CN114401118A - A login password verification system based on smart contracts - Google Patents

Abstract

The invention relates to the technical field of information, in particular to a login password verification system based on an intelligent contract, which comprises a password generation module, a login module and a password verification module, wherein the password generation module generates an n-element polynomial, issues a verification intelligent contract on a block chain, generates a characteristic sequence, periodically and randomly generates a plurality of groups of values of n' element variables by the verification intelligent contract, a user calculates the value of the n-element polynomial according to the characteristic sequence and the value of the variable disclosed by the verification intelligent contract, sends the value of the login name associated with the n-element polynomial to the login module to write in the verification intelligent contract, if the verification passes, the login name and the timestamp of a signature user of the intelligent contract are verified, the login module inquires the block chain, and if a signature exists in a verification result column, the user is allowed to log in. The substantial effects of the invention are as follows: the passwords input by the user during login are different every time, and the rule among multiple password inputs is difficult to reversely derive, so that the security of the login password of the user is effectively improved.

Description

A login password verification system based on smart contracts

technical field

The invention relates to the field of information technology, in particular to a login password verification system based on a smart contract.

Background technique

Cryptographic security has always been an important research topic in the field of information technology. With the development of the Internet, people participate in more and more affairs on the virtual Internet, and the rights and interests they have on the Internet are more and more important. The rights and interests of users on the Internet usually include website account rights and interests, website membership rights and interests, asset rights and interests, and rights and interests of various livelihood affairs handled on the Internet. The ownership of these rights is usually defined and protected only by the user's login password for logging in to the website. Once the password is leaked, it will bring unpredictable losses and make users' rights and interests face a huge threat. At present, there is a method of using salted hash value instead of password plaintext transmission. Although it is helpful to keep the user's password plaintext secret from the server, if the thief steals the salted hash value, it will directly pass the salted hash value. Still able to log in illegally. Therefore, it is necessary to continue to study the protection scheme of user password.

For example, Chinese patent CN103118022A, published on May 22, 2013, discloses a password-free heresy login verification method. In order to ensure that the account number and password are input in isolation on different platforms, it is first necessary to perform the binding process of the corresponding account number on the mobile device. , this process requires the use of mobile device hardware information to bind the corresponding account password, so that the generated local verification database cannot be separated from the bound device, so as to avoid the mobile device database from being stolen and used. During the binding process, the mobile device hardware information At the same time, it will be submitted to the binding server and the verification server, so as to generate the server-side device corresponding to the account to verify the binding data. This process will only occur once. The verification process is performed every time you log in. During the binding process, the user only needs to Input the account password once, and the other is completed automatically. In the process of verifying the login, the user only needs to confirm the login, one key is completed, and the other is completed automatically. After using the present invention, the user no longer has to remember the complex password. The technical solution needs to be bound by the mobile device, and when the mobile device is lost or damaged, it needs to be bound again, which is cumbersome. In addition, the hardware information of the mobile device needs to be submitted to the server, resulting in a new hidden danger of data security.

SUMMARY OF THE INVENTION

The technical problem to be solved by the present invention is: the technical problem of the low security degree of the current login password verification method. This paper proposes a login password verification system based on smart contracts, which can improve the security of login password verification.

In order to solve the above-mentioned technical problems, the technical solution adopted in the present invention is: a login password verification system based on a smart contract, comprising a password generation module, a login module and a password verification module, and the password generation module generates an n-element polynomial for the user, Send the coefficient vector of the n-ary polynomial to the user and the password verification module, and the password verification module publishes a verification smart contract on the blockchain, and the verification smart contract includes a login name, a feature sequence, a coefficient sequence, several verification columns, Verification result column and verification program segment, the password verification module randomly selects several variables for verifying the smart contract, the selected variable takes a non-zero constant value, and generates a feature sequence for verifying the smart contract, and the selected variable is in the feature sequence The value of is the corresponding constant value, and the other variables take the value of zero in the characteristic sequence, and the non-zero constant value is substituted into the n-element polynomial to obtain the coefficient sequence of the n'-element polynomial. The verification program segment restores n according to the characteristic sequence and the coefficient sequence. 'Element polynomial, periodically and randomly generate the values of several groups of n'-element variables, calculate the value of the n'-element polynomial, disclose the feature sequence and the values of several groups of n'-element variables, the user restores the n-element polynomial, and discloses it according to the verification smart contract The feature sequence and the values of several groups of n'-variable variables are calculated to obtain the values of several n-variable polynomials, and the login name is associated with the values of several n-variable polynomials and sent to the login module. The login module writes the values of the n-variable polynomials for verification In the verification column of the smart contract, if the values of several n-element polynomials can match the value of the n'-element polynomials, the verification is passed, and the login name and timestamp of the verification smart contract signature user are written into the verification result column, and the login module query area Blockchain, if there is a signature in the verification result column and the timestamp is within the preset threshold range from the current time, the user will be allowed to log in this time.

Preferably, when the verification smart contract randomly generates values of several groups of n' variables, the following steps are performed: the verification smart contract randomly selects at least one variable, and the selected variable takes a fixed value within a preset time period , another randomly generated fixed value is taken after the preset time period is exceeded; the unselected variable takes a random value, and the values of all variables constitute the value of a group of n' variables.

Preferably, the sorting weight is set for the variable, the highest index value of the variable is obtained, the index value is taken as the degree of the n-element polynomial for each variable, and the monomial whose coefficient of the n-element polynomial is 0 is supplemented. The times of the variables are multiplied by the sorting weights of the corresponding variables and then summed up. As the sorting value of the monomial, the monomial of the n-element polynomial is sorted in descending order according to the sorting value, and the coefficients of the monomial of the n-element polynomial after sorting are obtained in turn to form an n-element polynomial. The coefficient vector of .

Preferably, the verification module substitutes a non-zero constant value into an n-element polynomial to obtain an n'-element polynomial, and the degree of each variable of the monomial of the n'-element polynomial is multiplied by the sorting weight of the corresponding variable and then summed, as the monomial of the Sort value, obtain the coefficients of the monomial of the n'-element polynomial after sorting, and form the coefficient vector of the n'-element polynomial.

Preferably, the verification module publishes multiple verification smart contracts on the blockchain, and the verification smart contracts have contract numbers. The login module sends the value of the n-ary polynomial to the verification smart contract corresponding to the contract number, the login module queries the blockchain, and the verification result columns of multiple verification smart contracts all have signatures and the timestamp is preset from the current time. Within the threshold range, the user is allowed to log in this time.

Preferably, when the value of several n-element polynomials and the value of n'-element polynomials can match an equal ratio exceeding the preset percentage threshold, the verification smart contract determines that the verification is passed, and the verification smart contract signs the user's login name and time. The stamp is written into the verification result column.

The substantial effect of the present invention is: by verifying the smart contract, the passwords entered by the user each time they log in are not the same, and the rules between multiple password inputs are difficult to reversely deduce. , and can not log in to the user's account; no hardware binding is required, and the cost of promotion and use is low.

Description of drawings

FIG. 1 is a schematic diagram of the structure of a login password verification system according to the first embodiment.

FIG. 2 is a schematic diagram of a process of generating variable values in the first embodiment.

FIG. 3 is a schematic diagram of a process of obtaining a coefficient vector according to the first embodiment.

Among them: 10, password generation module, 11, coefficient vector, 20, user, 30, password verification module, 31, verification smart contract, 40, login module, 50, blockchain.

Detailed ways

The specific embodiments of the present invention will be further described in detail below through specific embodiments and in conjunction with the accompanying drawings.

Example 1:

A login password verification system based on a smart contract, please refer to FIG. 1, including a password generation module 10, a login module 40 and a password verification module 30, the password generation module 10 generates an n-element polynomial for the user 20, and the coefficients of the n-element polynomial are The vector 11 is sent to the user 20 and the password verification module 30. The password verification module 30 publishes the verification smart contract 31 on the blockchain 50. The verification smart contract 31 includes the login name, feature sequence, coefficient sequence, several verification columns, and verification result columns. And the verification program segment, the password verification module 30 randomly selects several variables for verifying the smart contract 31, the selected variable takes a non-zero constant value, and generates a feature sequence for verifying the smart contract 31. The value of the selected variable in the feature sequence In order to correspond to the constant value, the other variables take the value of zero in the characteristic sequence, and the non-zero constant value is substituted into the n-element polynomial to obtain the coefficient sequence of the n'-element polynomial. The verification program segment restores the n'-element polynomial according to the characteristic sequence and coefficient sequence, Periodically and randomly generate the values of several sets of n'-variable variables, calculate the values of the n'-variable polynomials, disclose the feature sequence and the values of several sets of n'-variable variables, the user 20 restores the n-variable polynomials, and validates the features disclosed by the smart contract 31 The sequence and the values of several groups of n'-variable variables are calculated to obtain the values of several n-variable polynomials, and the login name is associated with the values of several n-variable polynomials and sent to the login module 40. The login module 40 writes the values of the n-variable polynomials for verification In the verification column of the smart contract 31, if the values of several n-element polynomials can be matched and equal to the values of the n'-element polynomials, the verification is passed, and the login name and time stamp of the verification smart contract 31 signature user 20 are written into the verification result column, and the login module 40 The blockchain 50 is queried, and if there is a signature in the verification result column and the time stamp is within a preset threshold range from the current time, the user 20 is allowed to log in this time.

The smart contracts on the blockchain exist and execute in the form of binary machine code, which is not readable, nor can the source code be recovered from the binary machine code, so it will not lead to the leakage of n'-variable polynomials.

When verifying that the smart contract 31 randomly generates the values of several groups of n' variables, please refer to Figure 2, and perform the following steps: Step A01) Verify that the smart contract 31 randomly selects at least one variable, and the selected variable is selected within a preset time period. The value is a fixed value, and another randomly generated fixed value is taken after the preset time period; Step A02) The unselected variable takes a random value, and the values of all variables constitute a group of n' variable values.

Referring to Figure 3, the process of obtaining the coefficient vector 11 includes: step B01) setting a sorting weight for the variable; step B02) obtaining the highest index value of the variable, taking the index value for each variable as the degree of the n-variable polynomial, and making up A monomial with an n-element polynomial coefficient of 0; Step B03) The degree of each variable of the monomial of the n-element polynomial is multiplied by the sorting weight of the corresponding variable and then summed, as the sorting value of the monomial; Step B04) Arrange n in descending order according to the sorting value The coefficients of the monomial of the n-element polynomial are obtained in sequence, and the coefficient vector 11 of the n-element polynomial is formed.

The verification module substitutes the non-zero constant value into the n-variable polynomial to obtain the n'-variable polynomial. The degree of each variable of the monomial of the n'-variable polynomial is multiplied by the sorting weight of the corresponding variable and then summed, as the sorting value of the monomial, obtained in turn The coefficients of the monomial of the n'-variable polynomial after sorting constitute the coefficient vector 11 of the n'-variable polynomial.

As an alternative embodiment, the verification module publishes a plurality of verification smart contracts 31 on the blockchain 50, the verification smart contracts 31 have contract numbers, and the user 20 sends the login name and the values of several sets of n-ary polynomials associated with the contract numbers to the login Module 40, the login module 40 sends the value of the n-ary polynomial to the verification smart contract 31 corresponding to the contract number, the login module 40 queries the blockchain 50, and the verification result columns of multiple verification smart contracts 31 all have signatures and the time stamp is far from the current value. If the time is within the preset threshold range, the user 20 is allowed to log in this time.

As an alternative implementation of this embodiment, when the value of several n-element polynomials and the values of n'-element polynomials can match an equal ratio exceeding the preset percentage threshold, the verification smart contract 31 determines that the verification is passed, and the verification smart contract 31 signs the user 20's login name and timestamp are written in the verification result column.

The beneficial technical effect of this embodiment is: by verifying the smart contract 31, the passwords entered by the user 20 each time they log in are not the same, and it is difficult to reversely deduce the law between multiple password inputs, even if the thief steals several It is also impossible to log in to the account of the user 20 even if the password is in plain text; no hardware binding is required, and the cost of promotion and use is low.

Embodiment 2:

In this embodiment, n is 3, the user 20S has registered an account, and the password generation module 10 generates a 3-element polynomial for the user 20S: f(x,y,z)=7*x^3*y*z^2+13 *x^2*y^3*z+5*x^2*y^2*z^2, get the coefficient vector 11 of the 3-variable polynomial.

The process of obtaining the coefficient vector 11 is as follows: the highest exponent value of the variable is 3, and the degree of the 3-variable polynomial is 9, that is, the monomial of the highest degree is 0*x^3*y^3*z^3. Complete monomials with coefficients of 0. After completion f(x,y,z)=

0*x^3*y^3*z^3+0*x^3*y^3*z^2+0*x^3*y^3*z^1+0*x^3*y^ 3*z^0

+

0*x^3*y^2*z^3+0*x^3*y^2*z^2+0*x^3*y^2*z^1+0*x^3*y^ 2*z^0

+

0*x^3*y^1*z^3+ 7*x^3*y^1*z^2 +0*x^3*y^1*z^1+0*x^3*y^ 1*z^0

+

…

+

0*x^2*y^3*z^3+0*x^2*y^3*z^2+ 13*x^2*y^3*z +0*x^2*y^3* z^0

+

…

+

0*x^2*y^2*z^3+ 5*x^2*y^2*z^2 +0*x^2*y^2*z^1+0*x^2*y^ 2*z^0

+

…

+

0*x^0*y^0*z^3+0*x^0*y^0*z^20*x^0*y^0*z^1+0*x^0*y^0* z^0 .

Set sorting weights for variables x, y and z. In this embodiment, the sorting weight of x is 13, the sorting weight of y is 4, and the sorting weight of z is 1. Along with the monomials with coefficient 0, the rank value of each monomial is calculated. Monomials with non-zero coefficients are underlined. For example, the sorting value of the non-zero coefficient is calculated as follows:

The order value of the monomial 0*x^3*y^3*z^3 is: 13*3+4*3+1*3=54;

The sorting value of the monomial 7*x^3*y*z^2 is: 13*3+4*1+2=45;

The sorting value of the monomial 13*x^2*y^3*z is: 13*2+4*3+1=39;

The order value of the monomial 5*x^2*y^2*z^2 is: 13*2+4*2+1*2=36.

The calculation of the rank value of the monomial with coefficient 0 is omitted here. According to the descending order of the sorting value, the corresponding coefficients are sorted as 0, 0, ..., 7, ..., 13, ..., 5, ..., 0, so the coefficient vector 11 is <0, 0, ..., 7, ..., 13, ...,5,...,0>, there are 9 0s before the coefficient 7, and the length of the coefficient vector 11 is 64. The user 20 sorts according to the same monomial, and matches the coefficient vector 11 to restore f(x,y,z) . The method of setting the sorting weight is: first sort the variables, set the sorting weight of the last variable to 1, calculate the product of the highest index value and 1, and add 1 to the product as the sorting weight of the penultimate variable. Then calculate the product of the ranking weight of the second-to-last variable and the highest index value, and add 1 to the product as the ranking weight of the third-to-last variable. Based on this calculation, the ranking weights of all variables are obtained.

The cryptographic verification module 30 publishes the verification smart contract 31 on the blockchain 50 . For the verification of the smart contract 31, the variable with a constant value is selected as x, and the feature sequence is (3,0,0). The feature sequence (3,0,0) means that x must be 3, and the values of other variables are not limited.

The password verification module 30 substitutes the value 3 of x into f(x,y,z) to obtain f'(y,z)=189*y*z^2+117*y^3*z+45*y^2* z^2, verify that the smart contract 31 randomly generates the values of three sets of variables: (3,16), (3,9) and (3,32). The y value is a random constant, and the y value is periodically replaced with another constant value. The corresponding polynomial values are:

f'(3,16)=189*3*16^2+117*3^3*16+45*3^2*16^2=299,376;

f'(3,9)=189*3*9^2+117*3^3*9+45*3^2*9^2=107,163;

f’(3,32)=189*3*32^2+117*3^3*32+45*3^2*32^2=1,096,416.

The verification smart contract 31 exposes (3,0,0), (3,16), (3,9) and (3,32).

The user 20 restores f(x,y,z)=7*x^3*y*z^2+13*x^2*y^3*z+5*x^2*y^ according to the coefficient vector 11 2*z^2, calculate f(3,3,16)=299,376, f(3,3,9)=107,163 and f(3,3,32)=1,096,416 according to the values disclosed in the verification smart contract 31. The user 20 sends the login name and (299,376, 107,163, 1,096,416) to the login module 40 . The login module 40 writes (299,376, 107,163, 1,096,416) into the verification smart contract 31, and the verification smart contract 31 passes the verification. Then, the login name and time stamp of the user 20 that is signed by the smart contract 31 are written into the verification result column. The login module 40 queries the blockchain 50 and decrypts the signature using the public key of the verification smart contract 31 to obtain the login name and timestamp. Verifying the login name and verifying that the timestamp is within a preset threshold from the current time, thus allowing the user 20 to log in this time.

When the value of several n-element polynomials and the value of the n'-element polynomial can match an equal ratio exceeding the preset percentage threshold, the verification smart contract 31 determines that the verification is passed, and the verification smart contract 31 signs the user 20's login name and timestamp write verification Results column. In this embodiment, the user 20 may intentionally fill in a wrong value in (299,376, 107,163, 1,096,416). If filled in as (299,376, 501,162 , 1,096,416), two of them are correct after the verification of the smart contract 31, so it is also judged that the verification is passed, and the login name and timestamp of the signing user 20 are written into the verification result column. After stealing (299,376, 501,162 , 1,096,416), the thief cannot determine whether there is an error value or which value is an error value, so it is more difficult to reverse the expression of the 3-variable polynomial, which further improves the security of the user's 20 password . The verification smart contract 31 periodically generates a new random value as the value of y.

The above-mentioned embodiment is only a preferred solution of the present invention, and does not limit the present invention in any form, and there are other variations and modifications under the premise of not exceeding the technical solution recorded in the claims.

Claims (6)

1. A login password verification system based on an intelligent contract is characterized in that,

comprises a password generating module, a login module and a password verification module,

the password generation module generates an n-element polynomial for the user, sends the coefficient vector of the n-element polynomial to the user and the password verification module,

the password verification module issues a verification intelligent contract on a block chain, the verification intelligent contract comprises a login name, a characteristic sequence, a coefficient sequence, a plurality of verification columns, a verification result column and a verification program section, the password verification module randomly selects a plurality of variables for verifying the intelligent contract, the selected variables take nonzero constant values, the characteristic sequence is generated for verifying the intelligent contract, the values of the selected variables in the characteristic sequence are corresponding constant values, the other variables take zero values in the characteristic sequence, the nonzero constant values are substituted into an n-element polynomial to obtain the coefficient sequence of the n ' -element polynomial, the verification program section restores the n ' -element polynomial according to the characteristic sequence and the coefficient sequence, the values of a plurality of groups of n ' -element variables are periodically and randomly generated, the values of the n ' -element polynomial are calculated, the characteristic sequence and the values of a plurality of groups of n ' -element variables are disclosed,

the method comprises the steps that a user restores an n-element polynomial, values of a plurality of n-element polynomials are obtained through calculation according to a feature sequence disclosed by a verification intelligent contract and values of a plurality of groups of n '-element variables, a login name is associated with the values of the n-element polynomials and sent to a login module, the login module writes the values of the n-element polynomials into a verification column of the verification intelligent contract, the values of the n-element polynomials and the values of the n' -element polynomials can be matched and equal, verification is passed, the login name and a timestamp of a user who signs the verification intelligent contract are written into a verification result column, the login module inquires a block chain, and if a signature exists in the verification result column and the timestamp is within a preset threshold range from the current time, the user is allowed to log in.

2. A login password verification system according to claim 1, wherein,

when the verification intelligent contract randomly generates a plurality of groups of values of n' element variables, the following steps are executed:

the verification intelligent contract randomly selects at least one variable, the value of the selected variable in the preset time length is a fixed value, and another randomly generated fixed value is taken after the preset time length is exceeded;

the unselected variables take on random values, and the values of all variables form a set of n' element variables.

3. A login password verification system according to claim 1 or 2, wherein,

setting sorting weight for variables, obtaining the highest index value of the variables, taking the index value of each variable as the number of times of an n-element polynomial, complementing the single-element polynomial with the coefficient of 0 of the n-element polynomial, multiplying the number of times of each variable of the single-element polynomial of the n-element polynomial by the sorting weight of the corresponding variable, then summing the multiplied numbers to be used as the sorting value of the single-element polynomial, sorting the single-element polynomials of the n-element polynomial according to the sorting value in a descending order mode, sequentially obtaining the coefficients of the single-element polynomials of the n-element polynomial after sorting, and forming the coefficient vector of the n-element polynomial.

4. A login password verification system according to claim 3, wherein,

the verification module substitutes a non-zero constant value into the n-element polynomial to obtain an n '-element polynomial, the times of each variable of the monomials of the n' -element polynomial are multiplied by the sorting weight of the corresponding variable and then summed to serve as the sorting value of the monomials, and the coefficients of the monomials of the n '-element polynomial after sorting are sequentially obtained to form the coefficient vector of the n' -element polynomial.

5. The block chain-based carbon emission rights trading center account management system according to claim 1 or 2,

the verification module issues a plurality of verification intelligent contracts on a block chain, the verification intelligent contracts are provided with contract numbers, a user sends a login name and a plurality of groups of values of n-element polynomials associated with the contract numbers to the login module, the login module sends the values of the n-element polynomials to the verification intelligent contracts corresponding to the contract numbers, the login module inquires the block chain, and if signatures exist in verification result columns of the plurality of verification intelligent contracts and the distance between a timestamp and the current time is within a preset threshold range, the user is allowed to login.

6. The block chain-based carbon emission rights trading center account management system according to claim 1 or 2,

when the ratio that the values of the n-element polynomials and the values of the n' -element polynomials can be matched and equal exceeds a preset percentage threshold value, the verification intelligent contract is judged to pass verification, and the login name and the time stamp of the verification intelligent contract signature user are written into a verification result column.

Images