Cross-chain interoperation participant identity authentication method and system

Abstract

The invention relates to the technical field of block chains, and provides a cross-chain interoperation participant identity authentication method and system, and the method comprises the steps: receiving a cross-chain interoperation request message, carrying out the participant identity verification of the cross-chain interoperation request message, and forwarding the cross-chain interoperation request message to obtain a cross-chain interoperation response message, performing participant identity verification on the cross-chain interoperation response message; wherein the cross-chain interoperation request message comprises an initiating service chain of the cross-chain interoperation request, participant information of the initiating service chain, a response service chain to which the cross-chain interoperation request message needs to be delivered and participant information of the response service chain; the cross-chain interoperation response message comprises a cross-chain interoperation response service chain and participant information of the response service chain; the participant information comprises a unique identifier of a service chain to which the participant belongs, an identity account identifier and a unique identifier of a uniform digital identity of the participant. And the cross-chain docking cost of the service chain is reduced.

Description

Technical Field

[0001] The present invention belongs to the technical field of blockchain, and in particular to a method and system for authenticating the identity of a subject participating in cross-chain interoperability. Background Art

[0002] The statements in this section merely provide background information related to the present invention and do not necessarily constitute prior art.

[0003] With the development of blockchain technology, various blockchain systems or platforms that use the same or different data models and consensus algorithms have gradually emerged. It is difficult for different blockchain platforms to communicate or interoperate effectively, which will restrict the development of blockchain. In this context, a variety of mainstream cross-chain technologies have been developed, including notary mechanism, side chain mechanism, relay chain mechanism, and hash time lock mechanism. The notary mechanism relies on trust in the notary; the side chain mechanism requires the side chain to fully possess the functions of the main chain to support the verification of the main chain information, and it is difficult to flexibly support cross-chain of multiple types of blockchains; the hash time lock mechanism is mainly suitable for cross-chain exchange scenarios of digital assets, and the use scenarios are limited. The relay chain mechanism combines the notary and side chain mechanisms, and can support cross-chain communication and interoperability of different blockchains.

[0004] The above cross-chain mechanisms all support cross-chain interoperability in different ways, but they focus more on the verification of the cross-chain transaction itself. For example, they verify whether the transaction is valid by synchronizing block header information and SPV proof of the transaction. They cannot support unified authentication of the identity of the subjects participating in the cross-chain interoperability, which may lead to the loss of blockchain digital assets due to malicious forgery of the identity of the cross-chain interoperability participants or cross-chain transaction disputes due to unclear identities of the cross-chain transaction participants. Summary of the invention

[0005] In order to solve the technical problems existing in the above-mentioned background technology, the present invention provides a method and system for authenticating the identity of the subject of cross-chain interoperation participation, which authenticates the identity of the subject of cross-chain interoperation participation in the cross-chain message through the relay chain in the cross-chain request and cross-chain response stages, so that there is no need to connect the account identity system when cross-chain between business chains, and only the subject authority issue within the business chain needs to be paid attention to, thereby reducing the cost of cross-chain connection of business chains.

[0006] In order to achieve the above object, the present invention adopts the following technical solution:

[0007] The first aspect of the present invention provides a method for cross-chain interoperability participant identity authentication, which is applied to the relay chain and includes:

[0008] Receive a cross-chain interoperability request message, and after the cross-chain interoperability request message passes the identity authentication of the participant, forward the cross-chain interoperability request message to obtain a cross-chain interoperability response message, and perform the identity authentication of the participant on the cross-chain interoperability response message;

[0009] Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier of the subject in the business chain, and the unique identifier of the subject's unified digital identity.

[0010] Furthermore, after the identity of the participant in the cross-chain interoperation request message is authenticated, the cross-chain interoperation request message is stored as a certificate;

[0011] After the cross-chain interoperability response message is authenticated by the participating subject, the cross-chain interoperability response message is stored.

[0012] Furthermore, it also includes: receiving the signature and public key generated by the subject for creating a unified digital identity, and after the subject's signature is verified by using the public key, generating and sending the subject's unified digital identity unique identifier; responding to the business chain identity binding transaction returned by the subject, after the business chain identity binding transaction is verified, mapping and binding the unique identifier of the business chain to which the subject belongs and the identity account identifier of the subject in the business chain to the subject's unified digital identity unique identifier;

[0013] The business chain identity binding transaction includes the unique identifier of the business chain to which the subject belongs, the identity account identifier of the subject in the business chain, and identity certification information;

[0014] The business chain identity binding transaction signature verification includes: after verifying the signature of the subject's unified digital identity unique identifier, based on the unique identifier of the business chain to which the subject belongs, calling the corresponding business chain subject authentication rule smart contract to verify the subject's ownership of the identity account identifier.

[0015] Furthermore, the cross-chain interoperability request message also includes a cross-chain request message transaction unique identifier, a message body to be delivered by the cross-chain request message, and a signature of the cross-chain request message by the unified digital identity private key of the participant initiating the business chain;

[0016] The cross-chain interoperability response message also includes a cross-chain response message transaction unique identifier, a message body to be delivered by the cross-chain response message, and a signature of the cross-chain response message by the unified digital identity private key of the participant in the response business chain.

[0017] A second aspect of the present invention provides a cross-chain interoperability participant identity authentication method, which is applied to a cross-chain interoperability response service chain, comprising:

[0018] Receive the cross-chain interoperability request message after the participant identity verification, verify the cross-chain interoperability request message, and after the verification, construct and send a cross-chain interoperability response message to authenticate the participant identity of the cross-chain interoperability response message;

[0019] Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier of the subject in the business chain, and the unique identifier of the subject's unified digital identity.

[0020] A third aspect of the present invention provides a method for authenticating the identity of a cross-chain interoperability participant, comprising:

[0021] Cross-chain interoperability initiates business chain creation and sends cross-chain interoperability request messages;

[0022] After the relay chain authenticates the participant identity of the cross-chain interoperation request message, it forwards the cross-chain interoperation request message;

[0023] The cross-chain interoperability response business chain verifies the cross-chain interoperability request message, and after the verification is passed, constructs and sends a cross-chain interoperability response message;

[0024] The relay chain authenticates the identity of the participant in the cross-chain interoperability response message, and sends the cross-chain interoperability response message to the cross-chain interoperability initiation business chain after the verification is passed;

[0025] Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier and the unique identifier of the subject's unified digital identity.

[0026] A fourth aspect of the present invention provides a cross-chain interoperability participant identity authentication system, including a cross-chain interoperability response service chain, a cross-chain interoperability initiation service chain, and a relay chain;

[0027] The cross-chain interoperation initiation service chain is used to create and send a cross-chain interoperation request message;

[0028] The relay chain is used to forward the cross-chain interoperation request message after the participant identity authentication of the cross-chain interoperation request message is passed;

[0029] The cross-chain interoperability response service chain is used to verify the cross-chain interoperability request message, and after the verification is passed, construct and send a cross-chain interoperability response message;

[0030] The relay chain is also used to authenticate the identity of the participant of the cross-chain interoperation response message, and send the cross-chain interoperation response message to the cross-chain interoperation initiation business chain after the verification is passed;

[0031] Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier and the unique identifier of the subject's unified digital identity.

[0032] The fifth aspect of the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps in a cross-chain interoperability participant identity authentication method as described above.

[0033] The sixth aspect of the present invention provides a computer device, including a computer-readable storage medium, a processor, and a computer program stored on the computer-readable storage medium and executable on the processor, wherein when the processor executes the program, the steps in the cross-chain interoperability participant identity authentication method as described above are implemented.

[0034] The seventh aspect of the present invention provides a computer program product, which is a computer program product containing a computer program. When the processor executes the computer program, it implements the steps in the cross-chain interoperability participant identity authentication method as described above.

[0035] Compared with the prior art, the present invention has the following beneficial effects:

[0036] The present invention authenticates the identities of the cross-chain interoperation participants in the cross-chain messages through the relay chain during the cross-chain request and cross-chain response stages, so that when cross-chain between business chains, there is no need to connect the account identity system, and only the subject authority issues within the business chain need to be paid attention to, thereby reducing the cross-chain connection cost of the business chain.

[0037] The present invention provides a unified digital identity unique identifier and identity key for the subjects participating in the cross-chain through the relay chain, and binds the cross-chain participating subjects to the unified digital identity after the identity verification of the relevant business chain, thereby supporting mutual recognition and trust of the subject identities during the cross-chain process.

[0038] The present invention deploys the business chain subject authentication rules to the relay chain through smart contracts, thereby supporting different types of business chains to enter the cross-chain system.

[0039] The present invention uses the relay chain to store cross-chain messages, so that the cross-chain interoperability process and the identities of the cross-chain interoperability participants can be retroactively audited to avoid cross-chain interoperability disputes. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] The accompanying drawings in the specification, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0041] Figure 1 This is a flow chart of a method for cross-chain interoperability participant identity authentication according to the first embodiment of the present invention;

[0042] Figure 2 This is a flow chart of unified digital identity registration for cross-chain participants in Embodiment 1 of the present invention;

[0043] Figure 3 This is a flow chart of cross-chain participant business chain identity binding in Embodiment 1 of the present invention;

[0044] Figure 4 This is a flowchart of the cross-chain interoperability request phase of the first embodiment of the present invention;

[0045] Figure 5 This is a flow chart of the cross-chain interoperability response phase of the first embodiment of the present invention;

[0046] Figure 6 This is a schematic diagram of a cross-chain request message according to Embodiment 1 of the present invention;

[0047] Figure 7 This is a schematic diagram of a cross-chain response message according to the first embodiment of the present invention;

[0048] Figure 8 This is a schematic diagram of participant information in Embodiment 1 of the present invention;

[0049] Fig. 9 This is a structural diagram of a cross-chain interoperability participant identity authentication system according to Embodiment 1 of the present invention;

[0050] Fig.10 It is a structural diagram of a computer device according to Embodiment 6 of the present invention. DETAILED DESCRIPTION

[0051] To make the purpose, technical solution and advantages of the embodiments of the present invention more clear, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0052] It should be noted that the following detailed descriptions are all illustrative and intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meanings as those commonly understood by those skilled in the art to which the present invention belongs.

[0053] Embodiment 1

[0054] The present embodiment provides a method for authenticating the identity of a cross-chain interoperability participant, which provides a unified digital identity registration service to the cross-chain participant through a relay chain, provides a unified digital identity and business chain account identification binding service by loading the account authentication rules of the cross-chain access to the business chain in the smart contract, and realizes the anchoring of the unified digital identity of the relay chain and the business chain account identification; constructs a unified cross-chain interoperability message format, provides the unified digital identity information and business chain account information of the cross-chain interoperability participant in the cross-chain message, and forwards the cross-chain message after the relay chain authenticates the identity of the cross-chain interoperability participant, thereby realizing the trustworthiness of the identity of the cross-chain interoperability participant and the cross-chain mutual recognition of the subject identity, and the relay chain stores the cross-chain message, thereby supporting the traceability and review of the cross-chain interoperability process and the identity of the cross-chain interoperability participant.

[0055] This embodiment provides a method for cross-chain interoperability participant identity authentication, such as Figure 1 As shown, the following steps are included:

[0056] Step 1: Business link input.

[0057] During the business chain access phase, the relay chain creates a unique business chain identifier ChainID for the business chain, registers the cross-chain message routing information, business chain identifier authentication rules, transaction authentication rules, etc. of the business chain in the relay chain through smart contracts, and deploys the subject authentication rules of the business chain to the relay chain in the form of smart contracts to support the relay chain's authentication of the subject identity of the business chain. For example, a business chain that uses a public key cryptographic algorithm signature for identity authentication should inject the cryptographic algorithm type and corresponding signature verification rules used by the business chain into the smart contract, as well as the mapping derivation method of the business chain subject account identifier and the subject public key. The content of the smart contract is public and cannot be tampered with, thereby ensuring the credibility of the relay chain's identity authentication for the access chain.

[0058] Step 2: The cross-chain participants register a unified digital identity. The cross-chain participants generate a unified digital identity public and private key, and apply to the relay chain to obtain the unified digital identity unique identifier UID. Figure 2As shown, it specifically includes step 201, step 202, step 203, step 204, step 205, and step 206.

[0059] Step 201: The cross-chain participants generate a unified digital identity public key U_PK and private key U_SK.

[0060] Step 202: The cross-chain participant applies for a random number r from the relay chain.

[0061] Step 203: The cross-chain participant uses the private key U_SK to sign the random number r to obtain the signature data r_sig, and submits the signature r_sig and the public key U_PK to the relay chain within a certain time limit to apply for a unified digital identity.

[0062] Step 204: After the relay chain receives the information submitted by the cross-chain participant within the specified time limit, it verifies the signature of the information. If the signature verification is passed, it proceeds to step 205, otherwise it proceeds to step 202.

[0063] Step 205: The relay chain generates a unique unified digital identity identifier UID and records the mapping relationship between the unified digital identity identifier UID and the subject public key U_PK in the relay chain.

[0064] Step 206: The relay chain returns the unified digital identity unique identifier UID to the cross-chain participant.

[0065] Step 3: Bind the cross-chain participant's business chain identity, and bind the cross-chain participant's identity on the business chain to the relay chain's unified digital identity unique identifier UID. Figure 3 As shown, it specifically includes step 301, step 302, step 303, and step 304.

[0066] Step 301: The cross-chain participant uses the unified digital identity unique identifier UID in the relay chain to initiate a business chain identity binding transaction, provides the relay chain with the business chain unique identifier chainID, the business chain identity account identifier AccID, and the business chain identity certification information, and uses U_SK to sign the transaction.

[0067] Among them, the business chain identity information should be able to verify the subject's ownership of AccID through the subject authentication rule smart contract of the business chain in the relay chain; taking the Ethereum type business chain as an example, the business chain identity information can be the signature of the subject's identity account in the business chain with the public key and the private key of the identity account on AccID. The corresponding subject authentication rule smart contract can deduce and calculate whether the subject's AccID has a mapping relationship with the public key based on the public key, and can use the public key verification to prove the subject's ownership of AccID and public key.

[0068] Step 302: The relay chain verifies the ownership relationship between the transaction verification subject and the unified digital identity corresponding to the UID; based on the chainID submitted by the subject, the corresponding business chain subject authentication rule smart contract is called to verify the ownership relationship of the subject to the AccID.

[0069] Step 303: Determine whether the authentication is passed, if yes, proceed to step 304, otherwise the registration fails and ends.

[0070] Step 304: The relay chain maps and binds the subject’s account identifier AccID in the business chain and the chainID to which it belongs to the UID.

[0071] Step 4: In the cross-chain interoperability request phase, the cross-chain interoperability request business chain constructs a cross-chain request message and sends it to the relay chain. The relay chain verifies the identity of the participant and other necessary information in the message. After verification, the cross-chain message is stored and forwarded to the response chain declared in the cross-chain request message. Figure 4 As shown, it specifically includes step 401, step 402, step 403, step 404, step 405, and step 406.

[0072] In the cross-chain interoperability request phase and the cross-chain interoperability response phase, the cross-chain message source chain and the cross-chain message response chain use a unified cross-chain interoperability message format for communication. The cross-chain interoperability message format includes a cross-chain request message and a cross-chain response message. The business chains participating in cross-chain interoperation refer to the chain that initiates the cross-chain interoperability request (cross-chain interoperability request business chain) and the business chain that receives the cross-chain interoperability request and responds to the cross-chain interoperability request (cross-chain interoperability response business chain).

[0073] Step 401: The cross-chain interoperability request business chain constructs a cross-chain request message, declares the cross-chain message transaction unique identifier, the identity identifier of the chain and the identity information of the participating entity, specifies the identity information of each cross-chain message response chain participating entity, etc. For privacy data involved in the message Payload, it can be encrypted using the encryption method negotiated with the cross-chain response business chain, and the cross-chain request message is sent to the relay chain.

[0074] Among them, the cross-chain request message is a cross-chain interoperation request message that initiates the construction of the business chain and is verified and forwarded by the relay chain. Figure 6As shown, the cross-chain request message structure includes but is not limited to the following information: CrossTx_ID cross-chain request message transaction unique identifier, From cross-chain interoperation request initiating chain and initiating chain participant information (using Chain_Acc_info structure), To cross-chain message to be delivered to each response chain and each chain designated participant information (using Chain_Acc_info structure array or list), Payload cross-chain request message to be delivered message body, Sig cross-chain request message source chain participant private key, U_SK signature of cross-chain request message, and other parameters required for cross-chain interoperation.

[0075] Among them, the Chain_Acc_info structure is used to identify the business chain participating in the cross-chain interoperation and the subject identity information of the chain participating in the cross-chain interoperation, such as Figure 8 As shown, including but not limited to the following information: ChainID is the unique identifier of the business chain participating in cross-chain interoperation, UID is the unified digital identity unique identifier of the subject participating in cross-chain interoperation on this chain, and AccID is the account identifier of the subject participating in cross-chain interoperation on this chain.

[0076] Step 402: The relay chain verifies the cross-chain request message, such as Figure 4 As shown, it specifically includes step 4021, step 4022, and step 4023.

[0077] Step 4021: The relay chain verifies whether the business chain identity is consistent with the ChainID carried in the From message based on the registered link routing information.

[0078] Step 4022: The relay chain obtains the unified digital identity public key U_PK of the subject registered in the relay chain based on the UID information in From, and uses the public key to verify the message signature Sig to verify whether the participating subject of the cross-chain interoperability request submitted by the business chain corresponds to the UID declared in the cross-chain message.

[0079] Step 4023: The relay chain verifies whether the subject's account identifier in the business chain is consistent with the AccID declared in the From message based on the UID bound to the relay chain and the account identifier mapping of each business chain.

[0080] Step 403: Determine whether step 402 is verified. If so, it can be determined that the identity of the cross-chain interoperability request business chain participant is consistent with the declaration in the cross-chain message. After the relay chain further verifies other necessary information of the cross-chain message, it proceeds to step 404; otherwise, it proceeds to step 406.

[0081] Step 404: The relay chain stores the cross-chain request message in the relay chain using the CrossTx_ID of the message as an identifier.

[0082] Step 405: The relay chain forwards this cross-chain request message to each response chain declared in the message To.

[0083] Step 406: Return the cross-chain message authentication failure to the cross-chain interoperability request business chain.

[0084] Step 5: In the cross-chain interoperability response phase, the cross-chain interoperability response business chain verifies whether the cross-chain interoperability related subject has relevant authority over the resources requested by the cross-chain interoperability. After the verification is passed, it responds to the cross-chain interoperability request and sends the cross-chain interoperability response message to the relay chain. The relay chain verifies the message and stores the message before forwarding it to the cross-chain interoperability request business chain. Specifically, it includes steps 501, 502, 503, 504, 505, 506, 507, 508, and 509.

[0085] Among them, the cross-chain response message is a message constructed by the business chain that receives the cross-chain interoperability request to respond to the cross-chain interoperability request, which is forwarded to the cross-chain request initiating business chain after verification by the relay chain. Figure 7 As shown, the cross-chain response message structure includes but is not limited to the following information: CrossTx_ID cross-chain response message transaction unique identifier, Responder cross-chain interoperability response chain and response chain participant information (using Chain_Acc_info structure), Payload cross-chain response message to be delivered message body, Sig' cross-chain response message response chain participant private key U_SK' signature on the cross-chain response message. Among them, the cross-chain message response chain participant can be consistent with the cross-chain message request chain participant, in which case the unified digital identity private key U_SK and U_SK' used to sign each message are consistent.

[0086] Step 501: The responding business chain that receives the cross-chain request message obtains the identity of the participant of the request chain based on the From information declared in the request, retrieves the specified participant information of this chain contained in the request message To, and parses the resource information of this chain accessed by the cross-chain interoperability request contained in the message body Payload, so as to verify whether the participant of the request chain and the participant of this chain specified in the request message have the authority to operate the resources of this chain.

[0087] Step 502: Determine whether the verification in step 501 is passed, if yes, proceed to step 503, otherwise proceed to step 504.

[0088] Step 503: The response business chain can respond according to the requirements of the cross-chain request message, and construct a cross-chain response message and send it to the relay chain. Among them, the CrossTx_ID in the cross-chain response message should be consistent with the CrossTx_ID in the cross-chain request message.

[0089] Step 504: The response business chain replies to the relay chain regarding the cross-chain interoperability failure.

[0090] Step 505: The relay chain verifies the received cross-chain response message, such as Figure 5 As shown, it specifically includes step 5051, step 5052, step 5053, and step 5054.

[0091] Step 5051: After the relay link receives the cross-chain response message sent by the response chain, it verifies whether the business chain identity is consistent with the ChainID carried in the message Responder based on the link routing information registered by the relay chain.

[0092] Step 5052: The relay chain obtains the cross-chain request message stored in the relay chain based on the CrossTx_ID of the message, and verifies whether the Chain_Acc_info of the Responder replied in the response business chain is one of the Chain_Acc_info declared in the request message To.

[0093] Step 5053: The relay chain obtains the unified digital identity public key U_PK' of the subject registered in the relay chain based on the UID' information in the Responder, and uses the public key to verify the message signature Sig' to verify whether the cross-chain interoperability response participant submitted by the responding business chain corresponds to the UID' declared in the response message.

[0094] Step 5054: The relay chain verifies whether the account identifier of the subject in the response business chain is consistent with the AccID' declared in the message Responder based on the UID' bound to the relay chain and the account identifier mapping of each business chain.

[0095] Step 506: Determine whether the verification in step 505 is passed. If so, it can be determined that the participating entity in the cross-chain response message is consistent with the identity of the participating entity of the chain specified in the cross-chain request message. After the relay chain further verifies other necessary information of the cross-chain message, it proceeds to step 507; otherwise, it proceeds to step 508.

[0096] Step 507: The relay chain also stores the cross-chain response message in the relay chain using the CrossTx_ID of the message as an identifier.

[0097] Step 508: The relay chain responds to the cross-chain request initiating business chain with a cross-chain interoperability failure.

[0098] Step 509: The relay chain forwards the cross-chain response message to the cross-chain interoperation request business chain, and the cross-chain interoperation request business chain completes the cross-chain interoperation processing.

[0099] This embodiment provides a method for authenticating the identity of a cross-chain interoperability participant, which provides a unified digital identity identifier and identity key for the participants in the cross-chain through a relay chain, and binds the cross-chain participant to the unified digital identity after identity authentication of the relevant business chain, thereby supporting mutual recognition and trust of the subject identity during the cross-chain process.

[0100] This embodiment provides a method for authenticating the identity of a cross-chain interoperability participant in a cross-chain message through a relay chain during the cross-chain request and cross-chain response stages. This eliminates the need to connect account identity systems when cross-chaining between business chains, and only requires attention to the subject authority issues within the business chain, thereby reducing the cost of cross-chain connection between business chains.

[0101] This embodiment provides a method for authenticating the identity of a cross-chain interoperability participant, which deploys the business chain subject authentication rules to the relay chain through smart contracts, thereby supporting different types of business chains to enter the cross-chain system.

[0102] This embodiment provides a method for authenticating the identity of a cross-chain interoperability participant, which stores cross-chain messages through a relay chain, thereby enabling a retrospective audit of the cross-chain interoperability process and the identity of the cross-chain interoperability participant to avoid cross-chain interoperability disputes.

[0103] Embodiment 2

[0104] This embodiment provides a method for authenticating the identity of a cross-chain interoperability participant, which is applied to a relay chain and includes:

[0105] Receive a cross-chain interoperability request message, and after the cross-chain interoperability request message passes the identity authentication of the participant, forward the cross-chain interoperability request message to obtain a cross-chain interoperability response message, and perform the identity authentication of the participant on the cross-chain interoperability response message;

[0106] Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier and the unique identifier of the subject's unified digital identity.

[0107] Furthermore, after the identity of the participant in the cross-chain interoperation request message is authenticated, the cross-chain interoperation request message is stored as a certificate;

[0108] After the cross-chain interoperability response message is authenticated by the participating subject, the cross-chain interoperability response message is stored.

[0109] Furthermore, it also includes: receiving the subject signature and public key, using the public key to verify the subject signature, generating and sending the subject's unified digital identity unique identifier to obtain the business chain identity binding transaction signature returned by the subject, and after the business chain identity binding transaction signature is verified, mapping and binding the unique identifier of the business chain to which the subject belongs and the identity account identifier to the subject's unified digital identity unique identifier;

[0110] The business chain identity binding transaction includes the unique identifier of the business chain to which the subject belongs, the identity account identifier and the identity certification information;

[0111] The business chain identity binding transaction signature verification includes: based on the unique identifier of the business chain to which the subject belongs, calling the corresponding business chain subject authentication rule smart contract to verify the subject's ownership of the identity account identifier.

[0112] Furthermore, the cross-chain interoperability request message also includes a cross-chain request message transaction unique identifier, a message body to be delivered by the cross-chain request message, a private key of a participant in the business chain initiated by the cross-chain request message, and a signature on the cross-chain request message;

[0113] The cross-chain interoperability response message also includes a cross-chain response message transaction unique identifier, a message body to be delivered by the cross-chain response message, a private key of a participant in the cross-chain response message response business chain, and a signature for the cross-chain response message.

[0114] It should be noted here that the various steps in this embodiment correspond one-to-one to the various steps in Example 1, and the specific implementation process is the same, which will not be repeated here.

[0115] Embodiment 3

[0116] This embodiment provides a method for authenticating the identity of a cross-chain interoperability participant, which is applied to a cross-chain interoperability response service chain, and includes:

[0117] Receive the cross-chain interoperability request message after the participant identity verification, verify the cross-chain interoperability request message, and after the verification, construct and send a cross-chain interoperability response message to authenticate the participant identity of the cross-chain interoperability response message;

[0118] Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier and the unique identifier of the subject's unified digital identity.

[0119] It should be noted here that the various steps in this embodiment correspond one-to-one to the various steps in Example 1, and the specific implementation process is the same, which will not be repeated here.

[0120] Embodiment 4

[0121] This embodiment provides a cross-chain interoperability participant identity authentication system, such as Fig. 9 As shown, it specifically includes a cross-chain interoperability initiation business chain (i.e., a cross-chain interoperability request business chain) 601, a cross-chain interoperability response business chain 602, a cross-chain gateway 603, and a relay chain 604.

[0122] The cross-chain interoperability initiation business chain 601 is a business chain that initiates a cross-chain interoperability request. It constructs a cross-chain request message according to the cross-chain interoperability requirements and sends the cross-chain request message to the relay chain 604 through the cross-chain gateway 603.

[0123] The cross-chain interoperability response business chain 602 is a business chain that responds to cross-chain interoperability requests. It receives the cross-chain request message forwarded by the relay chain 604 through the cross-chain gateway 603, verifies whether the relevant participants of the cross-chain request message have the operation authority for the requested chain resources, and executes the cross-chain interoperability request if the verification is successful, and constructs a cross-chain response message and forwards it to the relay chain 604 through the cross-chain gateway 603.

[0124] The cross-chain gateway 603 connects the cross-chain interoperability initiation business chain 601 and the relay chain 604, or connects the cross-chain interoperability response business chain 602 and the relay chain 604, and provides routing and forwarding of cross-chain messages between the business chain and the relay chain 604.

[0125] The relay chain 604 provides services such as access management of the business chain, unified digital identity registration of cross-chain entities and business chain identity binding, verification and forwarding of cross-chain messages, etc., including a business chain registration module 6041, a unified digital identity module 6042, a cross-chain message processing module 6043, and a cross-chain message forwarding module 6044.

[0126] The business chain registration module 6041 provides business chain access registration services, provides a unique identifier for the accessed business chain, registers the chain identity authentication of the accessed business chain through smart contracts, and chain transaction authentication rules.

[0127] The unified digital identity module 6042 provides a unified digital identity UID registration service for cross-chain participants, and deploys the subject authentication rules of the business chain to the relay chain in the form of a smart contract, supports the relay chain to authenticate the identity of the business chain subject, and binds the identity identifier of the cross-chain participant to the unified digital identity of the subject.

[0128] The cross-chain message processing module 6043 receives the cross-chain request message or cross-chain response message forwarded by the access business chain through the cross-chain gateway, calls the business chain registration module and the unified digital identity module to verify the business chain identity, the cross-chain participant identity and other necessary verification information, and stores the cross-chain message.

[0129] The cross-chain message forwarding module 6044 receives the cross-chain message verified by the cross-chain message processing module, and routes and forwards it to the cross-chain gateway corresponding to the relevant business chain.

[0130] It should be noted here that each execution end in this embodiment corresponds one-to-one to each step in Example 1, and the specific implementation process is the same, which will not be repeated here.

[0131] Embodiment 5

[0132] This embodiment provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the steps in the cross-chain interoperability participant identity authentication method as described in the above-mentioned embodiment two or three are implemented.

[0133] Embodiment 6

[0134] This embodiment provides a computer device, such as Fig.10 As shown, it includes a computer-readable storage medium 1003, a processor 1001, a communication interface 1002, and a computer program stored on the computer-readable storage medium 1003 and executable on the processor 1001, wherein the processor 1001, the communication interface 1002, and the computer-readable storage medium 1003 can be connected via a bus or other means. Among them, the communication interface 1002 is used to receive and send data, and when the processor 1001 executes the program, the steps in the method for identity authentication of a cross-chain interoperability participant as described in the above-mentioned embodiment 2 or 3 are implemented.

[0135] Embodiment 7

[0136] This embodiment provides a computer program product, which is a computer program product containing a computer program. When the processor executes the computer program, the steps in the cross-chain interoperability participant identity authentication method as described in the above-mentioned embodiment two or three are implemented.

[0137] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0138] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0139] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0140] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for cross-chain interoperability participant identity authentication, characterized in that: Applied to the relay chain, including: Receive a cross-chain interoperability request message, and after the cross-chain interoperability request message passes the identity authentication of the participant, forward the cross-chain interoperability request message to obtain a cross-chain interoperability response message, and perform the identity authentication of the participant on the cross-chain interoperability response message; Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier of the subject in the business chain, and the unique identifier of the subject's unified digital identity.

2. A method for cross-chain interoperability participant identity authentication as claimed in claim 1, characterized in that: After the identity of the participant in the cross-chain interoperation request message is authenticated, the cross-chain interoperation request message is stored as a certificate; After the identity of the participant in the cross-chain interoperability response message is authenticated, the cross-chain interoperability response message is stored.

3. A method for cross-chain interoperability participant identity authentication as claimed in claim 1, characterized in that: Also includes: Receive the signature and public key generated by the subject for creating a unified digital identity, and after the subject's signature is verified with the public key, generate and send the subject's unified digital identity unique identifier; respond to the business chain identity binding transaction returned by the subject, after the business chain identity binding transaction is verified, map and bind the unique identifier of the business chain to which the subject belongs and the identity account identifier of the subject in the business chain to the subject's unified digital identity unique identifier; The business chain identity binding transaction includes the unique identifier of the business chain to which the subject belongs, the identity account identifier of the subject in the business chain, and identity certification information; The business chain identity binding transaction verification includes: after verifying the signature of the subject's unified digital identity unique identifier, based on the unique identifier of the business chain to which the subject belongs, calling the corresponding business chain subject authentication rule smart contract to verify the subject's ownership of the identity account identifier.

4. A method for cross-chain interoperability participant identity authentication as claimed in claim 1, characterized in that: The cross-chain interoperability request message also includes a cross-chain request message transaction unique identifier, a message body to be delivered by the cross-chain request message, and a signature for the cross-chain request message; The cross-chain interoperability response message also includes a cross-chain response message transaction unique identifier, a message body to be delivered by the cross-chain response message, and a signature for the cross-chain response message.

5. A method for cross-chain interoperability participant identity authentication, characterized in that: Applied to cross-chain interoperability response business chain, including: Receive the cross-chain interoperability request message after the participant identity verification, verify the cross-chain interoperability request message, and after the verification, construct and send a cross-chain interoperability response message to authenticate the participant identity of the cross-chain interoperability response message; Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier of the subject in the business chain, and the unique identifier of the subject's unified digital identity.

6. A method for cross-chain interoperability participant identity authentication, characterized in that: include: Cross-chain interoperability initiates business chain creation and sends cross-chain interoperability request messages; After the relay chain authenticates the participant identity of the cross-chain interoperation request message, it forwards the cross-chain interoperation request message; The cross-chain interoperability response business chain verifies the cross-chain interoperability request message, and after the verification is passed, constructs and sends a cross-chain interoperability response message; The relay chain performs identity authentication of the participant on the cross-chain interoperability response message; Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier of the subject in the business chain, and the unique identifier of the subject's unified digital identity.

7. A cross-chain interoperability participant identity authentication system, characterized in that: Including cross-chain interoperability response business chain, cross-chain interoperability initiation business chain and relay chain; The cross-chain interoperation initiation service chain is used to create and send a cross-chain interoperation request message; The relay chain is used to forward the cross-chain interoperation request message after the participant identity authentication of the cross-chain interoperation request message is passed; The cross-chain interoperability response service chain is used to verify the cross-chain interoperability request message, and after the verification is passed, construct and send a cross-chain interoperability response message; The relay chain is also used to authenticate the participant identity of the cross-chain interoperability response message; Among them, the cross-chain interoperability request message includes the initiating business chain of the cross-chain interoperability request, the participating subject information of the initiating business chain, the responding business chain to which the cross-chain interoperability request message needs to be delivered, and the participating subject information of the responding business chain; the cross-chain interoperability response message includes the responding business chain of the cross-chain interoperability and the participating subject information of the responding business chain; the participating subject information includes the unique identifier of the business chain to which the participating subject belongs, the identity account identifier of the subject in the business chain, and the unique identifier of the subject's unified digital identity.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps in a cross-chain interoperability participant identity authentication method as described in any one of claims 1 to 4 or claim 5 are implemented.

9. A computer device comprising a computer-readable storage medium, a processor, and a computer program stored on the computer-readable storage medium and executable on the processor, characterized in that: When the processor executes the program, the steps in the cross-chain interoperability participant identity authentication method as described in any one of claims 1 to 4 or claim 5 are implemented.

10. A computer program product, which is a computer program product containing a computer program, characterized in that When the processor executes the computer program, the steps in the cross-chain interoperability participant identity authentication method as described in any one of claims 1 to 4 or claim 5 are implemented.

Images