Computing power access method, computer equipment, storage medium and program product

Abstract

The invention discloses a computing power access method, computer equipment, a storage medium and a program product, and relates to the technical field of block chains, and the method comprises the steps: carrying out the verification based on an identity registration request, generating an identity document and identity information, and detecting the actual computing power of a to-be-accessed node, thereby signing a computing power service certificate and computing power service certificate information, and carrying out the verification of the computing power service certificate. And when the to-be-accessed node sends a computing power access request, the alliance chain node performs identity verification and certificate verification based on identity information and computing power service certificate information in the computing power access request to determine a computing power access result of the to-be-accessed node. According to the method, the alliance chain form is adopted to carry out computing power access, identity registration, computing power service voucher creation and computing power access are carried out in the whole process of computing power access, and identity information and computing power service voucher information are subjected to dual verification during computing power access verification; the conditions that the computing power service information of the to-be-accessed node is not real and a certificate is forged are avoided, and the security of computing power access is improved.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology, and in particular to a computing power access method, a computer device, a storage medium, and a program product. Background Art

[0002] As computing infrastructure such as network communication equipment, cloud computing, and edge computing continue to improve, computing power has become ubiquitous. In practical applications, due to the uneven distribution of different computing needs in time and space, the computing resources of some institutions or enterprises may be idle during certain periods of time, resulting in a waste of computing power and electricity resources. Through computing power access, computing power resources of different architectures and performances can be connected, computing power services scattered in different geographical locations can be integrated, and computing power service access can be provided, so that computing power resources can be effectively utilized.

[0003] In related technologies, computing power access is usually based on external programs or distributed networks to achieve the interconnection and sharing of computing power resources. However, the accessed computing power information may be untrue or contain false data, making it difficult to evaluate the actual capabilities of the computing power nodes and unable to ensure the authenticity and reliability of the computing power. Summary of the invention

[0004] The present application provides a computing power access method, a computer device, a storage medium, and a program product to at least solve the problem of low authenticity of computing power nodes in related technologies.

[0005] The present application provides a computing power access method, which is applied to a computing power service authentication node, and the computing power service authentication node is deployed in a computing power service alliance chain, including: Verify the node to be accessed based on the identity registration request of the node to be accessed, so as to generate an identity document of the node to be accessed and corresponding identity information, where the identity information includes at least a decentralized identity identifier; Based on the credential creation application of the node to be connected, the actual computing power of the node to be connected is detected, so as to issue a computing power service credential and corresponding computing power service credential information according to the actual computing power, and the computing power service credential information at least includes a credential identifier; the computing power service credential and identity document of the node to be connected are stored in the computing power service alliance chain; When the node to be connected issues a computing power access request, the alliance chain node performs identity authentication and credential verification based on the identity information in the computing power access request and the computing power service credential information to determine the computing power access result of the node to be connected.

[0006] The present application provides a computing power access method, which is applied to a node to be accessed, including: Send an identity registration request to the computing power service authentication node, and receive the identity information sent by the computing power service authentication node; Obtain the computing power service credential template, and initiate a credential creation application based on the computing power service credential template to obtain the computing power service credential information. The computing power service credential information is generated by the computing power service authentication node after verifying the credential creation application submitted by the access node. The computing power service credential information corresponds to the computing power service credential. The computing power service credential is used to indicate that the actual computing power capability of the access node is consistent with the computing power capability declared in the credential creation application. After obtaining the computing power service credential information, a computing power access request is issued and a computing power access result is received. The computing power access result is used to characterize whether the node to be accessed is connected to the computing power service alliance chain. The computing power access request includes at least the identity information of the node to be accessed and the computing power service credential information. The computing power access result is determined by the alliance chain node after verifying the identity information and computing power service credential information of the node to be accessed.

[0007] The present application also provides a computer device, including: a memory for storing a computer program; and a processor for implementing the steps of any of the above-mentioned computing power access methods when executing the computer program.

[0008] The present application also provides a computer-readable storage medium, in which a computer program is stored, wherein when the computer program is executed by a processor, the steps of any of the above-mentioned computing power access methods are implemented.

[0009] The present application also provides a computer program product, including a computer program, which implements the steps of any of the above-mentioned computing power access methods when the computer program is executed by a processor.

[0010] This method uses the form of alliance chain to access computing power, and performs identity registration, computing power service credential creation and computing power access in the entire process of computing power access. During computing power access verification, double verification of identity information and computing power service credential information is performed to avoid the situation where the computing power service information of the node to be accessed is untrue or the credential is forged, thereby improving the security of computing power access. In addition, the semi-publicity of the alliance chain is more suitable for protecting the privacy data of computing power nodes. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] In order to more clearly illustrate the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0012] Figure 1 A flowchart of a computing power access method provided in an embodiment of the present application; Figure 2 A flowchart of a computing power access method provided in an embodiment of the present application; Figure 3 A schematic diagram of the architecture of a computing power access system provided in an embodiment of the present application; Figure 4 A schematic diagram of a computing power access process provided in an embodiment of the present application; Figure 5 A schematic diagram of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0013] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0014] It should be noted that, in the description of this application, the terms "include", "comprise" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. The terms "first", "second", etc. in this application are used to distinguish similar objects, and are not used to describe a specific order or sequence.

[0015] In order to enable those skilled in the art to better understand the present application, the present application is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0016] In conjunction with the specific application environment architecture or specific hardware architecture on which the execution of the computing power access method depends, the specific application environment architecture or specific hardware architecture is described here.

[0017] As the capabilities of computing infrastructure such as network communications, cloud computing, and edge computing continue to improve, the ubiquitous nature of computing power has become a trend. In order to make more efficient use of ubiquitous computing resources, the industry has proposed the concept of computing power networks and computing power networking. As a new type of computing infrastructure that integrates cloud computing, edge computing, terminals, and various network resources, the core of the computing power network is to provide users with overall computing power services including computing, storage, and network connections. This service is not only highly flexible and can provide schedulable on-demand computing services based on business characteristics, but also greatly improves the utilization rate and response speed of computing resources. Through the computing power network, users can obtain the required computing power resources anytime and anywhere according to actual needs, thereby meeting the needs of various complex application scenarios.

[0018] In actual application environments, the distribution of computing needs in time and space presents an uneven characteristic, resulting in some organizations or enterprises having underutilized computing resources in a specific period of time, which in turn leads to a significant waste of computing power and electricity and other resources. With the help of an access system designed for computing power grid connection, the interconnection of computing power resources with various architectures and different performances (such as supercomputers, server groups, edge computing facilities, etc.) can be achieved. In addition, the system can also unify and integrate computing power services that are widely distributed and geographically different, provide users with convenient "one-stop" computing power access services, and support the dynamic adjustment of the processing flow of computing power allocation according to demand, thereby significantly improving the utilization efficiency of computing power resources. In related technologies, plug-ins are usually used to assist in computing power access. Since this type of method relies on plug-in implementation, if there are security vulnerabilities in the plug-in program, it will bring certain security risks, and it is necessary to design corresponding plug-ins for computing power types, the development cost is high, and there is a lack of security. Based on this, an embodiment of the present invention provides a computing power access method.

[0019] The following is an explanation of the application scenario of the embodiment provided by the present invention. The computing power access method provided by this embodiment is used in the scenario where there are nodes to be connected that need to join the computing power service alliance chain. The computing power service alliance chain is composed of a group of connected computing power nodes. Each node deploys the basic functions of the alliance chain to achieve interconnection and intercommunication with other nodes, and stores and maintains a ledger at the same time. The ledger is the on-chain data. The data stored in the ledger includes user identity documents, computing power service templates, computing power service credentials, computing power registration information, and the on-chain smart contract program code corresponding to the above data.

[0020] When a user registers a DID (Decentralized Identity) digital identity, a pair of asymmetric keys will be created locally. The private key will be kept by the user, and the public key will be submitted to the computing service authentication node to generate the DID logo and its identity document. The identity document contains the user's public key, DID identifier, the DID protocol used, and the DID service request address, timestamp, digital signature and other information.

[0021] The computing service voucher template is a voucher template that defines the data fields contained in the voucher declaration and the data types of each field, and declares which fields are required. It is customized by the computing service authentication user and submitted through the computing service authentication node. Each computing service voucher template is uniquely identified by a voucher template ID. It can define how the computing service is provided, what computing power and performance it provides. For example, in the form of a virtual machine, it will include an operating system (such as Windows, Linux, etc.), basic software tools and application programming interfaces, network protocols (such as TCP / IP), CPU cores and main frequency, disk capacity and disk I / O performance, memory size, network bandwidth, etc.

[0022] The computing power service certificate is a verifiable digital certificate (VC), which is usually a descriptive statement issued by an authoritative entity to endorse certain attributes of another entity, and is attached with its own digital signature. The computing power service certificate contains information such as the issuer DID, issuance time, expiration date, certificate template ID, certificate ID, statement data, and the issuer's digital signature. The statement data includes computing power service capability data (provided according to the requirements of the certificate template).

[0023] The computing power registration information is used to indicate the computing power service capabilities of a computing power node, including the computing power node DID identity, computing power service credential ID list, and each computing power service status. That is, the computing power registration information associates the computing power node with the computing power service credential. The computing power registration information of a node can be updated, and the latest data will be obtained when it is read.

[0024] Smart contract programs are deployed on the consortium chain to provide external entities (such as applications or users) with interactive interfaces for operating on-chain data. Smart contract program code (compiled and deployed code) itself is also on-chain data. This includes identity document on-chain smart contracts, voucher template on-chain smart contracts, voucher on-chain smart contracts, computing power registration information on-chain smart contracts, etc.

[0025] Identity document on-chain smart contract: implements the contract program related to identity document on-chain, and provides an interface for reading and writing identity document data on the chain for applications outside the alliance chain.

[0026] Voucher template on-chain smart contract: implements the contract program related to the voucher template on-chain, and provides an interface for off-chain applications to read and write on-chain voucher template data.

[0027] Smart contract for on-chain computing service certificates: This is to implement the contract program related to on-chain computing service certificates, and provide an interface for off-chain applications to read and write on-chain computing service certificate data.

[0028] Smart contract for uploading computing power registration information to the chain: implements the contract program related to uploading computing power registration information to the chain, and provides an interface for reading and writing computing power registration information on the chain for off-chain applications.

[0029] According to an embodiment of the present invention, an embodiment of a computing power access method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in an order different from that shown here.

[0030] In this embodiment, a computing power access method is provided, which is applied to a computing power service authentication node. The computing power service authentication node is deployed in a computing power service alliance chain and can be used for terminals such as computing devices and servers. Figure 1 As shown, the method comprises the following steps: Step S101: verifying the node to be accessed based on the identity registration request of the node to be accessed, so as to generate an identity document of the node to be accessed and corresponding identity information.

[0031] Among them, the identity information at least includes a decentralized identity. The computing power service authentication node is an authoritative agency node that can provide identity registration and computing power service capability authentication for computing power nodes. When a group of computing devices access the computing power service alliance chain, it is necessary to create an access node and use the node as a representative of the local computing device network to register its computing power service capabilities with the computing power service alliance chain. When the node to be connected needs to access the computing power service alliance chain, it first needs to register its identity and send an identity registration request to the computing power service authentication node.

[0032] The identity registration request may carry encrypted data or identification, which is verified by the computing service authentication node to confirm whether the node to be connected meets the identity registration requirements. If the node to be connected meets the identity registration requirements, the computing service authentication node creates an identity document for the node to be connected and the identity information corresponding to the identity document. The identity information includes a decentralized identity identifier, which is an identifier used to uniquely represent the node to be connected. The identity document contains the identity information of the node to be connected, the protocol used, the service request address, timestamp, digital signature and other information.

[0033] The computing power service authentication node sends the identity information to the node to be connected, and writes the identity document into the computing power service alliance chain. After receiving the identity information, the node to be connected completes the identity registration.

[0034] As an example, after receiving the identity registration request, the computing service authentication node performs DID identity authentication and creates a DID identifier and DID identity document corresponding to the node to be connected, where the identity information includes the DID identifier. The computing service authentication node sends the identity information to the node to be connected and writes the corresponding identity document into the alliance chain through the smart contract interface of the alliance chain.

[0035] Step S102, based on the credential creation application of the node to be accessed, the actual computing power of the node to be accessed is detected to issue a computing power service credential and corresponding computing power service credential information according to the actual computing power.

[0036] Among them, the computing power service credential information at least includes the credential identification, and the computing power service credential and identity document of the node to be connected are stored in the computing power service alliance chain.

[0037] When issuing a credential creation application, you can apply for an available computing service credential template. An available computing service credential template indicates a computing service credential template that has been created. The computing service credential template defines the structure and content of the computing service credential. Different types of nodes can use corresponding computing service credential templates. After the node to be connected completes identity registration, it requests the computing service authentication node to obtain an available computing service credential template. The computing service authentication node will send the available computing service credential template to the node to be connected. After receiving the available computing service credential template, the node to be connected can select a matching computing service credential template based on the computing service type and characteristics of the local computing device. The node to be connected uses the corresponding computing service credential template to initiate a credential creation application. The credential creation application contains a declaration of its computing service capabilities (such as virtual machines and their specifications).

[0038] After receiving the credential creation application, the computing power service authentication node will conduct further verification. If the verification is successful, the computing power service credential will be issued and the computing power service credential information will be returned to the node to be connected. The computing power service credential can prove that the actual computing power capacity of the node to be connected is consistent with the computing power capacity declared in the credential creation application. The credential identifier in the computing power service credential information is the identifier corresponding to the computing power service credential. After the computing power service authentication node creates the computing power service credential and the computing power service credential information, it will store the computing power service credential on the chain through the smart contract interface of the alliance chain and return the computing power service credential information to the node to be connected.

[0039] After the node to be connected is connected to the alliance chain, the computing power service authentication node can regularly detect the actual computing power of each computing power node in the alliance chain, thereby ensuring the real-time and authenticity of the computing power node.

[0040] If the verification fails, a corresponding prompt will be returned to the node to be connected. The node to be connected can create multiple computing power service credentials.

[0041] Step S103, when the node to be accessed sends a computing power access request, the alliance chain node performs identity authentication and credential verification based on the identity information and computing power service credential information in the computing power access request to determine the computing power access result of the node to be accessed.

[0042] After obtaining the computing power service credential information, the node to be connected can send a computing power access request to the alliance chain node through the specified interface. The parameters in the computing power access request may include the identity information of the node to be connected, the computing power service credential information, etc. After receiving the computing power access request, the alliance chain node first verifies the identity information, and after the verification is passed, the computing power service credential information is verified. The verification can be combined with the identity information, computing power service credential information, and the data stored on the alliance chain. In the verification process, as long as there is a verification failure, an error prompt message will be returned to the node to be connected.

[0043] As an example, after receiving a computing power access request, the identity document of the access node is first read from the chain (i.e., the account book), and then the identity of the access node is authenticated (the verification process is as follows: a random number is encrypted with the public key in the identity document, the ciphertext is sent to the access node, and the access node is decrypted with the private key and the plaintext is returned for comparison and verification). If the identity authentication fails, a verification failure prompt will be returned and the process ends. When the identity authentication passes, the alliance chain node will read each computing power service credential according to the computing power service credential information and verify the credential (for example: verify whether the issuer is in the computing power service authentication node whitelist, and verify the digital signature of the credential with the issuer's public key, etc.). When the credential verification passes, the credential ID and its initial state (such as idle) are added to a list, otherwise a credential verification failure prompt is returned to the access node (here it can be set according to demand, allowing some credentials in the computing power service credential ID list to pass the verification and some to fail, and after all credentials are verified, a prompt message is uniformly replied to the access node; it can also be set according to demand, once the credential verification fails, an error prompt is directly returned and the processing ends). After completing the verification of all credentials, the DID of the node to be connected and the verified credential list are stored on the chain as the computing power registration information, and the computing power access result is returned. If the verification is successful, the computing power access result will be a prompt message indicating that the computing power registration is successful.

[0044] The computing power access result also includes the computing power service information of the node to be accessed written on the alliance chain (for example: computing power service credential information).

[0045] Before issuing a computing power access request, the node to be connected can also request the alliance chain node to obtain the information required for computing power registration. After obtaining the required information, it issues a computing power access request, which includes the information required for computing power registration.

[0046] Optionally, the computing service authentication node is allowed to update the template regularly or on demand. The new template may contain stricter verification rules, new computing service types, or improved data structures. The nodes to be connected can subscribe to specific computing service credential templates. When the template is updated, the computing service authentication node notifies the nodes to be connected through the message queue to ensure that they always use the latest template.

[0047] The computing power access method provided in this embodiment includes verifying the node to be accessed based on the identity registration request of the node to be accessed, so as to generate the identity document and corresponding identity information of the node to be accessed, and detecting the actual computing power of the node to be accessed based on the credential creation application of the node to be accessed, so as to issue the computing power service credential and the corresponding computing power service credential information according to the actual computing power. When the node to be accessed issues a computing power access request, the alliance chain node performs identity authentication and credential verification based on the identity information and computing power service credential information in the computing power access request, so as to determine the computing power access result of the node to be accessed. This method uses the form of an alliance chain to access computing power, and performs identity registration, computing power service credential creation and computing power access in the entire process of computing power access. During the computing power access verification, the identity information and computing power service credential information will be double-verified to avoid the situation where the computing power service information of the node to be accessed is untrue and the credential is forged, thereby improving the security of computing power access. And the semi-publicity of the alliance chain is more suitable for protecting the privacy data of computing power nodes.

[0048] In this embodiment, a computing power access method is provided, and the method includes the following steps: Step S201: verifying the node to be accessed based on the identity registration request of the node to be accessed, so as to generate an identity document of the node to be accessed and corresponding identity information.

[0049] Specifically, step S201 includes: Step S2011, determining whether the identity registration request contains public key information.

[0050] After receiving the identity registration request, the computing power service authentication node first checks whether it contains public key information. When registering the identity, the node to be connected will create a pair of asymmetric keys locally and carry the public key information in the identity registration request it sends.

[0051] Step S2012: If the identity registration request contains public key information, an identity document of the node to be accessed and corresponding identity information are generated.

[0052] If it is detected that the identity registration request contains public key information, the identity document and identity information are created according to the decentralized creation specification, and the identity information includes a decentralized identity identifier.

[0053] Step S2013, send the identity information to the node to be connected, and write the identity document of the node to be connected into the computing power service alliance chain.

[0054] The identity information is sent to the node to be connected, and the identity document is written into the computing power service alliance chain through the smart contract interface of the alliance chain.

[0055] Step S202, based on the credential creation application of the node to be accessed, detect the actual computing power of the node to be accessed, so as to issue a computing power service credential and corresponding computing power service credential information according to the actual computing power.

[0056] Specifically, step S202 includes: Step S2021, detect the actual computing power data of the node to be accessed, and extract the declared computing power data of the node to be accessed from the credential creation application of the node to be accessed.

[0057] After receiving the credential creation application, the computing power service authentication node calls the computing power resource detection and verification module to detect the access node. Specifically, it can detect and verify the computing power service capabilities declared by the access node, involving actual running test tasks, checking resource allocation, verifying performance parameters, etc. After detection, the actual computing power data of the access node is obtained. The declared computing power data of the access node is extracted from the credential creation application of the access node.

[0058] Step S2022, comparing the actual computing power data with the declared computing power data.

[0059] Compare the actual computing power data with the declared computing power data.

[0060] Step S2023: If the actual computing power data is consistent with the declared computing power data, a computing power service certificate and corresponding computing power service certificate information are issued.

[0061] If the actual computing power data is consistent with the declared computing power data, it means that the performance parameters of the node to be connected meet (reach or exceed) the specification requirements or performance parameter indicators described in the service certificate, and the computing power service certificate will be issued.

[0062] Step S2024, send the computing power service credential information to the node to be connected, and write the computing power service credential into the computing power service alliance chain.

[0063] The computing power service certificate has a corresponding certificate identifier, and the computing power service certificate information at least includes the certificate identifier of the computing power service certificate of the node to be connected. The computing power service certificate is written into the computing power service alliance chain, and the computing power service certificate information is sent to the node to be connected.

[0064] In some optional implementations, the method further includes: sending identity information to the node to be connected, and receiving a template request issued by the node to be connected; and issuing a computing power service voucher template to the node to be connected based on the template request. The node to be connected issues a voucher creation application based on the computing power service voucher template.

[0065] The template request is used to represent a request to obtain an available computing power service credential template.

[0066] After the access node completes identity registration, it sends a template request to the computing service authentication node to request an available computing service credential template. The available computing service credential template indicates the computing service credential template that has been created and stored in the alliance chain. The computing service authentication node sends the available computing service credential template to the access node. There may be one or more available computing service credential templates. If there are multiple, the access node can select a matching credential template based on the type of local computing service. The access node uses the computing service credential template to initiate a computing service credential creation application to the computing service authentication node. The credential creation application includes a declaration of its computing service capabilities (such as virtual machines and their specifications).

[0067] Step S203, when the node to be accessed issues a computing power access request, the alliance chain node performs identity authentication and credential verification based on the identity information and computing power service credential information in the computing power access request to determine the computing power access result of the node to be accessed.

[0068] Specifically, step S203 includes: In step S2031, the alliance chain node reads the identity document of the node to be accessed from the computing power service alliance chain based on the identity information, and authenticates the node to be accessed based on the identity document.

[0069] After obtaining the computing power service credential information, the node to be connected can send a computing power access request to the alliance chain node through the specified interface. The parameters in the computing power access request may include the identity information of the node to be connected, the computing power service credential information, etc.

[0070] After receiving the computing power access request, the alliance chain node first verifies the identity information, and after the verification is passed, the computing power service credential information is verified. The verification can be combined with the identity information, computing power service credential information and the data stored on the alliance chain. In the verification process, as long as there is a situation where the verification fails, an error prompt message will be returned to the node to be connected.

[0071] First, based on the identity information, the corresponding identity document is searched and read from the alliance chain, and identity authentication is performed according to the identity document.

[0072] Furthermore, identity authentication of the node to be accessed based on the identity document includes: the alliance chain node obtains the public key information in the identity document to encrypt the random number to obtain the ciphertext; the alliance chain node sends the ciphertext to the node to be accessed, and receives the plaintext after the node to be accessed decrypts the ciphertext based on the private key; the alliance chain node verifies the node to be accessed based on the comparison result of the plaintext and the random number; if the plaintext is consistent with the random number, the identity authentication of the node to be accessed is passed.

[0073] A random number is encrypted using the public key stored in the identity document to generate a ciphertext, which is then sent to the node to be connected. After receiving the ciphertext, the node to be connected uses the private key to decrypt it, thereby recovering the original random number, i.e., the plaintext. Then, the node to be connected returns this plaintext to the computing service authentication node. After receiving the returned plaintext, the alliance chain node compares it with the random number it originally generated. If the two are consistent, it indicates that the node to be connected does have a private key that matches the public key in the identity document, thereby verifying the authenticity of its identity.

[0074] This method utilizes the asymmetric nature of public key encryption, that is, the public key is used for encryption and the private key is used for decryption, and only the holder of the private key can decrypt the information encrypted by the corresponding public key, providing an effective identity authentication mechanism.

[0075] If the identity authentication fails, a verification failure prompt will be returned and the process ends.

[0076] Step S2032, if the identity authentication is passed, the alliance chain node reads the computing power service credential of the node to be connected from the computing power service alliance chain based on the computing power service credential information, and verifies the computing power service credential.

[0077] If the identity authentication is passed, the corresponding computing service certificate is obtained from the alliance chain based on the computing service certificate information, so as to verify the computing service certificate. The verification may include checking the signature, validity period, and whether the computing service described in the certificate matches the service claimed by the node to be connected.

[0078] Furthermore, the verification of the computing power service certificate includes: the alliance chain node determines whether the issuer of the computing power service certificate is stored in the preset computing power service authentication node whitelist, and verifies the digital signature of the computing power service certificate based on the issuer's public key; if the issuer of the computing power service certificate is stored in the preset computing power service authentication node whitelist, and the digital signature of the computing power service certificate passes the verification, it indicates that the computing power service certificate verification has passed.

[0079] The computing power service credential information included in the computing power access request can exist in the form of a list, which may include one or more computing power service credential information (that is, there are one or more credential identifiers). According to each credential identifier, the corresponding computing power service credential is read from the alliance chain, the issuer of the computing power service credential is obtained, and it is determined whether the issuer is stored in the preset computing power service authentication node whitelist, and the digital signature of the computing power service credential is verified with the issuer's public key. If the issuer is stored in the whitelist and the digital signature of the computing power service credential passes the verification, the next step of verification can be carried out or the verification passes; if not, the credential can be considered invalid and the verification ends.

[0080] Optionally, the public key corresponding to the issuer's DID can be obtained from the public key library of the computing service authentication node, and the digital signature on the certificate can be verified using the public key to check whether the signature is indeed generated by the corresponding private key.

[0081] If the digital signature verification is successful, it indicates that the certificate has not been tampered with during transmission and is indeed issued by the claimed issuer; if the verification fails, the certificate is considered invalid and the verification process ends.

[0082] Since the node to be connected may involve multiple credentials, the credential ID and its initial status can be added to the list after the credential verification is passed, otherwise a prompt indicating the credential verification failure is returned to the node to be connected. It can be set according to actual needs, and some computing service credentials corresponding to the computing service credential information can be allowed to fail partial verification. After all credentials are verified, the verification results are uniformly returned to the node to be connected. It can also be set to directly return an error prompt and end the processing if the credential fails.

[0083] The verification step of the credential can ensure that the issuer of the credential is authorized, and can further ensure the integrity and authenticity of the source of the credential.

[0084] Step S2033, if the computing power service credential verification is passed, the alliance chain node writes the identity information of the node to be connected and the computing power service credential information into the computing power service alliance chain, and sends the computing power access result to the node to be connected.

[0085] After all computing power service credentials are verified, the alliance chain node writes the identity information of the node to be accessed and the verified computing power service credential information into the computing power service alliance chain and issues the computing power access result.

[0086] In some optional embodiments, the method also includes: the alliance chain node receives the computing power query request of the query node, and authenticates the query node based on the identity of the query node in the computing power query request; if the identity authentication of the query node is passed, the computing power data of the available alliance chain nodes is read from the computing power service alliance chain, and a node list is generated, the node list includes the computing power data of the available alliance chain nodes; the alliance chain node sends the node list to the query node.

[0087] The query node is a computing power consumer, and the computing power consumer can be a node to be connected. If the query node needs to query computing power, it can initiate a computing power query request to the alliance chain node. The query request contains the DID identity information of the computing power consumer. After receiving the computing power query request, the alliance chain node performs identity security verification on the computing power consumer based on the DID identity information. If the verification fails, an error prompt is returned and the process ends. If the verification passes, the node list acquisition API provided by the alliance chain basic function is called to obtain all alliance chain nodes that are currently running normally.

[0088] Read a node from the consortium chain node list, read its computing power registration information from the chain based on its DID identity information, and create a data structure to store the computing power service list provided by the node (i.e., the computing power service capability data declared in multiple computing power service certificates). Summarize the computing power service capability data of all available nodes and build a node list. Each element in the node list corresponds to the computing power service data structure of a node.

[0089] In this embodiment, a computing power access method is provided, which is applied to a node to be accessed and can be used for terminals such as computing devices and servers. Figure 2 is a flow chart of a computing power access method according to an embodiment of the present invention. Figure 2 As shown, the process includes the following steps: Step S301, send an identity registration request to the computing power service authentication node, and receive the identity information sent by the computing power service authentication node.

[0090] When a group of computing devices access the computing power service alliance chain, it is necessary to create an access node, and use this node as the representative of the local computing device network to register its computing power service capabilities with the computing power service alliance chain. When the node to be accessed needs to access the computing power service alliance chain, it first needs to register its identity and send an identity registration request to the computing power service authentication node. The identity registration request may carry encrypted data or identification, and the computing power service authentication node verifies the encrypted data or identification to confirm whether the node to be accessed meets the identity registration requirements. If the node to be accessed meets the identity registration requirements, the computing power service authentication node creates the identity information of the node to be accessed. The identity information can be an identifier used to uniquely represent the node to be accessed. In addition, an identity document of the node to be accessed will be generated. The identity document may contain the identity information of the node to be accessed, the protocol used, and the service request address, timestamp, digital signature and other information. After receiving the identity information, the node to be accessed completes the identity registration.

[0091] As an example, the computing service authentication node creates a DID identifier and a DID identity document corresponding to the node to be connected, where the identity information includes the DID identifier. The computing service authentication node sends the identity information to the node to be connected, and writes the corresponding identity document into the alliance chain through the smart contract interface of the alliance chain.

[0092] Step S302: Obtain a computing power service voucher template, and initiate a voucher creation application based on the computing power service voucher template to obtain computing power service voucher information.

[0093] Among them, the computing power service credential information is generated by the computing power service authentication node after verifying the credential creation application submitted by the node to be accessed. The computing power service credential information corresponds to the computing power service credential. The computing power service credential is used to indicate that the actual computing power capability of the node to be accessed is consistent with the computing power capability declared in the credential creation application.

[0094] The node to be connected requests to obtain the available computing service credential template. The available computing service credential template indicates the computing service credential template that has been created. The computing service credential template defines the structure and content of the computing service credential. Different types of nodes can use the corresponding computing service credential template. After the node to be connected completes identity registration, it requests the computing service authentication node to obtain the available computing service credential template. The computing service authentication node will send the available computing service credential template to the node to be connected.

[0095] After receiving the available computing service voucher template, the node to be connected can select a matching computing service voucher template based on the computing service type and characteristics of the local computing device. The node to be connected uses the corresponding computing service voucher template to initiate a voucher creation application, which contains a declaration of its computing service capabilities (such as virtual machines and their specifications).

[0096] After receiving the credential creation application, the computing power service authentication node will conduct further verification. If the verification is successful, a computing power service credential will be generated, and the computing power service credential information will be returned to the node to be connected. The computing power service credential can prove that the actual computing power capacity of the node to be connected is consistent with the computing power capacity declared in the credential creation application. The computing power service credential information is the identifier corresponding to the computing power service credential. After the computing power service authentication node creates the computing power service credential and the computing power service credential information, it will store the computing power service credential on the chain through the smart contract interface of the alliance chain, and return the computing power service credential information to the node to be connected.

[0097] The computing power service authentication node can regularly detect the computing power of the node to be connected, thereby ensuring the real-time and authenticity of the computing power node.

[0098] If the verification fails, a corresponding prompt will be returned to the node to be connected. The node to be connected can create multiple computing power service credentials.

[0099] Step S303, after obtaining the computing power service credential information, a computing power access request is issued, and a computing power access result is received.

[0100] Among them, the computing power access result is used to characterize whether the node to be accessed is connected to the computing power service alliance chain. The computing power access request at least includes the identity information of the node to be accessed and the computing power service credential information. The computing power access result is determined by the alliance chain node after verifying the identity information and computing power service credential information of the node to be accessed.

[0101] After obtaining the computing power service credential information, the node to be connected can send a computing power access request to the alliance chain node through the specified interface. The parameters in the computing power access request may include the identity information of the node to be connected, the computing power service credential information, etc. After receiving the computing power access request, the alliance chain node first verifies the identity information, and after the verification is passed, the computing power service credential information is verified. The verification can be combined with the identity information, computing power service credential information, and the data stored on the alliance chain. In the verification process, as long as there is a verification failure, an error prompt message will be returned to the node to be connected.

[0102] As an example, after receiving a computing power access request, the identity document of the access node is first read from the chain (i.e., the account book), and then the identity of the access node is authenticated (the verification process is as follows: a random number is encrypted with the public key in the identity document, the ciphertext is sent to the access node, and the access node is decrypted with the private key and the plaintext is returned for comparison and verification). If the identity authentication fails, a verification failure prompt will be returned and the process ends. When the identity authentication passes, the alliance chain node will read each computing power service credential according to the computing power service credential information and verify the credential (for example: verify whether the issuer is in the computing power service authentication node whitelist, and verify the digital signature of the credential with the issuer's public key, etc.). When the credential verification passes, the credential ID and its initial state (such as idle) are added to a list, otherwise a credential verification failure prompt is returned to the access node (here it can be set according to demand, allowing some credentials in the computing power service credential ID list to pass the verification and some to fail, and after all credentials are verified, a prompt message is uniformly replied to the access node; it can also be set according to demand, once the credential verification fails, an error prompt is directly returned and the processing ends). After completing the verification of all credentials, the DID of the node to be connected and the verified credential list are stored on the chain as the computing power access information, and the computing power access result is returned. If the verification is successful, the computing power access result will be a prompt message indicating that the computing power access is successful.

[0103] The computing power access result also includes the computing power service information of the node to be accessed written on the alliance chain (for example: computing power service credential information).

[0104] Before issuing a computing power access request, the node to be accessed can also request the alliance chain node to obtain the information required for computing power access. After obtaining the required information, it issues a computing power access request, which includes the information required for computing power access.

[0105] Optionally, the computing service authentication node is allowed to update the template regularly or on demand. The new template may contain stricter verification rules, new computing service types, or improved data structures. The nodes to be connected can subscribe to specific computing service credential templates. When the template is updated, the computing service authentication node notifies the nodes to be connected through the message queue to ensure that they always use the latest template.

[0106] The computing power access method provided in this embodiment includes sending an identity registration request to a computing power service authentication node, and receiving the identity information of the node to be accessed issued by the computing power service authentication node; obtaining an available computing power service credential template, and initiating a credential creation application based on the computing power service credential template to obtain computing power service credential information; after obtaining the corresponding computing power service credential information, sending a computing power access request, and receiving a computing power access result, the computing power access result is used to characterize whether the node to be accessed is connected to the computing power service alliance chain, the computing power access request at least includes the identity information and computing power service credential information of the node to be accessed, and the computing power access result is determined by the computing power service authentication node after verifying the identity information and computing power service credential information of the node to be accessed. This method uses the form of an alliance chain to access computing power, and performs identity registration, computing power service credential creation and computing power access in the entire process of computing power access. During the computing power access verification, the identity information and computing power service credential information will be double-verified to avoid the situation where the computing power service information of the node to be accessed is untrue and the credential is forged, thereby improving the security of computing power access. In addition, the semi-publicity of the alliance chain is more suitable for protecting the privacy data of computing power nodes.

[0107] In this embodiment, a computing power access method is provided, and the method includes the following steps: Step S401, send an identity registration request to the computing power service authentication node, and receive the identity information of the node to be connected sent by the computing power service authentication node.

[0108] Specifically, step S401 includes: Step S4011, create an asymmetric key locally and send an identity registration request to the computing power service authentication node.

[0109] The identity registration request at least includes public key information of the asymmetric key.

[0110] Before sending an identity registration request, the node to be connected creates a pair of asymmetric keys locally and sends an identity registration request to the computing service authentication node. The identity registration request contains public key information. Among them, the private key in the asymmetric key pair is kept strictly by the node to be connected and will not be shared with other nodes. It is used for operations such as digital signatures.

[0111] Step S4012: Receive the identity information of the node to be connected generated by the computing power service authentication node based on the verification result of the identity registration request.

[0112] Among them, the identity information at least includes the decentralized identity identification of the node to be accessed, and the identity document corresponding to the identity information is written into the computing power service alliance chain.

[0113] After receiving the registration request, the computing power service authentication node checks whether the parameters carried by the request contain public key information. If not, an error message is returned. If it does, identity information and identity documents are created. The identity document is written into the computing power service alliance chain through the smart contract interface, and the identity information is returned to the node to be connected.

[0114] Specifically, a DID identity (i.e., a decentralized identity) and a DID identity document can be created according to the specifications. The DID identity document stores relevant information of the node to be accessed in JSON format, and does not contain content related to the identity of the node to be accessed (such as the address of the node to be accessed, etc.), but only contains data describing the DID (such as the DID identifier, creation timestamp, public key, encryption algorithm, etc.).

[0115] Step S402: Obtain a computing power service voucher template, and initiate a voucher creation application based on the computing power service voucher template to obtain computing power service voucher information.

[0116] Specifically, step S402 includes: Step S4021, send a template request to the computing power service authentication node, and receive the computing power service credential template.

[0117] The template request is used to represent a request to obtain an available computing power service voucher template.

[0118] After the node to be connected completes identity registration, it sends a template request to the computing service authentication node to request an available computing service credential template. The available computing service credential template refers to the computing service credential template that has been created and stored in the alliance chain. The computing service authentication node sends the available computing service credential template to the node to be connected.

[0119] Step S4022: Determine a target computing power service voucher template from the computing power service voucher templates based on the local computing power service type.

[0120] There may be one or more available computing power service credential templates. If there are multiple, the node to be connected can select a matching credential template according to the type of local computing power service, that is, the target computing power service credential template.

[0121] Step S4023, initiating a credential creation application based on the target computing power service credential template.

[0122] Among them, the credential creation application at least includes declared computing power data. The computing power service authentication node determines whether to issue a computing power service credential based on the comparison result of the actual computing power data of the node to be connected and the declared computing power data. Use the target computing power service credential template to initiate a computing power service credential creation application to the computing power service authentication node. The credential creation application contains a declaration of its computing power service capabilities (such as virtual machines and their specifications). The computing power service authentication node determines whether the credential creation application is verified after performing a computing power detection on the node to be connected. Specifically, the computing power service authentication node detects the actual computing power of the node to be connected, and compares the actual computing power with the declared computing power service capabilities, thereby verifying whether the node to be connected has its declared computing power.

[0123] Optionally, the computing power service authentication node can periodically review the actual computing power of the computing power nodes that have been stored on the chain, and update the information stored on the chain accordingly, thereby avoiding inauthentic performance of the computing power nodes through dynamic verification.

[0124] Step S4024: If the actual computing power data is consistent with the declared computing power data, the computing power service authentication node issues a computing power service certificate, and the access node receives the computing power service certificate information.

[0125] Among them, the computing power service credential information at least includes the credential identification, and the computing power service credential of the node to be connected is written into the computing power service alliance chain.

[0126] After receiving the credential creation application, the computing power service authentication node calls the computing power resource detection and verification module to detect the node to be connected. Specifically, the computing power service capabilities declared by the node to be connected can be detected and verified, involving the actual operation of test tasks, checking resource allocation, verifying performance parameters, etc. The verification results are compared with the computing power service capability data declared in the credential creation application. If the comparison results show that the performance parameters of the node to be connected meet (reach or exceed) the specification requirements or performance parameter indicators described in the service credential, the computing power service credential is issued. The computing power service credential has corresponding computing power service credential information, and the computing power service credential information at least includes the identification number (ID) of the computing power service credential of the node to be connected. The computing power service credential is stored on the chain, and the computing power service credential information is sent to the node to be connected.

[0127] Furthermore, if the computing power service authentication node fails to verify the credential creation application, an error prompt is received.

[0128] If the verification fails, the computing power service certificate will not be issued and an error message will be returned.

[0129] Step S403, after obtaining the corresponding computing power service credential information, issue a computing power access request and receive a computing power access result.

[0130] Specifically, step S403 includes: Step S4031, obtaining the information required for computing power access.

[0131] Among them, the information required for computing power access includes at least the request interface.

[0132] After obtaining the corresponding computing power service credential information, the node to be connected will send a request to the alliance chain node to obtain the information required for computing power access, thereby obtaining the information required for computing power access, including the request interface, required parameters and specifications for computing power access, etc.

[0133] Step S4032: Generate a computing power access request based on the information required for computing power access, and issue a computing power access request based on the request interface.

[0134] After receiving the information required for computing power access, the node to be accessed generates a computing power access request, which includes the identity information of the node to be accessed, computing power service credential information, etc., and sends the computing power access request through the request interface.

[0135] In step S4033, the alliance chain node performs identity authentication and credential verification based on the identity information in the computing power access request and the computing power service credential information respectively. If the identity authentication passes and the computing power service credential verification passes, the computing power access result is received.

[0136] Among them, the computing power access result represents that the node to be accessed has accessed the computing power service alliance chain. The alliance chain node stores the identity information of the node to be accessed and the computing power service credential information in the computing power service alliance chain. After receiving the computing power access request, the identity document of the access node is first read from the chain (i.e., the account book), and then the identity of the node to be accessed is authenticated (the verification process is as follows: encrypt a random number with the public key in the identity document, send the ciphertext to the node to be accessed, and let the node to be accessed decrypt it with the private key and return the plaintext for comparison and verification). If the identity authentication fails, the verification failure prompt will be returned and the process ends. When the identity authentication passes, the alliance chain node will read each computing power service credential according to the computing power service credential information and verify the credential (for example: verify whether the issuer is in the computing power service authentication node whitelist, and use the issuer's public key to verify the digital signature of the credential, etc.). When the credential verification is successful, the credential ID and its initial status (such as idle) are added to a list, otherwise a credential verification failure prompt is returned to the node to be connected (here it can be set according to demand, allowing some credentials in the computing power service credential ID list to pass the verification and some to fail. After all credentials are verified, a prompt message is uniformly replied to the node to be connected; it can also be set according to demand, once it is found that the credential verification fails, an error prompt is directly returned and the processing is terminated). After completing the verification of all credentials, the DID of the node to be connected and the verified credential list are stored on the chain as the computing power access information, and the computing power access result is returned. If the verification is successful, the computing power access result is a prompt message of successful computing power access.

[0137] In some optional implementations, the above-mentioned computing power access method also includes: if the node to be accessed accesses the computing power service alliance chain for the first time, synchronizing the data on the computing power service alliance chain to the node to be accessed.

[0138] When a computing power node (such as the node to be connected) is connected to the computing power service alliance chain for the first time, the ledger data synchronization will be performed. The ledger data synchronization is the block synchronization. When a new node wants to join the alliance chain network, or an abnormal node returns to normal, the block height of this node lags behind other nodes, the status is not the latest, and it cannot participate in the network transaction consensus. At this time, block synchronization is required, and the node will actively request other nodes to download blocks.

[0139] Obtain the on-chain data (including smart contract programs, user identity documents, computing service templates, computing service credentials, computing access information, etc.) from the adjacent alliance chain nodes, so that the newly added nodes have the latest status (the latest status data of the ledger represents the latest values ​​of all key-value pairs contained in the blockchain transaction log) in order to participate in the consensus of the next new block. In addition, the basic functions of the alliance chain will automatically connect to more other alliance chain nodes, making the alliance chain network more robust. If the computing power node is not accessing computing power for the first time (such as updating computing power access information), no additional processing is required.

[0140] The computing power access method provided by the present invention is used for a computing power access system, including a computing power service alliance chain, a node to be accessed, and a computing power service authentication node. Figure 3 As shown, the nodes to be connected include computing power resource monitoring, basic functions of the alliance chain, identity registration and verification, status monitoring, computing power registration (i.e. computing power access), computing power query, computing power service certificate chain, identity document chain, smart contract program and other functions.

[0141] The computing resource monitoring module is used to monitor the computing resources in the local computing device network, and is also used to respond to computing resource detection and verification requests from the computing service authentication node, and return the detection and verification results. In specific implementation, it can monitor the resources on the specified computing device, or design a test plug-in according to industry standards, install and deploy the test plug-in on the specified computing device, run the test, and then return the test results.

[0142] The alliance chain basic function module is used to realize the underlying basic functions of the alliance chain. FISCO BCOS consists of the basic layer, chain core layer, interconnection core layer, management layer and interface layer, and provides services to application developers through the SDK, interactive console and RPC interface of the interface layer.

[0143] The identity registration and verification module is used to initiate a DID identity registration request to the computing power service authentication node, and collaborate with the computing power service authentication node to complete the DID identity creation. In addition, this module is also responsible for processing external entities' verification requests for the DID identity of this node.

[0144] The status monitoring module is used to monitor the operating status of other alliance chain nodes. The FISCO BCOS basic function implements a heartbeat packet-based mechanism to monitor the status of all Peer nodes and provides an API for obtaining a list of Peer nodes, which can obtain all nodes with normal operating status.

[0145] The computing power registration module is responsible for applying for computing power service credentials from the computing power service authentication node, and is also responsible for registering the computing power service information that this node can provide with the computing power service alliance chain.

[0146] The computing power query module is used to respond to external computing power query requests.

[0147] The computing power service certificate chain module is used when this node is connected to the computing power service alliance chain. This function will be enabled and is responsible for processing the computing power service certificate chain operation initiated by the computing power service authentication node.

[0148] The identity document chain module is used when this node is connected to the computing power service alliance chain. This function will be enabled and is responsible for processing the identity document chain operation initiated by the computing power service authentication node.

[0149] Smart contract programs are used to design and implement smart contract programs for the above data chain operations. When the node to be connected is connected to the computing power service alliance chain, the smart contract programs deployed on the alliance chain will be automatically deployed on the newly connected node through account data synchronization, including identity document chain smart contracts, voucher template chain smart contracts, voucher chain smart contracts, and computing power registration information chain smart contracts. When the computing power service alliance chain is initialized, the management personnel can be responsible for deploying these smart contract programs on the alliance chain.

[0150] Considering the high data storage overhead on the blockchain, external storage can be used in the specific implementation, such as distributed file storage systems or cloud storage platforms. If a distributed file storage system is used as external storage, each file will calculate a unique hash (i.e., the file's fingerprint) based on the content, and data files with large storage space overhead (including credential templates, identity documents, and computing service credentials) will be stored in the system, while only the file hash needs to be stored in the computing service alliance chain.

[0151] If cloud storage is used as external storage, data files with large storage space overhead (including credential templates, identity documents, computing service credentials) will be saved to the corresponding cloud server through the cloud storage service provided by the cloud service provider, and their access addresses (such as URI or URL) and hash values ​​of the data file contents will be stored on the computing service alliance chain.

[0152] The corresponding on-chain smart contract interface design is as follows: Write voucher template interface: saveCpt, parameter: voucher template file metadata (MetaData).

[0153] Write computing service credentials: saveCredential, parameter: service credential file metadata.

[0154] Write identity document: saveDidDoc, parameter: identity document file metadata.

[0155] File metadata content includes information such as file name, size, IPFS file hash or cloud storage file access address and file content hash value.

[0156] The interface format can also be unified to provide an on-chain smart contract interface: saveData, with parameters including the write data type (types include voucher templates, computing power service vouchers, identity documents) and file metadata.

[0157] The computing power service authentication node is an authoritative institution node that can provide DID identity registration and computing power service capability authentication for computing power nodes, and write identity documents and computing power service credentials to the alliance chain through the smart contract on-chain interface provided by the alliance chain. At the same time, it can provide computing power service authentication users with the function of customizing computing power service credential templates, and the corresponding credential templates are also stored on the chain. The computing power service authentication node is a processing unit outside the alliance chain. It can be a single functional node or a service system composed of multiple distributed nodes (for example: the IP address list of the computing power authentication service node can be written into the alliance chain, and the node to be connected can query the IP address list and select an IP to connect; or the smart contract program of the alliance chain provides an interface for obtaining an authentication node, and the IP of the computing power authentication service node is directly assigned to the node to be connected through this interface).

[0158] The computing power service authentication node includes computing power service certificate template, computing power service certificate, identity authentication, trusted certificate service, DID service, computing power resource detection and inspection and other functions.

[0159] The computing power service certificate template module is used to provide computing power service authentication users with the function of customizing computing power service certificate templates. Computing power service authentication users can customize computing power service certificate templates according to computing power service definition standards. At the same time, the created certificate template can be written into the alliance chain through the smart contract program interface of the alliance chain, and the created computing power service certificate template can be used for computing power node query.

[0160] The computing power service certificate module is responsible for providing computing power service certificate issuance and verification services for computing power nodes, and writes the issued computing power service certificate into the alliance chain through the smart contract program interface of the alliance chain.

[0161] The identity authentication module is responsible for providing DID identity creation and verification for computing power nodes and computing power consumption users, and writing the corresponding DID identity document into the alliance chain through the smart contract program interface of the alliance chain.

[0162] The trusted credential service module is used to implement a verifiable digital credential model. It provides processing interfaces for credential template creation, credential issuance and verification, selective disclosure of credential issuance and verification, and other functions. It provides support for computing service credential templates and computing service credentials, and is the underlying support module for these two modules.

[0163] The DID service module is used to implement the creation and verification of distributed digital identity identifiers and DID documents, provide relevant function processing interfaces, and provide support for the identity authentication module.

[0164] The computing power resource detection and verification module is responsible for detecting and verifying the computing power service capability data (such as virtual machine resource specifications, or computing performance parameter indicators, etc.) declared in the computing power service certificate applied for by the computing power node. A computing power resource detection and verification data request will be sent to the computing power resource monitoring module of the node to be connected, and the computing power resource monitoring module of the node to be connected will return the specific detection and verification results. After receiving the detection and verification results, it will be compared with the computing power service capability data declared in the computing power service certificate application to determine whether they are consistent. If they are consistent, they will pass, otherwise an error message will be returned.

[0165] The process of accessing the computing power of the node to be connected is as follows: Figure 4 As shown, the node to be connected initiates identity registration with the computing service authentication node. After identity authentication, the computing service authentication node creates an identity document and DID identity information, stores the identity document in the alliance chain, and returns the identity information to the node to be connected. After identity registration, the node to be connected requests to obtain an available computing service credential template, and issues a computing service credential creation application based on the computing service credential template. After receiving the computing service credential creation application, the computing service authentication node performs resource detection on the node to be connected. If the actual computing power capability of the node to be connected is consistent with the computing power capability declared in the computing service credential creation application, it creates a computing service credential, stores the computing service credential in the alliance chain, and returns the computing service credential information (computing service credential ID) to the node to be connected.

[0166] The node to be connected requests the alliance chain node to obtain the information required for computing power registration, and sends a computing power access request after obtaining the required information. The alliance chain node verifies the identity information and computing power service credential information of the node to be connected and determines whether the registration is successful.

[0167] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method.

[0168] The embodiment of the present application further provides a computing power access device, which is applied to a computing power service authentication node, including: An identity authentication module, configured to authenticate the node to be accessed based on the identity registration request of the node to be accessed, so as to generate an identity document of the node to be accessed and corresponding identity information, wherein the identity information at least includes a decentralized identity identifier; A credential issuance module, used to detect the actual computing power of the node to be accessed based on the credential creation application of the node to be accessed, so as to issue a computing power service credential and corresponding computing power service credential information according to the actual computing power, wherein the computing power service credential information at least includes a credential identifier; the computing power service credential and identity document of the node to be accessed are stored in the computing power service alliance chain; The computing power access module is used to determine the computing power access result of the node to be accessed when the node to be accessed issues a computing power access request. The alliance chain node performs identity authentication and credential verification based on the identity information and computing power service credential information in the computing power access request.

[0169] The embodiment of the present application further provides a computing power access device, which is applied to a node to be accessed, including: An identity registration module is used to send an identity registration request to a computing power service authentication node and receive identity information sent by the computing power service authentication node; A credential application module, used to obtain a computing power service credential template, and initiate a credential creation application based on the computing power service credential template to obtain computing power service credential information, wherein the computing power service credential information is generated after the computing power service authentication node verifies the credential creation application submitted by the node to be connected, and the computing power service credential information corresponds to the computing power service credential, and the computing power service credential is used to indicate that the actual computing power capability of the node to be connected is consistent with the computing power capability declared in the credential creation application; The access determination module is used to issue a computing power access request and receive a computing power access result after obtaining the computing power service credential information. The computing power access result is used to characterize whether the node to be accessed is connected to the computing power service alliance chain. The computing power access request at least includes the identity information and computing power service credential information of the node to be accessed. The computing power access result is determined after the alliance chain node verifies the identity information and computing power service credential information of the node to be accessed.

[0170] For the description of the features in the embodiment corresponding to the computing power access device, please refer to the relevant description of the embodiment corresponding to the computing power access method, which will not be repeated here.

[0171] The embodiment of the present application also provides a computer device, such as Figure 5 As shown, it includes a processor 10 and a memory 20, in which a computer program is stored. The processor 10 is configured to run the computer program to execute the steps in any of the above-mentioned computing power access method embodiments.

[0172] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored, wherein the computer program is configured to execute the steps of any of the above-mentioned computing power access method embodiments when running.

[0173] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0174] An embodiment of the present application further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the steps in any one of the above-mentioned computing power access method embodiments are implemented.

[0175] An embodiment of the present application also provides another computer program product, including a non-volatile computer-readable storage medium, the non-volatile computer-readable storage medium storing a computer program, and when the computer program is executed by a processor, the steps in any of the above-mentioned computing power access method embodiments are implemented.

[0176] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0177] The above is a detailed introduction to a computing power access method provided by the present application. This article uses specific examples to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method and core idea of ​​the present application. It should be pointed out that for ordinary technicians in this technical field, without departing from the principles of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall within the scope of protection of the claims of the present application.

Claims

1. A computing power access method, characterized in that: Applied to the computing power service authentication node, which is deployed in the computing power service alliance chain, including: Verifying the node to be accessed based on the identity registration request of the node to be accessed, so as to generate an identity document of the node to be accessed and corresponding identity information, wherein the identity information includes at least a decentralized identity identifier; Based on the credential creation application of the node to be accessed, the actual computing power of the node to be accessed is detected, so as to issue a computing power service credential and corresponding computing power service credential information according to the actual computing power, wherein the computing power service credential information at least includes a credential identifier; the computing power service credential and identity document of the node to be accessed are stored in the computing power service alliance chain; When the node to be accessed issues a computing power access request, the alliance chain node performs identity authentication and credential verification based on the identity information and computing power service credential information in the computing power access request to determine the computing power access result of the node to be accessed.

2. The computing power access method according to claim 1, characterized in that: The verifying the node to be accessed based on the identity registration request of the node to be accessed to generate an identity document of the node to be accessed and corresponding identity information, includes: Determining whether the identity registration request contains public key information; If the identity registration request contains the public key information, generating an identity document of the node to be accessed and corresponding identity information; The identity information is sent to the node to be connected, and the identity document of the node to be connected is written into the computing power service alliance chain.

3. The computing power access method according to claim 2, characterized in that: The step of creating an application for a certificate based on the node to be accessed and detecting the actual computing power of the node to be accessed, so as to issue a computing power service certificate and corresponding computing power service certificate information according to the actual computing power, includes: Detecting actual computing power data of the node to be accessed, and extracting declared computing power data of the node to be accessed from a credential creation application of the node to be accessed; Comparing the actual computing power data with the declared computing power data; If the actual computing power data is consistent with the declared computing power data, a computing power service certificate and corresponding computing power service certificate information are issued; The computing power service credential information is sent to the node to be connected, and the computing power service credential is written into the computing power service alliance chain.

4. The computing power access method according to claim 1, characterized in that: The method further comprises: Sending the identity information to the node to be accessed, and receiving a template request sent by the node to be accessed; A computing power service voucher template is issued to the node to be connected based on the template request, and the node to be connected issues a voucher creation application based on the computing power service voucher template.

5. The computing power access method according to claim 1, characterized in that: The alliance chain node performs identity authentication and credential verification based on the identity information and computing power service credential information in the computing power access request to determine the computing power access result of the node to be accessed, including: The alliance chain node reads the identity document of the node to be connected from the computing power service alliance chain based on the identity information, and authenticates the node to be connected based on the identity document; If the identity authentication is passed, the alliance chain node reads the computing power service credential of the node to be connected from the computing power service alliance chain based on the computing power service credential information, and verifies the computing power service credential; If the computing power service credential verification is successful, the alliance chain node writes the identity information of the node to be accessed and the computing power service credential information into the computing power service alliance chain, and sends the computing power access result to the node to be accessed.

6. The computing power access method according to claim 5, characterized in that: The performing identity authentication on the node to be accessed based on the identity document includes: The alliance chain node obtains the public key information in the identity document to encrypt the random number to obtain a ciphertext; The alliance chain node sends the ciphertext to the node to be connected, and receives the plaintext after the node to be connected decrypts the ciphertext based on the private key; The alliance chain node verifies the node to be accessed based on the comparison result of the plaintext and the random number; If the plain text is consistent with the random number, the identity authentication of the node to be accessed is successful.

7. The computing power access method according to claim 5, characterized in that: The verifying of the computing power service credential includes: The alliance chain node determines whether the issuer of the computing power service certificate is stored in a preset computing power service authentication node whitelist, and verifies the digital signature of the computing power service certificate based on the public key of the issuer; If the issuer of the computing power service certificate is stored in the preset computing power service authentication node whitelist, and the digital signature of the computing power service certificate passes the verification, it indicates that the computing power service certificate passes the verification.

8. The computing power access method according to claim 1, characterized in that: The method further comprises: The alliance chain node receives a computing power query request from a query node, and authenticates the query node based on the identity identifier of the query node in the computing power query request; If the query node identity authentication is passed, the computing power data of the available alliance chain nodes are read from the computing power service alliance chain, and a node list is generated, wherein the node list includes the computing power data of the available alliance chain nodes; The alliance chain node sends the node list to the query node.

9. A computing power access method, characterized in that: Applied to the node to be connected, including: Send an identity registration request to the computing power service authentication node, and receive identity information sent by the computing power service authentication node; Obtain a computing power service credential template, and initiate a credential creation application based on the computing power service credential template to obtain computing power service credential information, wherein the computing power service credential information is generated after the computing power service authentication node verifies the credential creation application submitted by the node to be connected, and the computing power service credential information corresponds to the computing power service credential, and the computing power service credential is used to indicate that the actual computing power capability of the node to be connected is consistent with the computing power capability declared in the credential creation application; After obtaining the computing power service credential information, a computing power access request is issued and a computing power access result is received. The computing power access result is used to characterize whether the node to be accessed is connected to the computing power service alliance chain. The computing power access request includes at least the identity information and computing power service credential information of the node to be accessed. The computing power access result is determined after the alliance chain node verifies the identity information and computing power service credential information of the node to be accessed.

10. The computing power access method according to claim 9, characterized in that: The sending of an identity registration request to a computing power service authentication node and receiving identity information sent by the computing power service authentication node includes: Creating an asymmetric key locally, and sending an identity registration request to the computing power service authentication node, wherein the identity registration request includes at least the public key information of the asymmetric key; Receive the identity information of the node to be accessed generated by the computing power service authentication node based on the verification result of the identity registration request, the identity information at least includes the decentralized identity identifier of the node to be accessed, and the identity document corresponding to the identity information is written into the computing power service alliance chain.

11. The computing power access method according to claim 9, characterized in that: The obtaining of computing power service voucher template includes: Sending a template request to the computing power service authentication node and receiving a computing power service credential template, wherein the template request is used to represent a request to obtain a computing power service credential template; A target computing power service voucher template is determined from the computing power service voucher template based on the local computing power service type.

12. The computing power access method according to claim 11, characterized in that: The initiating a credential creation application based on the computing power service credential template to obtain computing power service credential information includes: Initiate a credential creation application based on the target computing power service credential template, the credential creation application at least including declared computing power data, and the computing power service authentication node determines whether to issue a computing power service credential based on a comparison result between the actual computing power data of the node to be connected and the declared computing power data; If the actual computing power data is consistent with the declared computing power data, the computing power service authentication node issues a computing power service certificate, and the node to be connected receives computing power service certificate information, and the computing power service certificate information at least includes a certificate identifier.

13. The computing power access method according to claim 9, characterized in that: The sending of the computing power access request and receiving the computing power access result includes: Obtaining information required for computing power access, where the information required for computing power access includes at least a request interface; Generate a computing power access request based on the computing power access required information, and issue the computing power access request based on the request interface; The alliance chain node performs identity authentication and credential verification respectively based on the identity information and computing power service credential information in the computing power access request. If the identity authentication passes and the computing power service credential verification passes, the computing power access result is received. The computing power access result represents that the node to be accessed has accessed the computing power service alliance chain. The alliance chain node stores the identity information and computing power service credential information of the node to be accessed in the computing power service alliance chain.

14. The computing power access method according to claim 9, characterized in that: The method further comprises: If the node to be connected is connecting to the computing power service alliance chain for the first time, the data on the computing power service alliance chain is synchronized to the node to be connected.

15. A computer device, characterized in that: include: Memory for storing computer programs; A processor, used to implement the steps of the computing power access method as described in any one of claims 1 to 14 when executing the computer program.

16. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein the computer program, when executed by a processor, implements the steps of the computing power access method according to any one of claims 1 to 14.

17. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the computing power access method as described in any one of claims 1 to 14 are implemented.

Images