070] W i new =max(min(W i +α×T i +β×A i +γ×C i ,W max ),W min ).

[0071] As a preferred solution of the present invention, encryption protection through the advanced encryption algorithm of the Sovrin architecture includes: subject roles, distributed identifiers DID, verifiable credentials VCs, distributed ledgers, network management and maintenance nodes Sovrin Steward, and trusted framework Sovrin Trust Framework; the subject roles include:

[0072] Identity Owner IO, for individuals and entities who own and control their own identity information;

[0073] Authenticator IV, used by institutions and service providers to verify the authenticity and validity of identity information;

[0074] The identity holder IH is used as an agent of the identity owner IO to manage and maintain the identity information of the identity owner IO;

[0075] The distributed identifier DID is used to uniquely identify the identity owner, is generated and assigned by nodes in the blockchain network, and allows the identity owner IO to share identity information between different systems and applications;

[0076] The verifiable credentials VCs are used to represent identity information, are issued by the identity authentication provider IV and held by the identity owner IO, and are tamper-proof and verifiable;

[0077] The distributed ledger is used to store and manage identity information through a blockchain network;

[0078] The node Sovrin Steward managed and maintained by the network is used to verify new distributed identifiers DIDs and VCs, and is composed of institutions and organizations;

[0079] The Sovrin Trust Framework is used to standardize and manage identity authentication processes and standards.

[0080] As a preferred solution of the present invention, encryption protection using the advanced encryption algorithm of the Sovrin architecture also includes:

[0081] The user sends the public key P, temporary public key T and encrypted identity information C to the server.

[0082] The server uses the private key d server and the user's temporary public key T to generate a shared secret S′=d server ×T

[0083] The server uses the shared secret S′ to decrypt C and obtain the identity information I′: I′=DS′(C);

[0084] The server verifies the validity of the decrypted identity information I′;

[0085] Encryption is: C = ES(I) = I ⊕ H(S), where ⊕ represents the XOR operation and H is the improved hash function. Decryption is: I′ = DS′(C) = C ⊕ H(S′).

[0086] Here, DS′ represents the decryption operation using the shared secret, S′ as the key.

[0087] As a preferred solution of the present invention, a blockchain-based identity authentication fast consensus system comprises:

[0088] Data acquisition module, used to obtain user identity information of blockchain network;

[0089] A data encryption module, used for encrypting the user identity information;

[0090] A data generation module, used to generate a digital identity certificate after encrypting the user identity information;

[0091] A data submission module, used to submit the generated digital identity certificate to the blockchain network;

[0092] A data combination module is used to closely combine the multi-Schnorr signature technology with the blockchain consensus mechanism; a data construction module is used to closely combine the above data combination modules to build an improved identity consensus signature framework;

[0093] Identity consensus module, used for the optimized SecureRaftID-lky consensus algorithm to realize the special needs of identity authentication under the condition of multi-entity secure access to shared resources;

[0094] A data allocation module, used to introduce an adaptive intelligent dynamic weight allocation system to identify the user identity information;

[0095] A data storage module, used for recording the above-mentioned identified identity information data in the blockchain network;

[0096] Data encryption module, used for encryption protection through the advanced encryption algorithm of the Sovrin architecture.

[0097] As a preferred solution of the present invention, the system integrates high-concurrency processing, cross-chain interoperability and an extensible integration framework to achieve secure and efficient identity authentication and support multi-blockchain service integration, demonstrating significant technological progress.

[0098] Compared with the prior art, the present invention has the following beneficial effects:

[0099] By introducing improved encryption variant algorithms and advanced encryption technology of the Sovrin architecture, it provides strong encryption protection for user identity information, thus significantly improving the security of the system and the level of user privacy protection; by setting the validity period of the token and the timestamp verification mechanism, it ensures that all identity authentication requests are real-time and within the valid time range, effectively preventing expiration or replay attacks and ensuring the reliability of the system; by combining multiple Schnorr signature technology with the blockchain consensus mechanism, and introducing the SecureRaftID-lky consensus algorithm, it not only supports cross-chain identity authentication, but also meets the identity authentication needs of multiple entities under secure shared resources, enhancing the flexibility and scalability of the system; through the adaptive intelligent dynamic weight distribution system, the weight of the node in the identity authentication process is intelligently adjusted, thereby optimizing the consensus process and improving the system efficiency. It makes full use of the characteristics of blockchain technology, such as immutability, decentralization and transparency, to ensure the fairness of the identity authentication process and the authenticity of identity information, while improving the system's anti-attack ability. BRIEF DESCRIPTION OF THE DRAWINGS

[0100] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative labor. Among them:

[0101] Figure 1 is a flow chart of a method according to an embodiment of the present invention;

[0102] Figure 2 This is a Sovrin architecture diagram of an embodiment of the present invention;

[0103] Figure 3 4 is a system modular structure diagram in an embodiment of the present invention. DETAILED DESCRIPTION

[0104] In order to make the purpose, technical solution and advantages of the embodiment of the present invention clearer, the technical solution of the embodiment of the present invention will be clearly and completely described below in conjunction with the drawings of the embodiment of the present invention. Obviously, the described embodiment is a part of the embodiment of the present invention, not all of the embodiments. Based on the described embodiment of the present invention, all other embodiments obtained by ordinary technicians in this field belong to the scope of protection of the present invention.

[0105] Embodiment 1

[0106] like Figure 1 As shown in FIG. 1 , an embodiment of the present invention is provided, which provides a fast consensus method for identity authentication based on blockchain, including:

[0107] Obtain user identity information of the blockchain network, including but not limited to Token, signature and timestamp. Token is stored in the security cache with a validity period of 10 minutes. The signature is used to verify the integrity of the information. The timestamp is used to verify the timeliness of the request with the current time. The time difference threshold is set to 60 seconds. Requests exceeding the threshold are considered invalid.

[0108] After encrypting the user identity information using the improved encryption variant algorithm, a digital identity certificate is generated;

[0109] 4. The improved encryption variant algorithm is as follows:

[0110] S21, calculate the first layer encryption A = (x 3 +ax+b)mod p;

[0111] S22, calculate the second layer encryption B = (x 3 +a′x 2 +b′)mod p′;

[0112] S23, deriving a bilinear pairing function C=(A+B) mod p″ based on the values ​​of A and B;

[0113] Where x is the input value; a, a′ and b′, ​​b′ are all parameters, p and p′ are large prime numbers, and p″ is the bilinear pairing result;

[0114] S24, obtaining a loop body based on the bilinear pairing function C and the above parameters;

[0115] S25. Configure common private key;

[0116] S26. Calculate a public key based on the common private key;

[0117] S27, introducing a temporary private key and using the bilinear pairing function C for encryption;

[0118] S28. Use the common private key to derive a temporary public key for decryption.

[0119] In one embodiment, the digital identity certificate is submitted to the blockchain network, and an improved identity consensus signature framework is constructed by closely combining the multi-Schnorr signature technology with the blockchain consensus mechanism;

[0120] The improved identity consensus signature framework includes: optimizing identity authentication and signature, optimizing consensus process and optimizing signature verification;

[0121] The optimized identity authentication and signature are:

[0122] In the key generation, the node is defined as i, the private key is si, then the public key Q i =s i ×P, where P is the base point;

[0123] a. Define the random number k i ;

[0124] b. According to the random number k i Generate a temporary signature R i =k i ×P;

[0125] c. Generate a collective signature S=∑s based on the temporary signature i ;

[0126] The optimized consensus process is as follows: verifying the block, and after the consensus is met, the block is submitted to the blockchain network and verified by all nodes;

[0127] The optimized signature verification is: optimized by combining aggregate signature and asynchronous verification.

[0128] The improved identity consensus signature framework also includes an optimized QuickChainID fast chain identity authentication algorithm, the steps are as follows:

[0129] Verify the validity of the Token:

[0130] T now <T exp

[0131] Verify the validity of the signature:

[0132] Verify(T,S)=True

[0133] Verify the validity of the timestamp:

[0134] ∣T rec -T req ∣≤threshold

[0135] Where: T represents Token, S represents signature, T req Indicates the request timestamp, T rec Indicates that the server receives the timestamp, and the threshold is set to threshold.

[0136] Obtain user identity information in the blockchain including: Token, signature and timestamp data;

[0137] Verify the validity of user identity information through the Verify algorithm.

[0138] Input: Token, signature and request timestamp data,

[0139] Output: Whether the authentication is successful;

[0140] Verify the validity of the Token and set the current time to be less than the expiration time of the Token;

[0141] Verify the validity of the signature and set Token and Signature to True;

[0142] Verify the validity of the timestamp, set the difference between the current timestamp and the request timestamp to be no greater than the threshold, and return authentication success. Otherwise, return: if the request timestamp exceeds the threshold, authentication fails; if the signature verification fails, authentication fails; if the token expires, authentication fails.

[0143] Request identity information through the main algorithm and output the identity authentication result;

[0144] Get the token, signature and request timestamp data in the requesting user identity information respectively;

[0145] Call the Verify algorithm to verify the validity of the identity information.

[0146] Based on the improved identity consensus signature framework, an optimized SecureRaftID-lky consensus algorithm is introduced. The optimized SecureRaftID-lky consensus algorithm realizes the special needs of identity authentication under the secure access of multiple entities to shared resources.

[0147] The optimized SecureRaftID-lky consensus algorithm includes: identity authentication nodes IANs, identity authentication transactions IATs and dynamic member management DMM;

[0148] The identity authentication nodes IANs are responsible for managing identity information and participating in the consensus process;

[0149] The identity authentication transactions IATs are used for replication and negotiation operations in the network;

[0150] The dynamic membership management DMM is used for nodes to seamlessly join or leave the network;

[0151] The optimized SecureRaftID-lky consensus algorithm process is as follows:

[0152] A1. Set the node type of the blockchain to identity authentication node and non-identity authentication node respectively;

[0153] A2. Set the data structure in the block chain authentication;

[0154] A3. Set the node class in the block chain authentication;

[0155] A4. Set the algorithm class in the block chain authentication;

[0156] A5. Set the main function in the blockchain authentication

[0157] In one embodiment, the user identity information is identified by introducing an adaptive intelligent dynamic weight allocation system, and the identified identity information data is recorded in the blockchain network;

[0158] The adjustment algorithm of the optimized dynamic weight mechanism is as follows:

[0159] W i represents the initial weight of node i, T i A represents the number of user authentication transactions successfully processed by node i in a given time window, i is the activity of node i, C i is the network contribution of node i, and the weight adjustment of node i is calculated by the following formula:

[0160] W i new =f(T i , A i , C i )

[0161] Among them, f is a function used to calculate the new weight according to the performance and contribution of the node. The f function is:

[0162] W i new =W i +α×T i +β×A i +γ×C i

[0163] Among them, α, β and γ are pre-defined parameters used to adjust the influence of different factors on weight adjustment and calculate the new weight W i new When , set the upper limit of weight W max and the lower limit W min , the final weight adjustment formula should be:

[0164] W i new =max(min(W i +α×T i +β×A i +γ×C i ,W max ),W min ).

[0165] In one embodiment, the Sovrin architecture uses cryptographic algorithms for encryption protection to jointly implement a blockchain-based identity authentication fast consensus method. The Sovrin architecture also includes: subject roles, distributed identifiers DID, verifiable credentials VCs, distributed ledgers, network management and maintenance nodes Sovrin Steward, and a trust framework Sovrin Trust Framework;

[0166] The subject roles include:

[0167] Identity Owner IO, for individuals and entities who own and control their own identity information;

[0168] Authenticator IV, used by institutions and service providers to verify the authenticity and validity of identity information;

[0169] The identity holder IH is used as an agent of the identity owner IO to manage and maintain the identity information of the identity owner IO;

[0170] The distributed identifier DID is used to uniquely identify the identity owner, is generated and assigned by nodes in the blockchain network, and allows the identity owner IO to share identity information between different systems and applications;

[0171] The verifiable credentials VCs are used to represent identity information, are issued by the identity authentication provider IV and held by the identity owner IO, and are tamper-proof and verifiable;

[0172] The distributed ledger is used to store and manage identity information through a blockchain network;

[0173] The node Sovrin Steward managed and maintained by the network is used to verify new distributed identifiers DIDs and VCs, and is composed of institutions and organizations;

[0174] The Sovrin Trust Framework is used to standardize and manage identity authentication processes and standards.

[0175] In one embodiment, the user authentication phase of the cryptographic algorithm is as follows:

[0176] The user sends the public key P, temporary public key T and encrypted identity information C to the server.

[0177] The server uses the private key d server and the user's temporary public key T to generate a shared secret S′=d server ×T

[0178] The server uses the shared secret S′ to decrypt C and obtain the identity information I′: I′=DS′(C);

[0179] The server verifies the validity of the decrypted identity information I′;

[0180] Encryption is: C = ES(I) = I ⊕ H(S), where ⊕ represents the XOR operation and H is the improved hash function. Decryption is: I′ = DS′(C) = C ⊕ H(S′).

[0181] Here, DS′ represents the decryption operation using the shared secret, S′ as the key.

[0182] In a specific embodiment, a blockchain-based identity authentication fast consensus system includes:

[0183] Data acquisition module, used to obtain user identity information of blockchain network;

[0184] A data encryption module, used for encrypting the user identity information;

[0185] A data generation module, used to generate a digital identity certificate after encrypting the user identity information;

[0186] A data submission module, used to submit the generated digital identity certificate to the blockchain network;

[0187] A data combination module is used to closely combine the multi-Schnorr signature technology with the blockchain consensus mechanism; a data construction module is used to closely combine the above data combination modules to build an improved identity consensus signature framework;

[0188] Identity consensus module, used for the optimized SecureRaftID-lky consensus algorithm to realize the special needs of identity authentication under the condition of multi-entity secure access to shared resources;

[0189] A data allocation module, used to introduce an adaptive intelligent dynamic weight allocation system to identify the user identity information;

[0190] A data storage module, used for recording the above-mentioned identified identity information data in the blockchain network;

[0191] Data encryption module, used for encryption protection through the advanced encryption algorithm of the Sovrin architecture.

[0192] The system integrates high-concurrency processing, cross-chain interoperability and an extensible integration framework to achieve secure and efficient identity authentication and support multi-blockchain service integration, demonstrating significant technological progress.

[0193] Embodiment 2

[0194] like Figure 2As shown, another embodiment of the present invention provides a decentralized identity authentication platform based on blockchain technology, and its identity authentication is called Sovrin architecture, which builds an identity authentication model based on blockchain, including: subject roles, distributed identifiers DID, verifiable credentials VCs, distributed ledgers, network management and maintenance nodes Sovrin Steward, and trust framework Sovrin Trust Framework;

[0195] Main role:

[0196] Identity Owner: An individual or entity that owns and controls its own identity information. Identity Verifier: An organization or service provider that needs to verify the authenticity and validity of identity information.

[0197] Identity Holder: As the agent of the identity owner, responsible for managing and maintaining the identity information of the identity owner

[0198] Decentralized Identifier (DID):

[0199] Sovrin uses a distributed identifier (DID) to uniquely identify the identity owner. DID is a globally unique identifier generated and assigned by nodes in the blockchain network. DID allows identity owners to share identity information between different systems and applications while maintaining data privacy and security.

[0200] Verifiable Credentials(VCs):

[0201] Sovrin uses Verifiable Credentials (VCs) to represent identity information. VCs are digital credentials that contain statements about the identity owner, issued by an identity verifier and held by the identity owner.

[0202] VCs are tamper-proof and verifiable, and can be verified without exposing private information.

[0203] Distributed Ledger:

[0204] The Sovrin architecture is built on distributed ledger technology, which stores and manages identity information through a blockchain network. Each block on the ledger contains authentication transactions and related credential information for the identity owner.

[0205] Distributed ledgers ensure the security and immutability of identity information, and anyone can verify the authenticity of identity information

[0206] Sovrin Steward:

[0207] Sovrin Steward in the Sovrin architecture refers to the node that participates in the management and maintenance of the Sovrin network. Steward is responsible for verifying new DIDs and VCs and ensuring the stable operation and security of the network.

[0208] Sovrin Steward is composed of various institutions and organizations, including government agencies, universities, businesses, etc.

[0209] Sovrin Trust Framework:

[0210] The Sovrin architecture establishes a trust framework called the Sovrin Trust Framework to standardize and manage the processes and standards for identity authentication. The Trust Framework defines the trust relationship between the identity authenticater and the identity holder, as well as the responsibilities and obligations of the identity authenticater.

[0211] The Trust Framework facilitates the secure sharing and interoperability of identity information while protecting individuals’ rights to privacy and data ownership.

[0212] Through the Sovrin architecture, individuals and entities can manage and share their identity information securely and privately without relying on centralized identity verification agencies. This decentralized identity authentication model provides a new solution for digital identity management and helps build a more secure and trusted digital society.

[0213] In the figure:

[0214] Client App: The client application is the starting point of the system, used to interact with the user and transmit data with the server through direct communication.

[0215] Direct Communication: Direct communication is a direct data transmission method between the client application and the server.

[0216] Controls: Control points located in the system, used to manage and monitor the use of data to ensure data compliance and security.

[0217] EPu, EPs: are the abbreviations of Endpoint of the User and Endpoint of the Service, which respectively represent user endpoint and service endpoint, and are the interfaces for users and service providers to interact in the system.

[0218] Data, Policy: Data and policy, data is the information that needs to be processed in the system, and policy is the rules that define how to manage and use this data.

[0219] Vault, and Keys: Vaults and keys. Vaults are used to securely store users' sensitive information, such as identity data or transaction information, while keys are cryptographic tools used to encrypt and decrypt this information.

[0220] UserAgent,Service Provider Agent: User agent and service provider agent. The user agent is responsible for managing the user's account and key, while the service provider agent interacts with the user agent on behalf of the service provider.

[0221] Ledger: A ledger used to store and verify user identity and transaction information, ensuring the integrity and immutability of the information.

[0222] Read / Write: Reader / writer, used to process information stored in the Ledger and send this information to the client application.

[0223] Stewards: Administrators, responsible for maintaining and managing the normal operation of the entire system and ensuring the security and stability of the system.

[0224] SovrinLedger: Sovrin Ledger, which is a specific ledger used to store and verify user identity and transaction information, may be a core component in the entire system.

[0225] IDs,Keys: Identity and keys. Identity is the unique identifier of a user in the system, while the key is the key information used for identity authentication and data encryption.

[0226] End pcints addresses: This is a misspelling of "end points addresses", which refers to the endpoint address, that is, the specific address for communication between users and service providers.

[0227] These parameters play different roles in the entire system architecture and together build a complete and secure identity authentication and transaction verification system.

[0228] Embodiment 3

[0229] In order to supplement a specific implementation example and provide relevant improved experimental data, we will build a fictitious scenario, including comparative data before and after implementation and corresponding illustrations. This will help demonstrate the effectiveness and innovation of the blockchain-based identity authentication fast consensus method and system.

[0230] Improvement of identity authentication system for online education platform

[0231] An online education platform that needs to authenticate students to ensure the accuracy and fairness of course exams and grading. The original identity authentication system is based on traditional asymmetric encryption methods, which has problems such as low processing efficiency and insufficient security.

[0232] Improvement measures:

[0233] The platform decided to adopt a blockchain-based identity authentication fast consensus method and system, introducing an improved elliptic curve cryptography algorithm (ECC), Schnorr multi-signature mechanism, SecureRaftID consensus algorithm and dynamic weight mechanism.

[0234] Experimental design:

[0235] Control group: Use the original asymmetric encryption method for identity authentication.

[0236] Experimental group: adopts the improved blockchain-based identity authentication method and system.

[0237] Experimental indicators:

[0238] Response time: The average time required to complete an authentication.

[0239] Throughput: The number of authentication requests that the system can process per unit time.

[0240] Security assessment: Test the security of the system by simulating attacks.

[0241] The experimental results are as follows:

[0242] index Control group Experimental Group Improved ratio Response time 500ms 200ms 60％ Throughput 100 times / second 300 times / second 200％ Safety Assessment medium high high

[0243] The improved blockchain-based identity authentication method and system significantly improved the identity authentication efficiency of the online education platform, shortened the response time by 60%, increased the throughput by 200%, and enhanced the security of the system by adopting more secure encryption and consensus mechanisms.

[0244] In summary, by introducing improved encryption variant algorithms and advanced encryption technology of the Sovrin architecture, strong encryption protection is provided for user identity information, thereby significantly improving the security of the system and the level of user privacy protection; by setting the validity period of the Token and the timestamp verification mechanism, it is ensured that all identity authentication requests are real-time and within the valid time range, effectively preventing expiration or replay attacks and ensuring the reliability of the system; by combining multiple Schnorr signature technology with the blockchain consensus mechanism, and introducing the SecureRaftID-lky consensus algorithm, it not only supports cross-chain identity authentication, but also meets the identity authentication needs of multiple entities under secure shared resources, enhancing the flexibility and scalability of the system; through the adaptive intelligent dynamic weight distribution system, the weight of the node in the identity authentication process is intelligently adjusted, thereby optimizing the consensus process and improving the system efficiency. Make full use of the characteristics of blockchain technology, such as immutability, decentralization and transparency, to ensure the fairness of the identity authentication process and the authenticity of identity information, while improving the system's anti-attack ability.

[0245] Through these beneficial effects, the blockchain-based identity authentication fast consensus method and system not only achieved technological innovation, but also brought significant improvements in practical applications, meeting the needs of the modern digital society for efficient, secure and scalable identity authentication solutions.

[0246] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine different embodiments or examples described in this specification and the features of different embodiments or examples, unless they are contradictory.

[0247] Any process or method description in the flow chart or otherwise described herein can be understood to represent a module, fragment or portion of a code including one or more executable instructions for implementing the steps of a specific logical function or process. And the scope of the preferred embodiment of the present application includes other implementations, in which the functions may not be performed in the order shown or discussed, including in a substantially simultaneous manner or in a reverse order according to the functions involved.

[0248] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of various changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A fast consensus method for identity authentication based on blockchain, characterized in that: The method comprises: Step S1: Obtain user identity information of the blockchain network, which includes but is not limited to Token, signature and timestamp. The Token is stored in a secure cache with a validity period of 10 minutes. The signature is used to verify the integrity of the information. The timestamp is used to verify the timeliness of the request with the current time. The time difference threshold is set to 60 seconds. Requests exceeding the threshold are deemed invalid. Step S2: Encrypt the user identity information using the improved encryption variant algorithm to generate a digital identity certificate; Step S3: The digital identity certificate is submitted to the blockchain network, and an improved identity consensus signature framework is constructed by closely combining the multi-Schnorr signature technology with the blockchain consensus mechanism; Step S4: Based on the improved identity consensus signature framework, an optimized SecureRaftID-lky consensus algorithm is introduced, and the optimized SecureRaftID-lky consensus algorithm realizes the special requirements of identity authentication under the secure access of multiple entities to shared resources; Step S5: Identify the user identity information by introducing an adaptive intelligent dynamic weight allocation system, and the identified identity information data is recorded in the blockchain network; Step S6: Encryption protection is performed through the advanced encryption algorithm of the Sovrin architecture to jointly implement a fast consensus method for identity authentication based on blockchain; In step S2, the improved encryption variant algorithm is as follows: S21, calculate the first layer encryption A = (x 3 +ax+b)modp; S22, calculate the second layer encryption B = (x 3 +a′x 2 +b′)modp′; S23, based on the values ​​of A and B, a bilinear pairing function C=(A+B)modp″ is obtained; Where x is the input value; a, a′ and b′, ​​b′ are all parameters, p and p′ are large prime numbers, and p″ is the bilinear pairing result; S24, obtaining a loop body based on the bilinear pairing function C and the above parameters; S25. Configure common private key; S26. Calculate a public key based on the common private key; S27, introducing a temporary private key and using the bilinear pairing function C for encryption; S28, using the common private key to derive a temporary public key for decryption; In step S3, the improved identity consensus signature framework includes: optimizing identity authentication and signature, optimizing consensus process and optimizing signature verification; The optimized identity authentication and signature are as follows: In the key generation, the node is defined as i and the private key is defined as s i , then the public key Q i =s i ×P, where P is the base point; a. Define the random number k i ; b. According to the random number k i Generate a temporary signature R i =k i ×P; c. Generate a collective signature S=∑s based on the temporary signature i ; The optimized consensus process is as follows: verifying the block, and after the consensus is met, the block is submitted to the blockchain network and verified by all nodes; The optimized signature verification is: optimized by combining the aggregate signature and the asynchronous verification method; The optimized SecureRaftID-lky consensus algorithm includes: identity authentication nodes IANs, identity authentication transactions IATs and dynamic member management DMM; The identity authentication nodes IANs are responsible for managing identity information and participating in the consensus process; The identity authentication transactions IATs are used for replication and negotiation operations in the network; The dynamic membership management DMM is used for nodes to seamlessly join or leave the network; The optimized SecureRaftID-lky consensus algorithm process is as follows: A1. Set the node type of the blockchain to identity authentication node or non-identity authentication node; A2. Set the data structure in the block chain authentication; A3. Set the node class in the block chain authentication; A4. Set the algorithm class in the block chain authentication; A5. Set the main function in the blockchain authentication; The encryption protection is carried out through the advanced encryption algorithm of the Sovrin architecture, including: subject roles, distributed identifiers DID, verifiable credentials VCs, distributed ledgers, nodes for network management and maintenance, and a trusted framework; The subject roles specifically include: Identity Owner IO, for individuals and entities who own and control their own user identity information; The identity verifier IV is used by institutions and service providers to verify the authenticity and validity of user identity information. The identity holder IH is used as an agent of the identity owner IO to manage and maintain the user identity information of the identity owner IO. The distributed identifier DID is used to identify the identity owner, is generated and assigned by the nodes in the blockchain network, and allows the identity owner IO to share identity information between different systems and applications; The verifiable credentials VCs are used to represent user identity information, are issued by the identity authenticater IV and held by the identity owner IO, and are tamper-proof and verifiable; The distributed ledger is used to store and manage user identity information through a blockchain network; The nodes managed and maintained by the network are used to verify new distributed identifiers DIDs and VCs, and are composed of institutions and organizations; The trust framework is used to standardize and manage identity authentication processes and standards.

2. According to claim 1, a fast consensus method for identity authentication based on blockchain is characterized in that: The improved identity consensus signature framework also includes: an optimized QuickChainID fast chain identity authentication algorithm, the steps are as follows: Verify the validity of the Token: T now <T exp Verify the validity of the signature: Verify(T,S)=True Verify the validity of the timestamp: ∣T rec -T req ∣≤threshold Where: T represents Token, S represents signature, T req Indicates the request timestamp, T rec Indicates that the server receives the timestamp, and the threshold is set to threshold. Obtain user identity information in the blockchain including: Token, signature and timestamp; Verify the validity of user identity information through the Verify algorithm. Input: Token, signature and request timestamp number, Output: Whether the authentication is successful; Verify the validity of the Token and set the current time to be less than the expiration time of the Token; Verify the validity of the signature and set Token and Signature to True; Verify the validity of the timestamp, set the difference between the current timestamp and the request timestamp to be no greater than the threshold, and return authentication success. Otherwise, return: if the request timestamp exceeds the threshold, authentication fails; if the signature verification fails, authentication fails; if the token expires, authentication fails. Request identity information through the main algorithm and output the identity authentication result; Get the token, signature and request timestamp from the requesting user identity information respectively; Call the Verify algorithm to verify the validity of identity information.

3. The fast consensus method for identity authentication based on blockchain according to claim 1 is characterized in that: In step S5, the adaptive intelligent dynamic weight allocation system is as follows: W i represents the initial weight of node i, T i A represents the number of user authentication transactions successfully processed by node i in a given time window, i is the activity of node i, C i is the network contribution of node i, The weight adjustment of node i is calculated by the following formula: W i new =f(T i ,A i ,C i ) Where f is a function used to calculate the new weight based on the performance and contribution of the node. The f function is: IN i new =In i +α×T i +β×A i +γ×C i Among them, α, β and γ are pre-defined parameters. Calculate the new weight W i new When , set the upper limit of weight W max and the lower limit W min , The final weight adjustment formula should be: W i new =max(min(W i +α×T i +β×A i +γ×C i ,W max ),W min )。 4. The fast consensus method for identity authentication based on blockchain according to claim 1 is characterized in that: The encryption protection through the advanced encryption algorithm of the Sovrin architecture also includes: The user sends the public key P, temporary public key T and encrypted identity information C to the server. The server uses the private key d server and the user's temporary public key T to generate a shared secret S′=d server ×T, The server uses the shared secret S′ to decrypt C and obtain the identity information I′: I′=DS′(C); The server verifies the validity of the decrypted identity information I′; Encryption is: C = ES(I) = I ⊕ H(S), where ⊕ represents the XOR operation and H is the improved hash function; decryption is: I′ = DS′(C) = C ⊕ H(S′), Wherein, DS′ is the decryption operation using the shared secret S′.

5. The identity authentication fast consensus system based on the blockchain-based identity authentication fast consensus method according to any one of claims 1 to 4 is characterized in that: The system comprises: Data acquisition module, used to obtain user identity information of blockchain network; A data encryption module, used for encrypting the user identity information; A data generation module, used to generate a digital identity certificate after encrypting the user identity information; A data submission module, used to submit the generated digital identity certificate to the blockchain network; A data combination module is used to closely combine the multi-Schnorr signature technology with the blockchain consensus mechanism; a data construction module is used to closely combine the above data combination modules to build an improved identity consensus signature framework; Identity consensus module, used for the optimized SecureRaftID-lky consensus algorithm to realize the special needs of identity authentication under the condition of multi-entity secure access to shared resources; A data allocation module, used to introduce an adaptive intelligent dynamic weight allocation system to identify the user identity information; A data storage module, used for recording the above-mentioned identified identity information data in the blockchain network; Data encryption module, used for encryption protection through the advanced encryption algorithm of the Sovrin architecture.

6. The blockchain-based identity authentication fast consensus system according to claim 5 is characterized in that: The system integrates high-concurrency processing, cross-chain interoperability and an extensible integration framework to achieve secure and efficient identity authentication and support multi-blockchain service integration, demonstrating significant technological progress.

Images