CN112749381A - Block chain token login method - Google Patents

Abstract

The invention discloses a block chain token login method, which comprises the following steps: s1, firstly, making and uploading a public key to a block chain; s2, calculating a private key through an RSA algorithm; s3, generating different private keys through a public key by utilizing an RSA algorithm; distributing and storing the private key to different hardware devices (such as a smart id card); and S4, logging in the bank account checking system until the hardware verification is passed, and the face system verification is passed, wherein the dual verification is only performed after the hardware verification is passed. The invention has the following advantages: 1. aiming at the safety problem, the authority login is carried out by combining external hardware and face recognition, so that the safety is greatly improved, and the possibility of hijacking of network viruses or illegal software is eliminated; 2. because the external software carries out matching key login according to the algorithm, bandwidth waste and CPU performance are not considered completely; 3. if the attack is carried out, the public key cannot be destroyed and cannot be changed.

Description

Block chain token login method

Technical Field

The invention relates to the field of block chain token login, in particular to a block chain token login method.

Background

The prior art is as follows: encrypted Token entry

The main principle is as follows:

the client requests to log in the server to receive a request by using the user name and the password, the server signs a Token after the user name and the password are successfully verified, then the Token is sent to the client and can be stored after the Token is received by the client, for example, the Token server which is signed and sent by the server is required to receive the request when the client requests resources from the server every time in localStorage, then the Token carried in the client request is verified, and if the verification is successful, the Token is released. (briefly, a user name and password are used to go to a key (token) that the server needs to pass through, and the server can log in as long as the key is available).

The disadvantages are as follows:

1. occupied bandwidth

If a website has 10 ten thousand views per month, it means that it costs several tens of megabytes more traffic. It sounds not much, but it is not a little overhead for a long time and a long time. In fact, many people will have more information stored in the token.

2. The hijacking problem is difficult to solve if the token cannot be logged out at the server, and the token can be cracked and logged in if the token is illegally hijacked by viruses or external algorithms.

3. Performance problems

One of the selling points of a token is the cryptographic signature, and because of this feature, the recipient is able to verify that the token is valid and trusted. However, in most Web authentication applications, the token is stored in the Cookie, which means that there are two levels of signatures. For this reason, you need to spend twice the CPU overhead to verify the signature. This is not ideal for Web applications with stringent performance requirements, especially for single threaded environments. There is currently no example of using blockchain characteristics to control logging.

Disclosure of Invention

The technical problem to be solved by the invention is to overcome the defects of the prior art, and provide a block chain token login method, which comprises the following steps that 1, aiming at the safety problem, the authority login is carried out by combining external hardware and face recognition, so that the safety is greatly improved, and the possibility of hijacking of network viruses or illegal software is further eliminated; 2. because the external software carries out matching key login according to the algorithm, bandwidth waste and CPU performance are not considered completely; 3. if the attack is carried out, the public key cannot be destroyed and cannot be changed.

In order to solve the technical problems, the invention provides the following technical scheme:

the invention provides a block chain token login method, which comprises the following steps:

s1, firstly, making and uploading a public key to a block chain;

s2, calculating the private key through RSA algorithm, wherein one of the main characteristics of the blockchain is that the information can not be tampered, and storing the public key in the blockchain can ensure that the public key cannot be destroyed, and if the public key needs to be changed, the public key is just changed on the algorithm;

s3, generating different private keys through a public key by utilizing an RSA algorithm; distributing and storing the private key to different hardware devices (such as a smart id card);

s4, logging in the bank account checking system only if the hardware verification is passed, the face system verification is passed, and the double verification is performed;

s5, because the whole bank system data is basically stored in the block chain, the authority of the login user can be controlled while the public key is matched according to the different login private keys.

Compared with the prior art, the invention has the following beneficial effects:

1. aiming at the safety problem, the authority login is carried out by combining external hardware and face recognition, so that the safety is greatly improved, and the possibility of hijacking of network viruses or illegal software is eliminated;

2. because the external software carries out matching key login according to the algorithm, bandwidth waste and CPU performance are not considered completely;

3. if the attack is carried out, the public key cannot be destroyed and cannot be changed.

Detailed Description

It should be understood that the preferred embodiments described herein are for purposes of illustration and explanation only and are not intended to limit the present invention.

Example 1

The invention provides a block chain token login method, which comprises the following steps:

s1, firstly, making and uploading a public key to a block chain;

s2, calculating the private key through RSA algorithm, wherein one of the main characteristics of the blockchain is that the information can not be tampered, and storing the public key in the blockchain can ensure that the public key cannot be destroyed, and if the public key needs to be changed, the public key is just changed on the algorithm;

s3, generating different private keys through a public key by utilizing an RSA algorithm; distributing and storing the private key to different hardware devices (such as a smart id card);

s4, logging in the bank account checking system only if the hardware verification is passed, the face system verification is passed, and the double verification is performed;

s5, because the whole bank system data is basically stored in the block chain, the authority of the login user can be controlled while the public key is matched according to the different login private keys.

Compared with the prior art, the invention has the following beneficial effects:

1. aiming at the safety problem, the authority login is carried out by combining external hardware and face recognition, so that the safety is greatly improved, and the possibility of hijacking of network viruses or illegal software is eliminated;

2. because the external software carries out matching key login according to the algorithm, bandwidth waste and CPU performance are not considered completely;

3. if the attack is carried out, the public key cannot be destroyed and cannot be changed.

Finally, it should be noted that: although the present invention has been described in detail with reference to the foregoing embodiments, it will be apparent to those skilled in the art that changes may be made in the embodiments and/or equivalents thereof without departing from the spirit and scope of the invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims (1)

1. A method for blockchain token registration, comprising the steps of:

s1, firstly, making and uploading a public key to a block chain;

s2, calculating the private key through RSA algorithm, wherein one of the main characteristics of the blockchain is that the information can not be tampered, and storing the public key in the blockchain can ensure that the public key cannot be destroyed, and if the public key needs to be changed, the public key is just changed on the algorithm;

s3, generating different private keys through a public key by utilizing an RSA algorithm; distributing and storing the private key to different hardware devices (such as a smart id card);

s4, logging in the bank account checking system only if the hardware verification is passed, the face system verification is passed, and the double verification is performed;

s5, because the whole bank system data is basically stored in the block chain, the authority of the login user can be controlled while the public key is matched according to the different login private keys.