Carbon monitoring platform user identity authentication method, device and system, and storage medium

Abstract

The invention discloses a carbon monitoring platform user identity authentication method, device and system, and a storage medium. The method comprises the following steps: S1, obtaining relay chain parameters; s2, a cross-chain gateway DCCG of the application chain carries out application chain registration through the relay chain according to the relay chain parameters; s3, the user sends a cross-chain user registration request to the relay chain through the registered application chain; and S4, according to the relay chain parameters, realizing identity authentication of the user through signcryption and de-signcryption of the plaintext message. By adopting the technical scheme of the invention, the problems of low decentration, high resource consumption, low confidentiality of identity interaction information and high time overhead in the identity authentication of the current carbon monitoring platform are solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of carbon monitoring platforms, and particularly relates to a method and device, system, and storage medium for user identity authentication of a carbon monitoring platform. Background Art

[0002] With the increasing global attention to carbon emissions, building an intelligent and trustworthy carbon monitoring platform can provide comprehensive and accurate energy consumption and carbon emission data. At present, the identity authentication of carbon monitoring platforms has problems such as low decentralization, high resource consumption, low confidentiality of identity interaction information, and large time overhead. Summary of the Invention

[0003] The technical problem to be solved by the present invention is to provide a method and device, system, and storage medium for user identity authentication of a carbon monitoring platform to solve the problems of low decentralization, high resource consumption, low confidentiality of identity interaction information, and large time overhead in the current identity authentication of carbon monitoring platforms.

[0004] To achieve the above object, the present invention adopts the following technical solutions:

[0005] A method for user identity authentication of a carbon monitoring platform includes the following steps:

[0006] Step S1, obtaining relay chain parameters, where the parameters of the relay chain include: public parameters and secret parameters;

[0007] Step S2, the cross-chain gateway DCCG of the application chain registers the application chain through the relay chain according to the relay chain parameters;

[0008] Step S3, the user sends a cross-chain user registration request to the relay chain through the registered application chain;

[0009] Step S4, realizing user identity authentication by signing and decrypting the plaintext message according to the relay chain parameters.

[0010] Preferably, step S1 includes:

[0011] Step S11, selecting the largest prime numbers p and q: p and q satisfy the condition q|p - 1;

[0012] Step S12, selecting the generator g: selecting a generator g of the first group with order q;

[0013] Step S13, defining the first hash function H1, the second hash function H2, and the third hash function H3:

[0014] H1:

[0015] H2:

[0016] H3:

[0017] Among them, L1 is the length of the plaintext message, and L2 is the length of the public key address of the independent blockchain where the user is located. are the first group and the second group;

[0018] Step S14, the master private key s of the relay chain and the master public key P pub Generate:

[0019] The relay chain randomly selects in the second group as the master private key;

[0020] The master public key P pub is calculated through the generator and the master private key: P pub = g s ;

[0021] Step S15, the communication public key (X c , Y c ) and the communication private key (x c , y c ) are calculated:

[0022] The relay chain selects the secret values x c , r c , then

[0023] Let the identity identifier of the relay chain itself be ID c , then y c = r c + sH1(ID c , Y c );

[0024] Public parameters The secret parameter SParams = <s, x c , y c >.

[0025] Preferably, step S2 includes:

[0026] Step S21, elect the cross-chain gateway DCCG of the application chain through node voting;

[0027] Step S22, use the elected cross-chain gateway DCCG to obtain the corresponding identity identifier to implement the registration of the application chain.

[0028] Preferably, set the initial voting number m and the weight coefficient k of each node of the park application chain, then the voting right of this node is k * m.

[0029] The present invention also provides a user identity authentication device for a carbon monitoring platform, including:

[0030] An acquisition module, configured to acquire relay chain parameters, where the parameters of the relay chain include: public parameters and secret parameters;

[0031] A first registration module, configured to enable the cross-chain gateway DCCG of the application chain to register the application chain through the relay chain according to the relay chain parameters;

[0032] A second registration module, configured to enable a user to send a cross-chain user registration request to the relay chain through the registered application chain;

[0033] An authentication module, configured to implement user identity authentication by signing and decrypting the plaintext message according to the relay chain parameters.

[0034] Preferably, the first registration module includes:

[0035] An election unit, configured to elect the cross-chain gateway DCCG of the application chain through node voting;

[0036] A registration unit, configured to use the elected cross-chain gateway DCCG to obtain corresponding identity identifiers to implement application chain registration.

[0037] The present invention also provides a user identity authentication system for a carbon monitoring platform, including: a memory and a processor, where a computer program is stored on the memory and run by the processor, and the computer program executes the carbon monitoring platform user identity authentication method when run by the processor.

[0038] The present invention also provides a storage medium, on which a computer program is stored, and the computer program executes the carbon monitoring platform user identity authentication method when running.

[0039] The present invention adopts a cross-chain identity authentication method, improves the stability of the park carbon monitoring platform while enhancing the security of identity information interaction, does not rely on a centralized public key certificate system, avoids the certificate storage and verification links, solves the problem of low current decentralization degree, and improves the authentication efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the following drawings are only the embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained according to the provided drawings without creative efforts.

[0041] Figure 1 It is a framework schematic diagram of the carbon monitoring platform user identity authentication method in the embodiments of the present invention;

[0042] Figure 2 This is the flowchart of the user identity authentication method for the carbon monitoring platform in the embodiment of the present invention;

[0043] Figure 3 This is the schematic diagram of the DCCG election process for the gateway node;

[0044] Figure 4 This is the schematic diagram of the relationship among the application chain, the DCCG gateway node, and the relay chain;

[0045] Figure 5 This is the schematic diagram of the application chain registration. Detailed implementation manners

[0046] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0047] To make the above objects, features, and advantages of the present invention more obvious and understandable, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific implementation manners.

[0048] Embodiment 1:

[0049] As Figure 1 shown, the embodiment of the present invention provides a user identity authentication method for a carbon monitoring platform, which adopts a decentralized gateway (DCCG) and an identity authentication center based on the IPFS network, and performs information cross-chain interaction through a relay chain to identify and authenticate the user when the user accesses the carbon emission detection platform.

[0050] As Figure 2 shown, the user identity authentication method for the carbon monitoring platform in the embodiment of the present invention includes the following steps:

[0051] Step S1: Obtain relay chain parameters;

[0052] Step S2: The cross-chain gateway DCCG of the application chain registers the application chain through the relay chain according to the relay chain parameters

[0053] Step S3: The user sends a cross-chain user registration request to the relay chain through the registered application chain;

[0054] Step S4: According to the relay chain parameters, user identity authentication is realized through the signcryption and decryption of the plaintext message.

[0055] As an implementation manner of an embodiment of the present invention, in step S1, generating relay chain parameters includes:

[0056] Step S11, selection of the largest prime numbers p and q: p and q satisfy the condition q|p - 1;

[0057] Step S12, selection of the generator g: select a generator g of order q in the first group ;

[0058] Step S13, define the first hash function H1, the second hash function H2, and the third hash function H3:

[0059] H1:

[0060] H2:

[0061] H3:

[0062] where L1 is the length of the plaintext message, L2 is the length of the public key address of the independent blockchain where the user is located, are the first group and the second group;

[0063] Step S14, generation of the main private key s and the main public key P of the relay chain pub :

[0064] The relay chain randomly selects in the second group as the main private key;

[0065] The main public key P pub is calculated by the generator and the main private key: P pub = g s ;

[0066] Step S15, calculation of the communication public key (X c , Y c ) and the communication private key (x c , y c ) of the relay chain:

[0067] The relay chain selects secret values x c , r c , then

[0068] Let the identity identifier of the relay chain itself be ID c , then y c = r c + sH1(ID c , Y c );

[0069] The above parameters are used as the parameters of the relay chain, including public parameters and secret parameters. Among them, the public parameters The secret parameter SParams = <s, x c , y c >.

[0070] As an implementation manner of the embodiment of the present invention, step S2 includes:

[0071] Step S21: Elect the cross-chain gateway DCCG of the application chain through node voting;

[0072] Step S22: Use the elected cross-chain gateway DCCG to obtain the corresponding identity identifier to achieve the registration of the application chain.

[0073] Further, in step S21, set the initial voting number m and weight coefficient k for each node of the park application chain. Then the voting right of this node is k * m.

[0074] As Figure 3 shown, step S21 includes: a node voting right proxy judgment link, a node voting link, and a DCCG gateway node election link.

[0075] Among them, a node can authorize all or part of its voting right to other nodes. The voting weight of the authorized node is the sum of its own and the received weights, and then voting is carried out. The top N nodes of the voting results are used as the gateway node DCCG. After the election is completed, the voting right is returned to the corresponding node itself.

[0076] Further, as Figure 4 、 5 shown, step S22 is specifically:

[0077] The cross-chain gateway DCCG of the application chain selects the secret value x D through consensus and calculates and sends ID d (ID d is the public key address of the blockchain where DCCG is located), X D and the number of DCCG gateway nodes n to the relay chain, and records each node as N i (1 ≤ i ≤ n);

[0078] The relay chain selects a random number y D = r D + sH1(ID d , Y D );

[0079] The relay chain selects the finite field GF(p'), where p' satisfies p' > n, y D∈GF(p'), select a polynomial g(x) of degree t - 1:

[0080] g(x) = a t-1 x t-1 + a t-2 x t-2 + … + a2x 2 + a1x 1 + a0

[0081] where g(x) ∈ GF(p')[x]; a0 = y D ; The relay chain selects n non - zero and distinct elements x1, x2,..., x n in GF(p'), and calculates respectively:

[0082] y i = g(x i ), i = 1, 2,..., n

[0083] Use the public key of the application chain where each node N i (1 ≤ i ≤ n) of DCCG is located to encrypt the secret share (x i , y i ). The encrypted secret share is (x' i , y' i ). Send the secret share to DCCG, and publish the public key (X D , Y D ), x i ∈(1 ≤ i ≤ n).

[0084] Each node N i (1 ≤ i ≤ n) of DCCG decrypts using the private key of its respective application chain and saves it in its respective secret share (x i , y i ).

[0085] The relay chain generates a corresponding DID document for the DCCG registered this time and stores (X D , Y D ) in the identity authentication center based on the IPFS network.

[0086] As an implementation manner of an embodiment of the present invention, in step S3, the user sends a cross - chain user registration request to the relay chain through the registered application chain, obtains the key and identity identifier for cross - chain activities, and finally the relay chain saves the generated cross - chain user identity identifier to the IPFS network. Specifically, it includes:

[0087] Step S31: The user selects a secret value Calculate And send the identity ID u , X uTo the relay chain.

[0088] Step S32: The relay chain selects a secret value Calculate y u = r u + sH1(ID u , Y u ). Encrypt the calculated Y u and y u using the public key of the application chain where the user is located, and send them to the user ID u .

[0089] Step S33: The user ID u decrypts the relay chain information using the private key on the application chain, receives Y u and y u , and verifies the equation Whether it holds; if it holds, the user ID u obtains its cross-chain public-private key pair based on certificateless signcryption <PK u = (X u , Y u ), SK u = (x u , y u >), and the cross-chain identity identifier of the user ID u is: (X u , Y u ); if it does not hold, the user's cross-chain registration request fails.

[0090] Among them, (x u , y u ) is the user's private key parameter, (X u , Y u ) is the user's public key parameter, and ID u is the public key address of the blockchain where the user is located.

[0091] As an implementation manner of an embodiment of the present invention, in step S4, the identity authentication link is synchronized during the cross-chain contract call, specifically including:

[0092] Step S41: Sign and encrypt the user identity information

[0093] Input the string <m, (X A , Y A ), (x A , y A ), (X B , Y B ), ID a , ID b >, and output the signed ciphertext <c1, c2, c3>.

[0094] Suppose the plaintext message sent by the application chain is m, the public key of sender A is (X A , Y A ), the private key is (x A , y A ), and the identity specified by the sender during registration is ID a ; the public key of receiver B is (X B , Y B ), and the identity identifier specified by the receiver during registration is ID b .

[0095] The sender selects a secret value to calculate the signed ciphertext

[0096] Calculate d = H2(m, c2, ID a , X A , Y A ).

[0097] Calculate v = d(y A + x A ), c3 = H3(k1, k2ID a , ID b ) ⊕ (m||r1||v), and output the signed ciphertext σ = (c1, c2, c3). The σ output by the algorithm represents the result of signing and encrypting the plaintext message m in one logical step.

[0098] Step S42, Decrypting the User Identity Information

[0099] After inputting the string <σ, (X A , Y A ), (X B , Y B ), (x B , y B ), ID a , ID b > in the corresponding format, the corresponding plaintext m is output.

[0100] Similar to the signcryption process, the public key of the sender is (X A , Y A ), and the identity identifier specified by the sender during registration is ID a ; the public key of receiver B is (X B , Y B ), the private key is (x B , y B ), and the identity identifier specified by the receiver during registration is ID b .

[0101] Calculate Calculate the plaintext (m'||r1'||v') = c3 ⊕ H3(k'1, k'2ID a , ID b ), and verify Whether it holds. If it holds, continue; otherwise, the identity verification fails.

[0102] Calculate d' = H2(m', c2, ID a , ID b );

[0103] Calculate Verify Whether it holds. If it holds, m' is the original message sought; otherwise, output an error flag.

[0104] Example 2:

[0105] This embodiment of the present invention also provides a carbon monitoring platform user identity authentication device, including:

[0106] An acquisition module for acquiring relay chain parameters, where the relay chain parameters include: public parameters and secret parameters;

[0107] A first registration module for enabling the cross-chain gateway DCCG of the application chain to register the application chain through the relay chain according to the relay chain parameters;

[0108] A second registration module for enabling a user to send a cross-chain user registration request to the relay chain through the registered application chain;

[0109] An authentication module for implementing user identity authentication by signcryption and unsigncryption of the plaintext message according to the relay chain parameters.

[0110] As an implementation manner of this embodiment of the present invention, the first registration module includes:

[0111] An election unit for electing the cross-chain gateway DCCG of the application chain through node voting;

[0112] A registration unit for using the elected cross-chain gateway DCCG to obtain corresponding identity identifiers to implement application chain registration.

[0113] Example 3:

[0114] This embodiment of the present invention also provides a carbon monitoring platform user identity authentication system, including: a memory and a processor, where a computer program is stored on the memory and run by the processor, and the computer program executes the carbon monitoring platform user identity authentication method when run by the processor.

[0115] Example 4:

[0116] An embodiment of the present invention further provides a storage medium, characterized in that a computer program is stored on the storage medium, and the computer program executes the carbon monitoring platform user identity authentication method according to any one of claims 1-3 when running.

[0117] The above embodiments are only descriptions of the preferred embodiments of the present invention, and do not limit the scope of the present invention. Without departing from the design spirit of the present invention, various deformations and improvements made by those of ordinary skill in the art to the technical solution of the present invention shall fall within the protection scope determined by the claims of the present invention.

Claims

1. A carbon monitoring platform user identity authentication method, characterized in that: The following steps are involved: Step S1: Obtain relay chain parameters, which include public parameters and secret parameters. Step S2: The cross-chain gateway DCCG of the application chain registers the application chain through the relay chain according to the relay chain parameters; Step S3: The user sends a cross-chain user registration request to the relay chain through the registered application chain; Step S4: According to the relay chain parameters, the user's identity authentication is achieved by signcrypting and designcrypting the plaintext message.

2. The carbon monitoring platform user identity authentication method according to claim 1, characterized in that: Step S1 includes: Step S11, the maximum prime numbers p and q are selected: p and q satisfy the condition q|p-1; Step S12, selection of generator g: select the first group Generator g of intermediate order q; Step S13: define the first hash function H1 , the second hash function H2 , the third hash function H3 : in, L1 is the plaintext message length, L2 The length of the public key address of the independent blockchain where the user is located. For the first and second groups; Step S14: Relay chain master private key s and master public key P pub generate: Relay chain in the second group Random selection As the master private key; Master public key P pub Calculate by generating the source and the master private key: P pub =g s ; Step S15, relay chain communication public key (X c ,Y c ) and the communication private key (x c ,y c )calculate: Relay chain selects secret value xc 、r c , but Let the relay chain’s identity be ID c , then yc=rc+sH1(IDc,Yc); Public parameters Secret Parameters SParams = <s,x c ,y c >.

3. The carbon monitoring platform user identity authentication method according to claim 2, characterized in that: Step S2 includes: Step S21: Elect the cross-chain gateway DCCG of the application chain through node voting; Step S22: Use the elected cross-chain gateway DCCG to obtain the corresponding identity identifier to realize application chain registration.

4. The carbon monitoring platform user identity authentication method according to claim 3, characterized in that: Set the initial number of votes m and weight coefficient k for each node in the park application chain, then the voting rights of the node are k*m.

5. A carbon monitoring platform user identity authentication device, characterized in that: include: An acquisition module, used to acquire relay chain parameters, wherein the relay chain parameters include: public parameters and secret parameters; The first registration module is used to enable the cross-chain gateway DCCG of the application chain to register the application chain through the relay chain according to the relay chain parameters; The second registration module is used to enable the user to send a cross-chain user registration request to the relay chain through the registered application chain; The authentication module is used to implement user identity authentication by signcryption and decryption of plaintext messages according to the relay chain parameters.

6. The carbon monitoring platform user identity authentication device according to claim 5, characterized in that: The first registration module includes: The election unit is used to elect the cross-chain gateway DCCG of the application chain through node voting; The registration unit is used to obtain the corresponding identity identifier using the elected cross-chain gateway DCCG to realize application chain registration.

7. A carbon monitoring platform user identity authentication system, characterized in that: include: A memory and a processor, wherein the memory stores a computer program executed by the processor, and when the computer program is executed by the processor, the carbon monitoring platform user identity authentication method as described in any one of claims 1 to 4 is executed.

8. A storage medium, characterized in that: The storage medium stores a computer program, which, when running, executes the carbon monitoring platform user identity authentication method according to any one of claims 1 to 4.

Images