Blockchain-based 5g gateway identity authentication method and device, and storage medium

Abstract

The application provides a blockchain-based 5G gateway identity authentication method, device and storage medium. The method comprises the following steps: a to-be-authenticated 5G gateway acquires a gateway identity token, and generates a gateway private key and a random number array based on a preset encryption algorithm; the to-be-authenticated 5G gateway encrypts the gateway identity token in segments according to the random number array to obtain a check code with overlapping segments; the to-be-authenticated 5G gateway generates an authentication key group according to the gateway identity token; the to-be-authenticated 5G gateway encrypts the check code according to the gateway private key, the random number array and the authentication key group to generate authentication ciphertext, and uploads the authentication key group and the authentication ciphertext to a blockchain; the blockchain performs decryption verification and transaction registration according to the authentication key group and the authentication ciphertext, and after verification, stores corresponding verification records on the chain for evidence, and triggers the 5G core network to issue a session key to the to-be-authenticated 5G gateway.

Description

Technical Field

[0001] This application relates to the field of blockchain technology, and in particular to a blockchain-based 5G gateway identity authentication method, device, and storage medium. Background Technology

[0002] Traditional 5G gateway authentication methods primarily rely on single-factor authentication mechanisms based on passwords or tokens. These methods struggle to provide adequate protection against man-in-the-middle attacks and session hijacking. Attackers can intercept authentication information using various techniques, enabling them to illegally access network resources or steal sensitive data. In high-security scenarios, such as financial transactions, medical data transmission, and industrial control systems, traditional authentication methods are no longer sufficient to meet increasingly stringent security requirements. These scenarios demand extremely high levels of confidentiality, integrity, and availability in communications, necessitating more advanced authentication technologies to address complex and ever-changing network threats. Summary of the Invention

[0003] This application provides a blockchain-based 5G gateway identity authentication method, device, and storage medium to improve the authentication process of highly sensitive 5G gateways, enhance authentication security, and prevent network attacks.

[0004] In a first aspect, embodiments of this application provide a blockchain-based 5G gateway identity authentication method, the method comprising: The 5G gateway to be authenticated obtains the gateway identity token and generates a gateway private key and a random array based on a preset encryption algorithm; The 5G gateway to be authenticated performs segmented encryption on the gateway identity token according to the random array to obtain a verification code with overlapping segments. The 5G gateway to be authenticated generates an authentication key set based on the gateway identity token; The 5G gateway to be authenticated encrypts the verification code based on the gateway private key, the random array, and the authentication key group to generate authentication ciphertext, and uploads the authentication key group and the authentication ciphertext to the blockchain; The blockchain performs decryption verification and transaction registration based on the authentication key group and the authentication ciphertext. After successful verification, the corresponding verification record is stored on the blockchain and the 5G core network is triggered to issue a session key to the 5G gateway to be authenticated.

[0005] Secondly, embodiments of this application provide an electronic device, which includes a memory and a processor; The memory is used to store computer programs; The processor is configured to execute the computer program and, in executing the computer program, implement the blockchain-based 5G gateway identity authentication method as described in any of the embodiments of this application.

[0006] Thirdly, embodiments of this application provide a computer-readable storage medium storing a computer program, which, when executed by a processor, causes the processor to implement the blockchain-based 5G gateway identity authentication method as described in any of the embodiments of this application.

[0007] This application provides a blockchain-based 5G gateway authentication method. The method includes: the 5G gateway to be authenticated obtaining a gateway identity token and generating a gateway private key and a random array based on a preset encryption algorithm; the 5G gateway to be authenticated encrypting the gateway identity token in segments according to the random array to obtain a verification code with overlapping segments; the 5G gateway to be authenticated generating an authentication key group based on the gateway identity token; the 5G gateway to be authenticated encrypting the verification code according to the gateway private key, the random array, and the authentication key group to generate authentication ciphertext, and uploading the authentication key group and authentication ciphertext to the blockchain; the blockchain decrypting and verifying the authentication key group and authentication ciphertext and registering the transaction, and after successful verification, storing the corresponding verification record on the blockchain and triggering the 5G core network to issue a session key to the 5G gateway to be authenticated. In the above method, a gateway private key and a random array are generated based on the gateway identity token. A verification code with overlapping segments is generated using segmented overlapping encryption technology. An authentication key group is generated based on the gateway identity token to achieve multi-factor authentication. After the authentication key group and authentication ciphertext are uploaded to the blockchain, the distributed ledger and consensus mechanism of the blockchain not only ensure the transparency and immutability of the authentication process, but also establish a complete authentication history through on-chain evidence storage, which facilitates subsequent traceability and auditing and enhances communication security. Attached Figure Description

[0008] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0009] Figure 1 This is a schematic flowchart illustrating a blockchain-based 5G gateway identity authentication method provided in an embodiment of this application. Detailed Implementation

[0010] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0011] The flowchart shown in the attached diagram is for illustrative purposes only and does not necessarily include all content and operations / steps, nor does it necessarily have to be performed in the order described. For example, some operations / steps can be broken down, combined, or partially merged, so the actual execution order may change depending on the actual situation.

[0012] It should also be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the scope of the application. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0013] It should also be further understood that the term “and / or” as used in this application specification and the appended claims means any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0014] Please see Figure 1 , Figure 1 This is a schematic flowchart illustrating a blockchain-based 5G gateway identity authentication method provided in an embodiment of this application. Figure 1 As shown, the specific steps of this blockchain-based 5G gateway identity authentication method include: S101-S105.

[0015] S101. The 5G gateway to be authenticated obtains the gateway identity token and generates a gateway private key and a random array based on a preset encryption algorithm.

[0016] The 5G gateway to be authenticated obtains a gateway identity token containing its hardware address, location information, and service capabilities from the network management system, and generates an initial entropy value based on the gateway identity token. This initial entropy value is input into an elliptic curve-based pseudo-random number generator to obtain a cryptographically secure random sequence. Subsequently, the 5G gateway to be authenticated maps the random sequence to a finite field using a hash function, and after modulo operation, obtains the gateway private key and its corresponding identifier. To enhance the randomness of the encryption process, the 5G gateway to be authenticated further inputs the basic gateway private key into a preset expansion function to generate a random array of a preset length. This random array, together with the gateway private key, constitutes the core key material for subsequent authentication. Throughout the entire process, the integrity of the gateway identity token is verified through a digital signature mechanism to ensure that the original data used for key generation has not been tampered with.

[0017] S102. The 5G gateway to be authenticated encrypts the gateway identity token in segments according to a random array to obtain a verification code with overlapping segments.

[0018] For example, the 5G gateway to be authenticated uses a random array and a sliding window algorithm to segment the gateway identity token. Each data segment contains partial information of the original token and overlapping check bits of adjacent segments. The random array is combined with the token data segment using an XOR operation to generate an encrypted segment with redundant checksums. This design ensures that each encrypted segment contains independent identity features and forms a cross-validation structure through overlapping parts. Even if some segments are damaged during transmission, the complete data can still be recovered from the overlapping checksums of other segments. The segmented encrypted checksums serve as the basis for subsequent multi-layered encryption, and their redundancy ensures the authentication process's resistance to interference. Furthermore, gateways that attempt to decrypt excessively can be monitored.

[0019] S103. The 5G gateway to be authenticated generates an authentication key group based on the gateway identity token.

[0020] For example, the 5G gateway to be authenticated performs a hash operation on the gateway hardware address in the gateway identity token, and the resulting hardware hash value is divided into substrings of equal length, forming the basic elements of the shared key set. The 5G gateway to be authenticated encodes its gateway location information into binary data, divides it into multiple data segments using a grouping algorithm, and generates a matching key set after feature extraction. The 5G gateway to be authenticated converts its service capability information into a fixed-length communication parameter string, forming another matching key set. The 5G gateway to be authenticated also randomly generates key elements that meet the requirements of the encryption algorithm and adds them to the matching key sets. The gateway randomly selects one element from each of the shared key set and the multiple matching key sets, and concatenates them sequentially to form an authentication key group. This authentication key group integrates hardware features, location attributes, service capabilities, and a random factor to ensure a unique association with the current gateway identity.

[0021] S104. The 5G gateway to be authenticated encrypts the verification code based on the gateway's private key, a random array, and an authentication key group to generate authentication ciphertext, and uploads the authentication key group and authentication ciphertext to the blockchain.

[0022] For example, the 5G gateway to be authenticated uses its private key to digitally sign the verification code. Combining this with a random array and an authentication key set, it performs multi-layered encryption on the verification code and signature result using a symmetric encryption algorithm to generate authentication ciphertext. During encryption, the random array provides a session-level random factor, while the authentication key set enhances encryption complexity based on the gateway's identity characteristics. After encryption, the gateway encapsulates the authentication key set and authentication ciphertext into a blockchain transaction, adds a timestamp and node identifier, and broadcasts it to the blockchain network via a P2P network. The transaction data is encrypted using the TLS protocol during transmission, ensuring the security of the authentication key set and authentication ciphertext during off-chain transmission.

[0023] S105. The blockchain decrypts and verifies the authentication key group and authentication ciphertext and registers the transaction. After the verification is successful, the corresponding verification record is stored on the blockchain and the 5G core network is triggered to issue a session key to the 5G gateway to be authenticated.

[0024] For example, the management node in the blockchain network first divides the authentication key group into multiple key subsets and distributes them to the corresponding authentication nodes according to a smart routing algorithm. Each authentication node attempts to decrypt the authentication ciphertext using its key subset in sequence. The authentication node that successfully decrypts generates semi-plaintext information and a decryption path, and broadcasts a verification request containing an identity tag to the consensus node. The consensus node, based on the identity tag, calls a reward matrix containing a node capability matrix, a trust score matrix, etc., to form a cross-verification node group. This group independently parses and cross-verifies the semi-plaintext information, obtaining the semi-plaintext parsed data through negotiation. If the parsed data matches the decryption path, the consensus node registers the decrypted identity token to the blockchain, generates an immutable verification record, and triggers the 5G core network authentication module through a smart contract interface to issue a session key to the 5G gateway to be authenticated, completing the entire authentication process.

[0025] This application provides a blockchain-based 5G gateway authentication method. The method includes: the 5G gateway to be authenticated obtaining a gateway identity token and generating a gateway private key and a random array based on a preset encryption algorithm; the 5G gateway to be authenticated encrypting the gateway identity token in segments according to the random array to obtain a verification code with overlapping segments; the 5G gateway to be authenticated generating an authentication key group based on the gateway identity token; the 5G gateway to be authenticated encrypting the verification code according to the gateway private key, the random array, and the authentication key group to generate authentication ciphertext, and uploading the authentication key group and authentication ciphertext to the blockchain; the blockchain decrypting and verifying the authentication key group and authentication ciphertext and registering the transaction, and after successful verification, storing the corresponding verification record on the blockchain and triggering the 5G core network to issue a session key to the 5G gateway to be authenticated. In the above method, a gateway private key and a random array are generated based on the gateway identity token. A verification code with overlapping segments is generated using segmented overlapping encryption technology. An authentication key group is generated based on the gateway identity token to achieve multi-factor authentication. After the authentication key group and authentication ciphertext are uploaded to the blockchain, the distributed ledger and consensus mechanism of the blockchain not only ensure the transparency and immutability of the authentication process, but also establish a complete authentication history through on-chain evidence storage, which facilitates subsequent traceability and auditing and enhances communication security.

[0026] To more clearly illustrate the technical solution of this application, the technical solution of this application will be described below through specific embodiments. It should be noted that the specific embodiments are used to expand the description of the technical solution of this application, and are not intended to limit this application.

[0027] In some embodiments, the 5G gateway to be authenticated obtains a gateway identity token and generates a gateway private key and a random array based on a preset encryption algorithm, including: the 5G gateway to be authenticated obtains a gateway identity token from the network management system, the gateway identity token including: gateway hardware address, gateway location information and service capability information; the 5G gateway to be authenticated generates an initial entropy value based on the gateway identity token and inputs the initial entropy value into an elliptic curve-based pseudo-random number generator to obtain a random sequence; the 5G gateway to be authenticated maps the random sequence to a finite field through a hash function and performs a modulo operation to obtain a gateway private key and a gateway public key; the 5G gateway to be authenticated inputs the gateway private key into a preset expansion function to obtain a random array of a preset length.

[0028] For example, the 5G gateway to be authenticated, based on the acquired gateway identity token, concatenates the hardware address, location information, and service capability information from the gateway identity token into strings, performs a SHA-256 hash operation, and obtains a 256-bit initial entropy value. This entropy value, combined with the microsecond-level value of the system clock at device startup, is used as a seed and input into an elliptic curve-based pseudo-random number generator. This generator undergoes rigorous security authentication and can output a random sequence that conforms to cryptographic security standards. After the random sequence is generated, the 5G gateway to be authenticated maps it to a finite field using a hash function, performs modulo operations, and obtains the gateway private key and gateway public key used for subsequent encryption and signing operations. The gateway private key is securely stored in the device's built-in Hardware Security Module (HSM), and is protected by both physical protection and access control mechanisms to ensure that the private key cannot be illegally read or tampered with.

[0029] To further enhance the security and randomness of the encryption process, the 5G gateway to be authenticated inputs its private key into a preset extended function. This extended function uses "CityIoT-2024" as a fixed salt value, combined with the gateway's hardware serial number, to output a preset-length random array containing four 32-byte elements. This random array will be used in subsequent authentication processes to segment and encrypt the gateway's identity token and generate authentication ciphertext, providing additional security for data transmission and storage.

[0030] This method of generating keys and random arrays based on gateway identity tokens fully utilizes the inherent attributes and real-time status information of the device, effectively preventing the risk of unauthorized device access and data leakage.

[0031] In some embodiments, the gateway identity token includes: gateway hardware address, gateway location information, and service capability information. The 5G gateway to be authenticated generates an authentication key set based on the gateway identity token, including: the 5G gateway to be authenticated performs a hash operation on the gateway hardware address to obtain a hardware hash value, and divides the hardware hash value into multiple substrings of the same length, with each substring serving as an element in a shared key set to generate a shared key set; the 5G gateway to be authenticated encodes the gateway location information into binary data, divides the binary data into multiple data segments using a grouping algorithm, and generates a matching key set based on the multiple data segments; the 5G gateway to be authenticated determines multiple communication parameters based on the service capability information, converts each communication parameter into a fixed-length string element, and constructs a matching key set based on the string elements; the 5G gateway to be authenticated randomly generates multiple key elements that meet the requirements of the encryption algorithm to form a matching key set; the 5G gateway to be authenticated randomly selects an element from each of the shared key set, the matching key set, and the matching key set, and concatenates them in sequence to form the authentication key set.

[0032] For example, the 5G gateway identity authentication system implements a multi-dimensional security verification mechanism based on a gateway identity token. The gateway identity token integrates three types of key information: the gateway hardware address as a physical identifier, gateway location information reflecting the deployment environment, and service capability information describing the gateway's functional characteristics. This design ensures the uniqueness of the gateway identity and the reliability of the verification process.

[0033] The 5G gateway to be authenticated performs an irreversible hash operation on its hardware address, generating a hardware hash value and dividing it into substrings of equal length to form a shared key set. The 5G gateway to be authenticated encodes its location information into binary data, divides it into multiple data segments using a grouping algorithm, and generates a location-related matching key set. This encoding allows for verification with location deviations within a reasonable range, while rejecting requests that significantly deviate from the registered location, effectively preventing identity spoofing after gateway theft. The 5G gateway to be authenticated determines communication parameters based on service capability information, including supported bandwidth, latency sensitivity, and concurrent connection count, converting each parameter into a fixed-length string element to form another matching key set. This is not only used for authentication but also implicitly represents the gateway's service commitment, allowing the verification node to simultaneously assess the authenticity of the gateway's service capabilities. The gateway also randomly generates key elements that meet encryption requirements, forming a third matching key set. These random elements are regenerated in each authentication session to ensure session uniqueness during the authentication process and act as a confusion factor to prevent statistical analysis attacks. The formation of the authentication key set marks the completion of the pre-authentication phase and the beginning of formal authentication. The 5G gateway to be authenticated uses a secure random algorithm to select one element from each of four key sets: a hardware identifier element selected from a shared key set, a location element selected from a matching key set generated from location information, a functional element selected from a matching key set for service capability transformation, and a random element selected from a randomly generated matching key set. These four elements are concatenated in a predefined order to form a composite authentication key set. The concatenation process may involve additional mixing operations, such as interleaving or XOR, further increasing the key complexity. The total length of the authentication key set is typically between 512 and 1024 bits, providing sufficient security strength. This multi-element combination authentication key design ensures that even if one key is compromised, the overall authentication system remains secure. The authentication key set is dynamically generated for each authentication request, and the randomness of the selection process ensures that even authentication requests initiated by the same 5G gateway at different times will use different authentication key sets, effectively preventing replay attacks and man-in-the-middle attacks.

[0034] In some embodiments, the blockchain includes: authentication nodes and consensus nodes. The blockchain performs decryption verification and transaction registration based on an authentication key set and authentication ciphertext, including: the authentication node partially decrypts the authentication ciphertext based on the authentication key set to obtain semi-plaintext information, and broadcasts a verification request to the consensus nodes in the blockchain. The verification request includes the semi-plaintext information and the authentication node's identity tag; the consensus node retrieves a reward matrix from the database based on the identity tag, cross-decrypts the semi-plaintext information based on the reward matrix and the consensus node to obtain a decrypted identity token, and registers the decrypted identity token to the blockchain.

[0035] For example, when the authentication ciphertext is sent to the blockchain network, the authentication node receives the authentication request. The authentication node uses its private key to partially decrypt the ciphertext, obtaining semi-plaintext information. This information contains some of the gateway's identity characteristics, but is insufficient to fully verify its identity. The authentication node broadcasts a verification request to the consensus nodes in the network. This request contains the semi-plaintext information and the authentication node's identity tag. The identity tag serves as a unique identifier for the authentication node in the network, enabling the consensus nodes to accurately identify the source of the request. Upon receiving the verification request, the consensus node retrieves the corresponding reward matrix from the distributed database based on the authentication node's identity tag. The reward matrix, as a special key distribution mechanism, contains different decryption weights and verification reward allocation strategies. Each consensus node performs a cross-decryption algorithm on the semi-plaintext information according to the weights allocated in the reward matrix. During cross-decryption, the consensus nodes apply different decryption functions to process different parts of the semi-plaintext information. Some consensus nodes are responsible for decrypting hardware address information to verify whether it matches the registration record; other nodes focus on decrypting location information to confirm whether the gateway's location is within the allowed range; and still other nodes process service capability information to assess whether the gateway's claimed service capabilities are genuine and trustworthy. After all consensus nodes complete their respective decryption tasks, they share the decryption results through a secure channel. When the matching value of the decryption results reaches a preset consensus threshold, a complete decryption identity token is synthesized. This token is compared with the original gateway identity token. After successful verification, the consensus nodes package the decryption identity token and related transaction information into a block and register it to the blockchain through the PoA (Proof-of-Authority) consensus mechanism. The successfully registered 5G gateway receives a digital certificate issued by the blockchain network and is authorized to access the smart city's network infrastructure.

[0036] By combining blockchain technology with cryptography, this solution achieves efficient, secure, and scalable identity authentication for 5G gateways without introducing a centralized trust institution, providing strong protection for the secure operation of smart city infrastructure.

[0037] In some embodiments, the blockchain further includes: a management node; before the authentication node partially decrypts the authentication ciphertext according to the authentication key group to obtain semi-plaintext information, the method further includes: the management node dividing the authentication key group into multiple different key subsets and distributing each key subset to an authentication node, wherein the number of key subsets is the same as the number of authentication nodes; the management node assigning decryption sequence positions to the authentication nodes based on a preset smart routing algorithm.

[0038] For example, in a blockchain architecture, the management node plays a central role as a security coordinator, responsible for the segmentation and distribution of the authentication key set. The management node uses threshold cryptography to divide the complete authentication key set into multiple structurally different but functionally complementary key subsets. Each key subset contains only the partial information needed for decryption and cannot complete decryption alone. The key subset segmentation follows the principle of maximizing information entropy, ensuring minimal information overlap between subsets while maintaining necessary verification redundancy. The number of key subsets precisely matches the number of authentication nodes, forming a one-to-one distribution relationship, typically between 5 and 9, achieving distributed verification while avoiding excessive communication overhead. The management node uses secure channels for key subset distribution, combined with time-sensitive one-time session keys to protect the transmission process. Based on a preset intelligent routing algorithm, the management node assigns a specific decryption sequence position to each authentication node. This sequence position determines the processing order and scope of responsibility of the authentication node in a portion of the decryption process. The intelligent routing algorithm comprehensively considers the authentication node's computing power, network connection quality, historical reliability, and current load status, dynamically optimizing the decryption task allocation. The allocation strategy for the decryption sequence bit incorporates a random factor to prevent attackers from predicting and exploiting fixed patterns. The authentication node performs partial decryption on the authentication ciphertext based on the allocated sequence bit and a subset of the received keys, generating semi-plaintext fragments. These semi-plaintext fragments are then aggregated in subsequent steps to verify the original authentication request.

[0039] The pre-defined intelligent routing algorithm not only ensures the sequentiality and integrity of the decryption process but also achieves load balancing and fault tolerance. The algorithm incorporates an adaptive mechanism that can detect abnormal responses from authentication nodes and adjust routing strategies in real time. The management node constructs a decentralized authentication network through fine-grained partitioning of key subsets and intelligent allocation of decryption sequence positions; compromise by a single authentication node will not cause the entire authentication system to collapse. This distributed authentication architecture significantly improves the security and reliability of the 5G gateway authentication process, making it particularly suitable for addressing the protection needs of high-value network resources.

[0040] In some embodiments, the authentication node partially decrypts the authentication ciphertext according to the authentication key set to obtain half-plaintext information, and broadcasts a verification request to the consensus nodes in the blockchain. This includes: the authentication node corresponding to the decryption sequence position attempts to decrypt the authentication ciphertext according to the key subset; if the authentication node corresponding to the decryption sequence position can partially decrypt the authentication ciphertext, it generates half-plaintext information and records the decryption path; if the authentication node corresponding to the decryption sequence position cannot decrypt the authentication ciphertext, it transmits the authentication ciphertext to the authentication node one position after the decryption sequence position; the authentication node that successfully decrypts calculates its contribution based on the decryption path and constructs a verification proof, generates a verification request from the half-plaintext information, the verification proof, and the identity tag, and broadcasts the verification request to the consensus nodes.

[0041] For example, the authentication ciphertext employs a multi-layered nested encryption structure, requiring collaboration from multiple authentication nodes to fully decrypt. This design enhances the system's security and resistance to attacks. When the authentication node corresponding to the decryption sequence receives the authentication ciphertext, it attempts to decrypt it using a subset of its own keys. This subset consists of a portion of key elements allocated to the authentication node from the network's key repository, typically containing 10 to 15 different key fragments. The decryption process uses a progressive method. The authentication node first determines whether the ciphertext matches its own key subset. If they match, it performs partial decryption, generating half-plaintext information. If they do not match, the authentication ciphertext is transmitted completely to the next authentication node in the decryption sequence, forming a relay-style decryption chain. The half-plaintext information is an intermediate result after partial decryption, containing some readable data and the remaining undecrypted portion, providing crucial clues for subsequent verification. The decryption path records the transmission history of the ciphertext from the initial node to the current node, including the identifiers of the participating nodes, timestamps, and decryption depth. This information forms the basis for contribution calculation.

[0042] Contribution reflects the workload and importance of each authentication node in the decryption process, and is comprehensively evaluated based on three dimensions: decryption difficulty, decryption speed, and decryption volume. Decryption difficulty is determined by the complexity of the ciphertext; higher complexity results in greater contribution. Decryption speed measures the node's processing efficiency; faster speed leads to greater contribution. Decryption volume is the amount of data successfully decrypted by the node; a larger volume indicates greater contribution. The verification proof is a mathematical proof generated by a successfully decrypted node, proving that it has indeed completed the decryption work and that the result is correct and reliable. It includes a zero-knowledge proof of the decryption process, the hash value of the decryption result, and the node's digital signature. The identity tag is the unique identifier of the authentication node, composed of the node's public key address, reputation score, and network location code, ensuring the traceability of the verification request's origin. The verification request integrates the semi-plaintext information, verification proof, and identity tag into a structured data packet, which is sent to the consensus nodes in the blockchain network via a broadcast mechanism. Consensus nodes are special nodes in the blockchain network responsible for reaching consensus. After receiving the verification request from the authentication node, they perform a legality check on the semi-plaintext information, verify the correctness of the proof, and confirm the authenticity of the identity tag. If the verification passes, the consensus node records the result in the candidate block; if the verification fails, the verification request is rejected and the sending node may be subject to reputation penalties.

[0043] The aforementioned authentication process employs a distributed collaborative model, requiring multiple authentication nodes to participate in decryption. This prevents single-point-of-control risks, ensures a smooth process through an ordered decryption chain, avoids resource waste, and enhances system fault tolerance through a relay-style decryption mechanism, allowing authentication to continue even if some nodes fail. Contribution calculation and verification prove that incentivize nodes to participate honestly makes the authentication process transparent and tamper-proof. All records are auditable and verifiable, guaranteeing the system's fairness and accountability.

[0044] In some embodiments, the reward matrix includes: a node capability matrix, a node cooperation matrix, a trust scoring matrix, and a weight allocation matrix. A consensus node retrieves the reward matrix from the database based on its identity label. The consensus node then cross-decrypts the semi-plaintext information using the reward matrix and the information itself to obtain a decrypted identity token. This process includes: consensus nodes forming a cross-verification node group based on the node capability matrix; consensus nodes in the cross-verification node group independently parsing repeated segments in the semi-plaintext information based on the node capability matrix to obtain intermediate verification data, which includes: a decryption strategy and verification basis; consensus nodes sending the intermediate verification data to each other, and based on the trust scoring mechanism in the reward matrix, cross-verifying and negotiating the decryption strategies and verification basis submitted by other consensus nodes to obtain semi-plaintext parsed data; and consensus nodes matching the semi-plaintext parsed data with the decryption path in the verification proof submitted by the authentication node. If a match is found, the semi-plaintext parsed data is converted into a decrypted identity token.

[0045] For example, the reward matrix, as a core component of the blockchain consensus mechanism, integrates information from four key dimensions: the node capability matrix records the hardware indicators of each consensus node, such as computing power, storage capacity, and network bandwidth, providing an objective basis for the formation of cross-validation node groups; the node collaboration matrix stores historical collaboration records between nodes, including collaboration frequency, success rate, and response time, reflecting the collaboration efficiency between nodes; the trust scoring matrix, built based on zero-knowledge proofs and behavioral analysis, assigns dynamic trust values ​​to each pair of nodes, supporting trust decisions during the decryption process; and the weight allocation matrix dynamically adjusts resource allocation ratios based on the node's contribution and reliability in the network, optimizing the overall system performance. These four sub-matrices together constitute the complete reward matrix, stored in a distributed database and associated with node identity tags, ensuring that only authorized nodes can access and use it. Consensus nodes retrieve the corresponding reward matrix from the database using their identity tags as indexes; this process employs a secure multi-party computation protocol to prevent information leakage.

[0046] The node capability matrix is ​​constructed based on a resource proof mechanism. It periodically tests and verifies the resource availability claimed by nodes to prevent false capability claims. Consensus nodes, based on the multi-dimensional scores in the node capability matrix, form cross-validation node groups according to the principle of optimal complementarity. Each group typically contains 5-7 nodes to ensure sufficient redundancy and verification efficiency. The cross-validation node groups adopt a ring topology, with each node establishing a direct communication channel with its two adjacent nodes for efficient message transmission. The formation process considers geographical distribution factors to avoid nodes being concentrated in a single area, improving the system's resilience to regional network failures. As a whole, the cross-validation node groups assume the distributed responsibility for decrypting semi-plaintext information. Each node works independently but verifies the results with each other, achieving a balance between power distribution and efficiency.

[0047] Each consensus node in the cross-validation node group independently parses the repetitive segments in the semi-plaintext information. These repetitive segments are specially encoded and contain redundant information required for complete decryption. The parsing process employs homomorphic encryption, allowing nodes to verify the correctness of the information without complete decryption. Each consensus node selects the optimal decryption algorithm path from the node capability matrix based on its own computational characteristics, generating intermediate verification data. This intermediate verification data contains two key components: a decryption strategy detailing the algorithm selection and parameter settings used by the node; and verification criteria including checksums, hash chains, and zero-knowledge proofs, providing a basis for verification by other nodes. This independent parsing mechanism ensures that even if some nodes are attacked or malfunction, the system can still decrypt correctly, improving overall security and reliability.

[0048] The exchange of intermediate verification data among consensus nodes constitutes the core of cross-validation. Each node broadcasts its generated intermediate verification data to other members of the cross-validation node group through a secure channel, employing a multi-round consensus protocol to prevent tampering during data transmission. After the data exchange is completed, each consensus node comprehensively evaluates the received decryption strategies and verification evidence based on the trust scoring mechanism in the reward matrix. The trust scoring mechanism combines historical performance and current behavior analysis to assign a credibility weight to each submitted data. The evaluation process uses a Byzantine fault-tolerant algorithm, which can identify and isolate malicious or erroneous data submissions. Through multiple rounds of negotiation, nodes vote on differing decryption strategies to form the optimal consensus solution. For conflicting parts in the verification evidence, nodes determine authenticity and make corrections through difference comparison and evidence tracing. After cross-validation and negotiation correction, the cross-validation node group generates highly consistent semi-plaintext parsed data, laying the foundation for decryption.

[0049] During the previous authentication process, the authentication node generates and submits a verification proof containing the decryption path. This path describes the transformation process from raw data to semi-plaintext and the verification points. The consensus node precisely matches the semi-plaintext parsed data obtained from cross-validation with this decryption path to verify their consistency. The matching process uses zero-knowledge proof technology, which can verify correctness without exposing the complete decryption content. If the match is successful, it indicates that the semi-plaintext parsed data meets the expected decryption result, and the consensus node then converts it into a complete decryption identity token. The conversion process applies threshold signature technology, requiring more than a predetermined threshold of nodes in the cross-validation node group to sign for confirmation, preventing single points of control. The generated decryption identity token contains complete identity information and permission definitions, providing a basis for subsequent access control and resource allocation.

[0050] This application provides an electronic device, which includes a memory and a processor; the memory is used to store a computer program; the processor is used to execute the computer program and, when executing the computer program, implement the blockchain-based 5G gateway identity authentication method as described in any of the embodiments of this application.

[0051] This application provides a computer-readable storage medium storing a computer program. When the computer program is executed by a processor, it enables the processor to implement a blockchain-based 5G gateway identity authentication method as described in any of the embodiments of this application.

[0052] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A blockchain-based 5G gateway identity authentication method, characterized in that, The blockchain includes: authentication nodes, consensus nodes, and management nodes; the method includes: The 5G gateway to be authenticated obtains the gateway identity token and generates a gateway private key and a random array based on a preset encryption algorithm; The 5G gateway to be authenticated performs segmented encryption on the gateway identity token according to the random array to obtain a verification code with overlapping segments. The 5G gateway to be authenticated generates an authentication key set based on the gateway identity token; The 5G gateway to be authenticated encrypts the verification code based on the gateway private key, the random array, and the authentication key group to generate authentication ciphertext, and uploads the authentication key group and the authentication ciphertext to the blockchain; The management node divides the authentication key group into multiple distinct key subsets and distributes each key subset to one authentication node, wherein the number of key subsets is the same as the number of authentication nodes. The management node assigns decryption sequence positions to the authentication nodes based on a preset intelligent routing algorithm. The authentication node corresponding to each decryption sequence position attempts to decrypt the authentication ciphertext using the key subset. If the authentication node corresponding to the decryption sequence position can partially decrypt the authentication ciphertext, it generates semi-plaintext information and records the decryption path. If the authentication node corresponding to the decryption sequence position cannot decrypt the authentication ciphertext, it transmits the authentication ciphertext to the authentication node one position after the decryption sequence position. The authentication node that successfully decrypts the data calculates its contribution based on the decryption path and constructs a verification proof. It then generates a verification request using the semi-plaintext information, the verification proof, and the identity tag, and broadcasts the verification request to the consensus node. The verification request includes the semi-plaintext information and the authentication node's identity tag. The consensus node retrieves a reward matrix from the database based on the identity tag, cross-decrypts the semi-plaintext information using the reward matrix and the consensus node's own data, obtains a decrypted identity token, registers the decrypted identity token to the blockchain, and, upon successful verification, uploads the corresponding verification record to the blockchain for storage, triggering the 5G core network to issue a session key to the 5G gateway to be authenticated.

2. The blockchain-based 5G gateway identity authentication method as described in claim 1, characterized in that, The 5G gateway to be authenticated obtains a gateway identity token and generates a gateway private key and a random array based on a preset encryption algorithm, including: The 5G gateway to be authenticated obtains a gateway identity token from the network management system. The gateway identity token includes: gateway hardware address, gateway location information, and service capability information. The 5G gateway to be authenticated generates an initial entropy value based on the gateway identity token, and inputs the initial entropy value into an elliptic curve-based pseudo-random number generator to obtain a random sequence. The 5G gateway to be authenticated maps the random sequence to a finite field using a hash function and performs a modulo operation to obtain the gateway private key and gateway public key. The 5G gateway to be authenticated inputs the gateway private key into a preset extension function to obtain a random array of preset length.

3. The blockchain-based 5G gateway identity authentication method as described in claim 1, characterized in that, The gateway identity token includes: gateway hardware address, gateway location information, and service capability information. The 5G gateway to be authenticated generates an authentication key set based on the gateway identity token, including: The 5G gateway to be authenticated performs a hash operation on the gateway hardware address to obtain a hardware hash value, and divides the hardware hash value into multiple substrings of the same length. Each substring is used as an element in the shared key set to generate a shared key set. The 5G gateway to be authenticated encodes the gateway location information into binary data, divides the binary data into multiple data segments using a grouping algorithm, and generates a matching key set based on the multiple data segments; The 5G gateway to be authenticated determines multiple communication parameters based on the service capability information, converts each communication parameter into a fixed-length string element, and constructs a matching key set based on the string elements. The 5G gateway to be authenticated randomly generates multiple key elements to form a matching key set; The 5G gateway to be authenticated randomly selects one element from each of the shared key set, matching key set, matching key set, and matching key set, and concatenates them in sequence to form an authentication key group.

4. The blockchain-based 5G gateway identity authentication method as described in claim 1, characterized in that, The reward matrix includes: a node capability matrix, a node collaboration matrix, a trust scoring matrix, and a weight allocation matrix. The consensus node retrieves the reward matrix from the database based on the identity tag, and cross-decrypts the semi-plaintext information using the reward matrix and the consensus node to obtain a decrypted identity token, including: The consensus node forms a cross-validation node group based on the node capability matrix; The consensus node in the cross-validation node group independently parses the repeated fragments in the semi-plaintext information according to the node capability matrix to obtain intermediate verification data, which includes: decryption strategy and verification basis. The consensus nodes send the intermediate verification data to each other, and based on the trust scoring mechanism in the reward matrix, cross-verify and negotiate the decryption strategies and verification criteria submitted by other consensus nodes to obtain semi-plaintext parsing data. The consensus node matches the semi-plaintext parsed data with the decryption path in the verification proof submitted by the authentication node. If the match is consistent, the semi-plaintext parsed data is converted into a decryption identity token.

5. An electronic device, characterized in that, The electronic device includes a memory and a processor; The memory is used to store computer programs; The processor is configured to execute the computer program and, in executing the computer program, implement the blockchain-based 5G gateway identity authentication method as described in any one of claims 1 to 4.

6. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, causes the processor to implement the blockchain-based 5G gateway identity authentication method as described in any one of claims 1 to 4.

Images