Network security authentication system and method based on block chain

Abstract

The invention relates to the technical field of network security, and discloses a network security authentication system and method based on a block chain, and the system comprises a data processing module, a risk assessment module, a permission adjustment module and a security supervision module. The method corresponds to the system. According to the application, in the data processing module, the user behavior and the equipment operation data are collected and stored in the block chain, so that the security and traceability of the data are ensured; the risk assessment module accurately analyzes the user behavior risk by means of a risk assessment model and a consensus mechanism distributed at each node of the block chain, and improves the reliability of security authentication; the permission adjustment module dynamically adjusts the user permission according to the consensus evaluation result and a preset rule, and the flexibility of the system to cope with the security risk is enhanced; the security supervision module records a permission adjustment process to ensure the compliance and traceability of the system; therefore, dynamic authority management of the network security authentication system based on the block chain is realized, security and flexibility in security authentication are improved, and various security challenges and user behavior changes can be timely coped with.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and specifically to a network security authentication system and method based on blockchain. Background Art

[0002] In traditional network security authentication systems, user permissions are usually set statically and rarely adjusted once assigned. However, this approach has some problems:

[0003] Insufficient security: If a user has too many permissions and his / her behavior changes, it may lead to security risks;

[0004] Poor flexibility: Static permissions cannot adapt to changing business needs and user behaviors.

[0005] Chinese patent number CN118714568A discloses a 5G network information security authority authentication method and system based on an asymmetric algorithm, including the following steps: S1, providing an asymmetric encryption system, each user terminal device generates a public key and a private key pair; S2, the user terminal device generates a multi-layer digital signature based on a hash chain and sends it to the authentication server; S3, the authentication server verifies the digital signature and confirms the identity; S4, the authentication server assigns access rights, generates a digital certificate and an access token; S5, the network resource uses a multi-factor weighted verification algorithm to verify the digital certificate and the access token, and decides whether to grant access rights; S6, through the improved elliptic curve key exchange algorithm, the session key is negotiated to generate a session key for data encryption; S7, the generated session key is used to encrypt and transmit data. However, the invention only dynamically verifies whether access rights are granted during operation, and does not dynamically adapt to the verification of not granting access rights, resulting in poor flexibility of the invention in actual authentication.

[0006] In summary, there is an urgent need for a dynamic permission management mechanism that can automatically adjust user permissions based on factors such as user identity and behavior to improve the security and flexibility of the authentication system. Summary of the invention

[0007] The purpose of this application is to provide a blockchain-based network security authentication system and method to solve the technical problems raised in the above-mentioned background technology.

[0008] To achieve the above objectives, this application discloses the following technical solutions:

[0009] In a first aspect, the present application discloses a blockchain-based network security authentication system, the system comprising:

[0010] A data processing module, which is used for multi-source data collection and blockchain storage;

[0011] A risk assessment module, wherein the risk assessment module is used to perform user behavior analysis based on a preset risk assessment model and a consensus mechanism of the blockchain; wherein the risk assessment model is set at each node of the blockchain, the risk assessment model is used to perform user behavior analysis at each node to obtain an independent assessment result, and the consensus mechanism is used to perform a consensus assessment based on the independent assessment result to obtain a consensus assessment result;

[0012] A permission adjustment module, the permission adjustment module is used to perform dynamic permission adjustment based on the consensus evaluation result and preset permission adjustment rules; wherein the permission adjustment rules store preset permission adjustment execution conditions and corresponding execution contents;

[0013] A security monitoring module, the security monitoring module is used to record and store the dynamic permission adjustment process of the permission adjustment module;

[0014] The data processing module is communicatively connected to the risk assessment module, the risk assessment module is communicatively connected to the authority adjustment module, and the authority adjustment module is communicatively connected to the security supervision module.

[0015] Preferably, the operation process of the data processing module includes:

[0016] Collecting user behavior data and device operation data from multiple channels using a preset multi-source data collection tool; wherein the behavior data is used to characterize the user's behavior, and the operation data is used to characterize the operation status of the device corresponding to the behavior data;

[0017] The behavior data and the operation data are encrypted and stored in a data block corresponding to the blockchain; wherein the data block also includes a timestamp, a data hash value, and a hash value of a previous data block, to obtain an encrypted chain structure.

[0018] Preferably, the operation process of the risk assessment module includes:

[0019] The risk assessment model of each node running the blockchain analyzes the behavior data to obtain the independent assessment result; wherein the independent assessment result includes normal behavior and abnormal behavior;

[0020] The independent evaluation results are collected and the consensus mechanism is run to obtain the consensus evaluation result; wherein the consensus mechanism at least includes a voting mechanism, and the voting mechanism is to count the proportion of normal behaviors among multiple independent evaluation results corresponding to the same behavior data, and obtain the consensus evaluation result based on the proportion, and the consensus evaluation result includes normal behaviors and abnormal behaviors.

[0021] Preferably, the operation process of the permission adjustment module includes:

[0022] Obtaining the consensus evaluation result and invoking the authority adjustment rule;

[0023] When the consensus evaluation result meets the permission adjustment execution condition, the corresponding execution content is executed.

[0024] Preferably, the operation process of the safety supervision module includes:

[0025] Continuously record the operation process of the permission adjustment module;

[0026] When the execution content corresponding to the execution exists, the corresponding consensus evaluation result, the authority adjustment execution condition and the execution content are recorded and stored.

[0027] In a second aspect, the present application discloses a blockchain-based network security authentication method, which is applicable to the blockchain-based network security authentication system as described above, and the method includes:

[0028] S1: Multi-source data collection and blockchain storage;

[0029] S2: Performing user behavior analysis based on a preset risk assessment model and a consensus mechanism of the blockchain; wherein the risk assessment model is set at each node of the blockchain, the risk assessment model is used to perform user behavior analysis at each node to obtain an independent assessment result, and the consensus mechanism is used to perform a consensus assessment based on the independent assessment result to obtain a consensus assessment result;

[0030] S3: Performing dynamic permission adjustment based on the consensus evaluation result and preset permission adjustment rules; wherein the permission adjustment rules store preset permission adjustment execution conditions and corresponding execution contents;

[0031] S4: Record and store the dynamic permission adjustment process of the permission adjustment module;

[0032] The data processing module is communicatively connected to the risk assessment module, the risk assessment module is communicatively connected to the authority adjustment module, and the authority adjustment module is communicatively connected to the security supervision module.

[0033] Preferably, step S1 specifically includes:

[0034] Collecting user behavior data and device operation data from multiple channels using a preset multi-source data collection tool; wherein the behavior data is used to characterize the user's behavior, and the operation data is used to characterize the operation status of the device corresponding to the behavior data;

[0035] The behavior data and the operation data are encrypted and stored in a data block corresponding to the blockchain; wherein the data block also includes a timestamp, a data hash value, and a hash value of a previous data block, to obtain an encrypted chain structure.

[0036] Preferably, step S2 specifically includes:

[0037] The risk assessment model of each node running the blockchain analyzes the behavior data to obtain the independent assessment result; wherein the independent assessment result includes normal behavior and abnormal behavior;

[0038] The independent evaluation results are collected and the consensus mechanism is run to obtain the consensus evaluation result; wherein the consensus mechanism at least includes a voting mechanism, and the voting mechanism is to count the proportion of normal behaviors among multiple independent evaluation results corresponding to the same behavior data, and obtain the consensus evaluation result based on the proportion, and the consensus evaluation result includes normal behaviors and abnormal behaviors.

[0039] Preferably, step S3 specifically includes:

[0040] Obtaining the consensus evaluation result and invoking the authority adjustment rule;

[0041] When the consensus evaluation result meets the permission adjustment execution condition, the corresponding execution content is executed.

[0042] Preferably, step S4 specifically includes:

[0043] Continuously record the operation process of the permission adjustment module;

[0044] When the execution content corresponding to the execution exists, the corresponding consensus evaluation result, the authority adjustment execution condition and the execution content are recorded and stored.

[0045] Beneficial effects: The blockchain-based network security authentication system and method of the present application utilizes a data processing module, a risk assessment module, a permission adjustment module, and a security supervision module to realize dynamic permission management of a blockchain-based network security authentication system through multi-source data collection, risk assessment model analysis, consensus mechanism decision-making, permission adjustment rule execution, and security supervision records; in the data processing module, user behavior and device operation data are comprehensively collected and stored in the blockchain to ensure the security and traceability of the data, and provide an accurate basis for subsequent risk assessment; the risk assessment module objectively and accurately analyzes user behavior risks with the help of risk assessment models and consensus mechanisms distributed on each node of the blockchain, thereby improving the reliability of security authentication; the permission adjustment module dynamically adjusts user permissions based on consensus assessment results and preset rules, thereby enhancing the flexibility of the system in responding to security risks; the security supervision module records the permission adjustment process to ensure the compliance and traceability of the system; thereby improving security and flexibility in security authentication, and being able to respond to various security challenges and user behavior changes in a timely manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without paying any creative work.

[0047] Figure 1 A structural block diagram of a blockchain-based network security authentication system provided in an embodiment of the present application;

[0048] Figure 2 A flowchart of a blockchain-based network security authentication method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0049] The technical solutions in the embodiments of the present application are described clearly and completely below. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0050] In this article, the term "comprising" is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of more restrictions, the elements defined by the sentence "comprising..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0051] The first aspect of this embodiment discloses Figure 1 A network security authentication system based on blockchain is shown, the system comprising:

[0052] Data processing module: The data processing module is used for multi-source data collection and blockchain storage;

[0053] A risk assessment module, which is used to perform user behavior analysis based on a preset risk assessment model and a consensus mechanism of the blockchain; wherein the risk assessment model is set at each node of the blockchain, the risk assessment model is used to perform user behavior analysis at each node to obtain an independent assessment result, and the consensus mechanism is used to perform a consensus assessment based on the independent assessment result to obtain a consensus assessment result;

[0054] The permission adjustment module is used to perform dynamic permission adjustment based on the consensus evaluation results and the preset permission adjustment rules; wherein the permission adjustment rules store the preset permission adjustment execution conditions and the corresponding execution contents;

[0055] A security monitoring module, which is used to record and store the dynamic permission adjustment process of the permission adjustment module;

[0056] The data processing module is connected in communication with the risk assessment module, the risk assessment module is connected in communication with the authority adjustment module, and the authority adjustment module is connected in communication with the security supervision module.

[0057] Based on the above, this embodiment utilizes a data processing module, a risk assessment module, a permission adjustment module, and a security supervision module to realize dynamic permission management of a blockchain-based network security authentication system through multi-source data collection, risk assessment model analysis, consensus mechanism decision-making, permission adjustment rule execution, and security supervision records; in the data processing module, user behavior and device operation data are comprehensively collected and stored in the blockchain to ensure the security and traceability of the data, and provide an accurate basis for subsequent risk assessment; the risk assessment module objectively and accurately analyzes user behavior risks with the help of risk assessment models and consensus mechanisms distributed on each node of the blockchain, thereby improving the reliability of security authentication; the permission adjustment module dynamically adjusts user permissions based on consensus assessment results and preset rules, thereby enhancing the flexibility of the system in responding to security risks; the security supervision module records the permission adjustment process to ensure the compliance and traceability of the system; thereby improving security and flexibility in security authentication, and being able to respond to various security challenges and user behavior changes in a timely manner.

[0058] Specifically, the operation process of the data processing module includes:

[0059] Use the preset multi-source data collection tool to collect user behavior data and device operation data from multiple channels; the behavior data is used to characterize the user's behavior, and the operation data is used to characterize the operation status of the device corresponding to the behavior data;

[0060] The behavior data and operation data are encrypted and stored in the data block corresponding to the blockchain; wherein the data block also includes a timestamp, a data hash value and a hash value of the previous data block, obtaining an encrypted chain structure.

[0061] In a specific application, this embodiment uses existing multi-source data collection tools to collect user behavior data and device operation data from multiple channels. For example, user login time is collected from server logs, network traffic data is obtained from network monitoring devices, etc. These data are then encrypted and stored in the data blocks corresponding to the blockchain to form an encrypted chain structure to ensure that the data cannot be tampered with and is traceable.

[0062] Based on the above, this embodiment uses multi-source data collection tools to collect user behavior data and device operation data from multiple channels, and encrypts and stores them in the blockchain, thereby achieving comprehensive data collection and secure storage. This provides an accurate and reliable data basis for subsequent risk assessment and permission adjustment. During the network security authentication process, it ensures the integrity and security of the data required for dynamic permission management, and improves the security of the system. At the same time, the characteristics of the blockchain enable data to be traced and verified at any time, enhancing the flexibility of the system in the face of security challenges, and enabling quick and accurate location of problems and adjustment of permissions.

[0063] Specifically, the operation process of the risk assessment module includes:

[0064] The risk assessment model of each node running the blockchain analyzes the behavior data to obtain independent assessment results; the independent assessment results include normal behavior and abnormal behavior;

[0065] Collect independent evaluation results and run a consensus mechanism to obtain a consensus evaluation result; wherein the consensus mechanism includes at least a voting mechanism, the voting mechanism is to count the proportion of normal behaviors among multiple independent evaluation results corresponding to the same behavior data, and obtain a consensus evaluation result based on the proportion, and the consensus evaluation result includes normal behavior and abnormal behavior.

[0066] In a specific application, the risk assessment model of this embodiment is set on each node of the blockchain to analyze the collected user behavior data. For example, when a user accesses sensitive resources during non-working hours for multiple consecutive times, the risk assessment model of each node independently analyzes the behavior and obtains an independent assessment result of abnormal or normal behavior. Through the voting mechanism in the consensus mechanism, the proportion of normal behavior in multiple independent assessment results is counted. If the proportion is lower than a preset threshold, the consensus assessment result is abnormal behavior.

[0067] Based on the above, this embodiment uses a preset risk assessment model and the consensus mechanism of the blockchain to perform multi-node analysis and voting decisions on user behavior data to achieve accurate risk assessment. In network security authentication, this method ensures the objectivity and accuracy of user behavior risk judgment and improves the security of the system. When suspicious behavior occurs, multiple nodes make decisions together to avoid the deviation of a single node judgment and enhance the flexibility of the system in responding to security threats. At the same time, the consensus mechanism makes the risk assessment results more reliable, provides a scientific basis for dynamic permission management, and can adjust user permissions in a timely manner to reduce security risks.

[0068] Specifically, the operation process of the permission adjustment module includes:

[0069] Obtain consensus evaluation results and invoke permission adjustment rules;

[0070] When the consensus evaluation results meet the conditions for executing permission adjustments, the corresponding execution content will be executed.

[0071] In a specific application, after the permission adjustment module of this embodiment obtains the consensus evaluation result, it calls the permission adjustment rule. For example, when the consensus evaluation result is abnormal behavior, and the permission adjustment rule stipulates that when abnormal behavior occurs, the user's access rights to specific sensitive resources should be reduced, then the corresponding permission adjustment content is executed.

[0072] Based on the above, this embodiment uses consensus evaluation results and preset permission adjustment rules to automatically perform permission adjustment operations to achieve dynamic permission management. During the network security authentication process, permissions are adjusted in a timely manner according to the risk status of user behavior, thereby improving the security of the system. When user behavior is abnormal, its permissions can be quickly reduced to prevent the spread of potential security threats. At the same time, this dynamic adjustment mechanism enhances the flexibility of the system, can adapt to different security scenarios and changes in user behavior, and improves the system's adaptability and ability to respond to sudden security incidents.

[0073] Specifically, the operation process of the safety supervision module includes:

[0074] Continuously record the operation process of the permission adjustment module;

[0075] When there is execution content corresponding to the execution, the corresponding consensus evaluation results, authority adjustment execution conditions and execution content are recorded and stored.

[0076] In a specific application, the security supervision module of this embodiment continuously records the operation process of the permission adjustment module. For example, when the user's permissions are reduced due to abnormal user behavior, the security supervision module records the specific circumstances of the abnormal behavior, the conditions that trigger the permission adjustment, and the specific operations of reducing the permissions.

[0077] Based on the above, this embodiment uses the security supervision module to record and store the entire process of permission adjustment, thereby achieving effective supervision of dynamic permission management, ensuring the compliance and traceability of permission adjustment, and improving the security of the system. Once a security problem occurs, the source of the problem and the responsible party can be quickly located by viewing the records, thereby enhancing the transparency and trust of the system, making dynamic permission management more standardized and reliable, improving the flexibility of the system in security authentication, and being able to adjust the permission management strategy in a timely manner according to the supervision results.

[0078] The second aspect of this embodiment discloses Figure 2 A network security authentication method based on blockchain is shown, which is applicable to the network security authentication system based on blockchain as above, and the method includes:

[0079] S1: Multi-source data collection and blockchain storage;

[0080] S2: Conduct user behavior analysis based on a preset risk assessment model and the consensus mechanism of the blockchain; wherein the risk assessment model is set at each node of the blockchain, the risk assessment model is used to conduct user behavior analysis at each node to obtain an independent assessment result, and the consensus mechanism is used to conduct a consensus assessment based on the independent assessment result to obtain a consensus assessment result;

[0081] S3: Dynamically adjust permissions based on the consensus evaluation results and preset permission adjustment rules; wherein the permission adjustment rules store preset permission adjustment execution conditions and corresponding execution contents;

[0082] S4: Record and store the dynamic permission adjustment process of the permission adjustment module;

[0083] The data processing module is connected in communication with the risk assessment module, the risk assessment module is connected in communication with the authority adjustment module, and the authority adjustment module is connected in communication with the security supervision module.

[0084] It should be noted that the blockchain-based network security authentication method of this embodiment corresponds to the blockchain-based network security authentication system mentioned above. Therefore, the contents not specifically described in the blockchain-based network security authentication method of this embodiment may include but are not limited to the function definition, working principle and technical effect, etc., and may refer to the blockchain-based network security authentication system mentioned above, and this text will not elaborate on them here.

[0085] Specifically, step S1 specifically includes:

[0086] Use the preset multi-source data collection tool to collect user behavior data and device operation data from multiple channels; the behavior data is used to characterize the user's behavior, and the operation data is used to characterize the operation status of the device corresponding to the behavior data;

[0087] The behavior data and operation data are encrypted and stored in the data block corresponding to the blockchain; wherein the data block also includes a timestamp, a data hash value and a hash value of the previous data block, obtaining an encrypted chain structure.

[0088] Specifically, step S2 specifically includes:

[0089] The risk assessment model of each node running the blockchain analyzes the behavior data to obtain independent assessment results; the independent assessment results include normal behavior and abnormal behavior;

[0090] Collect independent evaluation results and run a consensus mechanism to obtain a consensus evaluation result; wherein the consensus mechanism includes at least a voting mechanism, the voting mechanism is to count the proportion of normal behaviors among multiple independent evaluation results corresponding to the same behavior data, and obtain a consensus evaluation result based on the proportion, and the consensus evaluation result includes normal behavior and abnormal behavior.

[0091] Specifically, step S3 specifically includes:

[0092] Obtain consensus evaluation results and invoke permission adjustment rules;

[0093] When the consensus evaluation results meet the conditions for executing permission adjustments, the corresponding execution content will be executed.

[0094] Specifically, step S4 includes:

[0095] Continuously record the operation process of the permission adjustment module;

[0096] When there is execution content corresponding to the execution, the corresponding consensus evaluation results, authority adjustment execution conditions and execution content are recorded and stored.

[0097] In summary, the blockchain-based network security authentication system and method of this embodiment utilizes a data processing module, a risk assessment module, a permission adjustment module, and a security supervision module to realize dynamic permission management of a blockchain-based network security authentication system through multi-source data collection, risk assessment model analysis, consensus mechanism decision-making, permission adjustment rule execution, and security supervision records; in the data processing module, user behavior and device operation data are comprehensively collected and stored in the blockchain to ensure the security and traceability of the data, and provide an accurate basis for subsequent risk assessment; the risk assessment module objectively and accurately analyzes user behavior risks with the help of risk assessment models and consensus mechanisms distributed on each node of the blockchain, thereby improving the reliability of security authentication; the permission adjustment module dynamically adjusts user permissions based on consensus assessment results and preset rules, thereby enhancing the flexibility of the system in responding to security risks; the security supervision module records the permission adjustment process to ensure the compliance and traceability of the system; thereby improving security and flexibility in security authentication, and being able to respond to various security challenges and user behavior changes in a timely manner.

[0098] In the embodiments provided in the present application, it should be understood that the embodiments described herein can be implemented in hardware, software, firmware, middleware, code or any appropriate combination thereof. For hardware implementation, the processor can be implemented in one or more of the following units: application specific integrated circuit (ASIC), digital signal processor (DSP), digital signal processing device (DSPD), programmable logic device (PLD), field programmable gate array (FPGA), processor, controller, microcontroller, microprocessor, other electronic units designed to implement the functions described herein or their combination. For software implementation, part or all of the flow of the embodiment can be completed by instructing the relevant hardware through a computer program. When implemented, the above program can be stored in a computer-readable storage medium or transmitted as one or more instructions or codes on a computer-readable storage medium. Computer-readable storage media include computer storage media and communication media, wherein the communication medium includes any medium that is convenient for transmitting a computer program from one place to another. The storage medium can be any available medium that a computer can access. The computer-readable storage medium can include but is not limited to RAM, ROM, EEPROM, CD-ROM or other optical disk storage, disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of an instruction or data structure and can be accessed by a computer.

[0099] Finally, it should be noted that the above is only a preferred embodiment of the present application and is not intended to limit the present application. Although the present application has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included in the protection scope of the present application.

Claims

1. A network security authentication system based on blockchain, characterized in that: The system includes: A data processing module, which is used for multi-source data collection and blockchain storage; A risk assessment module, wherein the risk assessment module is used to perform user behavior analysis based on a preset risk assessment model and a consensus mechanism of the blockchain; wherein the risk assessment model is set at each node of the blockchain, the risk assessment model is used to perform user behavior analysis at each node to obtain an independent assessment result, and the consensus mechanism is used to perform a consensus assessment based on the independent assessment result to obtain a consensus assessment result; A permission adjustment module, the permission adjustment module is used to perform dynamic permission adjustment based on the consensus evaluation result and preset permission adjustment rules; wherein the permission adjustment rules store preset permission adjustment execution conditions and corresponding execution contents; A security monitoring module, the security monitoring module is used to record and store the dynamic permission adjustment process of the permission adjustment module; The data processing module is communicatively connected to the risk assessment module, the risk assessment module is communicatively connected to the authority adjustment module, and the authority adjustment module is communicatively connected to the security supervision module.

2. The blockchain-based network security authentication system according to claim 1 is characterized in that: The operation process of the data processing module includes: Collecting user behavior data and device operation data from multiple channels using a preset multi-source data collection tool; wherein the behavior data is used to characterize the user's behavior, and the operation data is used to characterize the operation status of the device corresponding to the behavior data; The behavior data and the operation data are encrypted and stored in a data block corresponding to the blockchain; wherein the data block also includes a timestamp, a data hash value, and a hash value of a previous data block, to obtain an encrypted chain structure.

3. The blockchain-based network security authentication system according to claim 2 is characterized in that: The operation process of the risk assessment module includes: The risk assessment model of each node running the blockchain analyzes the behavior data to obtain the independent assessment result; wherein the independent assessment result includes normal behavior and abnormal behavior; The independent evaluation results are collected and the consensus mechanism is run to obtain the consensus evaluation result; wherein the consensus mechanism at least includes a voting mechanism, and the voting mechanism is to count the proportion of normal behaviors among multiple independent evaluation results corresponding to the same behavior data, and obtain the consensus evaluation result based on the proportion, and the consensus evaluation result includes normal behaviors and abnormal behaviors.

4. The blockchain-based network security authentication system according to claim 1 is characterized in that: The operation process of the permission adjustment module includes: Obtaining the consensus evaluation result and invoking the authority adjustment rule; When the consensus evaluation result meets the permission adjustment execution condition, the corresponding execution content is executed.

5. The blockchain-based network security authentication system according to claim 4 is characterized in that: The operation process of the safety supervision module includes: Continuously record the operation process of the permission adjustment module; When the execution content corresponding to the execution exists, the corresponding consensus evaluation result, the authority adjustment execution condition and the execution content are recorded and stored.

6. A network security authentication method based on blockchain, which is applicable to the network security authentication system based on blockchain as described in any one of claims 1 to 5, characterized in that: The method includes: S1: Multi-source data collection and blockchain storage; S2: Performing user behavior analysis based on a preset risk assessment model and a consensus mechanism of the blockchain; wherein the risk assessment model is set at each node of the blockchain, the risk assessment model is used to perform user behavior analysis at each node to obtain an independent assessment result, and the consensus mechanism is used to perform a consensus assessment based on the independent assessment result to obtain a consensus assessment result; S3: Performing dynamic permission adjustment based on the consensus evaluation result and preset permission adjustment rules; wherein the permission adjustment rules store preset permission adjustment execution conditions and corresponding execution contents; S4: Record and store the dynamic permission adjustment process of the permission adjustment module; The data processing module is communicatively connected to the risk assessment module, the risk assessment module is communicatively connected to the authority adjustment module, and the authority adjustment module is communicatively connected to the security supervision module.

7. The blockchain-based network security authentication method according to claim 6 is characterized in that: Step S1 specifically includes: Collecting user behavior data and device operation data from multiple channels using a preset multi-source data collection tool; wherein the behavior data is used to characterize the user's behavior, and the operation data is used to characterize the operation status of the device corresponding to the behavior data; The behavior data and the operation data are encrypted and stored in a data block corresponding to the blockchain; wherein the data block also includes a timestamp, a data hash value, and a hash value of a previous data block, to obtain an encrypted chain structure.

8. The blockchain-based network security authentication method according to claim 7 is characterized in that: Step S2 specifically includes: The risk assessment model of each node running the blockchain analyzes the behavior data to obtain the independent assessment result; wherein the independent assessment result includes normal behavior and abnormal behavior; The independent evaluation results are collected and the consensus mechanism is run to obtain the consensus evaluation result; wherein the consensus mechanism at least includes a voting mechanism, and the voting mechanism is to count the proportion of normal behaviors among multiple independent evaluation results corresponding to the same behavior data, and obtain the consensus evaluation result based on the proportion, and the consensus evaluation result includes normal behaviors and abnormal behaviors.

9. The blockchain-based network security authentication method according to claim 6, characterized in that: Step S3 specifically includes: Obtaining the consensus evaluation result and invoking the authority adjustment rule; When the consensus evaluation result meets the permission adjustment execution condition, the corresponding execution content is executed.

10. The blockchain-based network security authentication method according to claim 9, characterized in that: Step S4 specifically includes: Continuously record the operation process of the permission adjustment module; When the execution content corresponding to the execution exists, the corresponding consensus evaluation result, the authority adjustment execution condition and the execution content are recorded and stored.

Images