Metacosm cross-scene anonymous seamless identity authentication method based on double block chains

Abstract

The invention provides a meta-universe cross-scene anonymous seamless identity authentication method based on double block chains. The meta-universe cross-scene anonymous seamless identity authentication method comprises an initialization stage, a scene server registration stage, a user registration stage, a stage that a user logs in and creates an avatar in a scene server, and a user cross-scene server authentication stage. The server is set for different application scenes, the load of the server is reduced, and a user can experience various scenes without changing equipment. A fuzzy extractor and block chains are adopted to protect privacy information such as biological information and avatars of a user, meanwhile, a double-block-chain mode is adopted, authentication information of a server and the user is stored on an authentication data chain, the user moves in different services, an interaction data chain stores avatar data of the user in a multi-scene server, and the user experience is improved. And the data consistency is realized. The double block chains realize isolation of user real data and virtual data in the meta universe, privacy data of the user is effectively protected, the user does not need to input information again for login, and seamless authentication is realized.

Description

Technical Field

[0001] The present invention belongs to the field of identity authentication and key exchange, and specifically relates to a metaverse cross-scenario anonymous seamless identity authentication method based on dual blockchains. Background Art

[0002] The continuous advancement of Metaverse technology has promoted the development of many industries, such as games, cultural tourism, education, industrial production, etc., providing users with a more immersive experience, so that users are no longer restricted by the real world. Users can use some mobile smart devices or wearable smart devices such as glasses to connect to the virtual world to expand the real world.

[0003] Although Metaverse technology has brought new experiences and convenience to people's lives and work in all aspects, most of the smart wearable devices currently used to access the Metaverse communicate with a server that provides specific scene services through public channels, which limits the user's smart wearable device to a specific scene service, greatly limiting the user's cross-scene experience. At the same time, since the communication is on a public channel, the transmitted information is extremely vulnerable to eavesdropping and interception by attackers, and the user's personal information, such as photos, transaction records, etc., will be leaked, and the user's privacy faces major challenges. Therefore, it is crucial to ensure user access control and protection of user privacy information while providing multi-scene services. Summary of the invention

[0004] In view of the problems existing in the prior art, the present invention provides a metaverse cross-scenario anonymous seamless identity authentication method based on dual blockchains, which can effectively protect the privacy data of users. Through the protocol of the present invention, the trouble of users entering personal information again to log in can be saved, and seamless authentication can be achieved. At the same time, due to the particularity of the metaverse environment, user activities are all realized through avatars. The use of interactive data chains ensures that the user's personalized avatar data can be guaranteed to be consistent, confidential and tamper-proof even though the user's avatar will be in different scene servers, thereby reducing the cumbersome operation of users creating avatars across scenes.

[0005] In order to solve the above technical problems, the present invention provides the following technical solutions: a metaverse cross-scenario anonymous seamless identity authentication method based on dual blockchains, comprising the following steps: S1, initialization phase: the registration center is initialized and generates the registration center private key and registration center public key; S2, scene server registration stage: each scene server registers with the registration center RC before being put into use to obtain a legal identity, obtain a digital certificate, and upload the digital certificate to the registration blockchain as identity authentication information; S3, User registration stage: Users use smart devices connected to the Metaverse to complete registration at the registration center and become legal users; S4, user login and avatar creation stage on the scene server: the legitimate user enters the user login information and biometric information on the smart device connected to the Metaverse. After successfully verifying the user's identity, the smart device sends a login request to the scene server, carrying the user's authentication information and avatar information; after receiving the login authentication request, the scene server verifies the timestamp of the information. After the verification is qualified, it will further use the user's corresponding registration block on the registered blockchain to extract the user's digital certificate and verify whether the digital certificate is consistent with the user's authentication information; If the verification fails, the program will be exited. If the verification passes, the scene server will generate a session key between the user and it, and send the information digest consisting of the key and other parameters and its own authentication information to the user's smart device; the smart device verifies the identity of the scene server, calculates the session key between them after the verification, and then verifies whether the information digest is consistent. If yes, the identity authentication and key exchange of both parties are achieved, otherwise it is terminated; S5, user cross-scenario server authentication stage: When the user switches scenes, the user's avatar-related information is transmitted through communication between scene servers to complete cross-scenario server identity authentication and key exchange.

[0006] Furthermore, the aforementioned step S1 is specifically as follows: the registration center RC choose As its private key, and calculate the public key Among them, the initialization phase uses global public parameters ,in E is a non-singular finite field F p The elliptic curve on , p and q are two large prime numbers; G It is based on the elliptic curve E Points on and at infinity O The order of the elliptic curve additive group is q , Q yes G Generators of a group; H Yes Map to A collision-resistant one-way hash function.

[0007] Furthermore, the aforementioned step S2 includes the following sub-steps: S2.1. Scene Server SS n Use unique identification code ID SSn ,choose As its private key, the computing scene server SS n The public key is ; Then register the request information Sent to the registry via a secure channel RC ;in, ID SSn It is the unique identification code of the scene server; S2.2. Registration Center RC After receiving the registration request information, check in the registration blockchain and the database of the registration center ID SSn The existence and uniqueness of ID SSn If it exists or is not unique, the scene server registration is terminated, otherwise the registration center RC Computing digital credentials ,|| represents the connection operation, using transactions Generate a registration block in the registration blockchain ; Last registration center RC Compute information summary , and Sent to the scene server via a secure channel SS n , scene server SS n In the registration center RC Successful registration; S2.3. Scene Server SS n calculate ,verify Is it true? If so, terminate the process. Otherwise, the scene server SS n Calculate ciphertext , and stored in its database, Stored in secure memory.

[0008] Furthermore, the aforementioned step S3 includes the following sub-steps: S3.1. User U i Enter the unique user account on the smart device connected to the Metaverse ,password , Bioinformatics , the fuzzy extractor in the device encrypts the user's biometric information ,in is the encrypted value generated by the fuzzy extractor, is an auxiliary parameter, Gen() is a fuzzy extractor, and select As a private key, As a secret value, calculate the user's public key ,User ID Register information Sent to the registry via a secure channel RC ; S3.2. Registration Center RC Received by user U i After the authentication information is obtained, check the user U i of In the registration center RC Uniqueness on database and registry blockchain, if DID i If it exists or is not unique, the user registration is terminated, otherwise the registration center RC calculate , and then use the transaction Generate a registration block in the registration blockchain , and save it in the registration center RC In the database, the information summary is then calculated , and Sent to the user via a secure channel U i ; S3.3. User U i calculate ,verify Is it true? If not, the user registration will be terminated. Otherwise, the user U i Calculate ciphertext , , , XOR operation, calculate the message digest , and { D 3, D 4, D 5, D 6} stored in the database of the smart device, { b i} is stored in secure storage.

[0009] Furthermore, the aforementioned step S4 includes the following sub-steps: S4.1. User U i Enter in the smart device connected to the Metaverse , , ,calculate , , , , , ,verify Is it true? If not, the process terminates the program, otherwise a random number is selected. As a temporary key, timestamp , calculate the temporary public key , the temporary symmetric key of the scene server , user public key If the avatar identity of the current scene server is saved in the smart device, the avatar identity is extracted. If the avatar identity of the current scene server is not saved, a new user avatar is selected. , Abstracts of Computing Communications , through a temporary symmetric key C 2 Encrypt important information to generate communication ciphertext ,in Info i It is the personalized avatar information of the user in the Metaverse. The user uses smart devices to Sent to the scene server via a public channel SS n ; S4.2. Scene Server SS n Upon receiving the user U i After the login request, first verify the timestamp Ensure the freshness of the data. If not, return to step S4.1. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , Abstracts of Computing Communications ,verify If it is not true, the program is terminated. Otherwise, the scene server SS n Just through Retrieve transactions from its database and registry blockchain , verify digital credentials Is it true? If not, terminate the process. Otherwise, save the user's personalized avatar data. And according to the user's Check if the user exists in the scene server. SS n The incarnation of , if yes, extract the avatar, otherwise create a new avatar and calculate Will Uploaded to the data interaction blockchain as a transaction record and generate a data interaction block index , then choose a random number As its temporary key, timestamp , calculate its temporary public key , temporary symmetric key , calculate users U i and scene server SS n The session key between , communication information summary , using the temporary symmetric key C4 to Sent to the user’s smart device via public messaging; S4.3. User U i After receiving the response information, verify the timestamp first Is it true to ensure the freshness of the data? If not, discard it. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , the user's smart device can , retrieve the transaction in the blockchain , verify the scene server SS n Digital certificate Is it true? If not, terminate the program. Otherwise, calculate the user U i and scene server SS n Between , It is the data interaction area index block. It is the user's avatar in the scene server. is the registration area index block, Is the unique identity code of the scene server; verification ,If it is not established, the program is terminated, otherwise the identity authentication and key exchange are completed.

[0010] Furthermore, the aforementioned step S5 includes the following sub-steps: S5.1. User U i When switching from the current Metaverse scene service to another service, send a request to the target scene server. SS m Send a cross-domain request and select a random number As its temporary key, timestamp , calculate the temporary public key , temporary symmetric key , communication information summary , using the temporary symmetric key C6 to encrypt important information and generate communication ciphertext: , the user uses the smart device to send the communication ciphertext to the target scene server through the public channel SS m ; S5.2. Target scene server SS m Upon receiving the user U i When making a cross-domain request, verify the timestamp first Is it true to ensure the freshness of the data? If not, the user will be terminated. U i Otherwise, calculate , calculated by the temporary symmetric key , decrypt the communication ciphertext to obtain , communication information summary ,verify If it is not true, the program is terminated. Otherwise, the target scene server SS m pass Retrieve transactions from database and blockchain registry If it is not established, it will be discarded. If it is established, it will be used according to the user's Check whether the user exists in the target scenario server in the database SS m The incarnation of , and with the scene server SS n Authentication to obtain the user's personalized avatar data Info i ; S5.3. Target scene server SS m Decrypt your own registration block index on the registration blockchain , choose a random number As its temporary key, timestamp , calculate the temporary public key , temporary symmetric key , communication information summary , use the temporary symmetric key C8 to encrypt important information to generate communication ciphertext , the information Sent to the scene server via a public channel SS n ; S5.4. Scene Server SS n Upon receiving the target scene serverSS m After the authentication request, first verify the timestamp Is it true to ensure the freshness of the data? If not, terminate the program. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , ,verify If it is not true, the program is terminated. Otherwise, the scene server SS n Through the target scene server SS m Registered block index Retrieve transactions from the registry blockchain , verify the target scene server SS m Digital certificate Is it true? If not, terminate the process. Otherwise, calculate the scene server. SS n Registered block index , choose a random number As its temporary key, timestamp T 5 , calculate the temporary public key , temporary symmetric key , scene server SS n and the target scene server SS m The session key between , communication information summary , through a temporary symmetric key C 10 Encrypt important information to generate communication ciphertext , the information Sent to the target scene server through a public channel SS m ; S5.5. Target scenario server SS m Upon receiving the scene server SS n After receiving the response, verify the timestamp first Is it true to ensure the freshness of the data? If not, terminate the program, otherwise calculate the symmetric key , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , through the scene server SS n Registered block index Retrieve transactions from the registry blockchain , verify the scene server SS n Digital certificate Is it true? If not, terminate the program, otherwise calculate the target scene server SS m and scene server SS n The session key between , ,verify Is it true? If not, terminate the program. If true, complete the target scene server. SS m and scene server SS n Authentication and secure connection between The user U i On the scene server SS n Personalized avatar data in Safely transmitted to the target scene server SS m , while the scene server SS n Update the block on the avatar data interaction chain ; S5.6. Target scene server SS m Successfully acquired users U i After the personalized avatar data is collected, the Check whether the user exists in the target scenario server in its database SS m The avatar identity , if there is one, extract the avatar If not, create a new avatar identity , Will Uploaded to the data interaction blockchain as a transaction record and generate a data interaction block index , then choose a random number As a temporary key, timestamp , then choose a random number As a temporary key, timestamp , calculate the temporary public key , temporary symmetric key , calculate the target scene server SS m and users U iThe session key between , through a temporary symmetric key C 12 Encrypt important information to generate communication ciphertext , the information Sent to the user’s smart device via public messaging; user U i Receive information Verify timestamp first Is it true to ensure the freshness of the data? If not, terminate the program. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , the user's smart device passes through the target scene server SS m Registered block index , retrieve the transaction in the registered blockchain , verify the target scene server SS m Digital certificate Is it true? If not, terminate the program. Otherwise, calculate the user and target scenario server. SS m The session key between: , verify Is it true? If not, terminate the process; otherwise, the user completes the identity authentication and key exchange across the server scenarios.

[0011] Compared with the prior art, the beneficial technical effects of the present invention using the above technical solution are as follows: In view of the fact that there are many different interactive scenarios in the metaverse environment, the present invention proposes to set up a server for each different application scenario. The use of this multi-server mode can not only reduce the load of the server, but also increase the user experience, and can experience the use of multiple scenarios without changing the device. In order to prevent the leakage of user login information, fuzzy extractors and blockchains are used to protect the user's biometric information. In the traditional metaverse environment, users can usually only experience one scenario on one device. When they want to experience other services, they need to log in to the corresponding server and complete the login, which is a cumbersome process. The present invention proposes to adopt a dual blockchain mode to save the authentication information of each server and user on the authentication data chain. Since users will be active in different services, the interactive data chain can store the user's avatar data in multiple scenario servers to achieve data consistency. At the same time, the design of the dual blockchain realizes the isolation of the user's real data and the virtual data in the metaverse, which can effectively protect the user's privacy data. Through our protocol, the user can save the trouble of entering personal information again to log in, and realize seamless authentication. In summary, the present invention can enhance the user's experience in the metaverse, connect various metaverse environments together, and the seamless identity authentication of the dual blockchain allows users to quickly complete identity authentication in the same service scenario or multiple service scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 It is a flow chart of the present invention.

[0013] Figure 2 It is an interactive block diagram of the present invention. DETAILED DESCRIPTION

[0014] In order to better understand the technical content of the present invention, specific embodiments are given and described as follows in conjunction with the accompanying drawings.

[0015] Various aspects of the invention are described herein with reference to the accompanying drawings, in which many illustrative embodiments are shown. The embodiments of the invention are not limited to those described in the accompanying drawings. It should be understood that the invention is implemented by any of the various concepts and embodiments described above, as well as the concepts and embodiments described in detail below, because the concepts and embodiments disclosed in the invention are not limited to any implementation. In addition, some aspects disclosed in the invention may be used alone or in any appropriate combination with other aspects disclosed in the invention.

[0016] There will be a variety of different interactive scenarios in the metaverse environment, so the present invention proposes to set up a server for each different application scenario. The use of this multi-server mode can not only reduce the load of the server, but also increase the user experience, and can experience the use of multiple scenarios without changing the device. The method of the present invention is based on a registration center, multiple scene servers and users. The registration center is safe and reliable, responsible for the registration of users and scene servers, and saves the registration information on the registration blockchain. The scene server needs to complete the registration at the registration center before it can provide users with various metaverse scene services, and help users achieve seamless authentication when users need cross-metaverse services. Users are users of the metaverse. After registering with the registration center, they can experience different services and create avatars on different scene servers. The use of the interactive data chain is to distribute the user's personalized avatar information, protect the user's privacy and security, and make it tamper-proof.

[0017] refer to Figure 1 and Figure 2 The present invention provides a metaverse cross-scenario anonymous seamless identity authentication method based on dual blockchains, comprising the following steps: S1. Initialization phase: The registration center is initialized and generates the registration center private key and registration center public key.

[0018] S2, scene server registration stage: before being put into use, each scene server registers with the registration center RC to obtain a legal identity, obtains a digital certificate, and uploads the digital certificate to the registration blockchain as identity authentication information.

[0019] S3. User registration stage: Users use smart devices connected to the Metaverse to complete registration at the registration center and become legal users.

[0020] S4, user login and avatar creation stage on the scene server: When a legitimate user enjoys the Metaverse service, he / she enters the user login information and biometric information on the smart device connected to the Metaverse. After successfully verifying the user's identity, the smart device sends a login request to the scene server, which also carries the user's authentication information and avatar information. After receiving the login authentication request, the scene server verifies the timestamp of the information. If it passes, it will further use the user's corresponding registration block on the registered blockchain to extract the user's digital certificate and verify whether the digital certificate is consistent with the user's authentication information.

[0021] If the verification is successful, the scene server generates a session key between the user and it, and sends the key and its own authentication information to the user's smart device; the smart device verifies the identity of the scene server, calculates the session key between them after the verification, and then verifies whether the information digest is consistent. If so, the identity authentication and key exchange of both parties are achieved, otherwise it is terminated.

[0022] S5, User cross-scenario server authentication stage: When the user switches scenes, the user's avatar-related information is transmitted through communication between scene servers to complete cross-scenario server identity authentication and key exchange. The integrity, confidentiality and non-tamperability of the user's information in the metaverse are guaranteed through interactive blockchain, so that the user can seamlessly obtain different service experiences across scene servers.

[0023] Further, as a preferred embodiment of the present invention, the initialization phase of step S1 is specifically as follows: the registration center RC choose As its private key, and calculate the public key Among them, the initialization phase uses global public parameters ,in E is a non-singular finite field F p The elliptic curve on , p and q are two large prime numbers; G It is based on the elliptic curve E Points on and at infinity O The order of the elliptic curve additive group is q , Q yes G Generators of a group; H Yes Map to A collision-resistant one-way hash function.

[0024] Further, as a preferred embodiment of the present invention, step S2 scene server registration phase includes the following sub-steps: S2.1. Scene Server SS n Use unique identification code ID SSn ,choose As its private key, the computing scene server SS n The public key is ; Then register the request information Sent to the registry via a secure channel RC ;in, ID SSn It is the unique identification code of the scene server.

[0025] S2.2. Registration Center RC After receiving the registration request information, check in the registration blockchain and the database of the registration center ID SSn The existence and uniqueness of ID SSnIf it exists or is not unique, the scene server registration is terminated, otherwise the registration center RC Computing digital credentials ,|| represents the connection operation, using transactions Generate a registration block in the registration blockchain ; Last registration center RC Compute information summary , and Sent to the scene server via a secure channel SS n , scene server SS n In the registration center RC Successfully registered.

[0026] S2.3. Scene Server SS n calculate ,verify Is it true? If so, terminate the process. Otherwise, the scene server SS n Calculate ciphertext , and stored in its database, Stored in secure memory.

[0027] Further, as a preferred embodiment of the present invention, step S3 user registration stage includes the following sub-steps: S3.1. User U i Enter the unique user account on the smart device connected to the Metaverse ,password , Bioinformatics , the fuzzy extractor in the device encrypts the user's biometric information ,in is the encrypted value generated by the fuzzy extractor, is an auxiliary parameter, Gen () is a fuzzy extractor, and select As a private key, As a secret value, calculate the user's public key ,User ID Register information Sent to the registry via a secure channel RC.

[0028] S3.2. Registration Center RC Received by user U i After the authentication information is obtained, check the user U i of In the registration centerRC Uniqueness on database and registry blockchain, if DID i If it exists or is not unique, the user registration is terminated, otherwise the registration center RC calculate , and then use the transaction Generate a registration block in the registration blockchain , and save it in the registration center RC In the database, the information summary is then calculated , and Sent to the user via a secure channel U i。

[0029] S3.3. User U i calculate ,verify Is it true? If not, the user registration will be terminated. Otherwise, the user U i Calculate ciphertext , , , XOR operation, calculate the message digest , and { D 3, D 4, D 5, D 6} stored in the database of the smart device, { b i} is stored in secure storage.

[0030] Further, as a preferred embodiment of the present invention, step S4, in which the user logs in and creates an avatar on the scene server, includes the following sub-steps: S4.1. User U i Enter in the smart device connected to the Metaverse , , ,calculate , , , , , ,verify Is it true? If not, the process terminates the program, otherwise a random number is selected. As a temporary key, timestamp , calculate the temporary public key , the temporary symmetric key of the scene server , user public key If the avatar identity of the current scene server is saved in the smart device, the avatar identity is extracted. If the avatar identity of the current scene server is not saved, a new user avatar is selected. , Abstracts of Computing Communications , through a temporary symmetric key C 2 Encrypt important information to generate communication ciphertext ,in Info i It is the personalized avatar information of the user in the Metaverse. The user uses smart devices to Sent to the scene server via a public channel SS n ; S4.2. Scene Server SS n Upon receiving the user U i After the login request, first verify the timestamp Ensure the freshness of the data. If not, return to step S4.1. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , Abstracts of Computing Communications ,verify If it is not true, the program is terminated. Otherwise, the scene server SS n Just through Retrieve transactions from its database and registry blockchain , verify digital credentials Is it true? If not, terminate the process. Otherwise, save the user's personalized avatar data. And according to the user's Check if the user exists in the scene server. SS n The incarnation of , if yes, extract the avatar, otherwise create a new avatar and calculate Will Uploaded to the data interaction blockchain as a transaction record and generate a data interaction block index , then choose a random number As its temporary key, timestamp , calculate its temporary public key , temporary symmetric key , calculate users U i and scene server SS n The session key between , communication information summary , using the temporary symmetric key C4 to Sent to the user’s smart device via public messaging; S4.3. User U i After receiving the response information, verify the timestamp first Is it true to ensure the freshness of the data? If not, discard it. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , the user's smart device can , retrieve the transaction in the blockchain , verify the scene server SS n Digital certificate Is it true? If not, terminate the program. Otherwise, calculate the user U i and scene server SS n Between , It is the data interaction area index block. It is the user's avatar in the scene server. is the registration area index block, Is the unique identity code of the scene server; verification ,If it is not established, the program is terminated, otherwise the identity authentication and key exchange are completed.

[0031] Further, as a preferred embodiment of the present invention, step S5 is the user cross-scenario server authentication phase: S5.1. User U i When switching from the current Metaverse scene service to another service, send a request to the target scene server. SS m Send a cross-domain request and select a random number As its temporary key, timestamp , calculate the temporary public key , temporary symmetric key , communication information summary , using the temporary symmetric key C6 to encrypt important information and generate communication ciphertext: , the user uses the smart device to send the communication ciphertext to the target scene server through the public channel SS m ; S5.2. Target scene server SS m Upon receiving the user Ui When making a cross-domain request, verify the timestamp first Is it true to ensure the freshness of the data? If not, the user will be terminated. U i Otherwise, calculate , calculated by the temporary symmetric key , decrypt the communication ciphertext to obtain , communication information summary ,verify If it is not true, the program is terminated. Otherwise, the target scene server SS m pass Retrieve transactions from database and blockchain registry If it is not established, it will be discarded. If it is established, it will be used according to the user's Check whether the user exists in the target scenario server in the database SS m The incarnation of , and with the scene server SS n Authentication to obtain the user's personalized avatar data Info i ; S5.3. Target scene server SS m Decrypt your own registration block index on the registration blockchain , choose a random number As its temporary key, timestamp , calculate the temporary public key , temporary symmetric key , communication information summary , use the temporary symmetric key C8 to encrypt important information to generate communication ciphertext , the information Sent to the scene server via a public channel SS n ; S5.4. Scene Server SS n Upon receiving the target scene server SS m After the authentication request, first verify the timestamp Is it true to ensure the freshness of the data? If not, terminate the program. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , ,verify If it is not true, the program is terminated. Otherwise, the scene server SSn Through the target scene server SS m Registered block index Retrieve transactions from the registry blockchain , verify the target scene server SS m Digital certificate Is it true? If not, terminate the process. Otherwise, calculate the scene server. SS n Registered block index , choose a random number As its temporary key, timestamp T 5 , calculate the temporary public key , temporary symmetric key , scene server SS n and the target scene server SS m The session key between , communication information summary , through a temporary symmetric key C 10 Encrypt important information to generate communication ciphertext , the information Sent to the target scene server through a public channel SS m ; S5.5. Target scenario server SS m Upon receiving the scene server SS n After receiving the response, verify the timestamp first Is it true to ensure the freshness of the data? If not, terminate the program, otherwise calculate the symmetric key , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , through the scene server SS n Registered block index Retrieve transactions from the registry blockchain , verify the scene server SS n Digital certificate Is it true? If not, terminate the program, otherwise calculate the target scene server SS m and scene server SS n The session key between , ,verify Is it true? If not, terminate the program. If true, complete the target scene server. SS m and scene server SS n Authentication and secure connection between The user U i On the scene server SS n Personalized avatar data in Safely transmitted to the target scene server SS m , while the scene server SS n Update the block on the avatar data interaction chain ; S5.6. Target scene server SS m Successfully acquired users U i After the personalized avatar data is collected, the Check whether the user exists in the target scenario server in its database SS m The avatar identity , if there is one, extract the avatar If not, create a new avatar identity , Will Uploaded to the data interaction blockchain as a transaction record and generate a data interaction block index , then choose a random number As a temporary key, timestamp , then choose a random number As a temporary key, timestamp , calculate the temporary public key , temporary symmetric key , calculate the target scene server SS m and users U i The session key between , through a temporary symmetric key C 12 Encrypt important information to generate communication ciphertext , the information Sent to the user’s smart device via public messaging; user U i Receive information Verify timestamp first Is it true to ensure the freshness of the data? If not, terminate the program. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , the user's smart device passes through the target scene server SS m Registered block index , retrieve the transaction in the registered blockchain , verify the target scene server SS m Digital certificate Is it true? If not, terminate the program. Otherwise, calculate the user and target scenario server. SS m The session key between: , verify Is it true? If not, terminate the process; otherwise, the user completes the identity authentication and key exchange across the server scenarios.

[0032] Although the present invention has been described above with preferred embodiments, it is not intended to limit the present invention. A person skilled in the art of the present invention may make various modifications and improvements without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the present invention shall be determined by the definition of the claims.

Claims

1. A Metaverse cross-scenario anonymous seamless identity authentication method based on dual blockchains, characterized in that: The following steps are involved: S1, initialization phase: the registration center is initialized and generates the registration center private key and registration center public key; S2, scene server registration stage: each scene server registers with the registration center RC before being put into use to obtain a legal identity, obtain a digital certificate, and upload the digital certificate to the registration blockchain as identity authentication information; S3, User registration stage: Users use smart devices connected to the Metaverse to complete registration at the registration center and become legal users; S4, user login and avatar creation stage on the scene server: the legitimate user enters the user login information and biometric information on the smart device connected to the Metaverse. After the smart device successfully verifies the user's identity, it sends a login request to the scene server, carrying the user's authentication information and avatar information; After receiving the login authentication request, the scene server verifies the timestamp of the information. If the verification is qualified, it will further use the user's corresponding registration block on the registration blockchain to extract the user's digital certificate and verify whether the digital certificate is consistent with the user's authentication information; If the verification fails, the program will be exited. If the verification passes, the scene server will generate a session key between the user and it, and send the information digest consisting of the key and other parameters and its own authentication information to the user's smart device; the smart device verifies the identity of the scene server, calculates the session key between them after the verification, and then verifies whether the information digest is consistent. If yes, the identity authentication and key exchange of both parties are achieved, otherwise it is terminated; S5, user cross-scenario server authentication stage: When the user switches scenes, the user's avatar-related information is transmitted through communication between scene servers to complete cross-scenario server identity authentication and key exchange.

2. According to claim 1, a dual-blockchain-based metaverse cross-scenario anonymous seamless identity authentication method is characterized in that: Step S1 is as follows: Registration Center RC choose As its private key, and calculate the public key Among them, the initialization phase uses global public parameters ,in E is a non-singular finite field F p The elliptic curve on , p and q are two large prime numbers; G It is based on the elliptic curve E Points on and at infinity O The order of the elliptic curve additive group is q , Q yes G Generators of a group; H Yes Map to A collision-resistant one-way hash function.

3. According to the dual-blockchain-based Metaverse cross-scenario anonymous seamless identity authentication method of claim 1, it is characterized in that: Step S2 includes the following sub-steps: S2.

1. Scene Server SS n Use unique ID ID SSn ,choose As its private key, the computing scene server SS n The public key is ; Then register the request information Sent to the registry via a secure channel RC ;in, ID SSn It is the unique identification code of the scene server; S2.

2. Registration Center RC After receiving the registration request information, check in the registration blockchain and the database of the registration center ID SSn The existence and uniqueness of ID SSn If it exists or is not unique, the scene server registration is terminated, otherwise the registration center RC Computing digital credentials ,|| represents the connection operation, using transactions Generate a registration block in the registration blockchain ; Last registration center RC Compute information summary , and Sent to the scene server via a secure channel SS n , scene server SS n In the registration center RC Successful registration; S2.

3. Scene Server SS n calculate ,verify Is it true? If so, terminate the process. Otherwise, the scene server SS n Calculate ciphertext , and stored in its database, Stored in secure memory.

4. According to claim 1, a dual-blockchain-based Metaverse cross-scenario anonymous seamless identity authentication method is characterized in that: Step S3 includes the following sub-steps: S3.

1. User U i Enter the unique user account on the smart device connected to the Metaverse ,password , Bioinformatics , the fuzzy extractor in the device encrypts the user's biometric information ,in is the encrypted value generated by the fuzzy extractor, is an auxiliary parameter, Gen () is a fuzzy extractor, and select As a private key, As a secret value, calculate the user's public key ,User ID Register information Sent to the registry via a secure channel RC ; S3.

2. Registration Center RC Received by user U i After the authentication information is obtained, check the user U i of In the registration center RC Uniqueness on database and registry blockchain, if DID i If it exists or is not unique, the user registration is terminated, otherwise the registration center RC calculate , and then use the transaction Generate a registration block in the registration blockchain , and save it in the registration center RC In the database, the information summary is then calculated , and Sent to the user via a secure channel U i ; S3.

3. User U i calculate ,verify Is it true? If not, the user registration will be terminated. Otherwise, the user U i Calculate ciphertext , , , XOR operation, calculate the message digest , and { D 3, D 4, D 5, D 6} stored in the database of the smart device, { b i } is stored in secure storage.

5. According to claim 1, a dual-blockchain-based Metaverse cross-scenario anonymous seamless identity authentication method is characterized in that: Step S4 includes the following sub-steps: S4.

1. User U i Enter in the smart device connected to the Metaverse , , ,calculate , , , , , ,verify Is it true? If not, the process terminates the program, otherwise a random number is selected. As a temporary key, timestamp , calculate the temporary public key , the temporary symmetric key of the scene server , user public key If the avatar identity of the current scene server is saved in the smart device, the avatar identity is extracted. If the avatar identity of the current scene server is not saved, a new user avatar is selected. , Abstracts of Computational Communications , through a temporary symmetric key C 2 Encrypt important information to generate communication ciphertext ,in Info i It is the personalized avatar information of the user in the Metaverse. The user uses smart devices to Sent to the scene server via a public channel SS n ; S4.

2. Scene Server SS n Upon receiving the user U i After the login request, first verify the timestamp Ensure the freshness of the data. If not, return to step S4.

1. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , Abstracts of Computational Communications ,verify If it is not true, the program is terminated. Otherwise, the scene server SS n Just through Retrieve transactions from its database and registry blockchain , verify digital credentials Is it true? If not, terminate the process. Otherwise, save the user's personalized avatar data. And according to the user's Check if the user exists in the scene server. SS n The incarnation of , if yes, extract the avatar, otherwise create a new avatar and calculate Will Uploaded to the data interaction blockchain as a transaction record and generate a data interaction block index , then choose a random number As its temporary key, timestamp , calculate its temporary public key , temporary symmetric key , calculate users U i and scene server SS n The session key between , communication information summary , using the temporary symmetric key C4 to Sent to the user’s smart device via public messaging; S4.

3. User U i After receiving the response information, verify the timestamp first Is it true to ensure the freshness of the data? If not, discard it. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , the user's smart device can , retrieve the transaction in the blockchain , verify the scene server SS n Digital certificate Is it true? If not, terminate the program. Otherwise, calculate the user U i and scene server SS n Between , It is the data interaction area index block. It is the user's avatar in the scene server. is the registration area index block, Is the unique identity code of the scene server; verification ,If it is not established, the program is terminated, otherwise the identity authentication and key exchange are completed.

6. According to claim 1, a dual-blockchain-based Metaverse cross-scenario anonymous seamless identity authentication method is characterized in that: Step S5 includes the following sub-steps: S5.

1. User U i When switching from the current Metaverse scene service to another service, send a request to the target scene server. SS m Send a cross-domain request and select a random number As its temporary key, timestamp , calculate the temporary public key , temporary symmetric key , communication information summary , using the temporary symmetric key C6 to encrypt important information and generate communication ciphertext: , the user uses the smart device to send the communication ciphertext to the target scene server through the public channel SS m ; S5.

2. Target scene server SS m Upon receiving the user U i When making a cross-domain request, verify the timestamp first Is it true to ensure the freshness of the data? If not, the user will be terminated. U i Otherwise, calculate , calculated by the temporary symmetric key , decrypt the communication ciphertext to obtain , communication information summary ,verify If it is not true, the program is terminated. Otherwise, the target scene server SS m pass Retrieve transactions from database and blockchain registry If it is not established, it will be discarded. If it is established, it will be used according to the user's Check whether the user exists in the target scenario server in the database SS m The incarnation of , and with the scene server SS n Authentication to obtain the user's personalized avatar data Info i ; S5.

3. Target scene server SS m Decrypt your own registration block index on the registration blockchain , choose a random number As its temporary key, timestamp , calculate the temporary public key , temporary symmetric key , communication information summary , use the temporary symmetric key C8 to encrypt important information to generate communication ciphertext , the information Sent to the scene server via a public channel SS n ; S5.

4. Scene Server SS n Upon receiving the target scene server SS m After the authentication request, first verify the timestamp Is it true to ensure the freshness of the data? If not, terminate the program. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , ,verify If it is not true, the program is terminated. Otherwise, the scene server SS n Through the target scene server SS m Registered block index Retrieve transactions from the registry blockchain , verify the target scene server SS m Digital certificate Is it true? If not, terminate the process. Otherwise, calculate the scene server. SS n Registered block index , choose a random number As its temporary key, timestamp T 5 , calculate the temporary public key , temporary symmetric key , scene server SS n and the target scene server SS m The session key between , communication information summary , through a temporary symmetric key C 10 Encrypt important information to generate communication ciphertext , the information Sent to the target scene server through a public channel SS m ; S5.

5. Target scenario server SS m Upon receiving the scene server SS n After receiving the response, verify the timestamp first Is it true to ensure the freshness of the data? If not, terminate the program, otherwise calculate the symmetric key , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , through the scene server SS n Registered block index Retrieve transactions from the registry blockchain , verify the scene server SS n Digital certificate Is it true? If not, terminate the program, otherwise calculate the target scene server SS m and scene server SS n The session key between , ,verify Is it true? If not, terminate the program. If true, complete the target scene server. SS m and scene server SS n Authentication and secure connection between The user U i On the scene server SS n Personalized avatar data in Safely transmitted to the target scene server SS m , while the scene server SS n Update the block on the avatar data interaction chain ; S5.

6. Target scene server SS m Successfully acquired users U i After the personalized avatar data is collected, the Check whether the user exists in the target scenario server in its database SS m Avatar identity , if there is one, extract the avatar If not, create a new avatar identity , Will Uploaded to the data interaction blockchain as a transaction record and generate a data interaction block index , then choose a random number As a temporary key, timestamp , then choose a random number As a temporary key, timestamp , calculate the temporary public key , temporary symmetric key , calculate the target scene server SS m and users U i The session key between , through a temporary symmetric key C 12 Encrypt important information to generate communication ciphertext , the information Sent to the user’s smart device via public messaging; user U i Receive information Verify timestamp first Is it true to ensure the freshness of the data? If not, terminate the program. Otherwise, calculate , calculated by the temporary symmetric key Decrypt the communication ciphertext to obtain , the user's smart device passes through the target scene server SS m Registered block index , retrieve the transaction in the registered blockchain , verify the target scene server SS m Digital certificate Is it true? If not, terminate the program. Otherwise, calculate the user and target scenario server. SS m The session key between: ， verify Is it true? If not, terminate the process; otherwise, the user completes the identity authentication and key exchange across the server scenarios.

Images