Distributed certificateless digital identity authentication method oriented to meta universe

Abstract

The invention discloses a meta-universe-oriented distributed certificateless digital identity authentication method, and relates to the technical field of identity authentication, and the method comprises the steps: taking a preset number of user terminals as a current authentication batch, receiving an identity authentication request initiated by each user terminal in the current authentication batch, distributing a target authentication committee for the current authentication batch according to the identity authentication request; obtaining a zero-knowledge proof pre-generated by each user terminal in the current authentication batch, and obtaining a preset number of zero-knowledge proof; and verifying the preset number of zero-knowledge certificates by adopting an on-chain and off-chain cooperative verification mechanism, and judging that the identity authentication of the plurality of user terminals in the current authentication batch is successful after the verification is successful. According to the method, a distributed certificateless digital identity authentication system is systematically constructed, and a credible, efficient and user-controllable identity authentication basis is provided for large-scale application of the universe.

Description

Technical Field

[0001] This application relates to the field of identity verification technology, and in particular to a distributed certificateless digital identity authentication method oriented towards the metaverse. Background Technology

[0002] With the rapid rise of the metaverse concept and the in-depth development of immersive internet applications, digital identity is no longer merely a credential for users to access virtual spaces, but has become the core carrier of users' behavioral patterns, social relationships, digital assets, and various rights in the virtual world. Against this backdrop, building a secure, efficient, and reliable digital identity authentication system has become a key infrastructure supporting the stable operation and sustainable development of the metaverse.

[0003] However, current mainstream digital identity authentication schemes are still primarily based on traditional Public Key Infrastructure (PKI). This system heavily relies on centralized Certificate Authorities (CAs) for identity binding and certificate management, resulting in inherent drawbacks such as complex certificate lifecycle management, high maintenance costs, and susceptibility to single points of failure and security bottlenecks. In the complex environment of massive user access and high-concurrency interaction pre-defined by Metaverse, traditional centralized authentication models face severe challenges in terms of system performance, scalability, and robustness.

[0004] Meanwhile, typical application scenarios in the metaverse, such as virtual social networking, digital asset trading, and anonymous voting, place far higher demands on user privacy protection than those of the traditional internet. Many existing identity authentication mechanisms often require users to disclose plaintext identity information or excessive attributes during the verification process, making it difficult to meet the needs of user anonymity, minimal data disclosure, and controllable privacy protection in the metaverse environment. Although cryptographic techniques such as zero-knowledge proofs provide a theoretical possibility for achieving highly private authentication with anonymity, their inherent problems of high computational overhead and long verification times, when directly applied to large-scale concurrent authentication scenarios in the metaverse, lead to a significant decrease in overall system throughput, creating new performance bottlenecks. Summary of the Invention

[0005] The purpose of this application is to provide a distributed, certificate-free digital identity authentication method for the metaverse, which can provide a trusted, efficient and user-controllable identity authentication foundation for the large-scale application of the metaverse.

[0006] To achieve the above objectives, this application provides the following solution: Firstly, this application provides a distributed certificateless digital identity authentication method for the metaverse, the distributed certificateless digital identity authentication method for the metaverse including: A preset number of user terminals are designated as the current authentication batch. An identity authentication request initiated by each user terminal in the current authentication batch is received. A target authentication committee is assigned to the current authentication batch according to the identity authentication request so that the preset number of user terminals can share the target authentication committee. Obtain the pre-generated zero-knowledge proofs for each user terminal within the current authentication batch, and obtain a preset number of zero-knowledge proofs; An on-chain and off-chain collaborative verification mechanism is used to verify the preset number of zero-knowledge proofs. Upon successful verification, the identities of multiple user terminals within the current authentication batch are determined to have been successfully authenticated; wherein: The on-chain and off-chain collaborative verification mechanism is used to verify the preset number of zero-knowledge proofs. Upon successful verification, it is determined that the identities of multiple user terminals within the current authentication batch have been successfully authenticated, including: In an off-chain environment, the preset number of zero-knowledge proofs are aggregated into an aggregate proof, and the verification operation of the aggregate proof is performed to obtain the verification result of the aggregate proof. In the on-chain environment, the verification operation of executing the aggregate proof is verified based on the verification result of the aggregate proof. After successful verification, the aggregate proof is sent to the target certification committee. In the on-chain environment, the target certification committee performs threshold verification on the aggregated proof after successful verification. If the threshold verification is successful, it is determined that the identities of multiple user terminals in the current certification batch have been successfully authenticated.

[0007] Secondly, this application provides a distributed certificateless digital identity authentication system for the metaverse, comprising a coordination routing layer and a distributed authentication core layer, wherein the distributed authentication core layer comprises a target authentication committee in an on-chain environment and aggregation nodes in an off-chain environment; wherein: The coordination routing layer is used to select a preset number of user terminals as the current authentication batch, receive the identity authentication request initiated by each user terminal in the current authentication batch, and allocate a target authentication committee to the current authentication batch according to the identity authentication request so that the preset number of user terminals can share the target authentication committee. The distributed authentication core layer is used to obtain the pre-generated zero-knowledge proofs of each user terminal in the current authentication batch, thus obtaining a preset number of zero-knowledge proofs; it is also used to verify the preset number of zero-knowledge proofs using an on-chain and off-chain collaborative verification mechanism, and upon successful verification, determine that the identities of multiple user terminals in the current authentication batch have been successfully authenticated; wherein: An aggregation node is used to aggregate the preset number of zero-knowledge proofs into an aggregate proof in an off-chain environment, and to perform the verification operation of the aggregate proof to obtain the verification result of the aggregate proof. The target certification committee is used to verify the verification operation of the aggregated proof through a smart contract in an on-chain environment, and obtain the aggregated proof after successful verification; it is also used to perform threshold verification on the aggregated proof after successful verification through the target certification committee, and determine that the identity authentication of multiple user terminals in the current certification batch is successful after the threshold verification is successful.

[0008] Thirdly, this application provides a computer device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the distributed certificateless digital identity authentication method for the metaverse described above.

[0009] Fourthly, this application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the distributed certificateless digital identity authentication method for the metaverse described above.

[0010] Fifthly, this application provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the distributed certificateless digital identity authentication method for the metaverse described above.

[0011] According to the specific embodiments provided in this application, the following technical effects are disclosed: This application provides a distributed, certificate-free digital identity authentication method for the metaverse. First, the system receives identity authentication requests and zero-knowledge proofs from each user terminal within the current authentication batch and assigns a target authentication committee to the batch. Second, it employs an on-chain / off-chain collaborative verification mechanism to verify the preset number of zero-knowledge proofs, aggregating them into an aggregated proof. This aggregated proof is then verified off-chain. By identifying identical computational structures in multiple zero-knowledge proofs, the system extracts and merges identical cryptographic operations generated during concurrent authentication due to identical proof circuits. Repeated computations are executed only once, generating a compact aggregated proof. This significantly reduces overall computation, thus systematically constructing a distributed, certificate-free digital identity authentication system. The system innovatively integrates aggregated verification with on-chain / off-chain collaborative technology to overcome performance limitations. Overall, it addresses the shortcomings of existing technologies in terms of management complexity, privacy, and system performance, providing a reliable, efficient, and user-controllable identity authentication foundation for the large-scale application of the metaverse. Attached Figure Description

[0012] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0013] Figure 1 This is a flowchart of a distributed certificateless digital identity authentication method for the metaverse in one embodiment of this application; Figure 2 This is a flowchart illustrating how an on-chain and off-chain collaborative verification mechanism is used in one embodiment of this application to verify the preset number of zero-knowledge proofs, and how the identity authentication of multiple user terminals in the current authentication batch is determined to be successful after successful verification. Figure 3 This is a system block diagram of a distributed certificateless digital identity authentication system for the metaverse provided in one embodiment of this application. Detailed Implementation

[0014] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0015] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0016] like Figures 1 to 2 As shown, this application provides a distributed certificateless digital identity authentication method for the metaverse, including the following steps S101 to S103. Wherein: Step S101: Take a preset number of user terminals as the current authentication batch, receive the identity authentication request initiated by each user terminal in the current authentication batch, and assign a target authentication committee to the current authentication batch according to the identity authentication request so that the preset number of user terminals can share the target authentication committee.

[0017] As one embodiment of this application, step S101 specifically includes steps S201 to S202. Wherein: Step S201: Receive identity authentication requests initiated by each user terminal in the current authentication batch. The identity authentication request includes authentication context information and a user anonymity identifier. In this embodiment, the metaverse user is the user entity of the user terminal, and the user terminal, as the certifier, initiates an identity authentication request to the authentication system and provides a zero-knowledge proof for identity authentication. This application adopts a layered collaborative authentication architecture to construct the authentication system, such as... Figure 3 As shown, the authentication system acts as the verifier, verifying the zero-knowledge proof provided by the user terminal.

[0018] Step S202: Based on the load balancing strategy and the authentication context information, select one of the multiple authentication committees as the target authentication committee. Then, intelligently distribute the authentication requests initiated by each user terminal in the current authentication batch to the target authentication committee using a routing function, allowing a preset number of user terminals to share the target authentication committee. The load balancing strategy is a preset multi-dimensional rule that intelligently analyzes multiple authentication committees based on multi-dimensional selection factors, including real-time load conditions, request priority, and user geographical location, to distribute authentication requests to the authentication committee that meets the multi-dimensional rules; this selected authentication committee is the target authentication committee.

[0019] Step S102: Obtain the pre-generated zero-knowledge proofs of each user terminal in the current authentication batch to obtain a preset number of zero-knowledge proofs; after receiving the identity authentication request initiated by the preset number of user terminals, the authentication system then obtains the pre-generated zero-knowledge proofs of each user terminal in the current authentication batch.

[0020] Step S103: The preset number of zero-knowledge proofs are verified using an on-chain / off-chain collaborative verification mechanism. Upon successful verification, the identities of multiple user terminals within the current authentication batch are determined to be successfully authenticated. This specifically includes the following steps S301 to S303. Wherein: Step S301: In an off-chain environment, the preset number of zero-knowledge proofs are aggregated into an aggregate proof, and the verification operation of the aggregate proof is performed to obtain the verification result of the aggregate proof.

[0021] As one embodiment of this application, in step S301, the step of aggregating the preset number of zero-knowledge proofs into aggregated proofs in an off-chain environment specifically includes: in an off-chain environment, aggregating the preset number of zero-knowledge proofs into aggregated proofs according to the LinkG16 aggregation algorithm; wherein, the LinkG16 aggregation algorithm is: ; In the formula: Indicates the first A zero-knowledge proof, Representing zero-knowledge proof Public reference strings; This indicates the preset quantity, i.e. A zero-knowledge proof; Represented as A shared input for zero-knowledge proofs; Indicates the number of shared inputs.

[0022] As a further embodiment of this application, the step of aggregating the preset number of zero-knowledge proofs into aggregated proofs according to the LinkG16 aggregation algorithm includes the following steps S401 to S404. Wherein: Step S401, for the first Zero-knowledge proof Shared input Promise to , In the formula, Indicates the first One random blinding factor; and Indicates the first A public reference string Elements in; Step S402: Generate a proof Prove all the promises From the same shared input Calculated; Step S403: Zero-knowledge proof Each group element in the dataset is randomized to obtain... The randomization process specifically includes: Random selection ( (For random numbers), calculate: ; ; ; Step S404, according to the commitment and Generate aggregate proof .

[0023] To address the computational bottleneck in the zero-knowledge proof verification process, this application implements steps S401 to S404. By running the LinkG16 aggregation algorithm, it identifies the same computational structure in multiple zero-knowledge proofs, extracts and merges the completely identical cryptographic operations generated by the same proof circuit during concurrent authentication, and executes the repeated computation only once to generate a compact aggregated proof, significantly reducing the overall computation.

[0024] As one embodiment of this application, step S301, which involves performing the verification operation of the aggregate proof to obtain the verification result of the aggregate proof, includes: In an off-chain environment, the aggregated proof is verified using an aggregated verification algorithm to obtain the verification result of the aggregated proof; wherein: The verification logic of the aggregation verification algorithm is to check the bilinear mapping equation for... arrive Whether it holds true; the verification result of the aggregation proof includes: when the bilinear mapping equation is true for... arrive If both conditions are met, the aggregated proof is deemed to have been successfully verified; otherwise, the aggregated proof is deemed to have failed to be verified. The bilinear mapping equation is as follows: ; In the formula: It is a bilinear pairing function. , , , , Indicates the first Common parameters of each circuit.

[0025] Step S302: In the on-chain environment, the verification operation of the aggregate proof is verified based on the verification result of the aggregate proof. After successful verification, the aggregate proof is sent to the target certification committee. This specifically includes the following steps S501 to S503: Step S501: Obtain the verification result of the aggregated proof in the off-chain environment, and calculate the hash commitment of the verification result; the verification result is a structure that includes at least: whether the authentication passed, the user's anonymity identifier, the identity of the authentication committee that processed the request, the timestamp of the verification completion, and the identifier of the zero-knowledge proof circuit verified; specifically, the hash commitment is: ; In the formula, isValid indicates whether the aggregate proof verification passed, userPseudoID indicates the user's anonymous identifier, committeeID ​​indicates the identity of the target certification committee, committeeID ​​indicates the timestamp of verification completion, and circuitHash indicates the circuit identifier of the aggregate proof being verified.

[0026] Step S502: Using the generation structure of the aggregated proof and the hash commitment, generate a proof. The generation structure includes a circuit for generating the aggregated proof and its internal execution process; wherein, the proof Verification operations are used to verify the execution of the aggregated proof.

[0027] Step S503: Submit the hash commitment to a smart contract on the blockchain, whereby the smart contract verifies the proof. Upon successful verification, the aggregated proof is sent to the target certification committee, and the verification event and hash commitment are recorded on the blockchain.

[0028] Understandably, on-chain smart contracts do not directly verify complex zero-knowledge proofs, but rather verify a concise zero-knowledge proof that "the verification operation was correctly executed in the off-chain environment." After completing verification, the off-chain execution environment uses the validator circuit and its internal execution process, along with the hash commitment, to generate a proof. This proves that it has indeed correctly executed the verification logic. Smart contracts on the blockchain only need to verify... This proof itself. Once Once the verification is successful, the smart contract is convinced that the off-chain verification result is credible, and then permanently records the successful verification event and hash commitment on the blockchain.

[0029] Step S303: In the on-chain environment, the target certification committee performs threshold verification on the aggregated proof after successful verification. After successful threshold verification, it is determined that the identity authentication of multiple user terminals in the current certification batch is successful.

[0030] By implementing steps S301 to S303 above, this application adopts a hybrid architecture of on-chain and off-chain collaboration, placing a large amount of complex verification logic off-chain for execution, while only confirming and storing key verification results on-chain. This significantly improves the overall authentication throughput of the system while ensuring security and trustworthiness, meeting the high requirements for identity authentication efficiency in the metaverse scenario.

[0031] In step S303 of this application, the target certification committee is composed of... The committee consists of several member nodes; in the on-chain environment, the target certification committee performs threshold verification on the aggregated proof after successful verification, including: The Each committee member node jointly generates a threshold public key using a distributed key generation protocol. and the threshold private key share corresponding to each committee member node. ;in, Each threshold private key share collaboratively completes threshold verification of the aggregated proof after successful verification through a threshold signature protocol; wherein, the distributed key generation protocol is: For committee member nodes Choose a random Polynomial of degree: ; In the formula: For committee member nodes The private key value; The committee member nodes Calculate and broadcast commitments to the polynomial: In the formula, This represents the generator in elliptic curve cryptography.

[0032] The committee member nodes To committee member nodes Secretly send a portion of the share For each member node in the target certification committee, its private key share is TSK, and a partial share... The private key share is a portion of the TSK; when committee member nodes pass Collect other nodes Towards The share sent is sji When the sum is equal to the sum, the committee member nodes can be obtained. Private key share .

[0033] The committee member nodes Using the committee member nodes The commitment to verify the received share is verified using the following formula: In the formula, Indicates the first Each committee member node.

[0034] Upon successful verification, the threshold public key and the threshold private key share corresponding to each committee member node are generated, wherein: The threshold public key is ; The threshold private key share corresponding to each committee member node is , That is, with committee member nodes The corresponding threshold private key share. Once the threshold public key and the threshold private key share are generated... Each committee member node can use Lagrange interpolation to collaboratively complete threshold signatures, that is, to perform threshold verification on the aggregated proof.

[0035] By implementing step S303 above, the present invention constructs an underlying authentication network composed of multiple independent authentication committees. Each committee consists of a group of nodes configured based on a threshold cryptography scheme. Through a distributed consensus mechanism, they jointly take responsibility for the zero-knowledge proof verification work of a specific user, thereby achieving effective distribution of authentication responsibility and dynamic balancing of system load.

[0036] In an exemplary embodiment of this application, step S102, the method for pre-generating the zero-knowledge proof by the user terminal, includes the following steps S601 to S602. Wherein: Step S601: The user terminal generates a public-private key pair locally. And form a statement based on the identity attributes to be proven; whereby the private key is The public key is ; Step S602: The user terminal, based on the public-private key pair... In addition to common parameters, the zero-knowledge proof is generated according to the zero-knowledge proof generation algorithm. The zero-knowledge proof Used to prove the existence of the public-private key pair Or the statement to be proved, which constitutes the aforementioned statement. For example, the statement to be proved is "the user holds..." satisfy "or "declared true" In one application scenario, the identity attribute to be proved is "age greater than 18 years old", and the statement to be proved as "user age > 18" can be represented as "user age > 18".

[0037] As a further embodiment of this application, the zero-knowledge proof generation algorithm is the Groth16 zero-knowledge proof algorithm. In step S602, the zero-knowledge proof is generated according to the zero-knowledge proof generation algorithm. This includes the following steps S701 to S704. Wherein: Step S701: The public and private key pair Or the statement to be proved, which is constituted by the above statement, is converted into an arithmetic circuit; Step S702: Convert the arithmetic circuit into a first-order constraint system (R1CS constraint system), wherein the first-order constraint system (R1CS constraint system) is as follows: ; Where: vector Represents the witness vector, witness vector It includes both public inputs / inputs and secret intermediate variables and inputs; Represents the constraint matrix; Indicates the product of terms; Step S703: Map the first-order constraint system (R1CS constraint system) to a quadratic arithmetic procedure to obtain an equation equivalent to the first-order constraint system (R1CS constraint system), the equation being: ; In the formula: Constraint matrix The column number represents the witness vector. Included One variable; Represents the constraint matrix The List, ; Represents the witness vector The first in One variable; Represents an equivalent polynomial; , Indicates the first One Lagrange interpolation base point ; Constraint matrix The row number represents One constraint; , as well as All are polynomials, representing all base points respectively. The values ​​on form the constraint matrix. The List.

[0038] In step S703 of this application, in order to efficiently process the first-order constraint system (R1CS constraint system), this embodiment converts it into a quadratic arithmetic program (QAP). The quadratic arithmetic program (QAP) encodes the constraints using polynomials, making it possible to perform a concise proof using the properties of polynomials.

[0039] In the specific mapping process, for each constraint matrix In this embodiment, a polynomial is constructed for each column of each constraint matrix, as follows: , as well as Assuming there is Constraints and One variable, choose A different point As a base point for Lagrange interpolation.

[0040] For example, for constraint matrices Define a set of polynomials That is, polynomial. At all base points The values ​​on form the matrix The Similarly, construct a polynomial. as well as At this point, the constraints of R1CS At each base point The above holds true if there exists a polynomial. This makes the above equation true.

[0041] Step S704: Generate the zero-knowledge proof based on the equation. The zero-knowledge proof From group elements , , Composition, in which: ; ; ; ; In the formula: This indicates the secret parameters generated by the trusted settings; and In the bilinear mapping group and Elements on; Indicates the blinding factor; .

[0042] Zero-knowledge proof After generation, the verifier performs verification using bilinear pairing equations, thus validating this zero-knowledge proof. User holding satisfy And declare it to be true, without disclosing... And the specific values ​​of the user identity attributes.

[0043] By implementing steps S701 to S704 above, this invention employs a certificateless authentication mechanism based on non-interactive zero-knowledge proofs. Users do not need to rely on traditional digital certificate systems, thus significantly reducing the complexity and maintenance costs of identity management. During the authentication process, users generate zero-knowledge proofs regarding their private key holdings or attribute satisfaction, achieving identity verification without disclosing any sensitive information, effectively supporting the privacy principles of "minimum disclosure" and "selective disclosure." This mechanism, combined with threshold cryptography, further decentralizes authentication power, enhancing the system's security and resistance to attacks.

[0044] In summary, by implementing steps S101 to S103, this invention systematically constructs a distributed, certificate-free digital identity authentication system to meet the comprehensive needs of metaverse digital identity authentication in terms of decentralization, high security, strong privacy, high performance, and high scalability. It improves system scalability and availability by introducing a layered collaborative authentication architecture, strengthens privacy protection and simplifies management processes by employing a certificate-free mechanism combined with zero-knowledge proofs, and innovatively integrates aggregate verification and on-chain / off-chain collaborative technologies to overcome performance limitations. This comprehensively addresses the shortcomings of existing technologies in terms of management complexity, privacy, and system performance, providing a reliable, efficient, and user-controllable identity authentication foundation for the large-scale application of metaverse.

[0045] like Figure 3 As shown, based on the same inventive concept, this application also provides a distributed certificateless digital identity authentication system for the metaverse. This distributed certificateless digital identity authentication system for the metaverse includes a coordination routing layer and a distributed authentication core layer. The distributed authentication core layer includes a target authentication committee in an on-chain environment and aggregation nodes in an off-chain environment; wherein: The coordination routing layer is used to select a preset number of user terminals as the current authentication batch, receive the identity authentication request initiated by each user terminal in the current authentication batch, and allocate a target authentication committee to the current authentication batch according to the identity authentication request so that the preset number of user terminals can share the target authentication committee. The distributed authentication core layer is used to obtain the pre-generated zero-knowledge proofs of each user terminal in the current authentication batch, thus obtaining a preset number of zero-knowledge proofs; it is also used to verify the preset number of zero-knowledge proofs using an on-chain and off-chain collaborative verification mechanism, and upon successful verification, determine that the identities of multiple user terminals in the current authentication batch have been successfully authenticated; wherein: An aggregation node is used to aggregate the preset number of zero-knowledge proofs into an aggregate proof in an off-chain environment, and to perform the verification operation of the aggregate proof to obtain the verification result of the aggregate proof. The target certification committee is used to verify the verification operation of the aggregated proof through a smart contract in an on-chain environment, and obtain the aggregated proof after successful verification; it is also used to perform threshold verification on the aggregated proof after successful verification through the target certification committee, and determine that the identity authentication of multiple user terminals in the current certification batch is successful after the threshold verification is successful.

[0046] By implementing the aforementioned distributed certificateless digital identity authentication system for the metaverse, this invention constructs a layered and collaborative authentication architecture. This architecture dynamically distributes massive authentication requests to multiple parallel-running authentication committees, effectively achieving rational allocation of system resources and load balancing. The coordination and routing layer, serving as a unified entry point, intelligently routes authentication requests based on real-time load status and preset strategies, significantly improving the system's ability to handle high-concurrency requests. Simultaneously, this distributed architecture effectively avoids the single point of failure and performance bottlenecks common in traditional centralized authentication services, giving the system excellent horizontal scalability and the ability to stably support tens of thousands of authentication requests per second in a metaverse scenario.

[0047] In one exemplary embodiment, a computer device is also provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above-described method embodiments.

[0048] In one exemplary embodiment, a computer-readable storage medium is provided storing a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.

[0049] In one exemplary embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.

[0050] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0051] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments described above. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM).

[0052] The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0053] This document uses specific examples to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this application. Furthermore, those skilled in the art will recognize that, based on the ideas of this application, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A metaverse-oriented distributed certificateless digital identity authentication method, characterized in that, The meta-universe-oriented distributed certificateless digital identity authentication method comprises the following steps: A preset number of user terminals are taken as a current authentication batch, identity authentication requests initiated by each user terminal in the current authentication batch are received, and a target authentication committee is allocated to the current authentication batch according to the identity authentication requests, so that the preset number of user terminals share the target authentication committee; A preset number of zero-knowledge proofs pre-generated by each user terminal in the current authentication batch are obtained; The preset number of zero-knowledge proofs are verified by using an on-chain and off-chain collaborative verification mechanism, and after successful verification, it is determined that the identity authentication of the plurality of user terminals in the current authentication batch is successful, comprising: In an off-chain environment, the preset number of zero-knowledge proofs are aggregated into an aggregated proof, and a verification operation of the aggregated proof is performed to obtain a verification result of the aggregated proof; In an on-chain environment, the verification operation of the aggregated proof is verified according to the verification result of the aggregated proof, and after successful verification, the aggregated proof is sent to the target authentication committee; In the on-chain environment, the aggregated proof after successful verification is threshold-verified by the target authentication committee, and after successful threshold verification, it is determined that the identity authentication of the plurality of user terminals in the current authentication batch is successful.

2. The metaverse-oriented distributed certificateless digital identity authentication method according to claim 1, characterized in that, The preset number of user terminals are taken as a current authentication batch, identity authentication requests initiated by each user terminal in the current authentication batch are received, and a target authentication committee is allocated to the current authentication batch according to the identity authentication requests, comprising: Identity authentication requests initiated by each user terminal in the current authentication batch are received, and the identity authentication requests comprise authentication context information; According to a load balancing strategy and the authentication context information, one of a plurality of authentication committees is selected as a target authentication committee, and identity authentication requests initiated by each user terminal in the current authentication batch are intelligently distributed to the target authentication committee through a routing function.

3. The metaverse-oriented distributed certificateless digital identity authentication method according to claim 1, characterized in that, In an off-chain environment, the preset number of zero-knowledge proofs are aggregated into an aggregated proof, comprising: In an off-chain environment, the preset number of zero-knowledge proofs are aggregated into an aggregated proof according to a LinkG16 aggregation algorithm; wherein the LinkG16 aggregation algorithm is: ； In the formula: represents the first zero-knowledge proof, represents a public reference string of the zero-knowledge proof, represents a public reference string of the zero-knowledge proof ; represents a preset number; represents a shared input of the zero-knowledge proof; represents the number of shared inputs.

4. The metaverse-oriented distributed certificateless digital identity authentication method according to claim 3, characterized in that, The preset number of zero-knowledge proofs are aggregated into an aggregated proof according to a LinkG16 aggregation algorithm, comprising: For the first zero-knowledge proof , the shared input is committed to , ; wherein represents the th random blinding factor; and represents the th element in the public reference string . generating a proof that all commitments are computed from the same shared input ; Randomizing each group element in the zero-knowledge proof , to obtain , comprising: Randomly selected , the calculation: ； ； ； According to the commitment And Generating a proof of aggregation .

5. The metaverse-oriented distributed certificateless digital identity authentication method according to claim 4, characterized in that, The verification operation of the aggregated proof is performed to obtain a verification result of the aggregated proof, comprising: In an off-chain environment, the aggregated proof is verified according to an aggregation verification algorithm to obtain a verification result of the aggregated proof; wherein: The verification logic of the aggregation verification algorithm is to check whether a bilinear mapping equation is established for to The verification result of the aggregation proof includes: when the bilinear mapping equation is established for to The aggregation proof verification is successful; otherwise, the aggregation proof verification fails. The bilinear mapping equation is: ； wherein: is a bilinear pairing function, , , , , denotes the public parameter of the th circuit.

6. The metaverse-oriented distributed certificateless digital identity authentication method according to claim 5, characterized in that, The target authentication committee is composed of A committee member node; the threshold verification of the aggregated proof of success of verification in the on-chain environment by the target authentication committee comprises: The committee member nodes jointly generate a threshold public key through a distributed key generation protocol and a threshold private key share corresponding to each committee member node ; wherein, The threshold private key share is jointly completed through a threshold signature protocol to threshold verification of the aggregated proof after verification succeeds; wherein, the distributed key generation protocol is: For committee member nodes , select a random degree polynomial: ; In the formula: is a private key value of the committee member node . The committee member nodes Compute and broadcast a commitment to a polynomial: ; The committee member nodes To the committee member nodes Secretly sending partial shares ; The committee member nodes Use the committee member nodes The commitment verification received shares, verification formula is: ; After successful verification, the threshold public key and the threshold private key share corresponding to each committee member node are generated, wherein: The threshold public key is ; The threshold private key share corresponding to each committee member node is .

7. The metaverse-oriented distributed certificateless digital identity authentication method according to claim 5, characterized in that, In an on-chain environment, the verification operation of the aggregated proof is verified according to the verification result of the aggregated proof, and after successful verification, the aggregated proof is sent to the target authentication committee, comprising: The verification result of the aggregated proof in the off-chain environment is obtained, and a hash commitment of the verification result is calculated; generating a proof using the generation structure of the aggregated proof and the hash commitment ; the generation structure comprises a circuit and its internal execution process for generating the aggregated proof; wherein the proof is used for verifying a verification operation for executing the aggregated proof; The hash commitment is submitted to a smart contract on a blockchain, the smart contract verifies the proof , and upon successful verification, sends the aggregated proof to the target authentication committee and records the verification event and hash commitment on the blockchain.

8. The metaverse-oriented distributed certificateless digital identity authentication method according to claim 1, characterized in that, A method for a user terminal to pre-generate the zero-knowledge proof, comprising: The user terminal locally generates a public-private key pair and forms a statement according to the identity attribute to be proved; wherein the private key is and the public key is ; The user terminal generates the zero-knowledge proof based on the public-private key pair and a public parameter, according to a zero-knowledge proof generation algorithm , the zero-knowledge proof is used to prove a to-be-proved statement composed of the public-private key pair or the statement.

9. The metaverse-oriented distributed certificateless digital identity authentication method according to claim 8, characterized in that, the zero-knowledge proof generation algorithm generates the zero-knowledge proof comprising: transforming a statement to be proven consisting of said declaration or said statement into an arithmetic circuit; The arithmetic circuit is converted into a first-order constraint system, which is: ； where: vector represents a witness vector; represents a constraint matrix; represents a term-by-term product; The first-order constraint system is mapped to a quadratic arithmetic program, obtaining an equation equivalent to the first-order constraint system, which is: ； where: is the number of columns of the constraint matrix denotes the witness vector contains variables; denotes the th column of the constraint matrix , ; denotes the th variable in the witness vector ; represents the equivalent polynomial; , denotes the th Lagrange interpolation basis point, ; to constrain the number of rows of the matrix represents constraints; , and are polynomials, respectively, whose values at all basis points form the th column of the constraint matrix ; generating the zero-knowledge proof according to the equation , the zero-knowledge proof is composed of group elements , , wherein: ； ； ； ； wherein: represents a secret parameter for trusted setup generation; and represents an element on a bilinear mapping group and ; represents a blinding factor; .

10. A metaverse-oriented distributed certificateless digital identity authentication system, characterized in that, The meta-universe-oriented distributed certificateless digital identity authentication system comprises a coordination routing layer and a distributed authentication core layer, and the distributed authentication core layer comprises a target authentication committee in an on-chain environment and an aggregation node in an off-chain environment; wherein: The coordination routing layer is configured to take a preset number of user terminals as a current authentication batch, receive an identity authentication request initiated by each user terminal in the current authentication batch, and assign a target authentication committee to the current authentication batch according to the identity authentication request, so that the preset number of user terminals share the target authentication committee; The distributed authentication core layer is configured to obtain a pre-generated zero-knowledge proof of each user terminal in the current authentication batch, and obtain a preset number of zero-knowledge proofs; and is further configured to verify the preset number of zero-knowledge proofs by using an on-chain and off-chain collaborative verification mechanism, and determine that the identity authentication of the multiple user terminals in the current authentication batch is successful after successful verification; The aggregation node is configured to aggregate the preset number of zero-knowledge proofs into an aggregated proof in an off-chain environment, and perform a verification operation on the aggregated proof to obtain a verification result of the aggregated proof; The target authentication committee is configured to verify the verification operation of performing the verification operation on the aggregated proof by using a smart contract in an on-chain environment, and obtain the aggregated proof after successful verification; and is further configured to perform threshold verification on the aggregated proof after successful verification by using the target authentication committee, and determine that the identity authentication of the multiple user terminals in the current authentication batch is successful after successful threshold verification.

Images