Multi-Node Authentication Consensus for Blockchain Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In consortium blockchain systems, authentication stations face high loads and risks of illicit behavior, as malicious nodes can easily issue electronic certificates, compromising the security and reliability of user authentication.
Innovation Solution
A communication method where multiple authentication nodes verify user account information and public keys, requiring consensus among a specified number of nodes for registration and authentication, thereby reducing illicit behavior and distributing the authentication load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single authentication node is used to verify users, then the authentication process is simple and fast, but the authentication node bears a heavy load and is vulnerable to illicit behavior
Solution Approach 1:
The authentication function is segmented from the storage function. Multiple authentication nodes perform verification in parallel, and their results are aggregated by a storage node. This segmentation distributes the authentication load across multiple nodes rather than concentrating it on a single node, improving both reliability and load distribution.
Solution Approach 2:
The patent combines multiple authentication nodes into a collective verification system. The authentication results from multiple nodes are merged through a voting mechanism (requiring a specified number of affirmative responses), creating a combined authentication decision that is more reliable than any single node's decision alone.
2Reliability
If multiple authentication nodes are used to verify users, then the authentication security is improved, but the system complexity and verification time increase
Solution Approach 1:
The verification process is segmented into independent parallel tasks performed by multiple authentication nodes simultaneously. Each node independently verifies account information without waiting for others, reducing the total authentication time compared to sequential verification while maintaining security through result aggregation.
Solution Approach 2:
Account information is pre-stored in the system before authentication is needed. When authentication is required, nodes can quickly retrieve and verify this pre-prepared information rather than gathering it in real-time, reducing the time loss associated with multiple verification nodes.
3Reliability
If strict authentication checking is performed, then the security against illicit behavior is improved, but the authentication node administrator bears a heavy burden
Solution Approach 1:
The authentication checking task is segmented and distributed to multiple authentication nodes rather than concentrating all strict checking operations on a single administrator. Each node performs a portion of the verification work independently, reducing the operational burden on any single administrator while maintaining comprehensive security checks.
Solution Approach 2:
The system enables self-service authentication verification through automated checking of account information against pre-stored data. The authentication nodes automatically perform verification operations without requiring extensive manual intervention from administrators, reducing their operational burden while maintaining strict security standards.
Data Source
AI summary
A communication method is used in a communication system that includes a plurality of nodes. Two or more authentication nodes among the plurality of nodes respectively receive account information of a user and a public key of the user from the user. The two or more authentication nodes respectively transmit a massage that indicates the account information is correct and the public key of the user to the plurality of nodes when it is decided that the account information is correct. Each of the plurality of nodes registers the public key of the user in a public key list that stores public keys of users who have been allowed to participate in the communication system, when detecting according to messages received from other nodes that a specified number of authentication nodes or more have decided that the account information is correct.