Identity verification method and device based on microfluidic technology

Abstract

The invention provides an identity verification method and device based on a micro-fluidic technology, the device comprises a micro-fluidic chip, a computer, and a first MCU controller and a second MCU controller which are embedded in the micro-fluidic chip, first encryption is carried out through the second MCU controller, then second encryption is carried out through the computer, and a ciphertext is stored in a block chain; according to the invention, automatic collection, amplification, encryption processing and data storage of blood DNA can be completed through the micro-fluidic chip, and safety verification of identity information is realized through a computer and block chain technology; according to the invention, AES-CCM and ECC elliptic curve encryption algorithms are adopted, and role-based access control is combined, so that remote and safe data transmission and processing are realized; portable biological detection and identity verification can be realized in an environment separated from a laboratory, and the security and non-tampering property of data are guaranteed by multiple encryption and block chain technologies.

Description

Technical Field

[0001] The present invention relates to the technical field of identity authentication, and in particular to an identity authentication method and device based on microfluidics technology. Background Art

[0002] With the rapid development of biometrics and microfluidics, DNA-based identity authentication technology has been gradually applied to medical diagnosis, security defense, forensics and other fields.

[0003] Traditional identity authentication technologies rely on biometric features such as fingerprints and facial recognition, but these features are easily affected by environmental factors or can be counterfeited. In contrast, DNA identity authentication is unique, highly accurate, and difficult to tamper with, so it is generally regarded as the preferred option for future identity authentication technology. However, existing DNA identity authentication systems often rely on complex laboratory equipment and involve a series of steps such as DNA extraction, separation, amplification, and analysis, which cannot meet the requirements of portability and real-time performance.

[0004] Microfluidic technology has gradually become an important means to achieve portability and automation of DNA identity verification due to its advantages of miniaturization, high throughput and low reagent consumption. Microfluidic chips can separate, mix and react samples on a microscale, and have the potential to efficiently complete DNA detection and analysis. At present, microfluidic chips have been applied to clinical diagnosis, DNA detection, environmental monitoring and other fields, and have shown great application prospects. However, the application of existing microfluidic systems in DNA identity verification still faces some technical bottlenecks, especially how to integrate multi-step DNA processing processes (such as extraction, PCR amplification, detection) on the chip and how to ensure the security of data during the identity verification process, which urgently needs further optimization and improvement.

[0005] Moreover, current DNA authentication devices are mainly controlled and transmitted via wired connections, which limits the portability and application scenarios of the system. In addition, the data generated during the DNA test is vulnerable to attack or theft during transmission and storage. The existing system lacks an effective security protection mechanism, which puts the user's biometric information at risk of being illegally tampered with or stolen. Especially in the context of the increasingly developed data encryption and blockchain technology, how to combine these emerging technologies with the DNA authentication system to enhance the security, reliability and transparency of data has become an urgent problem to be solved. Summary of the invention

[0006] In view of the deficiencies of the prior art, the present invention provides an identity verification method and device based on microfluidics technology.

[0007] The technical solution of the present invention is: an identity authentication device based on microfluidic technology, comprising a microfluidic chip, a computer, and a first MCU controller and a second MCU controller embedded in the microfluidic chip;

[0008] The microfluidic chip includes a detection chamber, and the detection chamber is connected to a plurality of flow channels; each of the flow channels is provided with a sampling microneedle at the other end relative to the detection chamber; and the flow channel is provided with a plurality of lysis chambers and a PCR reaction chamber in sequence from the sampling microneedle to the detection chamber; and a heating resistance wire is also provided in the PCR reaction chamber; the first MCU controller uses pulse width modulation PWM to control the heating resistance wire in the PCR reaction chamber to heat the purified blood sample, so that it performs an amplification reaction; a micro-control valve is also provided on the flow channel between the PCR reaction chamber and the detection chamber, and the micro-control valve is controlled by the first MCU controller;

[0009] The detection chamber is also provided with a plurality of biosensors, which are used to detect DNA data in the user's blood sample, including minimum value, maximum value and mean value; and store the detection results in the second MCU controller, and the second MCU controller performs interval processing on the user's DNA detection data;

[0010] The second MCU controller digitally signs the compartmentalized DNA data, and then encrypts it using the AES-CCM encryption algorithm to generate a one-time encrypted ciphertext data E AES-CCM (C′ i ); and the ciphertext data E AES-CCM (C′ i ) is sent to a computer;

[0011] The computer first verifies the digital signature. If the verification is successful, it receives the encrypted ciphertext data E after AES-CCM encryption one by one. AES-CCM (C′ i );

[0012] The computer uses the ECC elliptic curve encryption algorithm to receive the ciphertext data E of AES-CCM. AES-CCM (C′ i ) performs secondary encryption processing to generate the secondary encrypted ciphertext E ECC (C″ i ) and stored in the blockchain; namely:

[0013] E ECC (C″ i )=E ECC (K pub ,C′ i )

[0014] In the formula, K pub is the public key;

[0015] The computer retrieves the stored double-encrypted ciphertext data E from the blockchain through the user's unique identifier User_ID ECC (C″ i ) and the corresponding public key K pub ; At the same time, the integrity of the blockchain records is verified through the hash algorithm to ensure that the data has not been tampered with;

[0016] If it has not been tampered with, the private key K is used priv The double-encrypted ciphertext data E stored on the blockchain ECC (C i ″) to decrypt and obtain the DNA interval value C′ encrypted by AES-CCM i For, that is:

[0017] C′ i =E′ ECC -1 (K priv ,E ECC (C″ i ));

[0018] Then the DNA information of the user group is collected again; the second MCU controller uses the AES-CCM encryption algorithm to encrypt the newly collected DNA information to generate new encrypted data E AES-CCM (D′ i );

[0019] The decrypted DNA interval value C′ i The interval value D′ of the DNA data input by the user i Compare, if the comparison result C′ i ≈D′ i , and within the preset error range ζ, the DNA information is considered to be matched successfully; otherwise, the verification fails.

[0020] As a preference, the first MCU controller is configured to control the temperature of the valve,i Control the opening and closing of the micro-control valve, and the temperature threshold T valve,i When the heating temperature of the PCR reaction chamber is greater than or equal to the temperature threshold T valve,i When the micro-control valve is opened, it is closed, that is:

[0021]

[0022] Where V i (t) represents the state of the i-th micro-control valve; V i When (t) is 1, the micro-control valve is open, and when it is 0, the micro-control valve is closed.

[0023] As a preferred embodiment, the instantaneous power P of the i-th heating resistance wire is i (t) is:

[0024] P i (t) = D i (t)×P max,i ;

[0025] Where D i (t) is the duty cycle of the PWM signal of the i-th heating resistor; P max,i is the maximum power of the i-th heating resistor.

[0026] Preferably, at the current time t, the temperature of the PCR reaction chamber of the i-th is T i (t) is:

[0027] T i (t) = T i (t-1)+α×P i (t)-β×(T i (t)-T e );

[0028] Where, T i (t-1) is the temperature of the i-th PCR reaction chamber at time t-1; α is the thermal conductivity coefficient; β is the heat dissipation coefficient; T e is the ambient temperature, P i (t) is the instantaneous power of the i-th heating resistance wire;

[0029] When T i When (t) reaches the set value, the PWM duty cycle is reduced; when T i When (t) is lower than the set value, the PWM duty cycle is increased.

[0030] As a preferred embodiment, the ciphertext data E generated by the AES-CCM encryption algorithm AES-CCM (C i ′) is calculated as:

[0031] E AES-CCM (C′ i )=AES_CCM(K AES ,C i );

[0032] In the formula, k AES is the encryption key corresponding to AES; C′ i =[min′ i ,max′ i ] is the DNA interval value after being encrypted by AES-CCM.

[0033] As a preference, the public key K pub The expression is:

[0034] K pub =K priv G;

[0035] In the formula, K priv is the private key, which is randomly generated by a computer; G is the base point on the elliptic curve, and the corresponding elliptic curve equation is y 2 =x 3 +ax+b,K pub The private key K priv The public key is calculated using the elliptic curve generation formula.

[0036] As a preferred embodiment, the secondary encrypted ciphertext E using ECC elliptic curve encryption ECC (C″ i ) and the key are stored in the blockchain and the corresponding related information is generated. The blockchain stores the corresponding double-encrypted ciphertext data E ECC (C″ i )Generated unique user identifier User_ID;

[0037] Blockchain_record

[0038] ={User_ID,E ECC (C″ i ),K pub ,Timestamp,Previous_Hash,Current_Hash}

[0039] Among them, Blockchain_record represents the relevant information of the blockchain record; Timestamp is the timestamp of the current record, which is set to prevent data tampering; Previous_Hash is the hash value of the previous block to ensure the integrity of the blockchain; Current_Hash is the hash value of the current block generated based on the stored content.

[0040] Preferably, the present invention also provides an identity authentication method based on microfluidic technology, comprising the following steps:

[0041] S1), using a sampling microneedle to collect a blood sample from a user, and the blood sample enters the lysis chamber through a flow channel for lysis; under the action of the lysis solution, the cell nuclei in the blood sample are lysed;

[0042] S2), the lysed blood sample flows into the PCR reaction chamber, and is purified by a microfiltration membrane before entering the PCR reaction chamber to remove other cell residues;

[0043] S3), using the first MCU controller to control the heating resistor wire in the PCR reaction chamber by pulse width modulation PWM to heat the purified blood sample to perform an amplification reaction;

[0044] S4), after the amplification is completed, the first MCU controller controls the micro-control valve to enter the detection chamber; the DNA data in the blood sample is detected by the biosensor;

[0045] S5), converting the DNA data of the blood sample detected by the biosensor into a digital signal through an analog-to-digital converter and transmitting it to the second MCU controller; the second MCU controller performs interval processing on the received digital signal to generate a DNA data interval C i :

[0046] C i =[Min i ,Max i ];

[0047] In the formula, C i is the DNA data interval of the ith user; Min i ,Max i are the minimum and maximum values ​​of the DNA data of the i-th user, respectively;

[0048] S6), the second MCU controller digitally signs the compartmentalized DNA data, and then encrypts it using the AES-CCM encryption algorithm to generate a one-time encrypted ciphertext data E AES-CCM (C′ i ); and the ciphertext data E AES-CCM (C′ i ) is sent to a computer;

[0049] Among them, the ciphertext data E generated by the AES-CCM encryption algorithm AES-CCM (C′ i ) is calculated as:

[0050] E AES-CCM (C′ i )=AES_CCM(K AES ,C i );

[0051] In the formula, K AES is the encryption key corresponding to AES; C′ i =[min′ i ,max′ i ] is the DNA interval value encrypted by AES-CCM

[0052] S7), the computer verifies the digital signature of the received ciphertext data, and after successful verification, receives the DNA encryption interval domain value of the ciphertext data one by one;

[0053] S8) The computer uses the ECC elliptic curve encryption algorithm to generate a public key K pub and private key K priv , and use the public key K pub Encrypted data E for user group AES-CCM (C′ i ) is encrypted twice to obtain the encrypted ciphertext data E ECC (C″ i ) and stored in the blockchain, while recording the generated public key K pub ;

[0054] S9) Retrieve the stored double-encrypted ciphertext data E from the blockchain through the user's unique identifier User_ID ECC (C″ i ) and the corresponding public key K pub ; At the same time, the integrity of the blockchain records is verified through the hash algorithm to ensure that the data has not been tampered with;

[0055] S10) Use the private key K priv The double-encrypted ciphertext data E stored on the blockchain ECC (C″ i ) to decrypt, that is:

[0056] C′ i =E′ ECC -1 (K priv ,E ECC (C″ i ));

[0057] In the formula, C′ i is the DNA interval value obtained after decryption from the blockchain and encrypted by AES-CCM;

[0058] S11), collect the DNA information of the user group again; the second MCU controller uses the AES-CCM encryption algorithm to encrypt the newly collected DNA information to generate new encrypted data E AES-CCM (D′ i );

[0059] S12), the decrypted DNA interval value C' i The interval value D′ of the DNA data input by the user i Compare, if the comparison result C′ i ≈D′ i, and within the preset error range ζ, the DNA information is considered to be matched successfully; otherwise, the verification fails.

[0060] Preferably, in step S6), the second MCU controller SM2 algorithm digitally signs the compartmentalized DNA data, namely:

[0061] Sign(C i )=Encrypt(Hash([Min i ,Max i ]));

[0062] In the formula, Sign(C i ) represents the DNA interval data C i The data obtained after digital signature; Encrypt means encryption processing; Hash means taking hash value of interval value; Min i , Max i They represent the minimum and maximum values ​​of the DNA data of the i-th user respectively.

[0063] Preferably, in step S6), the expression used by the computer to verify the digital signature is:

[0064]

[0065] In the formula, Verify means verification; Sign(C i ) represents the DNA interval data C i The data obtained after digital signature, equal to 1 means verification passed, equal to 0 means verification failed.

[0066] Preferably, in step S8), the computer generates a public key K using an ECC elliptic curve encryption algorithm. pub and private key K priv , and use the public key K pub The DNA data of the user group is encrypted twice to obtain the encrypted ciphertext E ECC (C″ i ), specifically:

[0067] E ECC (C″ i )=E ECC (K pub ,C′ i )

[0068] In the formula, K pub is the public key.

[0069] As a preference, in step S8), the public key K pub The expression is:

[0070] K pub =K priv ·G;

[0071] In the formula, K priv is the private key, which is randomly generated by a computer; G is the base point on the elliptic curve, and the corresponding elliptic curve equation is y 2 =x 3 +ax+b,K pub The private key K priv The public key is calculated using the elliptic curve generation formula.

[0072] The beneficial effects of the present invention are:

[0073] 1. The present invention can complete the automatic collection, amplification, encryption processing and data storage of blood DNA through microfluidic chips, and realize the security verification of identity information through computers and blockchain technology;

[0074] 2. The present invention adopts AES-CCM and ECC elliptic curve encryption algorithms, combined with role-based access control, to achieve remote and secure data transmission and processing; it can realize portable biometric detection and identity authentication in an environment outside the laboratory, and multiple encryption and blockchain technology are used to ensure the security and non-tamperability of data. BRIEF DESCRIPTION OF THE DRAWINGS

[0075] Figure 1 This is a framework diagram of an identity authentication device according to Embodiment 1 of the present invention;

[0076] Figure 2 This is a schematic diagram of the internal structure of the microfluidic chip in Example 1 of the present invention;

[0077] Figure 3 This is a schematic structural diagram of a liquid leakage prevention assembly according to Embodiment 1 of the present invention;

[0078] Figure 4 This is a framework flow chart of the method of Example 2 of the present invention;

[0079] Figure 5 Schematic diagram of the process of the method of embodiment 2 of the present invention;

[0080] In the figure, 11-sampling microneedle; 12-flow channel; 13-lysis chamber; 14-PCR reaction chamber; 15-detection chamber; 16-biosensor; 17-leakage prevention component; 18-waste liquid discharge chamber; 19-cleaning liquid storage chamber;

[0081] 171-L-type pipe; 172-collecting tube; 173-straight pipe. DETAILED DESCRIPTION

[0082] The specific implementation of the present invention will be further described below in conjunction with the accompanying drawings:

[0083] Example 1

[0084] like Figure 1 and 2 As shown, this embodiment provides an identity authentication device based on microfluidic technology, including a microfluidic chip, a computer, and a first MCU controller and a second MCU controller embedded in the microfluidic chip.

[0085] like Figure 2 As shown, the microfluidic chip includes a detection chamber 15, and the detection chamber 15 is connected to a plurality of flow channels 12; each of the flow channels 12 is provided with a sampling microneedle 11 at the other end relative to the detection chamber 15; and the flow channel 12 is provided with a plurality of lysis chambers 13 and a PCR reaction chamber 14 in sequence from the sampling microneedle 11 to the detection chamber 15; and a heating resistance wire is also provided in the PCR reaction chamber 14; the first MCU controller uses pulse width modulation PWM to control the heating resistance wire in the PCR reaction chamber 14 to heat the purified blood sample, so that it performs an amplification reaction; a micro-control valve is also provided on the flow channel 12 between the PCR reaction chamber 14 and the detection chamber 15, and the micro-control valve is controlled by the first MCU controller.

[0086] The detection chamber 15 is also provided with a plurality of biosensors 16, and the biosensors 16 are used to detect DNA data in the user's blood sample, including minimum value, maximum value and mean value; and store the detection results in the second MCU controller.

[0087] The second MCU controller processes the user's DNA detection data into intervals to generate DNA data intervals C i =[Min i ,Max i ];

[0088] In the formula, C i is the DNA data interval of the ith user; Min i ,Max i are the minimum and maximum values ​​of the DNA data of the i-th user respectively.

[0089] The second MCU controller digitally signs the compartmentalized DNA data. i )=

[0090] Encrypt(Hash([Min i ,Max i ]));

[0091] In the formula, Sign(C i ) represents the DNA interval data Ci The data obtained after digital signature; Encrypt means encryption processing; Hash means taking hash value of interval value; Min i , Max i They represent the minimum and maximum values ​​of the DNA data of the i-th user respectively.

[0092] Then use the AES-CCM encryption algorithm to encrypt and generate the encrypted ciphertext data E AES-CCM (C′ i ); and the ciphertext data E AES-CCM (C′ i ) is sent to a computer;

[0093] E AES-CCM (C′ i )=AES_CCM(K AES ,C i );

[0094] In the formula, K AES is the encryption key corresponding to AES; C′ i =[min′ i ,max′ i ] is the DNA interval value after being encrypted by AES-CCM.

[0095] The computer first verifies the digital signature. If the verification is successful, it receives the encrypted ciphertext data E after AES-CCM encryption one by one. AES-CCM (C′ i );

[0096] The computer uses the ECC elliptic curve encryption algorithm to receive the ciphertext data E of AES-CCM. AES-CCM (C′ i ) performs secondary encryption processing to generate the secondary encrypted ciphertext E ECC (C″ i ) and stored in the blockchain; namely:

[0097] E ECC (C″ i )=E ECC (K pub ,C′ i )

[0098] In the formula, K pub is the public key;

[0099] The public key K pub The expression is:

[0100] K pub =K priv ·G;

[0101] In the formula, K priv is the private key, which is randomly generated by a computer; G is the base point on the elliptic curve, and the corresponding elliptic curve equation is y 2 =x 3 +ax+b,K pub The private key K priv The public key is calculated by the elliptic curve generation formula, where y represents the dependent variable, x represents the variable; a and b are the coefficients of the linear term and the constant term, respectively.

[0102] The computer retrieves the stored double-encrypted ciphertext data E from the blockchain through the user's unique identifier User_ID ECC (C″ i ) and the corresponding public key K pub ; At the same time, the integrity of the blockchain records is verified through the hash algorithm to ensure that the data has not been tampered with;

[0103] If it has not been tampered with, the private key K is used priv The double-encrypted ciphertext data E stored on the blockchain ECC (C″ i ) to decrypt and obtain the DNA interval value C′ encrypted by AES-CCM i For, that is:

[0104] C′ i =E′ ECC -1 (K priv ,E ECC (C″ i ));

[0105] Then the DNA information of the user group is collected again; the second MCU controller uses the AES-CCM encryption algorithm to encrypt the newly collected DNA information to generate new encrypted data E AEs-CCM (D′ i );

[0106] The decrypted DNA interval value C′ i The interval value D′ of the DNA data input by the user i Compare, if the comparison result C′ i ≈D′ i , and within the preset error range ζ, the DNA information is considered to be matched successfully; otherwise, the verification fails.

[0107] As preferred in this embodiment, Figure 3As shown, a liquid leakage prevention component 17 is arranged between the PCR reaction chamber 14 and the detection chamber 15, and the liquid leakage prevention component 17 includes an L-shaped pipe 171, the upper end of the L-shaped pipe 171 is connected to the PCR reaction chamber 14, the lower end of the L-shaped pipe 171 is connected to the collection tube 172, and the middle part of the L-shaped pipe 171 is connected to the detection chamber 15 through a straight pipe 173.

[0108] As a preferred embodiment of the present invention, the detection chamber 15 is also connected to the waste liquid discharge chamber 18 via a waste liquid discharge channel, and a waste liquid discharge control valve is provided on the waste liquid discharge channel, and the waste liquid discharge control valve is controlled by the first MCU controller.

[0109] As a preferred embodiment of the present invention, the detection chamber 15 is also connected to the cleaning liquid storage chamber 19, and a cleaning liquid control valve is also provided on the pipeline between the detection chamber 15 and the cleaning liquid storage chamber 19, and the cleaning liquid control valve is controlled by the first MCU controller.

[0110] As a preferred embodiment of this invention, the first MCU controller is configured to control the temperature of the first MCU controller by a temperature threshold value T valve,i Control the opening and closing of the micro-control valve, and the temperature threshold T valve,i is greater than the heating temperature of the PCR reaction chamber 14. When the heating temperature of the PCR reaction chamber 14 is greater than or equal to the temperature threshold T valve,i When the micro-control valve is opened, it is closed, that is:

[0111]

[0112] Where V i (t) represents the state of the i-th micro-control valve; V i When (t) is 1, the micro-control valve is open, and when it is 0, the micro-control valve is closed.

[0113] As a preferred embodiment of this invention, the instantaneous power P of the i-th heating resistor wire is i (t) is:

[0114] P i (t) = D i (t)×P max,i ;

[0115] Where D i (t) is the duty cycle of the PWM signal of the i-th heating resistor; P max,i is the maximum power of the i-th heating resistor.

[0116] As a preferred embodiment of the present invention, at the current time t, the temperature of the i-th PCR reaction chamber 14 is T i (t) is:

[0117] T i (t) = T i (t-1)+α×P i (t)-β×(T i (t)-T e );

[0118] Where, T i (t-1) is the temperature of the i-th PCR reaction chamber 14 at time t-1; α is the thermal conductivity coefficient; β is the heat dissipation coefficient; T e is the ambient temperature, P i (t) is the instantaneous power of the i-th heating resistance wire;

[0119] When T i When (t) reaches the set value, the PWM duty cycle is reduced; when T i When (t) is lower than the set value, the PWM duty cycle is increased.

[0120] As a preferred embodiment of this invention, the secondary encrypted ciphertext E using ECC elliptic curve encryption is ECC (C″ i ) and the key are stored in the blockchain and the corresponding related information is generated. The blockchain stores the corresponding double-encrypted ciphertext data E ECC (C″ i )Generated unique user identifier User_ID;

[0121] Blockchain_record

[0122] ={User_ID,E ECC (C″ i ),K pub ,Timestamp,Previous_Hash,Current_Hash}

[0123] Among them, Blockchain_record represents the relevant information of the blockchain record; Timestamp is the timestamp of the current record, which is set to prevent data tampering; Previous_Hash is the hash value of the previous block to ensure the integrity of the blockchain; Current_Hash is the hash value of the current block generated based on the stored content.

[0124] The hash value of the current block is determined by the hash value of the previous block and the current data content. The generation formula is:

[0125] Current_Hash

[0126] =Hash(User_ID+E ECC (C″ i )+Kpub +Timestamp

[0127] +Previous_Hash)

[0128] If any piece of content in the blockchain is modified, the hash value of the entire chain will not match, thereby achieving the purpose of detecting data tampering.

[0129] As a preferred embodiment of this embodiment, the first MCU controller adopts Texas Instruments MSP430FR6047 based on the Cortex-M3 core; the second MCU controller adopts Nordic Semiconductor nRF52832 which can support Bluetooth 5.0 low-power communication and 12-bit ADC sensor data.

[0130] Example 2

[0131] like Figure 4 and 5 As shown, this embodiment provides an identity authentication method based on microfluidic technology, comprising the following steps:

[0132] S1), using the sampling microneedle 11 to collect the user's blood sample, the blood sample passes through the flow channel 12 into the lysis chamber 13 for lysis; under the action of the lysis solution, the cell nuclei in the blood sample are lysed;

[0133] S2), the lysed blood sample flows into the PCR reaction chamber 14, and is purified by a microfiltration membrane before entering the PCR reaction chamber 14 to remove other cell residues;

[0134] S3), using the first MCU controller to control the heating resistor wire in the PCR reaction chamber 14 by pulse width modulation PWM to heat the purified blood sample to perform an amplification reaction;

[0135] S4), after the amplification is completed, the first MCU controller controls the micro-control valve to enter the detection chamber 15; the DNA data in the blood sample is detected by the biosensor 16;

[0136] S5), converting the DNA data of the blood sample detected by the biosensor 16 into a digital signal through an analog-to-digital converter and transmitting it to the second MCU controller; the second MCU controller performs interval processing on the received digital signal to generate a DNA data interval C i :

[0137] C i =[Min i ,Max i ];

[0138] In the formula, C i is the DNA data interval of the ith user; Min i ,Max i are the minimum and maximum values ​​of the DNA data of the i-th user, respectively;

[0139] S6), the second MCU controller digitally signs the compartmentalized DNA data, that is:

[0140] Sign(C i )=Encrypt(Hash([Min i ,Max i ]));

[0141] In the formula, Sign(C i ) represents the DNA interval data C i The data obtained after digital signature; Encrypt means encryption processing; Hash means taking hash value of interval value; Min i , Max i They represent the minimum and maximum values ​​of the DNA data of the i-th user respectively.

[0142] Then use the AES-CCM encryption algorithm to encrypt and generate the encrypted ciphertext data E AES-CCM (C′ i ); and the ciphertext data E AES-CCM (C′ i ) is sent to a computer;

[0143] Among them, the ciphertext data E generated by the AES-CCM encryption algorithm AES-CCM (C′ i ) is calculated as:

[0144] E AES-CCM (C′ i )=AES_CCM(K AES ,C i );

[0145] Where: K AES is the encryption key corresponding to AES; C′ i =[min′ i ,max′ i ] is the DNA interval value after being encrypted by AES-CCM;

[0146] S7), the computer verifies the digital signature of the received ciphertext data, and after successful verification, receives the DNA encryption interval domain value of the ciphertext data one by one; the expression for the computer to verify the digital signature is:

[0147]

[0148] Wherein, Verify means verification; 1 means verification is passed, and 0 means verification is not passed.

[0149] S8) The computer uses the ECC elliptic curve encryption algorithm to generate a public key K pub and private key K priv , and use the public key K pub Encrypted data E for user group AES-CCM (C′ i ) is encrypted twice to obtain the encrypted ciphertext data E ECC (C″ i ) and stored in the blockchain, while recording the generated public key K pub ; Specifically:

[0150] E ECC (C″ i )=E ECC (K pub ,C′ i )

[0151] In the formula, K pub is the public key.

[0152] The public key K pub The expression is:

[0153] K pub =K priv G;

[0154] In the formula, K priv is the private key, which is randomly generated by a computer; G is the base point on the elliptic curve, and the corresponding elliptic curve equation is y 2 =x 3 +ax+b,K pub The private key K priv The public key is calculated using the elliptic curve generation formula.

[0155] S9) Retrieve the stored double-encrypted ciphertext data E from the blockchain through the user's unique identifier User_ID ECC (C″ i ) and the corresponding public key K pub ; At the same time, the integrity of the blockchain records is verified through the hash algorithm to ensure that the data has not been tampered with;

[0156] S10) Use the private key K priv The double-encrypted ciphertext data E stored on the blockchain ECC (C″ i ) to decrypt, that is:

[0157] C′ i =E′ ECC -1 (K priv ,E ECC (C″ i ));

[0158] In the formula, C′ i is the DNA interval value obtained after decryption from the blockchain and encrypted by AES-CCM;

[0159] S11), collect the DNA information of the user group again; the second MCU controller uses the AES-CCM encryption algorithm to encrypt the newly collected DNA information to generate new encrypted data E AES-CCM (D′ i );

[0160] S12), the decrypted DNA interval value C' i The interval value D′ of the DNA data input by the user i Compare, if the comparison result C′ i ≈D′ i , and within the preset error range ζ, the DNA information is considered to be matched successfully; otherwise, the verification fails.

[0161] The above embodiments and descriptions are only for illustrating the principles and best embodiments of the present invention. Without departing from the spirit and scope of the present invention, the present invention may be subject to various changes and improvements, all of which fall within the scope of the present invention to be protected.

Claims

1. An identity verification device based on microfluidic technology, characterized in that: It includes a microfluidic chip, a computer, and a first MCU controller and a second MCU controller embedded in the microfluidic chip; The microfluidic chip comprises a detection chamber (15), wherein the detection chamber (15) is connected to a plurality of flow channels (12); each of the flow channels (12) is provided with a sampling microneedle (11) at the other end relative to the detection chamber (15); and the flow channel (12) is provided with a plurality of lysis chambers (13) and a PCR reaction chamber (14) in sequence from the sampling microneedle (11) to the detection chamber (15); The first MCU controller uses pulse width modulation (PWM) to control the heating resistance wire in the PCR reaction chamber (14) to heat the purified blood sample, so that it performs an amplification reaction; The first MCU controller is also used to control the micro-control valve on the flow channel (12) between the PCR reaction chamber (14) and the detection chamber (15); The second MCU controller is used to digitally sign the compartmentalized DNA data and encrypt it using the AES-CCM encryption algorithm, and then send the ciphertext data E AES-CCM (C′ i ) is sent to a computer; The computer is used to verify the digital signature and use the ECC elliptic curve encryption algorithm to encrypt the received ciphertext data E AES-CCM (C′ i ) performs secondary encryption processing to generate the secondary encrypted ciphertext E ECC (C i ″) and stored in the blockchain; The computer retrieves the stored double-encrypted ciphertext data E from the blockchain through the user's unique identifier User_ID ECC (C i ″) and the corresponding public key K pub ; At the same time, the integrity of the blockchain record is verified through the hash algorithm; and the private key K is used priv For the ciphertext data E ECC (C i ″) to decrypt; Then the decrypted DNA interval value C′ i The interval value D′ of the DNA data input by the user i Perform a comparison and determine whether the verification is successful based on the comparison result.

2. The identity verification device based on microfluidic technology according to claim 1, characterized in that: A plurality of biosensors (16) are also arranged in the detection chamber (15), and the biosensors (16) are used to detect DNA data in a user's blood sample; The second MCU controller processes the user's DNA detection data into intervals to generate DNA data intervals C i =[Min i , Max i ]; In the formula, C i is the DNA data interval of the ith user; Min i , Max i are the minimum and maximum values ​​of the DNA data of the i-th user respectively.

3. The identity verification device based on microfluidic technology according to claim 2, characterized in that: The second MCU controller digitally signs the compartmentalized DNA data: Sign(C i )=Encrypt(Hash([Min i ,Max i ])); In the formula, Sign(C i ) represents the DNA interval data C i Data obtained after digital signature; Encrypt means encryption processing; Hash means taking hash value of interval value; Min i , Max i They represent the minimum and maximum values ​​of the DNA data of the i-th user respectively.

4. The identity verification device based on microfluidic technology according to claim 3, characterized in that: The ciphertext data E AES-CCM (C′ i ) is generated as: E AES-CCM (C′ i )=AES_CCM(K AES ,C i ); In the formula, K AES is the encryption key corresponding to AES; C′ i =[min′ i ,max′ i ] is the DNA interval value after being encrypted by AES-CCM.

5. The identity verification device based on microfluidic technology according to claim 4, characterized in that: The ciphertext E ECC (C″ i ) is generated as: E ECC (C″ i )=E ECC (K pub ,C′ i ) In the formula, K pub is the public key.

6. The identity verification device based on microfluidic technology according to claim 5, characterized in that: The computer encrypts the ciphertext data E twice ECC (C″ i ) to decrypt and obtain the DNA interval value C′ encrypted by AES-CCM i For, that is: C′ i =E′ ECC -1 (K priv ,E ECC (C″ i )); In the formula, K priv For the private key.

7. The identity verification device based on microfluidic technology according to claim 6, characterized in that: By collecting the DNA information of the user group again; the second MCU controller uses the AES-CCM encryption algorithm to encrypt the newly collected DNA information to generate new encrypted data E AES-CCM (D′ i ); The decrypted DNA interval value C′ i The interval value D′ of the DNA data input by the user i Compare, if the comparison result C′ i ≈D′ i , and within the preset error range ζ, the DNA information is considered to be matched successfully; otherwise, the verification fails.

8. An identity authentication method based on microfluidics technology, characterized in that: The method is used for the verification device according to any one of claims 1 to 7, and the method comprises the following steps: S1), using the sampling microneedle (11) to collect a blood sample from the user, the blood sample passes through the flow channel (12) into the lysis chamber (13) for lysis; under the action of the lysis solution, the cell nuclei in the blood sample are lysed; S2), the lysed blood sample flows into the PCR reaction chamber (14), and is purified by a microfiltration membrane before entering the PCR reaction chamber (14) to remove other cell residues; S3), using the first MCU controller to control the heating resistor wire in the PCR reaction chamber (14) by pulse width modulation (PWM) to heat the purified blood sample, so that it can perform an amplification reaction; S4), after the amplification is completed, the first MCU controller controls the micro-control valve to enter the detection chamber (15); the DNA data in the blood sample is detected by the biosensor (16); S5), converting the DNA data of the blood sample detected by the biosensor (16) into a digital signal through an analog-to-digital converter, and transmitting the digital signal to a second MCU controller; the second MCU controller performs interval processing on the received digital signal to generate a DNA data interval C i : C i =[My i ,Max i ]; In the formula, C i is the DNA data interval of the ith user; Min i , Max i are the minimum and maximum values ​​of the DNA data of the i-th user, respectively; S6), the second MCU controller digitally signs the compartmentalized DNA data, that is: Sign(C i )=Encrypt(Hash([Min i ,Max i ])); In the formula, Sign(C i ) represents the DNA interval data C i Data obtained after digital signature; Encrypt means encryption processing; Hash means taking hash value of interval value; Min i , Max i They represent the minimum and maximum values ​​of the DNA data of the i-th user respectively; Then use the AES-CCM encryption algorithm to encrypt and generate encrypted ciphertext data E AES-CCM (C′ i ); and the ciphertext data E AES - CCM (C′ i ) is sent to a computer; Among them, the ciphertext data E generated by the AES-CCM encryption algorithm AES-CCM (C′ i ) is calculated as: E AES-CCM (C′ i )=AES_CCM(K AES ,C i ); In the formula, K AES is the encryption key corresponding to AES; C′ i =[min′ i ,max′ i ] is the DNA interval value after being encrypted by AES-CCM; S7), the computer verifies the digital signature of the received ciphertext data, and after successful verification, receives the DNA encryption interval domain value of the ciphertext data one by one; the expression for the computer to verify the digital signature is: In the formula, Verify means verification; Sign(C i ) represents the DNA interval data C i The data obtained after digital signature, equal to 1 means verification passed, equal to 0 means verification failed; S8) The computer uses the ECC elliptic curve encryption algorithm to generate a public key K pub and private key K priv , and use the public key K pub Encrypted data E for user group AES-CCM (C′ i ) is encrypted twice to obtain the encrypted ciphertext data E ECC (C″ i ) and stored in the blockchain, while recording the generated public key K pub ; Specifically: E ECC (C″ i )=E ECC (K pub ,C′ i ) In the formula, K pub is the public key; The public key K pub The expression is: K pub =K priv ·G; In the formula, K priv is the private key, which is randomly generated by a computer; G is the base point on the elliptic curve; K pub The private key K priv The public key calculated by the elliptic curve generation formula; S9) Retrieve the stored double-encrypted ciphertext data E from the blockchain through the user's unique identifier User_ID ECC (C″ i ) and the corresponding public key K pub ; At the same time, the integrity of the blockchain records is verified through the hash algorithm to ensure that the data has not been tampered with; S10) Use the private key K priv The double-encrypted ciphertext data E stored on the blockchain EcC (C″ i ) to decrypt, that is: C′ i =E′ ECC -1 (K priv ,E ECC (C″ i ); In the formula, C′ i is the DNA interval value obtained after decryption from the blockchain and encrypted by AES-CCM; S11), collect the DNA information of the user group again; the second MCU controller uses the AES-CCM encryption algorithm to encrypt the newly collected DNA information to generate new encrypted data E AES-CCM (D′ i ); S12), the decrypted DNA interval value C' i The interval value D′ of the DNA data input by the user i Compare, if the comparison result C′ i ≈D′ i , and within the preset error range ζ, the DNA information is considered to be matched successfully; otherwise, the verification fails.

9. The identity authentication method based on microfluidic technology according to claim 8, characterized in that: Secondary encrypted ciphertext E ECC (C″ i ) and the key are stored in the blockchain and the corresponding related information is generated. The blockchain stores the corresponding double-encrypted ciphertext data E ECC (C″ i )Generated unique user identifier User_ID; Blockchain_record ={User_ID,E ECC (C″ i ),K pub ,Timestamp,Previous_Hash,Current_Hash} Among them, Blcockchain_record represents the relevant information of the blockchain record; Timestamp is the timestamp of the current record, which is set to prevent data tampering; Previous_Hash is the hash value of the previous block to ensure the integrity of the blockchain; Current_Hash is the hash value of the current block generated based on the stored content.

10. The identity authentication method based on microfluidic technology according to claim 8, characterized in that: The first MCU controller passes the temperature threshold T valve，i Control the opening and closing of the micro-control valve, and the temperature threshold T valve,i is greater than the heating temperature of the PCR reaction chamber (14), when the heating temperature of the PCR reaction chamber (14) is greater than or equal to the temperature threshold T valve,i When the micro-control valve is opened, it is closed, that is: Where V i (t) represents the state of the i-th micro-control valve; V i When (t) is 1, the micro-control valve is open, and when it is 0, the micro-control valve is closed.

Images