Academic participant trusted identity authentication method based on blockchain verifiable certificate

Abstract

The invention discloses an academic participant trusted identity authentication method based on a block chain verifiable certificate, and relates to the related field of block chains, and the method comprises the steps: pre-constructing an alliance network; the first participant node is used as a certification node and sends a first voucher request to the first authoritative node; after the first authoritative node receives the information, generating a first verifiable certificate; performing hash encryption processing on a first certificate statement in the first verifiable certificate to generate a first hash verifiable certificate and a first auxiliary data structure; after receiving, the first participant node generates a second hash verifiable credential and a second auxiliary data structure; the second participating main body node serves as a verification node to receive and verify; and if the verification result is passed, confirming that the first participant node has the first academic authority. The technical problem that identity authenticity and behavior credibility cannot be guaranteed in existing digital academic participant credible identity authentication is solved, and the technical effect of enhancing identity authentication credibility and behavior credibility is achieved.

Description

Technical Field

[0001] The present application relates to blockchain-related fields, and in particular to a trusted identity authentication method for academic participants based on blockchain-verifiable credentials. Background Art

[0002] In the rapid development of digital academic service platforms, ensuring the authenticity of the identity and the credibility of the behavior of the participating subjects has become the key to maintaining academic integrity and ensuring data security. As an important channel for academic exchanges and resource sharing, digital academic service platforms need to ensure that each participating subject (including scholars, research institutions, etc.) can interact with a real and credible identity to ensure the authenticity and reliability of research results. At present, digital academic platforms based on blockchain attempt to ensure the authenticity of the identity and the credibility of the behavior of the participating subjects through blockchain technology. However, the identity information provided by the user when registering still needs to rely on other methods for verification. If the identity information provided by the user is untrue or there is fraud, then even if the digital identity is registered on the blockchain, the authenticity of the identity cannot be guaranteed. In addition, the existing technology lacks an effective monitoring and evaluation mechanism for the behavior of users on the platform. Even if the identity of the user is verified, his behavior on the platform cannot be guaranteed, and academic misconduct or false results may occur.

[0003] Among the current related technologies, the trusted identity authentication of digital academic participants has the technical problem that the authenticity of the identity and the credibility of the behavior cannot be guaranteed. Summary of the invention

[0004] The present application provides a trusted identity authentication method for academic participants based on blockchain-verifiable credentials, adopts a pre-built alliance network, and the first participant node acts as a proof node to send a first credential request to the first authority node. The first authority node generates a first verifiable credential and performs hash encryption processing on the first credential statement in the first verifiable credential. After the first participant node receives the first hash-verifiable credential and the first auxiliary data structure, it generates a second hash-verifiable credential and a second auxiliary data structure. The second participant node acts as a verification node to receive and verify the second hash-verifiable credential and the second auxiliary data structure to obtain a first verification result. If the first verification result is passed, it is confirmed that the first participant node has the first academic authority, etc., thereby achieving the technical effect of enhancing the credibility of identity authentication and the credibility of behavior.

[0005] This application provides a trusted identity authentication method for academic participants based on blockchain-verifiable credentials, including:

[0006] A pre-built alliance network includes a blockchain ledger, multiple authoritative nodes, and multiple participating subject nodes; a first participating subject node acts as a proof node and sends a first credential request to the first authoritative node; after receiving the first credential request, the first authoritative node generates a first verifiable credential, wherein the first verifiable credential consists of first credential information, a first credential statement, and a first issuance certificate; the first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first hash verifiable credential and a first auxiliary data structure; after receiving the first hash verifiable credential and the first auxiliary data structure, the first participating subject node generates a second hash verifiable credential and a second auxiliary data structure; the second participating subject node acts as a verification node to receive and verify the second hash verifiable credential and the second auxiliary data structure to obtain a first verification result; if the first verification result is passed, it is confirmed that the first participating subject node has the first academic authority.

[0007] In a possible implementation, a consortium network is pre-built to perform the following processing:

[0008] Initialize a blockchain network, wherein the blockchain network includes the blockchain account book and multiple authoritative nodes; after a first subject to be registered generates a first pair of public-private keys and a second pair of public-private keys locally, extract a first group of private keys and a first group of public keys from the first pair of public-private keys and the second pair of public-private keys, save the first group of private keys locally, and upload the first group of public keys to the blockchain account book; the first authoritative node receives and reviews the identity certification materials sent by the first subject to be registered to obtain a first review result; if the first review result is that the review is passed, the first authoritative node generates a first DID and a first document for the first subject to be registered, and stores the first DID and the first document in the blockchain account book to complete the registration of the first participating subject node in the blockchain network; the first authoritative node sends the first document to the first subject to be registered; and so on, register the multiple participating subject nodes of multiple subjects to be registered in the blockchain network to complete the pre-construction of the alliance network.

[0009] In a possible implementation, the first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first hashed verifiable credential and a first auxiliary data structure, and performs the following processing:

[0010] The first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first encrypted statement; the first authoritative node performs structured storage on the first credential statement to obtain the first auxiliary data structure; after the first authoritative node uses the first encrypted statement to replace the first credential statement to update the first verifiable credential, the first authoritative node uses the first private key of the first authoritative node to sign the updated first verifiable credential to generate a first hash verifiable credential.

[0011] In a possible implementation, the first group of private keys includes a first signature private key and a first encryption private key.

[0012] In a possible implementation, the second participant node receives and verifies the second hash verifiable credential and the second auxiliary data structure as a verification node, obtains a first verification result, and performs the following processing:

[0013] After receiving the first hash verifiable credential and the first auxiliary data structure, the first participating entity node calls the second auxiliary data structure from the first auxiliary data structure; uses the first signature private key in the first group of private keys to sign the second auxiliary data structure to generate the second hash verifiable credential, wherein the second hash verifiable credential includes the first hash verifiable credential; the first participating entity node sends the second hash verifiable credential and the second auxiliary data structure to the second participating entity node; after receiving the second hash verifiable credential as a verification node, the second participating entity node uses the first public key to verify the issuance of the first hash verifiable credential in the second hash verifiable credential; if the verification passes, the second hash verifiable credential and the first hash verifiable credential are used to verify the content of the second auxiliary data structure; if the verification passes, the first verification result is passed, and the first participating entity node has the first academic authority.

[0014] In a possible implementation, the following processing is performed:

[0015] When the blockchain network completes the registration of the first participating entity node, the first counter of the first participating entity node is initialized; when the first participating entity node sends the first credential request to the first authoritative node, the first count value of the first counter is synchronously sent; the first authoritative node adds 1 to the first count value to obtain a second count value; the first authoritative node embeds the second count value into the generated first verifiable credential, and associates the second count value with the first DID and uploads it to the blockchain ledger.

[0016] In a possible implementation, after receiving the second hash verifiable credential as a verification node, the second participant node uses the first public key to issue and verify the first hash verifiable credential in the second hash verifiable credential, and then performs the following processing:

[0017] The second participating entity node acts as a verification node. After receiving the second hash verifiable credential, the second participating entity node obtains the second count value of the first hash verifiable credential in the second hash verifiable credential; compares the increasing relationship between the first hash verifiable credential and the two second count values ​​in the blockchain ledger. If it is an increasing relationship, the second hash verifiable credential and the first hash verifiable credential are used to perform content verification on the second auxiliary data structure.

[0018] In a possible implementation, the following processing is performed:

[0019] The second participating subject node evaluates the behavior authenticity of the first participating subject node based on the first verification result, and outputs a behavior authenticity score; if the first participating subject node has the first academic authority, the first participating subject node and the second participating subject node perform academic interaction, and the second participating subject node evaluates the academic interaction behavior performance of the first participating subject node based on the academic interaction behavior performance, and outputs an academic interaction behavior performance score; pre-constructed trust rules process the behavior authenticity score and the academic interaction behavior performance score to obtain a comprehensive trust score; the first authoritative node generates a first trust credential for the first participating subject node based on the comprehensive trust score, and associates the first trust credential with the first DID and uploads it to the blockchain ledger.

[0020] The trusted identity authentication method for academic participating entities based on blockchain verifiable credentials proposed in this application is first pre-built into an alliance network, wherein the alliance network includes a blockchain ledger, multiple authoritative nodes and multiple participating entity nodes, and then the first participating entity node acts as a proof node to send a first credential request to the first authoritative node. After receiving the first credential request, the first authoritative node generates a first verifiable credential, wherein the first verifiable credential is composed of first credential information, a first credential statement and a first issuance certificate. At the same time, the first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first hash verifiable credential and a first auxiliary data structure. After receiving the first hash verifiable credential and the first auxiliary data structure, the first participating entity node generates a second hash verifiable credential and a second auxiliary data structure, and then the second participating entity node acts as a verification node to receive and verify the second hash verifiable credential and the second auxiliary data structure to obtain a first verification result. If the first verification result is passed, it is confirmed that the first participating entity node has the first academic authority, thereby achieving the technical effect of enhancing the credibility of identity authentication and the credibility of behavior. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solution of the embodiment of the present invention, the accompanying drawings of the embodiment of the present invention will be briefly introduced below. A flow chart is used in the present application to illustrate the operations performed by the method according to the embodiment of the present application. It should be understood that the preceding or following operations are not necessarily performed accurately in order. On the contrary, various steps can be processed in reverse order or simultaneously as needed. At the same time, other operations can also be added to these processes, or one or more operations can be removed from these processes.

[0022] Figure 1 A flowchart of a trusted identity authentication method for an academic participant based on blockchain-verifiable credentials provided in an embodiment of the present application.

[0023] Figure 2 A flowchart of generating a first hash verifiable credential and a first auxiliary data structure in a trusted identity authentication method for an academic participant based on a blockchain verifiable credential provided in an embodiment of the present application. DETAILED DESCRIPTION

[0024] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below.

[0025] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. The described embodiments should not be regarded as limiting the present application. All other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of this application.

[0026] In the following description, reference is made to "some embodiments", which describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or different subsets of all possible embodiments, and may be combined with each other without conflict, and the terms "first\second" involved are merely to distinguish similar objects and do not represent a specific ordering of objects. The terms "including" and "having" and any variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product, or server that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or modules that are not clearly listed or inherent to these processes, methods, products, or devices. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those generally understood by technicians in the technical field of this application. The terms used herein are for the purpose of describing the embodiments of the present application only.

[0027] The present application embodiment provides a trusted identity authentication method for academic participants based on blockchain verifiable credentials, such as Figure 1 As shown, the method includes:

[0028] Step S100, pre-constructing an alliance network, wherein the alliance network includes a blockchain ledger, multiple authoritative nodes, and multiple participating subject nodes. Specifically, the blockchain network is initialized, and a blockchain ledger and multiple authoritative nodes are set. The blockchain ledger is a data structure that records all transactions and events, and is a core component of the blockchain network. The authoritative node is a node responsible for reviewing identity proof materials, generating and issuing verifiable credentials, and has read and write data permissions. The alliance network is used to implement verifiable credentials and identity authentication based on blockchain. Participating subject nodes are nodes to be registered and registered and joined the alliance network, which can be researchers, auditors, ordinary users, etc.

[0029] In a possible implementation, the alliance network is pre-built, and step S100 further includes step S110, initializing the blockchain network, wherein the blockchain network includes the blockchain account book and multiple authoritative nodes. Specifically, a blockchain platform is selected or created. Configure blockchain network parameters, such as consensus mechanism, number of nodes, block size, etc. Initialize the blockchain account book to provide a basis for subsequent transactions and data storage. For example, the blockchain network is created and maintained by an academic alliance, and the authoritative organization of the academic alliance constitutes the initial blockchain network as an authoritative node, with the authority to read and write data. Step S120, after the first subject to be registered generates a first pair of public and private keys and a second pair of public and private keys locally, extracts a first group of private keys and a first group of public keys from the first pair of public and private keys and the second pair of public and private keys, saves the first group of private keys locally, and uploads the first group of public keys to the blockchain account book. The first group of private keys includes a first signature private key and a first encryption private key. Specifically, the first subject to be registered (such as an individual, an enterprise, etc.) uses a key generation tool to generate two pairs of public and private keys. Select one of the two pairs of public and private keys (for example, the first pair) as the key pair for identity authentication and transaction signing, and the other pair for end-to-end communication encryption, that is, the first set of private keys includes the first signature private key and the first encryption private key. The private key in each pair is saved in local secure storage to ensure that it is not leaked. The public key in each pair is uploaded to the blockchain ledger and associated with the identity of the subject to be registered (such as user name, email address, etc.).

[0030] Step S130, the first authoritative node receives and reviews the identity proof materials sent by the first subject to be registered, and obtains the first review result. Specifically, the first subject to be registered submits identity proof materials (such as identity card, passport, business license, etc.) to the first authoritative node through a reliable channel (a channel that ensures that the data transmission process is not eavesdropped or tampered with, such as HTTPS, encrypted email, etc.). After receiving the materials, the first authoritative node conducts manual or automated review to confirm the authenticity and legality of the materials. After the review is completed, a first review result is generated, indicating whether the subject to be registered has passed the review. Step S140, if the first review result is a pass, the first authoritative node generates a first DID and a first document for the first subject to be registered, and stores the first DID and the first document in the blockchain account book to complete the registration of the first participating subject node in the blockchain network. Specifically, if the first review result is a pass, the first authoritative node generates a unique decentralized identifier (first DID) for the first subject to be registered. At the same time, a document (first document) containing the registration information of the subject to be registered and the signature information of the first authoritative node is generated. The first DID and the first document are stored in the blockchain account book to ensure the immutability and traceability of the information. For example, the first DID is used as the key and the first document is used as the value for storage, and each node in the alliance network can query the first DID and the first document of the first subject to be registered. Step S150, the first authoritative node sends the first document to the first subject to be registered. Specifically, the first authoritative node sends the generated first document to the first subject to be registered through a reliable channel, indicating that the registration is successful. Step S160, and so on, register the multiple participating subject nodes of the multiple subjects to be registered in the blockchain network to complete the pre-construction of the alliance network. Specifically, repeat steps 120 to 150 to complete the registration process for multiple subjects to be registered. Each subject to be registered obtains a unique DID and document, which are stored in the blockchain account book. In this way, a alliance network containing multiple authoritative nodes and multiple participating subject nodes is constructed. This implementation method realizes the secure authentication of the identity of the participating subject and the immutability of the data through the combination of public-private key pairs and blockchain technology. The local storage of the private key and the blockchain storage of the public key ensure the uniqueness and security of the identity information.

[0031] Step S200: The first participant node, as a proof node, sends a first credential request to the first authoritative node. Specifically, when the first participant node needs to prove that it has certain qualifications or permissions, it sends a credential request to the first authoritative node.

[0032] Step S300, after receiving the first credential request, the first authoritative node generates a first verifiable credential, wherein the first verifiable credential is composed of first credential information, first credential statement and first issuance certificate. Specifically, after receiving the request, the first authoritative node generates a verifiable credential including credential information, credential statement and issuance certificate after verifying the identity information, DID and DID document of the first participating subject node according to the request content. Among them, the credential information is the basic information describing the credential, including metadata such as the context, credential ID and type of the credential; the credential statement contains the specific information and authority of the declaring subject, such as identity information, qualification certification, etc.; the issuance certificate is the endorsement of the credential by the authority, including the digital signature of the issuer, which is used to verify the authenticity and integrity of the credential.

[0033] Step S400, the first authoritative node performs hash encryption processing on the first credential declaration in the first verifiable credential to generate a first hash verifiable credential and a first auxiliary data structure. Specifically, the first authoritative node uses a hash algorithm to perform hash encryption on the credential declaration part in the first verifiable credential to generate a new hash verifiable credential (first hash verifiable credential), in which the credential declaration part is replaced with a hash value, and an auxiliary data structure (first auxiliary data structure) is generated at the same time. The first auxiliary data structure is an auxiliary data structure that is matched with the first hash verifiable credential and is used to support the selective disclosure and verification process. It contains the original declaration content, the corresponding hash value, and the key used to generate the hash value.

[0034] like Figure 2 As shown, in a possible implementation, the first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first hashed verifiable credential and a first auxiliary data structure. Step S400 further includes step S410, in which the first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first encrypted statement. Specifically, the first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential. Hash encryption is a one-way encryption function that converts input data of any length into output data of a fixed length (called a hash value or digest). This conversion is irreversible, that is, the original input data cannot be restored from the hash value, which ensures the integrity and authenticity of the data. For example, hash encryption is performed using the message authentication code HMAC(H, key, m), where H is a hash function, key is a random key, and m is the content to be hashed. For each claim in the first credential statement, i Content value i , using K bits of random key key to calculate the hash value Hash v =HMAC(H,key i,value i Step S420: the first authority node stores the first credential statement in a structured manner to obtain the first auxiliary data structure. Specifically, after generating the first encrypted statement, the first authority node stores the first credential statement in a structured manner, that is, organizes the information into a format that is easy to query and manage, for example, storing the key i 、value i and the path used to reach each claim in the credential path(claim i ) is stored in a separate data structure SciAttributes, in the form of a triple as [path(claim i ),key i ,value i ] for subsequent selective disclosure. Step S430, after the first authoritative node replaces the first credential statement with the first encrypted statement to update the first verifiable credential, the first authoritative node signs the updated first verifiable credential with the first private key of the first authoritative node to generate a first hash verifiable credential. Specifically, the first authoritative node replaces the first credential statement with the first encrypted statement to update the first verifiable credential. Afterwards, the first authoritative node signs the updated first verifiable credential with its own first private key to generate a first hash verifiable credential. This implementation method ensures that any changes to the first credential statement will be detected through hash encryption processing, thereby ensuring the integrity of the data. The use of structured storage and auxiliary data structures improves the efficiency of data retrieval and verification, making the verification process faster and more convenient.

[0035] Step S500, after receiving the first hash verifiable credential and the first auxiliary data structure, the first participating subject node generates a second hash verifiable credential and a second auxiliary data structure. Specifically, the first authoritative node sends the first hash verifiable credential and the first auxiliary data structure to the first participating subject node through a secure channel. The first participating subject node can choose to disclose the content of the required declaration to the data owner. The first participating subject node selects the declaration to be disclosed, and uses its own private key to sign the first hash verifiable credential and the first auxiliary data structure to generate a new hash verifiable credential and auxiliary data structure, namely the second hash verifiable credential and the second auxiliary data structure. For example, the first participating subject node selects the declaration to be disclosed, and selects the corresponding triple in SciAttributes to form disclosedSciAttr.

[0036] Step S600: The second participant node receives and verifies the second hash verifiable credential and the second auxiliary data structure as a verification node to obtain a first verification result. Specifically, the second participant node verifies the second hash verifiable credential and the second auxiliary data structure sent by the first participant node, and obtains the first verification result after the verification passes.

[0037] In a possible implementation, the second participating subject node receives and verifies the second hash verifiable credential and the second auxiliary data structure as a verification node to obtain a first verification result. Step S600 further includes step S610, in which the first participating subject node calls the second auxiliary data structure from the first auxiliary data structure after receiving the first hash verifiable credential and the first auxiliary data structure. Specifically, the first auxiliary data structure contains metadata related to the first verifiable credential, such as a timestamp, a hash value of the credential, an identity identifier of the issuer, etc. After the first participating subject node receives the first hash verifiable credential and the first auxiliary data structure, the second auxiliary data structure is extracted or generated from the first auxiliary data structure according to the need for disclosure to selectively disclose part of the statement. Step S620, the second auxiliary data structure is signed using the first signature private key in the first group of private keys to generate the second hash verifiable credential, wherein the second hash verifiable credential contains the first hash verifiable credential. Specifically, the first signature private key is used to sign the second auxiliary data structure. Signature is a mathematical operation that allows the verifier to verify its signature using the public key to confirm that the information is sent by the entity holding the corresponding private key and that the information has not been tampered with during transmission. Through the signature, a second hash verifiable credential is generated. The second hash verifiable credential includes the first hash verifiable credential (i.e., the credential information generated by the first authoritative node, the hash-encrypted credential statement, and the issuance certificate) and the second auxiliary data structure. Step S630, the first participating entity node sends the second hash verifiable credential and the second auxiliary data structure to the second participating entity node. Specifically, the first participating entity node sends the second hash verifiable credential and the second auxiliary data structure it generates to the second participating entity node whose identity needs to be verified.

[0038] Step S640, after the second participating subject node receives the second hash verifiable credential as a verification node, it uses the first public key to verify the issuance of the first hash verifiable credential in the second hash verifiable credential. Specifically, the second participating subject node uses the first public key of the first authoritative node to verify whether the signature of the first hash verifiable credential in the second hash verifiable credential is valid, that is, whether it is issued by the first authoritative node. Step S650, if the verification passes, the second hash verifiable credential and the first hash verifiable credential are used to verify the content of the second auxiliary data structure. Specifically, after the signature verification passes, the second participating subject node also needs to verify whether the content of the second auxiliary data structure is consistent with the information in the first hash verifiable credential. This is achieved by hashing the second auxiliary data structure and comparing it with the hash value in the first hash verifiable credential. For example, for each triple in disclosedSciAttr, check claim i Whether it belongs to the first hash verifiable credential, ensure that the statement is endorsed by the first authority, retrieve the corresponding hash value in the first hash verifiable credential, check the HMAC (H, key i ,value i ) is equal to the hash value to ensure the authenticity and completeness of the declared content. Step S660, if the verification is passed, the first verification result is passed, and the first participating entity node has the first academic authority. Specifically, if all verifications are passed, the second participating entity node will confirm that the first participating entity node has the corresponding first academic authority. This implementation method ensures that only credentials that are authenticated by an authoritative organization, whose declared content is authentic and has not been tampered with can be accepted, thereby protecting the security and integrity of the data and ensuring the reliability of the data source.

[0039] Step S700, if the first verification result is passed, it is confirmed that the first participating subject node has the first academic authority. Specifically, if the first verification result is passed, it is confirmed that the first participating subject node has the requested academic authority. The embodiment of the present application adopts a pre-built alliance network, and the first participating subject node acts as a proof node to send a first credential request to the first authoritative node. The first authoritative node generates a first verifiable credential and performs hash encryption processing on the first credential statement in the first verifiable credential. After the first participating subject node receives the first hash verifiable credential and the first auxiliary data structure, it generates a second hash verifiable credential and a second auxiliary data structure. The second participating subject node receives and verifies the second hash verifiable credential and the second auxiliary data structure as a verification node to obtain the first verification result. If the first verification result is passed, it is confirmed that the first participating subject node has the first academic authority and other technical means, which achieves the technical effect of enhancing the credibility of identity authentication and the credibility of behavior.

[0040] In a possible implementation, it further includes step S800, when the blockchain network completes the registration of the first participating subject node, the first counter of the first participating subject node is initialized. Specifically, during the registration process of the first participating subject node, the system will assign a unique identity identifier, namely the first DID, to the participating subject node. At the same time, the system will initialize a counter for the participating subject node, which is used to record the number of subsequent credential requests made by the participating subject node. Step S900, when the first participating subject node sends the first credential request to the first authoritative node, the first count value of the first counter is sent synchronously. Specifically, when the first participating subject node needs to request a credential (such as an academic certificate, qualification certificate, etc.) from the first authoritative node, it will synchronously send the value of its current counter, which is used as part of the request to identify the number of credential requests issued by the first participating subject node. Step S1000, the first authoritative node adds 1 to the first count value to obtain a second count value. Specifically, after the first authoritative node receives the credential request and count value of the first participating subject node, it will first add 1 to the count value, and the value after adding 1 will be used as the new count value to record that the first participating subject node has successfully requested a new credential. Step S1100, the first authoritative node embeds the second count value into the generated first verifiable credential, and associates the second count value with the first DID and uploads it to the blockchain ledger. Specifically, when the first authoritative node generates a verifiable credential, it will embed the new count value into the credential. At the same time, it will also associate the new count value with the DID of the first participating subject node, and upload the association information to the blockchain ledger. In this way, any node can verify the number of credential requests and identity of the first participating subject node by querying the blockchain ledger. For example, the first participant node, as the requester, initializes the counter cnt=0 when registering the identity, and sends the value of cnt to the first authoritative node when applying for a verifiable credential; the first authoritative node verifies the information and issues a verifiable credential, adds 1 to the cnt value and embeds it into the verifiable credential, sends it to the requester through a reliable channel, associates it with the DID of the participant, and uploads it to the blockchain network. This implementation ensures the uniqueness and authenticity of the credential by associating the number of credential requests of the participant node with its DID and recording it on the blockchain, which can prevent malicious subject nodes from attempting to forge or abuse the credential by repeatedly requesting the same credential, thereby enhancing the credibility and tamper-proofness of the credential.

[0041] In a possible implementation, after the second participant subject node receives the second hash verifiable credential as a verification node, after using the first public key to issue and verify the first hash verifiable credential in the second hash verifiable credential, step S640 further includes step S641, the second participant subject node, as a verification node, obtains the second count value of the first hash verifiable credential in the second hash verifiable credential after receiving the second hash verifiable credential. Specifically, when the second participant subject node (verification node) receives the second hash verifiable credential sent by the first participant subject node, it first parses the credential to obtain the content therein. The second hash verifiable credential includes the first hash verifiable credential, and the first hash verifiable credential is embedded with the second count value generated by the first authoritative node and uploaded to the blockchain ledger. The second participant subject node needs to extract the second count value from the second hash verifiable credential in order to perform subsequent verification steps.

[0042] Step S642, compare the first hash verifiable credential with the increasing relationship between the two second count values ​​in the blockchain ledger. If it is an increasing relationship, the second hash verifiable credential and the first hash verifiable credential are used to verify the content of the second auxiliary data structure. Specifically, the verification node obtains the second count value from the second hash verifiable credential provided by the first participating subject node, that is, the second count value in the first hash verifiable credential. The verification node checks whether this second count value is greater than the previously recorded count value, that is, checks whether it presents an increasing relationship. This ensures that the credential request of the first participating subject node is carried out in the correct order, and there is no skipping or reuse of old credentials. At the same time, the verification node compares the second count value provided by the first participating subject node with the second count value on the blockchain ledger. If the second count value currently received is less than or equal to the previous (or maximum) second count value recorded on the blockchain ledger, then the second participating subject node will consider this first hash verifiable credential to be valid and that the first participating subject node has truly performed academic behavior. After the verification is passed, the second participant node continues to use the second hash verifiable credential and the first hash verifiable credential to verify the content of the second auxiliary data structure to ensure that the other parts of the credential are also authentic and complete. This implementation method ensures that the credential request of the first participant node is legal and has not been tampered with by verifying the incremental relationship of the second count value and comparing it with the second count value on the blockchain, thereby enhancing the credibility and tamper-proofness of the credential.

[0043] In a possible implementation, it further includes step S1200, in which the second participating subject node evaluates the behavior authenticity of the first participating subject node based on the first verification result, and outputs a behavior authenticity score. Specifically, after confirming that the first verification result is passed, the second participating subject node evaluates the behavior authenticity of the first participating subject node based on the credential information provided by the first participating subject node and the performance during the verification process. The evaluation can be based on multiple dimensions, such as the integrity of the credential, the timeliness of the credential, the matching degree of the credential with the requested academic authority, etc. According to the evaluation dimensions and weights, a behavior authenticity score is output, which reflects the performance of the first participating subject node in terms of behavior authenticity. For example, the behavior authenticity can be divided into five levels from high to low: completely authentic, authentic, basically authentic, not very authentic, and completely unauthentic, with corresponding scores of 5, 4, 3, 2, and 1 points respectively. The behavior authenticity score of the first participating subject node is the average of all authenticity scores accumulated in the most recent time period T, and the specific calculation formula is:

[0044]

[0045] Among them, BAS Y Indicates the behavior authenticity score of the first participating node in the alliance network, BAS Y ∈[1,5], n is the total number of authenticity scores accumulated by the first participating subject node in the recent period T, and the cumulative authenticity score set sorted by time is

[0046] Step S1300, if the first participating subject node has the first academic authority, the first participating subject node and the second participating subject node conduct academic interaction, and the second participating subject node evaluates the academic interaction behavior performance of the first participating subject node according to the academic interaction behavior performance, and outputs the academic interaction behavior performance score. Specifically, after confirming that the first participating subject node has the first academic authority, the two parties conduct academic interaction, such as academic exchange, cooperative research, etc. During the academic interaction process, the second participating subject node observes and records the behavior performance of the first participating subject node, such as cooperative attitude, academic contribution, communication quality, etc. According to the recorded behavior performance, an academic interaction behavior performance score is output, which reflects the performance of the first participating subject node in the academic interaction process. For example, the interaction performance score can be divided into five levels from high to low: very satisfied, relatively satisfied, generally satisfied, dissatisfied, and very dissatisfied, corresponding to interaction scores of 5, 4, 3, 2, and 1, respectively. Since the behavior performance of the first participating subject node will continue to change over time, the longer the score correctly reflects the effectiveness of the subject's behavior performance, the more it will decline, and a time decay function is introduced when calculating the interaction behavior performance score. The specific calculation formula of the time decay function and the interactive behavior performance score of the first participating subject node in the most recent time period T is:

[0047]

[0048] w(t)=e -λ(T ' -t) ;

[0049] Among them, w(t) represents the time exponential decay function, λ represents the time decay parameter, T' represents the current time of calculation, t represents the time when the score is released, and PSS Y PSS represents the academic interaction performance score of the first participating node in the alliance network. Y ∈[1,5], k is the total number of interaction scores accumulated by the first participating subject node in the recent period T, and the cumulative interaction score set sorted by time is t i is the time point of the i-th scoring.

[0050] Step S1400, pre-construct trust rules to process the behavior authenticity score and the academic interaction behavior performance score to obtain a comprehensive trust score. Specifically, a set of trust rules is pre-constructed, which defines the weights and calculation methods of the behavior authenticity score and the academic interaction behavior performance score in the comprehensive trust score. According to the pre-constructed trust rules, the behavior authenticity score and the academic interaction behavior performance score are weighted summed or otherwise calculated to obtain a comprehensive trust score. The comprehensive trust score reflects the comprehensive performance of the first participating subject node in terms of behavior authenticity and academic interaction behavior performance. For example, the calculation formula can be:

[0051] TS Y =(1-μ)·BAS Y +μ·PSS Y ;

[0052] μ = α·β;

[0053]

[0054] Among them, TS Y Indicates the comprehensive trust score of the first participating subject node, BAS Y PSS represents the behavior authenticity score of the first participating subject node Y It represents the academic interaction behavior performance score of the first participating subject node, α is the score breadth coefficient, α∈[0,1), which represents the breadth of the source of the evaluation node, p is the total number of evaluation nodes from different sources, β is the score dispersion coefficient, β∈[0,1), which represents the consistency of the evaluation node, and σ is the standard deviation of the cumulative evaluation score set.

[0055] Step S1500: The first authoritative node generates a first trust credential of the first participant node according to the comprehensive trust score, and associates the first trust credential with the first DID and uploads it to the blockchain account book. Specifically, the first authoritative node receives the comprehensive trust score, and generates a first trust credential of the first participant node according to the comprehensive trust score and the preset trust credential generation rule. For example, if the score range of the comprehensive trust score is between [1,5], set 0≤TS Y <2.5 means no trust, 2.5≤TS Y <3.5 is basic trust, 3.5≤TS Y <5 indicates good trust. The first trust credential is associated with the unique identifier (first DID) of the first participating subject node and uploaded to the blockchain account book for recording and storage. The immutability of the blockchain account book ensures the authenticity and credibility of the first trust credential. This implementation method comprehensively reflects the performance and behavioral characteristics of the participating subject nodes in the academic field through the evaluation of behavioral authenticity and academic interaction behavior performance. The comprehensive trust score quantifies these evaluation results and provides a reliable reference for academic cooperation and communication. At the same time, the trust credential is associated with the DID and uploaded to the blockchain account book, which ensures the authenticity and credibility of the trust credential, and provides an efficient, secure and reliable trust management mechanism for the academic field.

[0056] The above specific implementation manner does not constitute a limitation to the protection scope of the present application. It should be understood by those skilled in the art that various modifications, combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present application should be included in the protection scope of the present application. In some cases, the actions or steps recorded in the present application can be performed in an order different from that in the embodiment and can still achieve the desired results. In addition, the process depicted in the accompanying drawings does not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

Claims

1. A trusted identity authentication method for academic participants based on blockchain verifiable credentials, characterized in that: The method comprises: Pre-constructing a consortium network, wherein the consortium network includes a blockchain ledger, multiple authoritative nodes, and multiple participating subject nodes; The first participant node acts as a proof node and sends a first credential request to the first authority node; After receiving the first credential request, the first authoritative node generates a first verifiable credential, wherein the first verifiable credential is composed of first credential information, a first credential statement, and a first issuance certificate; The first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first hash verifiable credential and a first auxiliary data structure; The first participant node generates a second hash verifiable credential and a second auxiliary data structure after receiving the first hash verifiable credential and the first auxiliary data structure; The second participant subject node receives and verifies the second hash verifiable credential and the second auxiliary data structure as a verification node to obtain a first verification result; If the first verification result is passed, it is confirmed that the first participating entity node has the first academic authority.

2. The trusted identity authentication method for academic participants based on blockchain verifiable credentials as claimed in claim 1 is characterized in that: Pre-building an alliance network, the method comprising: Initializing a blockchain network, wherein the blockchain network includes the blockchain ledger and a plurality of authoritative nodes; After the first subject to be registered generates a first pair of public-private keys and a second pair of public-private keys locally, the first subject to be registered extracts a first group of private keys and a first group of public keys from the first pair of public-private keys and the second pair of public-private keys, saves the first group of private keys locally, and uploads the first group of public keys to the blockchain account book; The first authoritative node receives and examines the identity certification material sent by the first subject to be registered, and obtains a first examination result; If the first audit result is passed, the first authoritative node generates a first DID and a first document for the first subject to be registered, and stores the first DID and the first document in the blockchain account book to complete the registration of the first participating subject node in the blockchain network; The first authoritative node sends the first document to the first subject to be registered; By analogy, multiple participating subject nodes of multiple subjects to be registered are registered in the blockchain network to complete the pre-construction of the alliance network.

3. The trusted identity authentication method for academic participants based on blockchain verifiable credentials as claimed in claim 2 is characterized in that: The first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first hash verifiable credential and a first auxiliary data structure, the method comprising: The first authoritative node performs hash encryption processing on the first credential statement in the first verifiable credential to generate a first encrypted statement; The first authoritative node performs structured storage on the first credential statement to obtain the first auxiliary data structure; After the first authoritative node uses the first encrypted statement to replace the first credential statement to update the first verifiable credential, the first authoritative node uses the first private key of the first authoritative node to sign the updated first verifiable credential to generate a first hash verifiable credential.

4. The trusted identity authentication method for academic participants based on blockchain verifiable credentials as claimed in claim 3 is characterized in that: The first group of private keys includes a first signing private key and a first encryption private key.

5. The trusted identity authentication method for academic participants based on blockchain verifiable credentials as claimed in claim 4 is characterized in that: The second participant node receives and verifies the second hash verifiable credential and the second auxiliary data structure as a verification node to obtain a first verification result, the method comprising: The first participating subject node, after receiving the first hash verifiable credential and the first auxiliary data structure, calls the second auxiliary data structure from the first auxiliary data structure; Sign the second auxiliary data structure using a first signature private key in the first group of private keys to generate a second hash verifiable credential, wherein the second hash verifiable credential includes the first hash verifiable credential; The first participating principal node sends the second hashed verifiable credential and the second auxiliary data structure to the second participating principal node; After receiving the second hash verifiable credential as a verification node, the second participant subject node uses the first public key to issue and verify the first hash verifiable credential in the second hash verifiable credential; If the verification is successful, the second auxiliary data structure is verified using the second hash verifiable credential and the first hash verifiable credential; If the verification is successful, the first verification result is passed, and the first participating entity node has the first academic authority.

6. The trusted identity authentication method for academic participants based on blockchain verifiable credentials as claimed in claim 5 is characterized in that: The method comprises: Initializing a first counter for the first participant node while the blockchain network completes registration of the first participant node; When the first participant node sends the first credential request to the first authoritative node, synchronously sending the first count value of the first counter; The first authoritative node adds 1 to the first count value to obtain a second count value; The first authoritative node embeds the second count value into the generated first verifiable credential, and associates the second count value with the first DID and uploads it to the blockchain ledger.

7. The trusted identity authentication method for academic participants based on blockchain verifiable credentials as claimed in claim 6 is characterized in that: After receiving the second hash verifiable credential as a verification node, the second participant node uses the first public key to issue and verify the first hash verifiable credential in the second hash verifiable credential, and then the method includes: The second participant subject node, as a verification node, obtains the second count value of the first hash verifiable credential in the second hash verifiable credential after receiving the second hash verifiable credential; Compare the first hash verifiable credential with the increasing relationship between the two second count values ​​in the blockchain ledger. If it is an increasing relationship, use the second hash verifiable credential and the first hash verifiable credential to verify the content of the second auxiliary data structure.

8. The trusted identity authentication method for academic participants based on blockchain verifiable credentials as claimed in claim 7 is characterized in that: The method comprises: The second participant node evaluates the behavior authenticity of the first participant node based on the first verification result, and outputs a behavior authenticity score; If the first participant node has the first academic authority, the first participant node performs academic interaction with the second participant node, and the second participant node evaluates the academic interaction performance of the first participant node based on the academic interaction performance, and outputs an academic interaction performance score; Pre-constructing trust rules to process the behavior authenticity score and the academic interaction behavior performance score to obtain a comprehensive trust score; The first authoritative node generates a first trust credential for the first participating entity node according to the comprehensive trust score, and associates the first trust credential with the first DID and uploads it to the blockchain ledger.

Images