WO2019052281A1 - 基于区块链的移动终端认证管理方法、装置及相应的移动终端 - Google Patents

基于区块链的移动终端认证管理方法、装置及相应的移动终端 Download PDF

Info

Publication number
WO2019052281A1
WO2019052281A1 PCT/CN2018/097585 CN2018097585W WO2019052281A1 WO 2019052281 A1 WO2019052281 A1 WO 2019052281A1 CN 2018097585 W CN2018097585 W CN 2018097585W WO 2019052281 A1 WO2019052281 A1 WO 2019052281A1
Authority
WO
WIPO (PCT)
Prior art keywords
account
mobile terminal
authenticated
information
account information
Prior art date
Application number
PCT/CN2018/097585
Other languages
English (en)
French (fr)
Inventor
余筱
Original Assignee
京信通信系统（中国）有限公司
京信通信系统（广州）有限公司
京信通信技术(广州)有限公司
天津京信通信系统有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 京信通信系统（中国）有限公司, 京信通信系统（广州）有限公司, 京信通信技术(广州)有限公司, 天津京信通信系统有限公司 filed Critical 京信通信系统（中国）有限公司
Publication of WO2019052281A1 publication Critical patent/WO2019052281A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0407—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy

Definitions

  • the present invention relates to the field of network communication technologies, and in particular, to a block chain-based mobile terminal authentication management method and apparatus, and a corresponding mobile terminal.
  • the mobile terminal is generally authenticated and managed by an operator or the like through a user identity module such as a USIM card.
  • the USIM card is an abbreviation of Universal Subscriber Identity Module, also known as the Global Subscriber Identity Card.
  • the USIM is also called upgrade SIM. It is a component of the UMTS (Universal Mobile Telecommunication System) network.
  • the USIM card also upgrades the algorithm in terms of security and adds card-to-network authentication.
  • the USIM card is a chip card with a microprocessor, it means that the physical device can be forged or accessed through informal channels to obtain personal and private information, which brings great security risks; and the USIM card brings many production and Transportation costs increase business operations, production costs, and management costs.
  • the existing mobile terminal authentication management is not only costly, but also the authentication accuracy is not high, and there are security risks.
  • the existing mobile terminal authentication needs to store the mobile terminal account locally, which is complicated in operation, is not conducive to space saving and is not flexible.
  • the invention provides a block chain-based mobile terminal authentication management method and device, which realizes allocation and authentication management of mobile terminal account information.
  • the present invention provides a method for authenticating a mobile terminal based on a blockchain, the method comprising:
  • the current node receives an account allocation request packet in the blockchain network
  • the account allocation request data packet includes the identity information of the to-be-authenticated mobile terminal, and is configured to allocate account information to the designated mobile terminal to be authenticated according to the identity information of the to-be-authenticated mobile terminal.
  • the blockchain includes a first block for storing a private key of each node and a second block for storing other content; the requesting data packet according to the account allocation request is a designated mobile to be authenticated After the terminal allocates account information and generates a unique multiple digital signature by using the private key of the current node to sign the account information, the method further includes:
  • the first interaction record including the account information, the identity information of the mobile terminal to be authenticated, the unique multiple digital signature, and the public key of the authentication node generated corresponding to the account allocation request data packet
  • the first interaction record is broadcast in the block and in the blockchain network.
  • the step of generating a unique multiple digital signature by using the private key of the current node to sign the account information specifically includes:
  • the random hash value is encrypted with the private key of the authentication node to generate a unique multiple digital signature of the current node.
  • the method before performing the random hash operation on the public key of the current node and the unique multiple digital signature generated by the previous node to generate a random hash value, the method further includes:
  • the step of verifying the validity of the unique multiple digital signature of the previous node specifically includes:
  • the unique multi-signature of the previous node is decrypted by using the public key of the previous node. If the decrypted random hash value is consistent with the random hash value of the current node, it is determined whether the multiple digital signature is valid according to the decrypted result.
  • the identity information includes verification information, where the verification information is a unique device identifier of the mobile terminal to be authenticated, and the unique key digital signature is generated by using a private key of the current node to sign the account.
  • the steps of the information also include:
  • the method further includes:
  • the current node acquires an account authentication request data packet sent by the to-be-authenticated mobile terminal in a blockchain, and acquires a public key of the to-be-authenticated mobile terminal.
  • the current node after the current node acquires the account authentication request data packet sent by the to-be-authenticated mobile terminal, the current node further includes:
  • the mobile terminal to be authenticated encrypts the unique multiple digital signature with its private key.
  • the obtaining the ciphertext information sent by the to-be-authenticated mobile terminal that is included in the account authentication request data packet, and decrypting the ciphertext information by using the public key of the to-be-authenticated mobile terminal further includes:
  • the mobile terminal to be authenticated passes the current authentication.
  • the mobile terminal after the mobile terminal sends the account authentication request data packet, the mobile terminal includes a public key of the mobile terminal and a second interaction record that processes the ciphertext information corresponding to the account authentication request data packet.
  • the second block of the blockchain and the second interactivity record are broadcast in the blockchain network.
  • the method further includes:
  • the current node acquires, in the blockchain, the revocation account request data packet including the authenticated account information initiated by the to-be-authenticated mobile terminal;
  • the account information is written to the revocation list, which is stored in the second block of the blockchain.
  • the method further includes:
  • the authentication result information of the mobile terminal to be authenticated is written into the second interaction record in the second block of the blockchain and broadcasted, and the authentication result information includes the authentication of the mobile terminal to be authenticated and the authentication failure.
  • the method further includes:
  • the sending by the user terminal, the interaction result information corresponding to the account information, so that the user terminal determines the validity of the to-be-queried account according to the interaction result information, specifically:
  • the present invention provides a method for acquiring account information based on a blockchain, including:
  • the unique multiple digital signature is decrypted with the public key of the current node to obtain the account information.
  • the blockchain includes a first block for storing a private key of each node and a second block for storing other content.
  • the current node will process the first interaction record that is generated by the account allocation request data packet, including the account information, the identity information of the mobile terminal to be authenticated, the unique multiple digital signature, and the public key of the authentication node. Entering into the second block and broadcasting the first interaction record in a blockchain network.
  • the method further includes:
  • the identity information is compared with the identity information of the user, if the identity information is consistent, the account information is verified to be valid.
  • the method further includes:
  • the method further includes:
  • the verified result is fed back to the blockchain.
  • the present invention provides an authentication management apparatus for a mobile terminal based on a blockchain, including:
  • a first receiving module the current node receives an account allocation request data packet in the blockchain network
  • An allocating module allocating account information to the designated mobile terminal to be authenticated according to the account allocation request data packet, and generating a unique multiple digital signature by using the private key of the current node to sign the account information;
  • a broadcast module broadcasting the unique multiple digital signature, the public key of the current node, and account information in a blockchain network;
  • a second receiving module receiving information that is to be sent by the to-be-authenticated mobile terminal after decrypting the unique multiple digital signature by using the public key, to confirm that the to-be-authenticated mobile terminal obtains the account information.
  • An authentication module the current node acquires an account authentication request data packet sent by the to-be-authenticated mobile terminal in a blockchain, and acquires a public key of the to-be-authenticated mobile terminal.
  • the revocation module the current node acquires the revocation account request data packet including the authenticated account information initiated by the to-be-authenticated mobile terminal in the blockchain; and finds the corresponding account from the second interaction record according to the revocation account request data packet. Information; the account information is written to a revocation list, the revocation list being stored in the second block of the blockchain.
  • the present invention provides a device for acquiring account information based on a blockchain, including:
  • Sending module sending an account allocation request data packet to the blockchain network
  • a receiving module receiving account information sent by a current node in response to the account allocation request data packet, the account information signing a unique multiple digital signature generated by the authentication node with its private key;
  • the decryption module decrypts the unique multiple digital signature with the public key of the current node to obtain the account information.
  • the present invention provides an authentication management apparatus, including a processor and a memory, wherein the memory stores a computer program, wherein the computer program is executed by the processor to implement the following steps:
  • the current node receives an account allocation request packet in the blockchain network
  • the present invention provides a mobile terminal, including a processor and a memory, wherein the memory stores a computer program, wherein the computer program is executed by the processor to implement the following steps:
  • the unique multiple digital signature is decrypted with the public key of the current node to obtain the account information.
  • the solution provided by the present invention has the following advantages:
  • the present invention provides a packet chain-based authentication management method for a mobile terminal.
  • the authentication node is represented at one end of the authentication node, and the current node receives the account information distribution request packet sent by the mobile terminal to be authenticated through the blockchain.
  • the mobile terminal receives the account information, and decrypts the multiple digital signature with the public key of the current node to obtain the account information and verify the validity of the account information.
  • the authentication node is present at the authentication node, and the current node receives the account information authentication request packet sent by the mobile terminal through the blockchain, and uses the public key of the mobile terminal to decrypt the identity to verify the identity of the mobile terminal.
  • the mobile terminal transmits the account information authentication request including the multiple digital signature encrypted by the private key to the current node through the blockchain, so that the current node completes the authentication of the account information by the corresponding decryption operation.
  • the present invention employs the above-described dual authentication mechanism to ensure the accuracy of the entire authentication process.
  • the present invention writes the interaction record of the distribution account and the interaction record of the authentication account into the blockchain, and in combination with the distributed feature of the blockchain, all nodes save the interaction records, thus ensuring the validity of each interaction record. With reliability.
  • the present invention combines the openness and non-destructive modification of the blockchain, and each node can participate in the blockchain network, and each node is allowed to obtain a complete copy of the interactive record, even or even
  • the modification of data on the blockchain by multiple nodes cannot affect the data of other nodes. If any node fails, the remaining nodes can still work normally, so that the authentication process does not depend on a single source, which reduces the risk of malicious recording of the interaction record.
  • the present invention combines the decentralization of blockchains, trusts, and does not have centralized devices and management mechanisms. Data interaction between nodes is verified by unique multiple digital signature technology. Specifically, the current node uses its The unique multi-signature generated by the private key signs the assigned account information, on the one hand, it can be determined that the account information is indeed signed and issued by the current node, and on the other hand, the integrity of the issued account information is guaranteed, and the verification process is improved. The accuracy.
  • the present invention knows whether the account information is revoked by querying the third interaction record of the current blockchain in real time, and solves the problem that the user cannot know in time whether the account information is revoked.
  • the method of the present invention improves the accuracy of the verification process and reduces the risk of malicious recording of the interactive record.
  • the present invention does not need to manage the mobile terminal through physical devices such as the USIM card, thereby saving production and transportation costs.
  • the mobile terminal and the authentication node can be connected to the blockchain network in any manner, which increases the flexibility of the networking.
  • FIG. 1 is a block diagram of a first embodiment of a blockchain-based mobile terminal authentication management method according to the present invention
  • FIG. 2 is a flowchart of a method for signing and verifying signature information of an account by an authentication node according to the present invention
  • FIG. 3 is a block diagram of a second embodiment of a blockchain-based mobile terminal authentication management method according to the present invention.
  • FIG. 4 is a block diagram of a first embodiment of a blockchain-based mobile terminal authentication management apparatus according to the present invention.
  • FIG. 5 is a block diagram of a second embodiment of a blockchain-based mobile terminal authentication management apparatus according to the present invention.
  • FIG. 6 is a block diagram of a first embodiment of a method for acquiring account information based on a blockchain according to the present invention
  • FIG. 7 is a flow chart of a first embodiment of a device for acquiring account information based on a blockchain according to the present invention.
  • FIG. 8 is a block diagram showing a structure of a mobile terminal.
  • an authentication management method for a mobile terminal based on a blockchain is provided by the present invention.
  • the method includes the following steps:
  • the current node receives an account allocation request packet in the blockchain network.
  • the to-be-authenticated mobile terminal sends an account allocation request data packet in the blockchain network to request the current node to allocate account information, where the account allocation request data packet includes the identity information of the mobile terminal to be authenticated. And allocating account information to the designated mobile terminal to be authenticated according to the identity information of the mobile terminal to be authenticated, where the identity information may be a device identifier or a device serial number of the mobile terminal to be authenticated, and the like may uniquely represent the to-be-authenticated Information about the identity of the mobile terminal.
  • the interaction record corresponding to the account allocation request data packet is written into the blockchain for other nodes to query or acquire data.
  • the current node after receiving the account allocation request data packet, the current node allocates account information to the to-be-authenticated mobile terminal according to the identity information of the mobile terminal to be authenticated, and uses the unique key generated by the current node's private key.
  • the digital signature signs the account information for the mobile terminal to be authenticated to ensure the accuracy of the account information by verifying the unique multiple digital signature and the account information is indeed sent by the current node.
  • nodes communicate and trust, and rely on multiple digital signature technologies. It mainly implements identity verification and information authenticity and integrity verification. Multiple digital signature is an effective method to solve data security in network communication. It can realize dialectic and authentication of data transmitted in the network. It is a simulation of traditional handwritten signature.
  • FIG. 2 shows a flow chart of a possible current node generating a unique multiple digital signature with its private key. The specific steps are as follows:
  • the random hash value is encrypted with the private key of the current node to generate a unique multiple digital signature of the current node.
  • the blockchain network is sent to the mobile terminal to be authenticated.
  • the process of generating a unique multiple digital signature by the current node and signing the account information by using the unique multiple digital signature generally relates to an algorithm for hashing a message by using a hash function and using a message signature algorithm. The message is signed.
  • a hash function is a function that can convert input messages of different lengths into a digest of messages of fixed length. Applying a hash function to multiple digital signatures not only shortens the length of the message but also greatly speeds up the signature.
  • commonly used hash functions include the MD series invented by Rivest and the SHA series proposed by NIST (National Institute of Standards and Technology).
  • a multiple digital signature is some data that is attached to a data unit or a cryptographic transformation of a data unit. Such data or transformations allow the recipient of the data unit to confirm the integrity of the data unit source and data unit and to protect the data from being falsified by a person.
  • the present invention applies a multiple digital signature algorithm to hash the public key of the current node and the unique multiple digital signature generated by the previous node, and the digest generated by the current node is cryptographically transformed to generate uniqueness.
  • the public key of the current node in FIG. 2 and the unique multiple digital signature generated by the previous node are randomly hashed to generate a random hash value before:
  • each node verifies whether the last unique multi-signature signature is valid before signing (the first node signature does not need to be judged). If the unique multiple digital signature is valid, then sign with its own private key and then send the resulting unique multiple digital signature to the next node.
  • the step of verifying the validity of the unique multi-signature of the previous node specifically includes:
  • the unique multi-signature of the previous node is decrypted by using the public key of the previous node. If the decrypted random hash value is consistent with the random hash value of the current node, it is determined that the multiple digital signature is valid.
  • the embodiment of the present invention combines two major functions of multiple digital signatures in the transmission process of a message: ensuring the integrity of the message during transmission and providing identity verification for the sender of the message. That is, the sender attaches the unique multi-signature corresponding to the message when the message is sent, and the receiver receives the message and the unique multiple digital signature, and compares with the abstract of the received message by decrypting the unique multiple digital signature. To complete the check.
  • the identity information includes verification information, where the verification information is a unique device identifier of the mobile terminal to be authenticated, and the unique key digital signature is generated by using the private key of the current node to sign
  • the step of the account information further includes:
  • the blockchain includes a first block for storing a private key of each node and a second block for storing other content.
  • the method further includes: processing, by the account allocation request data packet, the first information including the account information, the identity information of the mobile terminal to be authenticated, the unique multiple digital signature, and the public key of the authentication node.
  • An interactive record is written into the second block and the first interaction record is broadcast in the blockchain network.
  • each block on the blockchain has a database for storing the interaction record on the block, which is equivalent to a "book”, the current node will sign the unique multiple
  • the digitally signed account information, the identity information of the mobile terminal to be authenticated, and the specific form in which the current node's public key is written and stored in the second block may be stored in the first in a one-to-one mapping relationship.
  • the second block is in the database for subsequent queries.
  • the blockchain-based mobile terminal authentication management method of the present invention combines the transaction transparency and the irreversible modification characteristics of the blockchain network, and the account information distribution and authentication are written into the blockchain as part of the interaction, and each will be An interactive record is recorded in the corresponding block in real time, forming a distributed database that is almost impossible to change, improving the validity of account information.
  • the current node broadcasts the unique multiple digital signature, the public key of the current node, and the account information in the blockchain network, so that each node can receive the broadcast.
  • Each node is allowed to obtain a copy of the database corresponding to the complete interaction record of the current node.
  • Each interaction record is visible to all nodes. Therefore, the user can connect to any node for authentication, so that the authentication process does not depend on At a single source, the risk of malicious tampering is reduced.
  • the "distributed" here is not only embodied in the distributed storage of data, but also in the distributed recording of data (that is, jointly maintained by system participants).
  • the data interaction between nodes and nodes is verified by multiple digital signatures without mutual trust.
  • the nodes maintain a data of the entire blockchain based on a set of consensus mechanisms. Any node fails and other nodes can still work normally. Improve the efficiency and reliability of data interaction.
  • the account information of the unique multiple digital signature, the identity information of the mobile terminal to be authenticated, and the public key of the current node are taken as the first
  • the interaction record is written in the second block, and may be stored in the database of the second block in a one-to-one mapping relationship and broadcast the interactive record of the time, when the mobile terminal to be authenticated receives the broadcast Get the relevant data of the interaction record to the blockchain.
  • the to-be-authenticated mobile terminal first acquires account information that has signed the unique multiple digital signature and decrypts the account information with the public key of the current node.
  • the to-be-authenticated mobile terminal obtains the identity information of the to-be-authenticated mobile terminal stored in the database in association with the account information, and compares the obtained identity information of the to-be-authenticated mobile terminal with its own identity information, and if it matches, the decryption is verified.
  • the account information is the account information that matches the identity information of the user, and the verification result is fed back to the current node through the blockchain network. After receiving the feedback result, the current node confirms that the to-be-authenticated mobile terminal obtains the distribution. Account information.
  • another embodiment of the present invention further includes a step S15, where the current node acquires an account authentication request data packet sent by the to-be-authenticated mobile terminal in a blockchain, and acquires the to-be-authenticated mobile terminal. Public key.
  • the to-be-authenticated mobile terminal obtains the account information of the unique multi-signature signed by the current node, sends an account authentication request packet to the blockchain, and transmits the uniqueness of the uniqueness obtained by using the private key pair.
  • the ciphertext information after the digital signature is encrypted.
  • the account to be authenticated sends the account authentication request data packet, the account authentication request data packet and the ciphertext information are written as the second interaction record into the second block and the second interaction record is broadcasted in real time. Record the latest interaction records to form a permanent, reliable “book”.
  • the current node After the mobile terminal to be authenticated broadcasts the second interaction record, the current node acquires an account authentication request data packet sent by the mobile terminal to be authenticated to the blockchain, and acquires a public key of the mobile terminal to be authenticated. Specifically, the current node acquires the ciphertext information sent by the to-be-authenticated mobile terminal included in the account authentication request data packet, and decrypts the ciphertext information by using the public key of the to-be-authenticated mobile terminal, and compares and decrypts The unique unique multiple digital signature is consistent with the unique multiple digital signature signed by the current node when the account is allocated to the to-be-authenticated mobile terminal. If they are consistent, the to-be-authenticated mobile terminal passes the current authentication.
  • the authentication result information of the to-be-authenticated mobile terminal is written into the second interaction record in the second block of the blockchain and broadcasted, the authentication result information.
  • the authentication of the mobile terminal to be authenticated is passed and the authentication fails.
  • another embodiment of the present invention further includes a step S16, where the current node acquires, in the blockchain, the revocation account request data packet including the authenticated account information initiated by the to-be-authenticated mobile terminal;
  • the revocation account request packet finds corresponding account information from the second interaction record; the account information is written into the revocation list, and the revocation list is stored in the second block of the blockchain.
  • the allocated account information may be revoked.
  • the operation of the revocation may be triggered by the revocation request initiated by the mobile terminal to be authenticated.
  • the to-be-authenticated mobile terminal sends a revocation account request data packet containing the authenticated account information to the blockchain network, and the current node obtains the revocation account request data packet from the blockchain network and according to the account information carried therein
  • the second interaction record is found in the second interaction record, and the account information is written into the revocation list according to the second interaction record. Specifically, whether the account information in the second interaction record has been verified is verified, and if yes, the revocation is performed. Operation, otherwise it will not be executed.
  • the current node may also query the second interaction record in real time to determine whether there is an account to be revoked, and if so, the undo operation is automatically triggered.
  • the current node searches the blockchain for the transaction record of the transaction to be authenticated by the mobile terminal to be authenticated, finds the latest transaction, and retrieves the allocated or authenticated account information contained therein. Among them, if the authenticated account information can be taken out from the latest transaction, it means that there is revocable account information, otherwise it will not return directly. If there is a revocable account, the current node writes the corresponding account information into the revocation list, and writes a third interaction record including processing the revocation list corresponding to the revocation account request packet to the blockchain. The second interaction record is broadcast in the block and in the blockchain network.
  • the revocation operation when the current node cancels the account information may be triggered when the mobile terminal to be authenticated initiates the revocation request, or may be triggered under the revocation request initiated by the current node, and the specific trigger is triggered.
  • the mechanism is not limited here.
  • the embodiment of the present invention further includes receiving an account query request sent by the user terminal, acquiring account information included in the account query request, and searching for the account information from the second block according to the account information.
  • the interaction record is used to determine the interaction result information of the account information to be queried; and the interaction result information corresponding to the account information is sent to the user terminal, so that the user terminal determines the validity of the account to be queried according to the interaction result information.
  • the validity of the query account information may also be determined according to the third interaction record to determine whether the account corresponding to the account information to be queried is valid. Specifically, only the third interaction record on the blockchain is obtained.
  • the present invention further provides a block chain-based mobile terminal authentication management apparatus.
  • the first receiving module 11, the distribution module 12, the broadcast module 13, and the second receiving module 14 are included.
  • another embodiment further includes an authentication module 15 and an undo module 16, wherein
  • a first receiving module 11 the current node receives an account allocation request data packet in the blockchain network
  • the to-be-authenticated mobile terminal sends an account allocation request data packet in the blockchain network to request the current node to allocate account information, where the account allocation request data packet includes the identity information of the mobile terminal to be authenticated. And allocating account information to the designated mobile terminal to be authenticated according to the identity information of the mobile terminal to be authenticated, where the identity information may be a device identifier or a device serial number of the mobile terminal to be authenticated, and the like may uniquely represent the to-be-authenticated Information about the identity of the mobile terminal.
  • the interaction record corresponding to the account allocation request data packet is written into the blockchain for other nodes to query or acquire data.
  • the allocating module 12 assigning account information to the designated mobile terminal to be authenticated according to the account allocation request data packet, and generating a unique multiple digital signature by using the private key of the current node to sign the account information;
  • the current node after receiving the account allocation request data packet, the current node allocates account information to the to-be-authenticated mobile terminal according to the identity information of the mobile terminal to be authenticated, and uses the unique key generated by the current node's private key.
  • the digital signature signs the account information for the mobile terminal to be authenticated to ensure the accuracy of the account information by verifying the unique multiple digital signature and the account information is indeed sent by the current node.
  • nodes communicate and trust, and rely on multiple digital signature technologies. It mainly implements identity verification and information authenticity and integrity verification. Multiple digital signature is an effective method to solve data security in network communication. It can realize dialectic and authentication of data transmitted in the network. It is a simulation of traditional handwritten signature.
  • the random hash value is encrypted with the private key of the authentication node to generate a unique multiple digital signature of the current node.
  • the blockchain network is sent to the mobile terminal to be authenticated.
  • the process of generating a unique multiple digital signature by the current node and signing the account information by using the unique multiple digital signature generally relates to an algorithm for hashing a message by using a hash function and using a message signature algorithm. The message is signed.
  • a hash function is a function that can convert input messages of different lengths into a digest of messages of fixed length. Applying a hash function to multiple digital signatures not only shortens the length of the message but also greatly speeds up the signature.
  • commonly used hash functions include the MD series invented by Rivest and the SHA series proposed by NIST (National Institute of Standards and Technology).
  • a multiple digital signature is some data that is attached to a data unit or a cryptographic transformation of a data unit. Such data or transformations allow the recipient of the data unit to confirm the integrity of the data unit source and data unit and to protect the data from being falsified by a person.
  • the present invention applies a multiple digital signature algorithm to hash the public key of the current node and the unique multiple digital signature generated by the previous node, and the digest generated by the current node is cryptographically transformed to generate uniqueness.
  • the method before the random hash operation of the public key of the current node and the unique multiple digital signature generated by the previous node to generate a random hash value, the method further includes:
  • each node verifies whether the last unique multi-signature signature is valid before signing (the first node signature does not need to be judged). If the unique multiple digital signature is valid, then sign with its own private key and then send the resulting unique multiple digital signature to the next node.
  • the step of verifying the validity of the unique multi-signature of the previous node specifically includes:
  • the unique multi-signature of the previous node is decrypted by using the public key of the previous node. If the decrypted random hash value is consistent with the random hash value of the current node, it is determined that the multiple digital signature is valid.
  • the embodiment of the present invention combines two major functions of multiple digital signatures in the transmission process of a message: ensuring the integrity of the message during transmission and providing identity verification for the sender of the message. That is, the sender attaches the unique multi-signature corresponding to the message when the message is sent, and the receiver receives the message and the unique multiple digital signature, and compares with the abstract of the received message by decrypting the unique multiple digital signature. To complete the check.
  • the identity information includes verification information, where the verification information is a unique device identifier of the mobile terminal to be authenticated, and the unique key digital signature is generated by using the private key of the current node to sign
  • the step of the account information further includes:
  • Broadcast module 13 broadcasting the unique multiple digital signature, the public key of the current node, and account information in a blockchain network;
  • the blockchain includes a first block for storing a private key of each node and a second block for storing other content.
  • the method further includes: processing, by the account allocation request data packet, the first information including the account information, the identity information of the mobile terminal to be authenticated, the unique multiple digital signature, and the public key of the authentication node.
  • An interactive record is written into the second block and the first interaction record is broadcast in the blockchain network.
  • each block on the blockchain has a database for storing the interaction record on the block, which is equivalent to a "book”, the current node will sign the unique multiple
  • the digitally signed account information, the identity information of the mobile terminal to be authenticated, and the specific form in which the current node's public key is written and stored in the second block may be stored in the first in a one-to-one mapping relationship.
  • the second block is in the database for subsequent queries.
  • the blockchain-based mobile terminal authentication management method of the present invention combines the transaction transparency and the irreversible modification characteristics of the blockchain network, and the account information distribution and authentication are written into the blockchain as part of the interaction, and each will be An interactive record is recorded in the corresponding block in real time, forming a distributed database that is almost impossible to change, improving the validity of account information.
  • the current node broadcasts the unique multiple digital signature, the public key of the current node, and the account information in the blockchain network, so that each node can receive the broadcast.
  • Each node is allowed to obtain a copy of the database corresponding to the complete interaction record of the current node.
  • Each interaction record is visible to all nodes. Therefore, the user can connect to any node for authentication, so that the authentication process does not depend on At a single source, the risk of malicious tampering is reduced.
  • the "distributed" here is not only embodied in the distributed storage of data, but also in the distributed recording of data (that is, jointly maintained by system participants).
  • the data interaction between nodes and nodes is verified by multiple digital signatures without mutual trust.
  • the nodes maintain a data of the entire blockchain based on a set of consensus mechanisms. Any node fails and other nodes can still work normally. Improve the efficiency and reliability of data interaction.
  • the second receiving module 14 receiving the information that the to-be-authenticated mobile terminal decrypts after decrypting the unique multiple digital signature by using the public key, to confirm that the to-be-authenticated mobile terminal obtains the account information.
  • the account information of the unique multiple digital signature, the identity information of the mobile terminal to be authenticated, and the public key of the current node are taken as the first
  • the interaction record is written in the second block, and may be stored in the database of the second block in a one-to-one mapping relationship and broadcast the interactive record of the time, when the mobile terminal to be authenticated receives the broadcast Get the relevant data of the interaction record to the blockchain.
  • the to-be-authenticated mobile terminal first acquires account information that has signed the unique multiple digital signature and decrypts the account information with the public key of the current node.
  • the to-be-authenticated mobile terminal obtains the identity information of the to-be-authenticated mobile terminal stored in the database in association with the account information, and compares the obtained identity information of the to-be-authenticated mobile terminal with its own identity information, and if it matches, the decryption is verified.
  • the account information is the account information that matches the identity information of the user, and the verification result is fed back to the current node through the blockchain network. After receiving the feedback result, the current node confirms that the to-be-authenticated mobile terminal obtains the distribution. Account information.
  • another embodiment of the present invention further includes an authentication module 15 for acquiring, by a current node, an account authentication request data packet sent by the to-be-authenticated mobile terminal in a blockchain, and acquiring the to-be-authenticated mobile terminal. Public key.
  • the to-be-authenticated mobile terminal obtains the account information of the unique multi-signature signed by the current node, sends an account authentication request packet to the blockchain, and transmits the uniqueness of the uniqueness obtained by using the private key pair.
  • the ciphertext information after the digital signature is encrypted.
  • the account to be authenticated sends the account authentication request data packet, the account authentication request data packet and the ciphertext information are written as the second interaction record into the second block and the second interaction record is broadcasted in real time. Record the latest interaction records to form a permanent, reliable “book”.
  • the current node After the mobile terminal to be authenticated broadcasts the second interaction record, the current node acquires an account authentication request data packet sent by the mobile terminal to be authenticated to the blockchain, and acquires a public key of the mobile terminal to be authenticated. Specifically, the current node acquires the ciphertext information sent by the to-be-authenticated mobile terminal included in the account authentication request data packet, and decrypts the ciphertext information by using the public key of the to-be-authenticated mobile terminal, and compares and decrypts The unique unique multiple digital signature is consistent with the unique multiple digital signature signed by the current node when the account is allocated to the to-be-authenticated mobile terminal. If they are consistent, the to-be-authenticated mobile terminal passes the current authentication.
  • the authentication result information of the to-be-authenticated mobile terminal is written into the second interaction record in the second block of the blockchain and broadcasted, the authentication result information.
  • the authentication of the mobile terminal to be authenticated is passed and the authentication fails.
  • another embodiment of the present invention further includes an undoing module 16 for acquiring, by the current node, the revocation account request data packet including the authenticated account information initiated by the to-be-authenticated mobile terminal in the blockchain;
  • the revocation account request packet finds corresponding account information from the second interaction record; the account information is written into the revocation list, and the revocation list is stored in the second block of the blockchain.
  • the allocated account information may be revoked.
  • the operation of the revocation may be triggered by the revocation request initiated by the mobile terminal to be authenticated.
  • the to-be-authenticated mobile terminal sends a revocation account request data packet containing the authenticated account information to the blockchain network, and the current record node obtains the revocation account request data packet from the blockchain network and according to the account information carried therein Finding a corresponding second interaction record in the second interaction record, and writing the account information to the revocation list according to the second interaction record, specifically, checking whether the account information in the second interaction record has been authenticated, and if so, executing Undo the operation, otherwise it will not be executed.
  • the current node may also query the second interaction record in real time to determine whether there is an account to be revoked, and if so, the undo operation is automatically triggered.
  • the current node searches the blockchain for the transaction record of the transaction to be authenticated by the mobile terminal to be authenticated, finds the latest transaction, and retrieves the allocated or authenticated account information contained therein. Among them, if the authenticated account information can be taken out from the latest transaction, it means that there is revocable account information, otherwise it will not return directly. If there is a revocable account, the current node writes the corresponding account information into the revocation list, and writes a third interaction record including processing the revocation list corresponding to the revocation account request packet to the blockchain. The second interaction record is broadcast in the block and in the blockchain network.
  • the revocation operation when the current node cancels the account information may be triggered when the mobile terminal to be authenticated initiates the revocation request, or may be triggered under the revocation request initiated by the current node, and the specific trigger is triggered.
  • the mechanism is not limited here.
  • the embodiment of the present invention further includes receiving an account query request sent by the user terminal, acquiring account information included in the account query request, and searching for the account information from the second block according to the account information.
  • the interaction record is used to determine the interaction result information of the account information to be queried; and the interaction result information corresponding to the account information is sent to the user terminal, so that the user terminal determines the validity of the account to be queried according to the interaction result information.
  • the validity of the query account information may also be determined according to the third interaction record to determine whether the account corresponding to the account information to be queried is valid. Specifically, only the third interaction record on the blockchain is obtained.
  • the maximum benefit of the present invention is that the present invention applies the account allocation and account authentication of the mobile terminal as a transaction to the blockchain, and uses the blockchain to go through the center, trust, and transparently.
  • the technical solution of collectively maintaining a reliable database enables the data sharing process of the account allocation of the mobile terminal and the account authentication to be reliably guaranteed.
  • the present invention receives the request data packet of the account allocation initiated by the mobile terminal to be authenticated by the current node, allocates account information for the mobile terminal to be authenticated, and signs the multiple digital signature generated by the private key of the current node. After the account information is sent to the mobile terminal to be authenticated through the blockchain network. The validity of the account information is verified after the mobile terminal to be authenticated obtains the account information and multiple digital signatures.
  • the present invention receives the account information authentication request data packet sent by the mobile terminal to be authenticated through the blockchain through the current node, and obtains the encrypted information included in the account information authentication request data packet, and uses the mobile terminal to be authenticated.
  • the public key After decrypting the encrypted information, the public key obtains multiple digital signatures, and compares whether the decrypted multiple digital signatures are consistent with the multiple digital signatures signed when the current node allocates the account information. If they are consistent, the mobile terminal's authentication is passed, and the authentication is passed. The result is written into the corresponding interaction record of the blockchain and broadcasted to complete the authentication.
  • the present invention does not require physical equipment such as a USIM card to perform authentication management on the mobile terminal, thereby saving production and transportation costs.
  • multiple digital signature techniques are used to complete verification of the identity of the sender and validity verification of the transmitted account information; private key encryption and decryption technology is used in the authentication process of the account information to complete the identity of the mobile terminal.
  • Verification the combination of the two, constitutes a two-factor authentication mechanism to improve the security of the interaction process and the validity and integrity of the interaction data.
  • all nodes combined with the distributed nature of the blockchain, all nodes maintain an interactive record, so users can connect to any node for authentication. Making the authentication process independent of a single source reduces the risk of malicious tampering of records.
  • the present invention further provides a method for acquiring account information based on a blockchain.
  • the method includes the following steps:
  • the to-be-authenticated mobile terminal sends an account allocation request data packet in the blockchain network to request the current node to allocate account information, where the account allocation request data packet includes the identity information of the mobile terminal to be authenticated. And allocating account information to the designated mobile terminal to be authenticated according to the identity information of the mobile terminal to be authenticated, where the identity information may be a device identifier or a device serial number of the mobile terminal to be authenticated, and the like may uniquely represent the to-be-authenticated Information about the identity of the mobile terminal.
  • the interaction record generated corresponding to the account allocation request data packet is written into the second block in the blockchain for other nodes to query or acquire data.
  • S101 Receive account information sent by a current node in response to the account allocation request data packet, where the account information signs a unique multiple digital signature generated by the authentication node with its private key;
  • the account information is allocated to the to-be-authenticated mobile terminal in response to the account allocation request data packet.
  • the current node allocates account information for the mobile terminal to be authenticated according to the following scheme:
  • the current node obtains the identity information of the to-be-authenticated mobile terminal in the account allocation request data packet, and allocates account information to the to-be-authenticated mobile terminal according to the identity information.
  • the current node verifies the to-be-authenticated mobile terminal according to the verification information included in the identity information. After the verification is passed, the current node uses its private key to generate multiple digital signatures of the last transaction and its own public key. Performing digest encryption generated by the hash operator generates a unique multiple digital signature of the current node and signs the account information with the unique multiple digital signature.
  • the account information that has signed the unique multiple digital signature is sent to the mobile terminal to be authenticated through the blockchain network.
  • the mobile terminal to be authenticated receives the account information and verifies the unique multiple digital signature with the public key of the current node to verify that the account information matches its own identity information and that the account information is indeed sent by the current node.
  • the current node After the current node allocates the account information to the to-be-authenticated mobile terminal, the account information of the unique multiple digital signature, the identity information of the mobile terminal to be authenticated, and the public key of the current node are written as the first interaction record into the second In the block, the data may be stored in the database of the second block in a one-to-one mapping relationship, and the interactive record of the time is broadcasted.
  • the mobile terminal to be authenticated receives the broadcast, the block is obtained from the blockchain. Relevant data recorded by the interaction.
  • the to-be-authenticated mobile terminal first acquires account information that has signed the unique multiple digital signature and decrypts the account information with the public key of the current node.
  • the to-be-authenticated mobile terminal obtains the identity information of the to-be-authenticated mobile terminal stored in the database in association with the account information, and compares the obtained identity information of the to-be-authenticated mobile terminal with its own identity information, and if it matches, the decryption is verified.
  • the account information is account information that matches the identity information of the user.
  • the account authentication request data packet is initiated to the blockchain.
  • the to-be-authenticated mobile terminal encrypts the obtained unique multiple digital signature with its own private key to generate corresponding ciphertext information, and sends the ciphertext information to the blockchain and the account authentication request data.
  • the packet and the ciphertext information are written into the second block as a second interactive record and broadcast.
  • the current node After receiving the broadcast, the current node obtains the account authentication request data packet, the ciphertext information, and the public key of the authenticated mobile terminal, and decrypts the ciphertext information by using the public key of the mobile terminal to be authenticated to obtain a unique multiple digital signature.
  • the node compares the decrypted unique multiple digital signature with the unique multiple digital signature signed when signing the account information for the mobile terminal to be authenticated. If the two are consistent, the identity of the mobile terminal to be authenticated is verified.
  • the verification result is written into the second block as a second interaction record for query. This verification and the mobile terminal to be authenticated verify the identity of the current node is a dual authentication mechanism, which improves the reliability of the solution.
  • the present invention further provides a blockchain-based account information obtaining apparatus.
  • the method includes a sending module 100, a receiving module 101, and a decrypting module 102. among them,
  • the sending module 100 sends an account allocation request packet to the blockchain network.
  • the to-be-authenticated mobile terminal sends an account allocation request data packet in the blockchain network to request the current node to allocate account information, where the account allocation request data packet includes the identity information of the mobile terminal to be authenticated. And allocating account information to the designated mobile terminal to be authenticated according to the identity information of the mobile terminal to be authenticated, where the identity information may be a device identifier or a device serial number of the mobile terminal to be authenticated, and the like may uniquely represent the to-be-authenticated Information about the identity of the mobile terminal.
  • the interaction record generated corresponding to the account allocation request data packet is written into the second block in the blockchain for other nodes to query or acquire data.
  • Receiving module 101 receiving account information sent by a current node in response to the account allocation request data packet, the account information signing a unique multiple digital signature generated by the authentication node with its private key;
  • the account information is allocated to the to-be-authenticated mobile terminal in response to the account allocation request data packet.
  • the current node allocates account information for the mobile terminal to be authenticated according to the following scheme:
  • the current node obtains the identity information of the to-be-authenticated mobile terminal in the account allocation request data packet, and allocates account information to the to-be-authenticated mobile terminal according to the identity information.
  • the current node verifies the to-be-authenticated mobile terminal according to the verification information included in the identity information. After the verification is passed, the current node uses its private key to generate multiple digital signatures of the last transaction and its own public key. Performing digest encryption generated by the hash operator generates a unique multiple digital signature of the current node and signs the account information with the unique multiple digital signature.
  • the account information that has signed the unique multiple digital signature is sent to the mobile terminal to be authenticated through the blockchain network.
  • the mobile terminal to be authenticated receives the account information and verifies the unique multiple digital signature with the public key of the current node to verify that the account information matches its own identity information and that the account information is indeed sent by the current node.
  • the decryption module 102 decrypts the unique multiple digital signature with the public key of the current node to obtain the account information.
  • the current node After the current node allocates the account information to the to-be-authenticated mobile terminal, the account information of the unique multiple digital signature, the identity information of the mobile terminal to be authenticated, and the public key of the current node are written as the first interaction record into the second In the block, the data may be stored in the database of the second block in a one-to-one mapping relationship, and the interactive record of the time is broadcasted.
  • the mobile terminal to be authenticated receives the broadcast, the block is obtained from the blockchain. Relevant data recorded by the interaction.
  • the to-be-authenticated mobile terminal first acquires account information that has signed the unique multiple digital signature and decrypts the account information with the public key of the current node.
  • the to-be-authenticated mobile terminal obtains the identity information of the to-be-authenticated mobile terminal stored in the database in association with the account information, and compares the obtained identity information of the to-be-authenticated mobile terminal with its own identity information, and if it matches, the decryption is verified.
  • the account information is account information that matches the identity information of the user.
  • the account authentication request data packet is initiated to the blockchain.
  • the to-be-authenticated mobile terminal encrypts the obtained unique multiple digital signature with its own private key to generate corresponding ciphertext information, and sends the ciphertext information to the blockchain and the account authentication request data.
  • the packet and the ciphertext information are written into the second block as a second interactive record and broadcast.
  • the current node After receiving the broadcast, the current node obtains the account authentication request data packet, the ciphertext information, and the public key of the authenticated mobile terminal, and decrypts the ciphertext information by using the public key of the mobile terminal to be authenticated to obtain a unique multiple digital signature.
  • the node compares the decrypted unique multiple digital signature with the unique multiple digital signature signed when signing the account information for the mobile terminal to be authenticated. If the two are consistent, the identity of the mobile terminal to be authenticated is verified.
  • the verification result is written into the second block as a second interaction record for query. This verification and the mobile terminal to be authenticated verify the identity of the current node is a dual authentication mechanism, which improves the reliability of the solution.
  • the maximum benefit of the present invention is that the present invention completes the process of allocating and authenticating account information through the mobile terminal in cooperation with the authentication node.
  • the to-be-authenticated mobile terminal initiates an allocation request data packet of the account information to the current node through the blockchain and writes the corresponding interaction record into the blockchain, and the current node allocates an account for the mobile terminal to be authenticated according to the account information allocation request.
  • the information is written into the blockchain and the corresponding interaction record is written into the account chain.
  • the to-be-authenticated mobile terminal sends an account information authentication request data packet to the current node through the blockchain, and writes the corresponding interaction record into the blockchain, and the current node authenticates the request data packet according to the account information to authenticate the account information of the mobile terminal to be authenticated.
  • the corresponding interaction record is written into the blockchain to complete the authentication of the account information.
  • the performance is performed on the mobile terminal, and the authentication node completes the allocation, authentication, and revocation of the account information, and queries each interaction process to ensure the accuracy and reliability of data transmission in each interaction process, and cooperates with the authentication node to complete the dual authentication mechanism.
  • the embodiment of the present invention further provides a mobile terminal.
  • a mobile terminal As shown in FIG. 8 , for the convenience of description, only parts related to the embodiment of the present invention are shown. For details that are not disclosed, refer to the embodiment of the present invention. Method part.
  • the terminal may be any terminal device including a mobile phone, a tablet computer, a PDA (Personal Digital Assistant), a POS (Point of Sales), an in-vehicle computer, and the terminal is a mobile phone as an example:
  • FIG. 8 is a block diagram showing a partial structure of a mobile phone related to a terminal provided by an embodiment of the present invention.
  • the mobile phone includes components such as a touch sensitive display 0813, a processor 0811, a memory 0814, and the like. It will be understood by those skilled in the art that the structure of the handset shown in FIG. 8 does not constitute a limitation to the handset, and may include more or less components than those illustrated, or some components may be combined, or different component arrangements.
  • the memory 0814 can be used to store software programs and modules, and the processor 0811 performs various functional applications and data processing of the mobile phone by running software programs and modules stored in the memory 0814.
  • the memory 0814 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may be stored according to Data created by the use of the mobile phone (such as audio data, phone book, etc.).
  • memory 0814 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device.
  • the touch sensitive display 0813 can include two portions of a touch detection device and a touch controller. Wherein, the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information. Give the processor and receive commands from the processor and execute them.
  • touch sensitive displays can be implemented in a variety of types including resistive, capacitive, infrared, and surface acoustic waves.
  • the touch sensitive display 0813 can be used to display information input by the user or information provided to the user as well as various menus of the mobile phone, such as an information editing interface.
  • the touch-sensitive display 0813 may include a display panel.
  • the touch-sensitive display may be configured in the form of a liquid crystal display (LCD), an organic light-emitting diode (OLED), or the like.
  • LCD liquid crystal display
  • OLED organic light-emitting diode
  • the handset can also include at least one type of sensor 0812, such as a light sensor, motion sensor, and other sensors.
  • the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor can adjust the brightness of the display panel according to the brightness of the ambient light, and the proximity sensor can close the display panel and/or the backlight when the mobile phone moves to the ear.
  • the accelerometer sensor can detect the magnitude of acceleration in all directions (usually three axes). When it is stationary, it can detect the magnitude and direction of gravity. It can be used to identify the gesture of the mobile phone (such as horizontal and vertical screen switching, related Game, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tapping), etc.
  • the mobile phone can also be configured with gyroscopes, barometers, hygrometers, thermometers, infrared sensors and other sensors, no longer Narration.
  • the processor 0811 is the control center of the mobile phone, and connects various parts of the entire mobile phone using various interfaces and lines, by executing or executing software programs and/or modules stored in the memory 0814, and calling data stored in the memory 0814.
  • the processor 0811 may include one or more processing units; preferably, the processor 0811 may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, and the like.
  • the modem processor primarily handles wireless communications. It can be understood that the above modem processor may not be integrated into the processor 0811.
  • the mobile phone also includes a power source (such as a battery) for supplying power to various components.
  • a power source such as a battery
  • the power source can be logically connected to the processor 0811 through a power management system to manage functions such as charging, discharging, and power management through the power management system.
  • the mobile phone may further include a camera, a Bluetooth module, and the like, and details are not described herein again.
  • the processor 0811 included in the terminal further has the following functions:
  • the unique multiple digital signature is decrypted with the public key of the current node to obtain the account information.
  • the blockchain includes a first block for storing a private key of each node and a second block for storing other content, and the current node will process the account allocation request data packet corresponding to the account information And the first interaction record of the identity information of the mobile terminal to be authenticated, the unique multiple digital signature, and the public key of the authentication node is written into the second block, and the first interaction is broadcasted in the blockchain network. recording.
  • the identity information is compared with the identity information of the user, if the identity information is consistent, the account information is verified to be valid.
  • the verified result is fed back to the blockchain.
  • ROM read only memory
  • RAM Random Access Memory

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明提供一种基于区块链的移动终端认证管理方法及装置，所述方法包括如下步骤：当前节点接收区块链网络中的账户分配请求数据包；根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息；在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息；接收所述待认证移动终端通过当前节点的公钥解密唯一性多重数字签名后反馈的结果，以确认所述待认证移动终端获得所述账户信息。该方法能够保证移动终端的认证管理过程中账户信息的有效性，提升整个认证过程的准确性。

Description

基于区块链的移动终端认证管理方法、装置及相应的移动终端 技术领域
本发明涉及网络通信技术领域，具体涉及一种基于区块链的移动终端认证管理方法、装置及相应的移动终端。
背景技术
随着智能手机、平板电脑等轻薄便携的移动智能终端与人们的生活、工作和学习结合得越来越紧密，随之而来的设备管理也不断挑战传统IT运维管理。传统方式下移动终端普遍都通过USIM卡等用户身份识别模块来统一由运营商等机构认证管理。USIM卡是Universal Subscriber Identity Module的缩写，也称为全球用户识别卡。USIM也称为升级SIM，是在UMTS(Universal Mobile Telecommunication System)网络的一个构件，除能够支持多应用之外，USIM卡还在安全性方面对算法进行了升级，并增加了卡对网络的认证功能。
由于USIM卡是一个装有微处理器的芯片卡，也就说这个物理设备可以伪造也可以通过非正规渠道获取从而得到个人私密信息，带来极大的安全隐患；并且USIM卡带来许多生产和运输成本，加大了业务运营、生产成本以及管理费用。
由此可见，现有的移动终端认证管理不仅成本高，而且认证准确度不高，存在安全隐患。另外，现有的移动终端认证需要在本地存储移动终端账户，操作繁杂，不利于节约空间并且灵活性不高。
发明内容
本发明提供一种基于区块链的移动终端认证管理方法及装置，实现移动终端账户信息的分配及认证管理。
第一方面，本发明提供一种基于区块链的移动终端的认证管理方法，所述方法包括:
当前节点接收区块链网络中的账户分配请求数据包；
根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息；
在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息；
接收所述待认证移动终端通过当前节点的公钥解密唯一性多重数字签名后反馈的结果，以确认所述待认证移动终端获得所述账户信息。
具体的，所述账户分配请求数据包包含所述待认证移动终端的身份信息，用于根据所述待认证移动终端的身份信息为指定的待认证移动终端分配账户信息。
优选的，所述区块链包括用于存储各节点的私钥的第一区块以及用于存储其他内容的第二区块；所述根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息的步骤之后，还包括：
将处理所述账户分配请求数据包对应生成的包括所述账户信息、待认证移动终端的身份信息、所述唯一性多重数字签名以及认证节点的公钥的第一交互记录写入所述第二区块中，并在区块链网络中广播所述第一交互记录。
具体的，所述用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息的步骤具体包括：
对当前节点的公钥、上一节点生成的唯一性多重数字签名进行随机散列运算以生成一个随机散列值；
对所述随机散列值用所述认证节点的私钥进行加密以生成一个当前节点的唯一性多重数字签名。
具体的，所述对当前节点的公钥、上一节点生成的唯一性多重数字签名进行随机散列运算以生成一个随机散列值之前还包括：
对上一节点的唯一性多重数字签名的有效性进行验证，当验证通过后，执行后续步骤。
具体的，所述对上一节点的唯一性多重数字签名的有效性进行验证的步骤中具体包括：
用上一节点的公钥对上一节点的唯一性多重数字签名进行解密，若解密后的随机散列值与当前节点的随机散列值一致，依据解密的结果判断该多重数字签名是否有效。
具体的，所述身份信息包括验证信息，所述验证信息为所述待认证移动终端的唯一性设备识别码，所述用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息的步骤之前还包括：
根据所述验证信息对所述待认证移动终端进行验证。
优选的，还包括：
当前节点在区块链获取所述待认证移动终端发送的账户认证请求数据包，并获取所述待认证移动终端的公钥。
具体的，所述当前节点在区块链获取所述待认证移动终端发送的账户认证请求数据包之后还包括：
获取所述账户认证请求数据包中包含的所述待认证移动终端发送的密文信息，并用所述待认证移动终端的公钥对所述密文信息进行解密，所述密文信息为所述待认证移动终端用其私钥对所述唯一性多重数字签名进行加密生成。
具体的，所述获取所述账户认证请求数据包中包含的所述待认证移动终端发送的密文信息，并用所述待认证移动终端的公钥对所述密文信息进行解密之后还包括：
对比解密后的唯一性多重数字签名若与当前节点为所述待认证移动终端分配账户时签署的唯一性多重数字签名一致，则该待认证移动终端通过本次认证。
具体的，所述移动终端发出所述账户认证请求数据包后，将包含所述移动终端的公钥以及处理所述账户认证请求数据包对应生成的所述密文信息的第二交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第二交互记录。
优选的，还包括：
当前节点在区块链获取所述待认证移动终端发起的包含已认证账户信息的撤销账户请求数据包；
依据所述撤销账户请求数据包从所述第二交互记录中找到对应的账户信息；
将该账户信息写入撤销列表，所述撤销列表存储于区块链的所述第二区块中。
具体的，所述将所述已认证的账户信息放入撤销列表的步骤之后，还包括：
将包括处理所述撤销账户请求数据包对应生成的撤销列表的第三交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第三交互记录。
具体的，还包括：
将待认证移动终端的认证结果信息写入所述区块链的第二区块中的第二交互记录中并广播，所述认证结果信息包括所述待认证移动终端认证通过及认证失败。
优选的，还包括：
接收用户终端发送的账户查询请求，获取所述账户查询请求中包含的账户信息；
根据所述账户信息从所述第二区块中查找所述账户信息对应的交互记录以确定待查询账户信息的交互结果信息；
向所述用户终端发送所述账户信息对应的交互结果信息以便所述用户终端依据该交互结果信息确定所述待查询账户的有效性。
具体的，所述向所述用户终端发送所述账户信息对应的交互结果信息以便所述用户终端依据该交互结果信息确定所述待查询账户的有效性，具体包括：
依据第三交互记录判断待查询账户信息对应的账户是否有效。
第二方面，本发明提供一种基于区块链的账户信息的获取方法，包括：
向区块链网络发送账户分配请求数据包；
接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
具体的，所述区块链包括用于存储各节点的私钥的第一区块以及用于存储其他内容的第二区块。
具体的，当前节点将处理所述账户分配请求数据包对应生成的包括所述账户信息、待认证移动终端的身份信息、所述唯一性多重数字签名以及认证节点的公钥的第一交互记录写入所述第二区块中，并在区块链网络中广播所述第一交互记录。
优选的，还包括：
获取与所述账户信息关联性储存于所述第二区块中的待认证移动终端的身份信息；
对比该身份信息与自身的身份信息，若一致，则验证所述账户信息有效。
具体的，还包括：
向区块链发起账户认证请求数据包，并向区块链发送所述待认证移动终端用其私钥加密所述唯一性多重数字签名生成的密文信息以供当前节点依据该账户认证请求数据包以及所述密文信息对所述待认证移动终端进行认证。
具体的，所述向区块链发出账户认证请求数据包之后还包括：
将包含所述移动终端的公钥以及处理所述账户认证请求数据包对应生成的所述密文信息的第二交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第二交互记录。
优选的，还包括：
将验证后的结果反馈至所述区块链。
第三方面，本发明提供一种基于区块链的移动终端的认证管理装置，包括：
第一接收模块：当前节点接收区块链网络中的账户分配请求数据包；
分配模块：根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息；
广播模块：在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息；
第二接收模块：接收所述待认证移动终端通过所述公钥解密唯一性多重数字签名后反馈的信息，以确认所述待认证移动终端获得所述账户信息。
具体的，还包括：
认证模块：当前节点在区块链获取所述待认证移动终端发送的账户认证请求数据包，并获取所述待认证移动终端的公钥。
具体的，还包括：
撤销模块：当前节点在区块链获取所述待认证移动终端发起的包含已认证账户信息的撤销账户请求数据包；依据所述撤销账户请求数据包从所述第二交互记录中找到对应的账户信息；将该账户信息写入撤销列表，所述撤销列表存储于区块链的所述第二区块中。
第四方面，本发明提供一种基于区块链的账户信息的获取装置，包括：
发送模块：向区块链网络发送账户分配请求数据包；
接收模块：接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
解密模块：用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
第五方面，本发明提供一种认证管理装置，包括处理器及存储器，所述存储器中存储有计算机程序，其特征在于，所述计算机程序被处理器执行时实现如下步骤：
当前节点接收区块链网络中的账户分配请求数据包；
根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息；
在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息；
接收所述待认证移动终端通过当前节点的公钥解密唯一性多重数字签名后反馈的结果，以确认所述待认证移动终端获得所述账户信息。
第六方面，本发明提供一种移动终端，包括处理器及存储器，所述存储器中存储有计算机程序，其特征在于，所述计算机程序被处理器执行时实现如下步骤：
向区块链网络发送账户分配请求数据包；
接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
相比现有技术，本发明提供的方案有以下优点：
1、本发明提供一种基于区块链的移动终端的认证管理方法，在账户信息分配阶段，表现在认证节点一端，当前节点接收待认证移动终端通过区块链发送的账户信息分配请求数据包，为移动终端分配账户信息，并生成多重数字签名签署该账户信息。相应的，表现在移动终端，移动终端接收所述账户信息，并用当前节点的公钥解密多重数字签名以获取账户信息并验证账户信息的有效性。在账户信息认证阶段，表现在认证节点一端，当前节点接收移动终端通过区块链发送的账户信息认证请求数据包，用移动终端的公钥通过解密变换以验证移动终端的身份。相应的，表现在移动终端，移动终端通过区块链向当前节点发送包含用其私钥加密的多重数字签名的账户信息认证请求，以便当前节点通过对应的解密运算完成账户信息的认证。本发明采用上述双重认证的机制确保了整个认证过程的准确性。另外，本发明将分配账户的交互记录及认证账户的交互记录写入区块链上，结合区块链分布式的特点，所有节点都保存了交互的记录，因此保证了各交互记录的有效性与可靠性。
2、具体而言，本发明结合了区块链的开放性与不可篡改性，各节点都可以参与到区块链网络中，每个节点都允许获得一份完整的交互记录的拷贝，单个甚至多个节点对区块链上数据的修改都无法影响其他节点的数据，任一节点失效，其余节点仍然能正常工作，使得认证过程不依赖于单个来源，降低了交互记录被恶意篡改的风险。
3、本发明结合了区块链的去中心，去信任，不存在中心化的设备和管理机构，节点之间的数据交互通过唯一性多重数字签名技术进行验证，具体而言，当前节点用其私钥生成的唯一性多重数字签名签署分配的账户信息，一方面能确定该账户信息确实是由当前节点签名并发出的，另一方面，保证了发出的账户信息的完整性，提升了验证过程的准确性。
4、本发明通过实时查询当前区块链的第三交互记录来获知账户信息是否被撤销，解 决了用户无法及时获知账户信息是否被撤销的问题。
综上，本发明所述方法提升了验证过程的准确性，降低了交互记录被恶意篡改的风险，另外，本发明无需通过USIM卡等物理设备对移动终端进行管理，节省了生产和运输成本，最后，移动终端和认证节点可采取任意方式连接到区块链网络中，增大了组网的灵活性。
本发明附加的方面和优点将在下面的描述中部分给出，这些将从下面的描述中变得明显，或通过本发明的实践了解到。
附图说明
本发明上述的和/或附加的方面和优点从下面结合附图对实施例的描述中将变得明显和容易理解，其中：
图1为本发明的一种基于区块链的移动终端认证管理方法实施例一流程框图；
图2为本发明的认证节点对账户信息的签名及校验签名方法流程图；
图3为本发明的一种基于区块链的移动终端认证管理方法实施例二流程框图；
图4为本发明的一种基于区块链的移动终端认证管理装置实施例一流程框图；
图5为本发明的一种基于区块链的移动终端认证管理装置实施例二流程框图；
图6为本发明的一种基于区块链的账户信息获取方法实施例一流程框图；
图7为本发明的一种基于区块链的账户信息获取装置实施例一流程框图；
图8为一种移动终端部分结构框图。
具体实施方式
下面详细描述本发明的实施例，所述实施例的示例在附图中示出，其中自始至终相同或类似的标号表示相同或类似的元件或具有相同或类似功能的元件。下面通过参考附图描述的实施例是示例性的，仅用于解释本发明，而不能解释为对本发明的限制。
请参阅图1，本发明所提供的一种基于区块链的移动终端的认证管理方法，具体的一种实施方式中，具体包括如下步骤：
S11、当前节点接收区块链网络中的账户分配请求数据包。
本发明实施例中，所述待认证移动终端在区块链网络中发送账户分配请求数据包以请求当前节点分配账户信息，所述账户分配请求数据包包含所述待认证移动终端的身份信息，用于根据待认证移动终端的身份信息为指定的待认证移动终端分配账户信息，所述身份信息可以为所述待认证移动终端的设备识别码或设备序列号等可以唯一性表征所述待认证移动终端的身份的信息。
所述待认证移动终端发出账户分配请求数据包之后，将该账户分配请求数据包对应生成的交互记录写入区块链中以供其他节点查询或获取数据。
S12、根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用当前节点的私钥生成唯一性多重数字签名以签署所述账户信息。
本发明实施例中，当前节点接收所述账户分配请求数据包后依据其包含的待认证移动终端的身份信息为所述待认证移动终端分配账户信息，并用当前节点的私钥生成的唯一性多重数字签名签署所述账户信息以供待认证移动终端通过验证该唯一性多重数字签名确保该账户信息的准确性以及该账户信息确实是由当前节点所发送。
在区块链的分布式网络里，节点之间进行通讯并达成信任，需要依赖多重数字签名技术，它主要实现了身份确认以及信息真实性、完整性验证。多重数字签名是解决网络通信中数据安全的一种有效方法，能够实现对网络中传输数据的辩证和认证，是对传统 手写签名的一种模拟。
请参考图2，图2示出了一种可能的当前节点用其私钥生成唯一性多重数字签名的流程图，其中，具体步骤如下：
对当前节点即图中的节点1的公钥以及上一节点即图中的节点0生成的唯一性多重数字签名进行随机散列运算以生成一个随机散列值；
对所述随机散列值用当前节点的私钥进行加密以生成一个当前节点的唯一性多重数字签名。
设当前节点的公钥以及上一节点生成的唯一性多重数字签名构成消息明文M，对消息M进行散列运算得到其散列值即消息摘要z＝H(M)，对该散列值用当前节点的私钥加密生成唯一性多重数字签名s＝sig(k,H(M))，其中k为当前节点的私钥，当前节点用该唯一性多重数字签名签署所述账户信息并通过区块链网络发送至待认证移动终端。
本发明实施例中，当前节点用生成唯一性多重数字签名并用该唯一性多重数字签名签署所述账户信息的过程总具体涉及用散列函数对消息进行散列转换的算法以及用消息签名算法对消息进行签名。
具体而言，散列函数是一种能把不同长度的输入消息转换成固定长度的消息的摘要的函数。将散列函数运用于多重数字签名中不仅缩短了消息的长度还很大程度上提高了签名的速度。目前，常用的散列函数有Rivest发明的MD系列、NIST(美国国家标准技术研究所)提出的SHA系列。
多重数字签名是附加在数据单元上的一些数据，或是对数据单元所做的密码变换。这种数据或变换允许数据单元的接收者用于确认数据单元来源和数据单元的完整性，并保护数据防止被人进行伪造。应用于本发明中，本发明应用多重数字签名算法对当前节点的公钥、上一节点生成的唯一性多重数字签名进行散列运算后生成的摘要用当前节点的私钥进行密码变换生成唯一性多重数字签名，用于签署所述账户信息，并将所述账户以及该唯一性多重数字签名通过区块链网络发送至待认证移动终端，所述待认证移动终端通过区块链获取签署了唯一性多重数字签名的账户信息后进行相应的逆变换得到账户信息。
请继续参考图2，图2中当前节点的公钥以及上一节点生成的唯一性多重数字签名进行随机散列运算以生成一个随机散列值之前还包括：
对上一节点的唯一性多重数字签名的有效性进行验证，当验证通过后，执行后续步骤。即图中的右侧方框内，用节点1的公钥校验节点1生成的多重数字签名。
在多重签名过程中，各个节点在签名之前先验证上一个唯一性多重数字签名签名是否有效(第一个节点签名时不用判断)。如果唯一性多重数字签名有效，则用自己的私钥进行签名，然后把得到的唯一性多重数字签名发送给下一个节点。
一种可能的设计中，所述对上一节点的唯一性多重数字签名的有效性进行验证的步骤中具体包括：
用上一节点的公钥对上一节点的唯一性多重数字签名进行解密，若解密后的随机散列值与当前节点的随机散列值一致，则判断该多重数字签名有效。
本发明实施例结合多重数字签名在消息的传输过程中的两大主要作用：保证消息在传输过程中消息的完整性和提供对消息发送者的身份验证。即发送方在发送消息时附上该消息对应的唯一性多重数字签名，接收方接收到该消息及唯一性多重数字签名，通过解密该唯一性多重数字签名后与接收到的消息的摘要进行对比以完成验签。
本发明实施例中，所述身份信息包括验证信息，所述验证信息为所述待认证移动终端的唯一性设备识别码，所述用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息的步骤之前还包括：
根据所述验证信息对所述待认证移动终端进行验证。
S13、在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息。
本发明实施例中，所述区块链包括用于存储各节点的私钥的第一区块以及用于存储其他内容的第二区块。优选的，本步骤之前还包括：将处理所述账户分配请求数据包对应生成的包括所述账户信息、待认证移动终端的身份信息、所述唯一性多重数字签名以及认证节点的公钥的第一交互记录写入第二区块中，并在区块链网络中广播所述第一交互记录。
具体而言，当前节点为所述待认证移动终端分配账户信息后，将签署了所述唯一性多重数字签名的账户信息、待认证移动终端的身份信息以及当前节点的公钥作为第一交互记录写入第二区块中，区块链上的每一个区块都有一个数据库用于储存该区块上的交互记录，它相当于一个“账本”，当前节点将签署了所述唯一性多重数字签名的账户信息、待认证移动终端的身份信息以及当前节点的公钥写入并储存于所述第二区块中的具体形式可以是以一种一一映射的对应关系存储于所述第二区块的数据库中以便后续查询。
本发明所述基于区块链的移动终端认证管理方法结合了区块链网络的交易透明性及不可篡改性的特点，将账户信息的分配及认证作为交互的一部分写入区块链，将每一个交互的记录都实时记录在对应的区块中，构成一种几乎不可能被更改的分布式数据库，提升了账户信息的有效性。
具体而言，正是由于本发明所述方法中，当前节点在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息，使得每一个节点都能接收到广播，每一个节点都允许获得完整的当前节点的交互记录对应的数据库的拷贝，每一次的交互记录对所有的节点都是可见的，因此，用户可以连接到任意节点去进行认证，使得认证过程不依赖于单个来源，降低了记录被恶意篡改的风险。这里的“分布式”不仅仅体现为数据的分布式存储，也体现为数据的分布式记录(即由系统参与者共同维护)。另外，节点与节点之间的数据交互通过多重数字签名进行验证，无需相互信任，节点之间基于一套共识机制，共同维护整个区块链的数据，任意一节点失效，其他节点仍能正常工作，提升数据交互的效率与可靠性。
S14、接收所述待认证移动终端通过当前节点的公钥解密唯一性多重数字签名后反馈的结果，以确认所述待认证移动终端获得所述账户信息。
本发明实施例中，当前节点为所述待认证移动终端分配账户信息后，将签署了所述唯一性多重数字签名的账户信息、待认证移动终端的身份信息以及当前节点的公钥作为第一交互记录写入第二区块中，其可以是以一种一一映射的对应关系存储于所述第二区块的数据库中并广播该次的交互记录，当待认证移动终端收到广播后向区块链获取该次交互记录的相关数据。
具体而言，待认证移动终端首先获取签署了所述唯一性多重数字签名的账户信息并用当前节点的公钥解密出所述账户信息。待认证移动终端再获取与该账户信息关联性储存于数据库中的待认证移动终端的身份信息，通过对比获取的待认证移动终端的身份信息与自身的身份信息，若匹配，则验证了解密出的账户信息为与自身身份信息相匹配的账户信息，并将验证结果通过区块链网络反馈至当前节点，当前节点接收到反馈的结果后以此来确认所述待认证移动终端获取到其分配的账户信息。
请参考图3，本发明的另一个实施例中还包括一个步骤S15，用于当前节点在区块链获取所述待认证移动终端发送的账户认证请求数据包，并获取所述待认证移动终端的公钥。
本发明实施例中，待认证移动终端获取当前节点分配的签署了唯一性多重数字签名的账户信息后向区块链发出账户认证请求数据包，并发送用自己的私钥对获取的唯一性 多重数字签名加密后的密文信息。所述待认证移动终端发出账户认证请求数据包后将该账户认证请求数据包以及所述密文信息作为第二交互记录写入所述第二区块中并广播所述第二交互记录以实时记录最新的交互记录形成一个永久的、可靠的“账本”。
所述待认证移动终端广播所述第二交互记录之后，当前节点向区块链获取所述待认证移动终端发送的账户认证请求数据包，并获取所述待认证移动终端的公钥。具体而言，当前节点获取所述账户认证请求数据包中包含的所述待认证移动终端发送的密文信息，并用所述待认证移动终端的公钥对所述密文信息进行解密，对比解密后的唯一性多重数字签名与当前节点为所述待认证移动终端分配账户时签署的唯一性多重数字签名是否一致，若一致，则该待认证移动终端通过本次认证。
优选的，当前节点认证完所述待认证移动终端后将待认证移动终端的认证结果信息写入所述区块链的第二区块中的第二交互记录中并广播，所述认证结果信息包括所述待认证移动终端认证通过及认证失败。
请继续参考图3，本发明的另一个实施例中还包括一个步骤S16用于当前节点在区块链获取所述待认证移动终端发起的包含已认证账户信息的撤销账户请求数据包；依据所述撤销账户请求数据包从所述第二交互记录中找到对应的账户信息；将该账户信息写入撤销列表，所述撤销列表存储于区块链的所述第二区块中。
本发明实施例中，当前节点认证完所述待认证移动终端的账户信息后可以将分配的账户信息进行撤销。其中该撤销的操作可以是由待认证移动终端发起的撤销请求而触发撤销。
所述待认证移动终端向区块链网络中发送包含已认证账户信息的撤销账户请求数据包，当前节点向区块链网络获取该撤销账户请求数据包并依据其中携带的账户信息从所述第二交互记录中找到对应的第二交互记录，依据该第二交互记录将该账户信息写入撤销列表，具体而言，查看第二交互记录中该账户信息是否已经完成认证，若是，则执行撤销操作，否则不执行。
在一种可能的设计中，当前节点也可以通过实时查询所述第二交互记录判断是否有有账户待撤销，若有，则自动触发撤销操作。
具体而言，当前节点从区块链上查找待认证移动终端发起交易的交易记录，找到最新的交易并取出其中包含的已分配或者已认证的账户信息。其中，若能从最新的交易中取出已认证的账户信息，则说明有可撤销的账户信息，否则没有，直接返回。如果有可撤销的账户，则当前节点将对应的账户信息写入撤销列表，并将包括处理所述撤销账户请求数据包对应生成的撤销列表的第三交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第三交互记录。
一种可能的设计中，当前节点对所述账户信息进行撤销时的撤销操作可以是在待认证移动终端发起撤销请求下触发，也可以是在当前节点发起的撤销请求下触发，其具体的触发机制在此不做限定。
优选的，本发明实施例还包括接收用户终端发送的账户查询请求，获取所述账户查询请求中包含的账户信息；根据所述账户信息从所述第二区块中查找所述账户信息对应的交互记录以确定待查询账户信息的交互结果信息；向所述用户终端发送所述账户信息对应的交互结果信息以便所述用户终端依据该交互结果信息确定所述待查询账户的有效性。
优选的，查询账户信息的有效性也可以依据第三交互记录判断待查询账户信息对应的账户是否有效，具体的，只需要通过查询区块链上第三交互记录获知。
参考图4所示，本发明还提供一种基于区块链的移动终端认证管理装置，一种实施例中，包括第一接收模块11、分配模块12、广播模块13以及第二接收模块14。请参考 图5，另一个实施例中还包括认证模块15以及撤销模块16其中，
第一接收模块11：当前节点接收区块链网络中的账户分配请求数据包；
本发明实施例中，所述待认证移动终端在区块链网络中发送账户分配请求数据包以请求当前节点分配账户信息，所述账户分配请求数据包包含所述待认证移动终端的身份信息，用于根据待认证移动终端的身份信息为指定的待认证移动终端分配账户信息，所述身份信息可以为所述待认证移动终端的设备识别码或设备序列号等可以唯一性表征所述待认证移动终端的身份的信息。
所述待认证移动终端发出账户分配请求数据包之后，将该账户分配请求数据包对应生成的交互记录写入区块链中以供其他节点查询或获取数据。
分配模块12：根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息；
本发明实施例中，当前节点接收所述账户分配请求数据包后依据其包含的待认证移动终端的身份信息为所述待认证移动终端分配账户信息，并用当前节点的私钥生成的唯一性多重数字签名签署所述账户信息以供待认证移动终端通过验证该唯一性多重数字签名确保该账户信息的准确性以及该账户信息确实是由当前节点所发送。
在区块链的分布式网络里，节点之间进行通讯并达成信任，需要依赖多重数字签名技术，它主要实现了身份确认以及信息真实性、完整性验证。多重数字签名是解决网络通信中数据安全的一种有效方法，能够实现对网络中传输数据的辩证和认证，是对传统手写签名的一种模拟。
一种可能的设计中，本发明用当前节点的私钥生成的唯一性多重数字签名的具体步骤如下：
对当前节点的公钥以及上一节点生成的唯一性多重数字签名进行随机散列运算以生成一个随机散列值；
对所述随机散列值用所述认证节点的私钥进行加密以生成一个当前节点的唯一性多重数字签名。
设当前节点的公钥以及上一节点生成的唯一性多重数字签名构成消息明文M，对消息M进行散列运算得到其散列值即消息摘要z＝H(M)，对该散列值用当前节点的私钥加密生成唯一性多重数字签名s＝sig(k,H(M))，其中k为当前节点的私钥，当前节点用该唯一性多重数字签名签署所述账户信息并通过区块链网络发送至待认证移动终端。
本发明实施例中，当前节点用生成唯一性多重数字签名并用该唯一性多重数字签名签署所述账户信息的过程总具体涉及用散列函数对消息进行散列转换的算法以及用消息签名算法对消息进行签名。
具体而言，散列函数是一种能把不同长度的输入消息转换成固定长度的消息的摘要的函数。将散列函数运用于多重数字签名中不仅缩短了消息的长度还很大程度上提高了签名的速度。目前，常用的散列函数有Rivest发明的MD系列、NIST(美国国家标准技术研究所)提出的SHA系列。
多重数字签名是附加在数据单元上的一些数据，或是对数据单元所做的密码变换。这种数据或变换允许数据单元的接收者用于确认数据单元来源和数据单元的完整性，并保护数据防止被人进行伪造。应用于本发明中，本发明应用多重数字签名算法对当前节点的公钥、上一节点生成的唯一性多重数字签名进行散列运算后生成的摘要用当前节点的私钥进行密码变换生成唯一性多重数字签名，用于签署所述账户信息，并将所述账户以及该唯一性多重数字签名通过区块链网络发送至待认证移动终端，所述待认证移动终端通过区块链获取签署了唯一性多重数字签名的账户信息后进行相应的逆变换得到账户信息。
本发明实施例中，当前节点的公钥以及上一节点生成的唯一性多重数字签名进行随机散列运算以生成一个随机散列值之前还包括：
对上一节点的唯一性多重数字签名的有效性进行验证，当验证通过后，执行后续步骤。
在多重签名过程中，各个节点在签名之前先验证上一个唯一性多重数字签名签名是否有效(第一个节点签名时不用判断)。如果唯一性多重数字签名有效，则用自己的私钥进行签名，然后把得到的唯一性多重数字签名发送给下一个节点。
一种可能的设计中，所述对上一节点的唯一性多重数字签名的有效性进行验证的步骤中具体包括：
用上一节点的公钥对上一节点的唯一性多重数字签名进行解密，若解密后的随机散列值与当前节点的随机散列值一致，则判断该多重数字签名有效。
本发明实施例结合多重数字签名在消息的传输过程中的两大主要作用：保证消息在传输过程中消息的完整性和提供对消息发送者的身份验证。即发送方在发送消息时附上该消息对应的唯一性多重数字签名，接收方接收到该消息及唯一性多重数字签名，通过解密该唯一性多重数字签名后与接收到的消息的摘要进行对比以完成验签。
本发明实施例中，所述身份信息包括验证信息，所述验证信息为所述待认证移动终端的唯一性设备识别码，所述用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息的步骤之前还包括：
根据所述验证信息对所述待认证移动终端进行验证。
广播模块13：在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息；
本发明实施例中，所述区块链包括用于存储各节点的私钥的第一区块以及用于存储其他内容的第二区块。优选的，本步骤之前还包括：将处理所述账户分配请求数据包对应生成的包括所述账户信息、待认证移动终端的身份信息、所述唯一性多重数字签名以及认证节点的公钥的第一交互记录写入第二区块中，并在区块链网络中广播所述第一交互记录。
具体而言，当前节点为所述待认证移动终端分配账户信息后，将签署了所述唯一性多重数字签名的账户信息、待认证移动终端的身份信息以及当前节点的公钥作为第一交互记录写入第二区块中，区块链上的每一个区块都有一个数据库用于储存该区块上的交互记录，它相当于一个“账本”，当前节点将签署了所述唯一性多重数字签名的账户信息、待认证移动终端的身份信息以及当前节点的公钥写入并储存于所述第二区块中的具体形式可以是以一种一一映射的对应关系存储于所述第二区块的数据库中以便后续查询。
本发明所述基于区块链的移动终端认证管理方法结合了区块链网络的交易透明性及不可篡改性的特点，将账户信息的分配及认证作为交互的一部分写入区块链，将每一个交互的记录都实时记录在对应的区块中，构成一种几乎不可能被更改的分布式数据库，提升了账户信息的有效性。
具体而言，正是由于本发明所述方法中，当前节点在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息，使得每一个节点都能接收到广播，每一个节点都允许获得完整的当前节点的交互记录对应的数据库的拷贝，每一次的交互记录对所有的节点都是可见的，因此，用户可以连接到任意节点去进行认证，使得认证过程不依赖于单个来源，降低了记录被恶意篡改的风险。这里的“分布式”不仅仅体现为数据的分布式存储，也体现为数据的分布式记录(即由系统参与者共同维护)。另外，节点与节点之间的数据交互通过多重数字签名进行验证，无需相互信任，节点之间基于一套共识机制，共同维护整个区块链的数据，任意一节点失效，其他节点仍能正常工作，提升 数据交互的效率与可靠性。
第二接收模块14：接收所述待认证移动终端通过所述公钥解密唯一性多重数字签名后反馈的信息，以确认所述待认证移动终端获得所述账户信息。
本发明实施例中，当前节点为所述待认证移动终端分配账户信息后，将签署了所述唯一性多重数字签名的账户信息、待认证移动终端的身份信息以及当前节点的公钥作为第一交互记录写入第二区块中，其可以是以一种一一映射的对应关系存储于所述第二区块的数据库中并广播该次的交互记录，当待认证移动终端收到广播后向区块链获取该次交互记录的相关数据。
具体而言，待认证移动终端首先获取签署了所述唯一性多重数字签名的账户信息并用当前节点的公钥解密出所述账户信息。待认证移动终端再获取与该账户信息关联性储存于数据库中的待认证移动终端的身份信息，通过对比获取的待认证移动终端的身份信息与自身的身份信息，若匹配，则验证了解密出的账户信息为与自身身份信息相匹配的账户信息，并将验证结果通过区块链网络反馈至当前节点，当前节点接收到反馈的结果后以此来确认所述待认证移动终端获取到其分配的账户信息。
请参考图5，本发明的另一个实施例中还包括认证模块15用于当前节点在区块链获取所述待认证移动终端发送的账户认证请求数据包，并获取所述待认证移动终端的公钥。
本发明实施例中，待认证移动终端获取当前节点分配的签署了唯一性多重数字签名的账户信息后向区块链发出账户认证请求数据包，并发送用自己的私钥对获取的唯一性多重数字签名加密后的密文信息。所述待认证移动终端发出账户认证请求数据包后将该账户认证请求数据包以及所述密文信息作为第二交互记录写入所述第二区块中并广播所述第二交互记录以实时记录最新的交互记录形成一个永久的、可靠的“账本”。
所述待认证移动终端广播所述第二交互记录之后，当前节点向区块链获取所述待认证移动终端发送的账户认证请求数据包，并获取所述待认证移动终端的公钥。具体而言，当前节点获取所述账户认证请求数据包中包含的所述待认证移动终端发送的密文信息，并用所述待认证移动终端的公钥对所述密文信息进行解密，对比解密后的唯一性多重数字签名与当前节点为所述待认证移动终端分配账户时签署的唯一性多重数字签名是否一致，若一致，则该待认证移动终端通过本次认证。
优选的，当前节点认证完所述待认证移动终端后将待认证移动终端的认证结果信息写入所述区块链的第二区块中的第二交互记录中并广播，所述认证结果信息包括所述待认证移动终端认证通过及认证失败。
请继续参考图5，本发明的另一个实施例中还包括撤销模块16用于当前节点在区块链获取所述待认证移动终端发起的包含已认证账户信息的撤销账户请求数据包；依据所述撤销账户请求数据包从所述第二交互记录中找到对应的账户信息；将该账户信息写入撤销列表，所述撤销列表存储于区块链的所述第二区块中。
本发明实施例中，当前节点认证完所述待认证移动终端的账户信息后可以将分配的账户信息进行撤销。其中该撤销的操作可以是由待认证移动终端发起的撤销请求而触发撤销。
所述待认证移动终端向区块链网络中发送包含已认证账户信息的撤销账户请求数据包，当前记节点向区块链网络获取该撤销账户请求数据包并依据其中携带的账户信息从所述第二交互记录中找到对应的第二交互记录，依据该第二交互记录将该账户信息写入撤销列表，具体而言，查看第二交互记录中该账户信息是否已经完成认证，若是，则执行撤销操作，否则不执行。
在一种可能的设计中，当前节点也可以通过实时查询所述第二交互记录判断是否有有账户待撤销，若有，则自动触发撤销操作。
具体而言，当前节点从区块链上查找待认证移动终端发起交易的交易记录，找到最新的交易并取出其中包含的已分配或者已认证的账户信息。其中，若能从最新的交易中取出已认证的账户信息，则说明有可撤销的账户信息，否则没有，直接返回。如果有可撤销的账户，则当前节点将对应的账户信息写入撤销列表，并将包括处理所述撤销账户请求数据包对应生成的撤销列表的第三交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第三交互记录。
一种可能的设计中，当前节点对所述账户信息进行撤销时的撤销操作可以是在待认证移动终端发起撤销请求下触发，也可以是在当前节点发起的撤销请求下触发，其具体的触发机制在此不做限定。
优选的，本发明实施例还包括接收用户终端发送的账户查询请求，获取所述账户查询请求中包含的账户信息；根据所述账户信息从所述第二区块中查找所述账户信息对应的交互记录以确定待查询账户信息的交互结果信息；向所述用户终端发送所述账户信息对应的交互结果信息以便所述用户终端依据该交互结果信息确定所述待查询账户的有效性。
优选的，查询账户信息的有效性也可以依据第三交互记录判断待查询账户信息对应的账户是否有效，具体的，只需要通过查询区块链上第三交互记录获知。
综合上述实施例可知，本发明最大的有益效果在于本发明将移动终端的账户分配以及账户认证作为一种交易写入区块链，运用区块链的通过去中心、去信任、交易透明的方式集体维护一个可靠的数据库的技术方案，使得移动终端的账户分配以及账户认证的数据交互过程得到可靠的保证。
具体的，表现在账户分配方面，本发明通过当前节点接收待认证移动终端发起的账户分配的请求数据包，为待认证移动终端分配账户信息，并用当前节点的私钥生成的多重数字签名签署该账户信息后将其通过区块链网络发送至待认证移动终端。待认证移动终端获取该账户信息以及多重数字签名后验证该账户信息的有效性。
表现在账户认证方面，本发明通过当前节点接收待认证移动终端通过区块链发送的账户信息认证请求数据包，获取该账户信息认证请求数据包中的包含的加密信息，用待认证移动终端的公钥解密该加密信息后得到多重数字签名，对比解密后的多重数字签名是否与当前节点分配账户信息时签署的多重数字签名一致，若一致，则表示该移动终端的认证通过，并将认证通过的结果写入区块链的对应的交互记录中并广播，完成认证。
因此，本发明无需使用USIM卡等物理设备来对移动终端进行认证管理，节省了生产和运输成本。在账户信息的分配过程中采用多重数字签名技术以完成对发送方身份的验证以及发送的账户信息的有效性验证；在账户信息的认证过程中采用私钥加解密技术以完成对移动终端身份的验证，两者结合，构成双重认证机制，提升交互过程的安全性，交互数据的有效性与完整性。另外，结合区块链分布式的特点，所有节点都保存了交互的记录，因此用户可以连接到任意节点去进行认证。使得认证过程不依赖于单个来源，降低了记录被恶意篡改的风险。
请参考图6，本发明还提供一种基于区块链的账户信息获取方法，具体的一种实施方式中，具体包括如下步骤：
S100、向区块链网络发送账户分配请求数据包。
本发明实施例中，所述待认证移动终端在区块链网络中发送账户分配请求数据包以请求当前节点分配账户信息，所述账户分配请求数据包包含所述待认证移动终端的身份信息，用于根据待认证移动终端的身份信息为指定的待认证移动终端分配账户信息，所述身份信息可以为所述待认证移动终端的设备识别码或设备序列号等可以唯一性表征所述待认证移动终端的身份的信息。
所述待认证移动终端发出账户分配请求数据包之后，将该账户分配请求数据包对应生成的交互记录写入区块链中的第二区块以供其他节点查询或获取数据。
S101、接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
当前节点向区块链获取所述账户分配请求数据包后，响应于该账户分配请求数据包为所述待认证移动终端分配账户信息。
一种可能的设计中，当前节点具体依据如下方案为待认证移动终端分配账户信息：
一、当前节点获取所述账户分配请求数据包中的所述待认证移动终端的身份信息，并依据该身份信息为所述待认证移动终端分配账户信息。
二、当前节点依据所述身份信息中包括的验证信息，对所述待认证移动终端进行验证，当验证通过后，当前节点用其私钥对上一次交易生成的多重数字签名以及本身的公钥进行散列运算户生成的摘要加密生成当前节点的唯一性多重数字签名，并用该唯一性多重数字签名签署所述账户信息。
三、将签署了所述唯一性多重数字签名的账户信息通过区块链网络发送至待认证移动终端。待认证移动终端接收该账户信息并用当前节点的公钥验证该唯一性多重数字签名以验证该账户信息与自身的身份信息相匹配并且该账户信息确实是由当前节点所发送的。
S102、用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
当前节点为所述待认证移动终端分配账户信息后，将签署了所述唯一性多重数字签名的账户信息、待认证移动终端的身份信息以及当前节点的公钥作为第一交互记录写入第二区块中，其可以是以一种一一映射的对应关系存储于所述第二区块的数据库中并广播该次的交互记录，当待认证移动终端收到广播后向区块链获取该次交互记录的相关数据。
具体而言，待认证移动终端首先获取签署了所述唯一性多重数字签名的账户信息并用当前节点的公钥解密出所述账户信息。待认证移动终端再获取与该账户信息关联性储存于数据库中的待认证移动终端的身份信息，通过对比获取的待认证移动终端的身份信息与自身的身份信息，若匹配，则验证了解密出的账户信息为与自身身份信息相匹配的账户信息。
优选的，本发明实施例中，所述待认证移动终端解密出与之身身份信息相匹配的账户信息之后，向区块链发起账户认证请求数据包。与此同时，所述待认证移动终端用自身的私钥对获取的唯一性多重数字签名进行加密生成对应的密文信息，并向区块链发送该密文信息并将所述账户认证请求数据包以及该密文信息作为第二交互记录写入第二区块中并广播。当前节点收到广播后获取所述账户认证请求数据包以及该密文信息以及该认证移动终端的公钥，并用待认证移动终端的公钥解密所述密文信息得到唯一性多重数字签名，当前节点对比解密出的唯一性多重数字签名与其为所述待认证移动终端签署账户信息时签署的唯一性多重数字签名，若二者一致，则验证了待认证移动终端的身份。优选的，当前节点验证完待认证移动终端的身份信息之后将验证结果作为第二交互记录写入所述第二区块中以备查询。本次验证与待认证移动终端验证当前节点的身份够成双重认证机制，提升本方案的可靠性。
参考图7所示，本发明还提供一种基于区块链的账户信息获取装置，一种实施例中，包括发送模块100、接收模块101以及解密模块102。其中，
发送模块100：向区块链网络发送账户分配请求数据包。
本发明实施例中，所述待认证移动终端在区块链网络中发送账户分配请求数据包以请求当前节点分配账户信息，所述账户分配请求数据包包含所述待认证移动终端的身份 信息，用于根据待认证移动终端的身份信息为指定的待认证移动终端分配账户信息，所述身份信息可以为所述待认证移动终端的设备识别码或设备序列号等可以唯一性表征所述待认证移动终端的身份的信息。
所述待认证移动终端发出账户分配请求数据包之后，将该账户分配请求数据包对应生成的交互记录写入区块链中的第二区块以供其他节点查询或获取数据。
接收模块101：接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
当前节点向区块链获取所述账户分配请求数据包后，响应于该账户分配请求数据包为所述待认证移动终端分配账户信息。
一种可能的设计中，当前节点具体依据如下方案为待认证移动终端分配账户信息：
一、当前节点获取所述账户分配请求数据包中的所述待认证移动终端的身份信息，并依据该身份信息为所述待认证移动终端分配账户信息。
二、当前节点依据所述身份信息中包括的验证信息，对所述待认证移动终端进行验证，当验证通过后，当前节点用其私钥对上一次交易生成的多重数字签名以及本身的公钥进行散列运算户生成的摘要加密生成当前节点的唯一性多重数字签名，并用该唯一性多重数字签名签署所述账户信息。
三、将签署了所述唯一性多重数字签名的账户信息通过区块链网络发送至待认证移动终端。待认证移动终端接收该账户信息并用当前节点的公钥验证该唯一性多重数字签名以验证该账户信息与自身的身份信息相匹配并且该账户信息确实是由当前节点所发送的。
解密模块102：用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
当前节点为所述待认证移动终端分配账户信息后，将签署了所述唯一性多重数字签名的账户信息、待认证移动终端的身份信息以及当前节点的公钥作为第一交互记录写入第二区块中，其可以是以一种一一映射的对应关系存储于所述第二区块的数据库中并广播该次的交互记录，当待认证移动终端收到广播后向区块链获取该次交互记录的相关数据。
具体而言，待认证移动终端首先获取签署了所述唯一性多重数字签名的账户信息并用当前节点的公钥解密出所述账户信息。待认证移动终端再获取与该账户信息关联性储存于数据库中的待认证移动终端的身份信息，通过对比获取的待认证移动终端的身份信息与自身的身份信息，若匹配，则验证了解密出的账户信息为与自身身份信息相匹配的账户信息。
优选的，本发明实施例中，所述待认证移动终端解密出与之身身份信息相匹配的账户信息之后，向区块链发起账户认证请求数据包。与此同时，所述待认证移动终端用自身的私钥对获取的唯一性多重数字签名进行加密生成对应的密文信息，并向区块链发送该密文信息并将所述账户认证请求数据包以及该密文信息作为第二交互记录写入第二区块中并广播。当前节点收到广播后获取所述账户认证请求数据包以及该密文信息以及该认证移动终端的公钥，并用待认证移动终端的公钥解密所述密文信息得到唯一性多重数字签名，当前节点对比解密出的唯一性多重数字签名与其为所述待认证移动终端签署账户信息时签署的唯一性多重数字签名，若二者一致，则验证了待认证移动终端的身份。优选的，当前节点验证完待认证移动终端的身份信息之后将验证结果作为第二交互记录写入所述第二区块中以备查询。本次验证与待认证移动终端验证当前节点的身份够成双重认证机制，提升本方案的可靠性。
结合上述的实施例可知，本发明最大的有益效果在于，本发明通过移动终端配合认 证节点完成账户信息的分配与认证过程。
具体的，待认证移动终端通过区块链向当前节点发起账户信息的分配请求数据包并将对应的交互记录写入区块链中，当前节点依据该账户信息分配请求为待认证移动终端分配账户信息并将对应的交互记录写入区块链中完成账户信息的分配。
待认证移动终端通过区块链向当前节点发送账户信息认证请求数据包，并将对应的交互记录写入区块链中，当前节点依据账户信息认证请求数据包为待认证移动终端认证账户信息并将对应的交互记录写入区块链中，完成账户信息的认证。
因此，表现在移动终端，其配合认证节点完成账户信息的分配、认证以及撤销、查询各个交互过程，保证各交互过程的数据传输的准确性与可靠性，配合认证节点完成双重认证机制。
本发明实施例还提供一种了一种移动终端，如图8所示，为了便于说明，仅示出了与本发明实施例相关的部分，具体技术细节未揭示的，请参照本发明实施例方法部分。该终端可以为包括手机、平板电脑、PDA(Personal Digital Assistant，个人数字助理)、POS(Point of Sales，销售终端)、车载电脑等任意终端设备，以终端为手机为例：
图8示出的是与本发明实施例提供的终端相关的手机的部分结构的框图。参考图8，手机包括：触敏显示器0813、处理器0811、存储器0814等部件。本领域技术人员可以理解，图8中示出的手机结构并不构成对手机的限定，可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置。
下面结合图8对手机的各个构成部件进行具体的介绍：
存储器0814可用于存储软件程序以及模块，处理器0811通过运行存储在存储器0814的软件程序以及模块，从而执行手机的各种功能应用以及数据处理。存储器0814可主要包括存储程序区和存储数据区，其中，存储程序区可存储操作系统、至少一个功能所需的应用程序(比如声音播放功能、图像播放功能等)等；存储数据区可存储根据手机的使用所创建的数据(比如音频数据、电话本等)等。此外，存储器0814可以包括高速随机存取存储器，还可以包括非易失性存储器，例如至少一个磁盘存储器件、闪存器件、或其他易失性固态存储器件。
触敏显示器0813可包括触摸检测装置和触摸控制器两个部分。其中，触摸检测装置检测用户的触摸方位，并检测触摸操作带来的信号，将信号传送给触摸控制器；触摸控制器从触摸检测装置上接收触摸信息，并将它转换成触点坐标，再送给处理器，并能接收处理器发来的命令并加以执行。此外，可以采用电阻式、电容式、红外线以及表面声波等多种类型实现触敏显示器。
触敏显示器0813可用于显示由用户输入的信息或提供给用户的信息以及手机的各种菜单，如信息编辑界面等。触敏显示器0813可包括显示面板，可选的，可以采用液晶显示器(Liquid Crystal Display，LCD)、有机发光二极管(Organic Light-Emitting Diode,OLED)等形式来配置触敏显示器。进一步的，当触敏显示器0813检测到在其上或附近的触摸操作后，传送给处理器以确定触摸事件的类型，随后处理器根据触摸事件的类型在触敏显示器上提供相应的视觉输出。
手机还可包括至少一种传感器0812，比如光传感器、运动传感器以及其他传感器。具体地，光传感器可包括环境光传感器及接近传感器，其中，环境光传感器可根据环境光线的明暗来调节显示面板的亮度，接近传感器可在手机移动到耳边时，关闭显示面板和/或背光。作为运动传感器的一种，加速计传感器可检测各个方向上(一般为三轴)加速度的大小，静止时可检测出重力的大小及方向，可用于识别手机姿态的应用(比如横竖屏切换、相关游戏、磁力计姿态校准)、振动识别相关功能(比如计步器、敲击)等；至于手机还可配置的陀螺仪、气压计、湿度计、温度计、红外线传感器等其他传感器， 在此不再赘述。
处理器0811是手机的控制中心，利用各种接口和线路连接整个手机的各个部分，通过运行或执行存储在存储器0814内的软件程序和/或模块，以及调用存储在存储器0814内的数据，执行手机的各种功能和处理数据，从而对手机进行整体监控。可选的，处理器0811可包括一个或多个处理单元；优选的，处理器0811可集成应用处理器和调制解调处理器，其中，应用处理器主要处理操作系统、用户界面和应用程序等，调制解调处理器主要处理无线通信。可以理解的是，上述调制解调处理器也可以不集成到处理器0811中。
手机还包括给各个部件供电的电源(比如电池)，优选的，电源可以通过电源管理系统与处理器0811逻辑相连，从而通过电源管理系统实现管理充电、放电、以及功耗管理等功能。
尽管未示出，手机还可以包括摄像头、蓝牙模块等，在此不再赘述。
在本发明实施例中，该终端所包括的处理器0811还具有以下功能：
向区块链网络发送账户分配请求数据包；
接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
所述区块链包括用于存储各节点的私钥的第一区块以及用于存储其他内容的第二区块，当前节点将处理所述账户分配请求数据包对应生成的包括所述账户信息、待认证移动终端的身份信息、所述唯一性多重数字签名以及认证节点的公钥的第一交互记录写入所述第二区块中，并在区块链网络中广播所述第一交互记录。
获取与所述账户信息关联性储存于所述第二区块中的待认证移动终端的身份信息；
对比该身份信息与自身的身份信息，若一致，则验证所述账户信息有效。
向区块链发起账户认证请求数据包，并向区块链发送所述待认证移动终端用其私钥加密所述唯一性多重数字签名生成的密文信息以供当前节点依据该账户认证请求数据包以及所述密文信息对所述待认证移动终端进行认证。
将包含所述移动终端的公钥以及处理所述账户认证请求数据包对应生成的所述密文信息的第二交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第二交互记录。
将验证后的结果反馈至所述区块链。
本领域普通技术人员可以理解上述实施例的全部或部分步骤是可以通过程序来指令相关的硬件来完成，该程序可以存储于一计算机可读存储介质中，存储介质可以包括：只读存储器(ROM，Read Only Memory)、随机存取存储器(RAM，Random Access Memory)、磁盘或光盘等。
本领域普通技术人员可以理解实现上述实施例的全部或部分步骤是可以通过程序来指令相关的硬件完成，所述的程序可以存储于一种计算机可读存储介质中，上述提到的存储介质可以是只读存储器，磁盘或光盘等。
以上对本发明所提供的一种移动终端进行了详细介绍，对于本领域的一般技术人员，依据本发明实施例的思想，在具体实施方式及应用范围上均会有改变之处，综上所述，本说明书内容不应理解为对本发明的限制。

Claims (29)

  1. 一种基于区块链的移动终端的认证管理方法，其特征在于，所述方法包括:
    当前节点接收区块链网络中的账户分配请求数据包；
    根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息；
    在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息；
    接收所述待认证移动终端通过当前节点的公钥解密唯一性多重数字签名后反馈的结果，以确认所述待认证移动终端获得所述账户信息。
  2. 根据权利要求1所述的方法，其特征在于，所述账户分配请求数据包包含所述待认证移动终端的身份信息，用于根据所述待认证移动终端的身份信息为指定的待认证移动终端分配账户信息。
  3. 根据权利要求2所述的方法，其特征在于，所述区块链包括用于存储各节点的私钥的第一区块以及用于存储其他内容的第二区块；所述根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息的步骤之后，还包括：
    将处理所述账户分配请求数据包对应生成的包括所述账户信息、待认证移动终端的身份信息、所述唯一性多重数字签名以及认证节点的公钥的第一交互记录写入所述第二区块中，并在区块链网络中广播所述第一交互记录。
  4. 根据权利要求1所述的方法，其特征在于，所述用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息的步骤具体包括：
    对当前节点的公钥、上一节点生成的唯一性多重数字签名进行随机散列运算以生成一个随机散列值；
    对所述随机散列值用所述认证节点的私钥进行加密以生成一个当前节点的唯一性多重数字签名。
  5. 根据权利要求4所述的方法，其特征在于，所述对当前节点的公钥、上一节点生成的唯一性多重数字签名进行随机散列运算以生成一个随机散列值之前还包括：
    对上一节点的唯一性多重数字签名的有效性进行验证，当验证通过后，执行后续步骤。
  6. 根据权利要求5所述的方法，其特征在于，所述对上一节点的唯一性多重数字签名的有效性进行验证的步骤中具体包括：
    用上一节点的公钥对上一节点的唯一性多重数字签名进行解密，若解密后的随机散列值与当前节点的随机散列值一致，依据解密的结果判断该多重数字签名是否有效。
  7. 根据权利要求1所述的方法，其特征在于，所述身份信息包括验证信息，所述验证信息为所述待认证移动终端的唯一性设备识别码，所述用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息的步骤之前还包括：
    根据所述验证信息对所述待认证移动终端进行验证。
  8. 根据权利要求3所述的方法，其特征在于，还包括：
    当前节点在区块链获取所述待认证移动终端发送的账户认证请求数据包，并获取所述待认证移动终端的公钥。
  9. 根据权利要求8所述的方法，其特征在于，所述当前节点在区块链获取所述待认证移动终端发送的账户认证请求数据包之后还包括：
    获取所述账户认证请求数据包中包含的所述待认证移动终端发送的密文信息，并用所述待认证移动终端的公钥对所述密文信息进行解密，所述密文信息为所述待认证移动终端用其私钥对所述唯一性多重数字签名进行加密生成。
  10. 根据权利要求9所述的方法，其特征在于，所述获取所述账户认证请求数据包中包含的所述待认证移动终端发送的密文信息，并用所述待认证移动终端的公钥对所述密文信息进行解密之后还包括：
    对比解密后的唯一性多重数字签名若与当前节点为所述待认证移动终端分配账户时签署的唯一性多重数字签名一致，则该待认证移动终端通过本次认证。
  11. 根据权利要求8所述的方法，其特征在于，所述移动终端发出所述账户认证请求数据包后，将包含所述移动终端的公钥以及处理所述账户认证请求数据包对应生成的所述密文信息的第二交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第二交互记录。
  12. 根据权利要求11所述的方法，其特征在于，还包括：
    当前节点在区块链获取所述待认证移动终端发起的包含已认证账户信息的撤销账户请求数据包；
    依据所述撤销账户请求数据包从所述第二交互记录中找到对应的账户信息；
    将该账户信息写入撤销列表，所述撤销列表存储于区块链的所述第二区块中。
  13. 根据权利要求12所述的方法，其特征在于，所述将所述已认证的账户信息放入撤销列表的步骤之后，还包括：
    将包括处理所述撤销账户请求数据包对应生成的撤销列表的第三交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第三交互记录。
  14. 根据权利要求11所述的方法，其特征在于，还包括：
    将待认证移动终端的认证结果信息写入所述区块链的第二区块中的第二交互记录中并广播，所述认证结果信息包括所述待认证移动终端认证通过及认证失败。
  15. 根据权利要求3所述的方法，其特征在于，还包括：
    接收用户终端发送的账户查询请求，获取所述账户查询请求中包含的账户信息；
    根据所述账户信息从所述第二区块中查找所述账户信息对应的交互记录以确定待查询账户信息的交互结果信息；
    向所述用户终端发送所述账户信息对应的交互结果信息以便所述用户终端依据该交互结果信息确定所述待查询账户的有效性。
  16. 根据权利要求15所述的方法，其特征在于，所述向所述用户终端发送所述账户信息对应的交互结果信息以便所述用户终端依据该交互结果信息确定所述待查询账户的有效性，具体包括：
    依据第三交互记录判断待查询账户信息对应的账户是否有效。
  17. 一种基于区块链的账户信息的获取方法，其特征在于，包括：
    向区块链网络发送账户分配请求数据包；
    接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
    用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
  18. 根据权利要求17所述的方法，其特征在于，所述区块链包括用于存储各节点的私钥的第一区块以及用于存储其他内容的第二区块。
  19. 根据权利要求18所述的方法，其特征在于，当前节点将处理所述账户分配请求数据包对应生成的包括所述账户信息、待认证移动终端的身份信息、所述唯一性多重数字签名以及认证节点的公钥的第一交互记录写入所述第二区块中，并在区块链网络中广播所述第一交互记录。
  20. 根据权利要求19所述的方法，其特征在于，还包括：
    获取与所述账户信息关联性储存于所述第二区块中的待认证移动终端的身份信息；
    对比该身份信息与自身的身份信息，若一致，则验证所述账户信息有效。
  21. 根据权利要求17所述的方法，其特征在于，还包括：
    向区块链发起账户认证请求数据包，并向区块链发送所述待认证移动终端用其私钥加密所述唯一性多重数字签名生成的密文信息以供当前节点依据该账户认证请求数据包以及所述密文信息对所述待认证移动终端进行认证。
  22. 根据权利要求18所述的方法，其特征在于，所述向区块链发出账户认证请求数据包之后还包括：
    将包含所述移动终端的公钥以及处理所述账户认证请求数据包对应生成的所述密文信息的第二交互记录写入所述区块链的第二区块中，并在区块链网络中广播所述第二交互记录。
  23. 根据权利要求20所述的方法，其特征在于，还包括：
    将验证后的结果反馈至所述区块链。
  24. 一种基于区块链的移动终端的认证管理装置，其特征在于，包括：
    第一接收模块：当前节点接收区块链网络中的账户分配请求数据包；
    分配模块：根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息；
    广播模块：在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息；
    第二接收模块：接收所述待认证移动终端通过所述公钥解密唯一性多重数字签名后反馈的信息，以确认所述待认证移动终端获得所述账户信息。
  25. 根据权利要求24所述的装置，其特征在于，还包括：
    认证模块：当前节点在区块链获取所述待认证移动终端发送的账户认证请求数据包，并获取所述待认证移动终端的公钥。
  26. 根据权利要求24所述的装置，其特征在于，还包括：
    撤销模块：当前节点在区块链获取所述待认证移动终端发起的包含已认证账户信息的撤销账户请求数据包；依据所述撤销账户请求数据包从所述第二交互记录中找到对应的账户信息；将该账户信息写入撤销列表，所述撤销列表存储于区块链的所述第二区块中。
  27. 基于区块链的账户信息的获取装置，其特征在于，包括：
    发送模块：向区块链网络发送账户分配请求数据包；
    接收模块：接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
    解密模块：用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
  28. 一种认证管理装置，其特征在于，包括处理器及存储器，所述存储器中存储有计算机程序，其特征在于，所述计算机程序被处理器执行时实现如下步骤：
    当前节点接收区块链网络中的账户分配请求数据包；
    根据所述账户分配请求数据包为指定的待认证移动终端分配账户信息，并用所述当前节点的私钥生成唯一性多重数字签名以签署所述账户信息；
    在区块链网络中广播所述唯一性多重数字签名、当前节点的公钥及账户信息；
    接收所述待认证移动终端通过当前节点的公钥解密唯一性多重数字签名后反馈的结果，以确认所述待认证移动终端获得所述账户信息。
  29. 一种移动终端，其特征在于，包括处理器及存储器，所述存储器中存储有计算机程序，其特征在于，所述计算机程序被处理器执行时实现如下步骤：
    向区块链网络发送账户分配请求数据包；
    接收响应于所述账户分配请求数据包的当前节点发送的账户信息，所述账户信息签署了所述认证节点用其私钥生成的唯一性多重数字签名；
    用当前节点的公钥对所述唯一性多重数字签名进行解密以获取所述账户信息。
PCT/CN2018/097585 2017-09-12 2018-07-27 基于区块链的移动终端认证管理方法、装置及相应的移动终端 WO2019052281A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710817828.XA CN107453870A (zh) 2017-09-12 2017-09-12 基于区块链的移动终端认证管理方法、装置及相应的移动终端
CN201710817828.X 2017-09-12

Publications (1)

Publication Number Publication Date
WO2019052281A1 true WO2019052281A1 (zh) 2019-03-21

Family

ID=60495396

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/097585 WO2019052281A1 (zh) 2017-09-12 2018-07-27 基于区块链的移动终端认证管理方法、装置及相应的移动终端

Country Status (2)

Country Link
CN (1) CN107453870A (zh)
WO (1) WO2019052281A1 (zh)

Cited By (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110458558A (zh) * 2019-07-04 2019-11-15 重庆金融资产交易所有限责任公司 基于区块链的数据保密方法、装置和计算机设备
CN110569674A (zh) * 2019-09-10 2019-12-13 腾讯科技（深圳）有限公司 基于区块链网络的认证方法及装置
CN110619223A (zh) * 2019-08-27 2019-12-27 复旦大学 基于区块链的个人征信体系中信用数据安全共享方法
CN111194034A (zh) * 2020-01-10 2020-05-22 中国联合网络通信集团有限公司 一种认证方法及装置
CN111259425A (zh) * 2020-01-16 2020-06-09 广东京信软件科技有限公司 一种智慧城市数据安全管理系统
CN111460482A (zh) * 2020-04-15 2020-07-28 中国银行股份有限公司 一种基于区块链的摇号方法及装置
CN111476572A (zh) * 2020-04-09 2020-07-31 财付通支付科技有限公司 基于区块链的数据处理方法、装置、存储介质及设备
CN111654375A (zh) * 2020-04-17 2020-09-11 浙江吉利汽车研究院有限公司 一种基于区块链的边缘计算安全加密方法、装置及系统
CN111914230A (zh) * 2020-07-17 2020-11-10 中国联合网络通信集团有限公司 基于区块链的身份验证方法、系统、终端设备及存储介质
CN112019337A (zh) * 2019-05-31 2020-12-01 阿里巴巴集团控股有限公司 一种基于区块链的突发事件处理方法、装置及设备
CN112446701A (zh) * 2019-09-03 2021-03-05 上海唯链信息科技有限公司 一种基于区块链的身份认证方法、设备和存储装置
CN112654039A (zh) * 2019-09-25 2021-04-13 北京紫光青藤微系统有限公司 一种终端的合法性鉴别方法、装置及系统
CN113128999A (zh) * 2019-12-31 2021-07-16 航天信息股份有限公司 一种区块链隐私保护方法及装置
CN113572717A (zh) * 2020-04-29 2021-10-29 青岛海尔滚筒洗衣机有限公司 通信连接的建立方法、洗护设备及服务器
CN113612758A (zh) * 2021-07-29 2021-11-05 石家庄学院 一种基于区块链的物联网数据安全管理系统及方法
CN113656841A (zh) * 2021-07-28 2021-11-16 复旦大学 一种基于trustzone的区块链终端安全保障系统
WO2022011599A1 (zh) * 2020-07-15 2022-01-20 北京物资学院 一种业务认证方法及系统
CN114025346A (zh) * 2021-10-12 2022-02-08 杭州趣链科技有限公司 一种移动自设网络间数据安全有效的数据传输方法
CN116436905A (zh) * 2023-04-19 2023-07-14 广州市迪士普音响科技有限公司 网络化广播通信方法及装置、存储介质及计算机设备
CN116527372A (zh) * 2023-05-16 2023-08-01 深圳建安润星安全技术有限公司 基于互联网的数据安全交互系统及方法

Families Citing this family (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108156159A (zh) * 2017-12-27 2018-06-12 质数链网科技成都有限公司 一种多应用系统登陆方法以及区块链分布式总账系统
CN108418690A (zh) * 2018-02-11 2018-08-17 深圳市图灵奇点智能科技有限公司 由车载系统实现的辅助签订区块链合约的方法和装置
CN108183798A (zh) * 2018-03-13 2018-06-19 深圳市欧乐在线技术发展有限公司 应用的实名认证方法、服务器、移动终端及可读存储介质
CN108434745B (zh) * 2018-03-27 2021-02-19 北京知道创宇信息技术股份有限公司 游戏数据处理方法及系统
CN108600978A (zh) * 2018-03-29 2018-09-28 深圳汇通智能化科技有限公司 基于区块链技术的大气污染环境采集处理系统
CN108809953B (zh) * 2018-05-22 2020-09-01 飞天诚信科技股份有限公司 一种基于区块链的匿名身份认证的方法及装置
CN108876113B (zh) * 2018-05-29 2022-02-18 厦门哈希科技有限公司 一种考核管理方法、装置、终端设备及系统
CN110557215B (zh) * 2018-06-03 2021-01-29 涂先锋 基于区块链的分布式时间认证方法及系统
CN108846671B (zh) * 2018-06-05 2021-10-26 上海臻客信息技术服务有限公司 基于区块链的在线安全交易方法和系统
CN108921556B (zh) * 2018-07-02 2022-04-19 上海达家迎信息科技有限公司 一种区块链的验证方法、装置、设备及存储介质
CN109241763B (zh) * 2018-07-04 2020-03-24 青岛闪收付信息技术有限公司 基于权限下发的区块生成方法
CN109299333B (zh) * 2018-08-16 2022-08-12 北京京东尚科信息技术有限公司 区块链网络账本成员管理方法、装置、设备及存储介质
CN109146481B (zh) * 2018-08-23 2020-09-08 泰链（厦门）科技有限公司 区块链钱包的账户私钥自动导入方法、介质、装置及区块链系统
DE102018122997A1 (de) * 2018-09-19 2020-03-19 Infineon Technologies Ag Blockkettenentität, kettenexterne entität, zertifizierungsvorrichtung für blockkettenoperationen und verfahren zum durchführen einer kooperation zwischen einer blockkettenentität und einer kettenexternen entität
WO2020061923A1 (zh) * 2018-09-27 2020-04-02 区链通网络有限公司 一种基于区块链的账户管理系统以及管理方法、存储介质
CN109327077A (zh) * 2018-10-23 2019-02-12 杭州白小丁科技有限公司 一种基于区块链的新能源光伏发电数据监控方法
CN110020513B (zh) * 2018-11-07 2023-08-22 创新先进技术有限公司 签名记录方法、验证方法、装置及存储介质
CN109559122B (zh) * 2018-12-07 2021-02-02 北京瑞卓喜投科技发展有限公司 区块链数据传输方法及区块链数据传输系统
CN109587154B (zh) * 2018-12-14 2021-10-15 金蝶软件（中国）有限公司 数字身份验证方法、装置、计算机设备和存储介质
CN109728896A (zh) * 2018-12-26 2019-05-07 广州云趣信息科技有限公司 一种基于区块链的来电认证和溯源方法及流程
CN109672518B (zh) * 2019-03-02 2022-04-12 西安安盟智能科技股份有限公司 抗量子攻击的区块链的节点数据处理
CN114674066B (zh) * 2019-10-31 2023-12-29 广东美的制冷设备有限公司 运行验证方法、装置、空调器以及存储介质
CN111027035B (zh) * 2019-11-06 2022-04-08 香农数据有限公司 一种基于区块链的多重身份认证方法及系统
CN111553710B (zh) * 2020-04-08 2022-09-02 深圳壹账通智能科技有限公司 基于区块链的企业数据处理方法、装置、设备和存储介质
CN112883111A (zh) * 2020-08-20 2021-06-01 王红根 基于区块链数字货币金融的信息管理方法、系统及平台
CN112929333B (zh) * 2021-01-20 2022-07-01 江西理工大学 一种基于混合架构的车联网数据安全存储与共享方法
CN112600671B (zh) * 2021-03-02 2021-06-01 腾讯科技（深圳）有限公司 一种数据处理方法、装置、设备及存储介质
CN114239010B (zh) * 2021-12-07 2024-06-14 北京天融信网络安全技术有限公司 一种多节点分布式认证方法、系统、电子设备及介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160275461A1 (en) * 2015-03-20 2016-09-22 Rivetz Corp. Automated attestation of device integrity using the block chain
CN106453271A (zh) * 2016-09-21 2017-02-22 江苏通付盾科技有限公司 身份注册方法及系统、身份认证方法及系统
CN106533696A (zh) * 2016-11-18 2017-03-22 江苏通付盾科技有限公司 基于区块链的身份认证方法、认证服务器及用户终端
CN107086909A (zh) * 2017-03-07 2017-08-22 阿里巴巴集团控股有限公司 身份信息的生成方法和装置、身份审核的方法和装置

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105897425B (zh) * 2016-03-31 2019-04-12 北京小米移动软件有限公司 分配、请求社交网络账号的方法及装置
CN106372940B (zh) * 2016-08-31 2019-10-11 江苏通付盾科技有限公司 基于区块链网络的身份认证方法、服务器及终端设备
CN106357640B (zh) * 2016-09-18 2019-11-08 江苏通付盾科技有限公司 基于区块链网络的身份认证方法、系统及服务器
JP6684930B2 (ja) * 2016-09-18 2020-04-22 深▲セン▼前▲海▼▲達▼▲闥▼▲雲▼端智能科技有限公司Ｃｌｏｕｄｍｉｎｄｓ （Ｓｈｅｎｚｈｅｎ） Ｒｏｂｏｔｉｃｓ Ｓｙｓｔｅｍｓ Ｃｏ．， Ｌｔｄ． ブロックチェーンに基づくアイデンティティ認証方法、装置、ノード及びシステム
CN106357644B (zh) * 2016-09-21 2019-07-12 江苏通付盾科技有限公司 基于区块链网络的身份认证方法、系统及服务器
CN106453407B (zh) * 2016-11-23 2019-10-15 江苏通付盾科技有限公司 基于区块链的身份认证方法、认证服务器及用户终端

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160275461A1 (en) * 2015-03-20 2016-09-22 Rivetz Corp. Automated attestation of device integrity using the block chain
CN106453271A (zh) * 2016-09-21 2017-02-22 江苏通付盾科技有限公司 身份注册方法及系统、身份认证方法及系统
CN106533696A (zh) * 2016-11-18 2017-03-22 江苏通付盾科技有限公司 基于区块链的身份认证方法、认证服务器及用户终端
CN107086909A (zh) * 2017-03-07 2017-08-22 阿里巴巴集团控股有限公司 身份信息的生成方法和装置、身份审核的方法和装置

Cited By (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112019337A (zh) * 2019-05-31 2020-12-01 阿里巴巴集团控股有限公司 一种基于区块链的突发事件处理方法、装置及设备
CN110458558A (zh) * 2019-07-04 2019-11-15 重庆金融资产交易所有限责任公司 基于区块链的数据保密方法、装置和计算机设备
CN110619223A (zh) * 2019-08-27 2019-12-27 复旦大学 基于区块链的个人征信体系中信用数据安全共享方法
CN112446701B (zh) * 2019-09-03 2024-04-05 上海唯链信息科技有限公司 一种基于区块链的身份认证方法、设备和存储装置
CN112446701A (zh) * 2019-09-03 2021-03-05 上海唯链信息科技有限公司 一种基于区块链的身份认证方法、设备和存储装置
CN110569674A (zh) * 2019-09-10 2019-12-13 腾讯科技（深圳）有限公司 基于区块链网络的认证方法及装置
CN110569674B (zh) * 2019-09-10 2023-11-17 腾讯科技（深圳）有限公司 基于区块链网络的认证方法及装置
CN112654039B (zh) * 2019-09-25 2024-03-01 紫光同芯微电子有限公司 一种终端的合法性鉴别方法、装置及系统
CN112654039A (zh) * 2019-09-25 2021-04-13 北京紫光青藤微系统有限公司 一种终端的合法性鉴别方法、装置及系统
CN113128999B (zh) * 2019-12-31 2024-04-12 航天信息股份有限公司 一种区块链隐私保护方法及装置
CN113128999A (zh) * 2019-12-31 2021-07-16 航天信息股份有限公司 一种区块链隐私保护方法及装置
CN111194034B (zh) * 2020-01-10 2022-09-02 中国联合网络通信集团有限公司 一种认证方法及装置
CN111194034A (zh) * 2020-01-10 2020-05-22 中国联合网络通信集团有限公司 一种认证方法及装置
CN111259425A (zh) * 2020-01-16 2020-06-09 广东京信软件科技有限公司 一种智慧城市数据安全管理系统
CN111476572A (zh) * 2020-04-09 2020-07-31 财付通支付科技有限公司 基于区块链的数据处理方法、装置、存储介质及设备
CN111476572B (zh) * 2020-04-09 2024-03-19 财付通支付科技有限公司 基于区块链的数据处理方法、装置、存储介质及设备
CN111460482B (zh) * 2020-04-15 2024-04-16 中国银行股份有限公司 一种基于区块链的摇号方法及装置
CN111460482A (zh) * 2020-04-15 2020-07-28 中国银行股份有限公司 一种基于区块链的摇号方法及装置
CN111654375A (zh) * 2020-04-17 2020-09-11 浙江吉利汽车研究院有限公司 一种基于区块链的边缘计算安全加密方法、装置及系统
CN113572717A (zh) * 2020-04-29 2021-10-29 青岛海尔滚筒洗衣机有限公司 通信连接的建立方法、洗护设备及服务器
CN113572717B (zh) * 2020-04-29 2024-02-20 青岛海尔洗涤电器有限公司 通信连接的建立方法、洗护设备及服务器
WO2022011599A1 (zh) * 2020-07-15 2022-01-20 北京物资学院 一种业务认证方法及系统
CN111914230A (zh) * 2020-07-17 2020-11-10 中国联合网络通信集团有限公司 基于区块链的身份验证方法、系统、终端设备及存储介质
CN111914230B (zh) * 2020-07-17 2023-06-23 中国联合网络通信集团有限公司 基于区块链的身份验证方法、系统、终端设备及存储介质
CN113656841A (zh) * 2021-07-28 2021-11-16 复旦大学 一种基于trustzone的区块链终端安全保障系统
CN113612758A (zh) * 2021-07-29 2021-11-05 石家庄学院 一种基于区块链的物联网数据安全管理系统及方法
CN114025346B (zh) * 2021-10-12 2024-03-29 杭州趣链科技有限公司 一种移动自设网络间数据安全有效的数据传输方法
CN114025346A (zh) * 2021-10-12 2022-02-08 杭州趣链科技有限公司 一种移动自设网络间数据安全有效的数据传输方法
CN116436905B (zh) * 2023-04-19 2023-11-28 广州市迪士普音响科技有限公司 网络化广播通信方法及装置、存储介质及计算机设备
CN116436905A (zh) * 2023-04-19 2023-07-14 广州市迪士普音响科技有限公司 网络化广播通信方法及装置、存储介质及计算机设备
CN116527372B (zh) * 2023-05-16 2023-12-15 深圳建安润星安全技术有限公司 基于互联网的数据安全交互系统及方法
CN116527372A (zh) * 2023-05-16 2023-08-01 深圳建安润星安全技术有限公司 基于互联网的数据安全交互系统及方法

Also Published As

Publication number Publication date
CN107453870A (zh) 2017-12-08

Similar Documents

Publication Publication Date Title
WO2019052281A1 (zh) 基于区块链的移动终端认证管理方法、装置及相应的移动终端
TWI713855B (zh) 憑證管理方法及系統
ES2836114T3 (es) Método de envío de información, método de recepción de información, aparato y sistema
CN109472166B (zh) 一种电子签章方法、装置、设备及介质
CN109951489B (zh) 一种数字身份认证方法、设备、装置、系统及存储介质
CN109862041B (zh) 一种数字身份认证方法、设备、装置、系统及存储介质
CN109600223B (zh) 验证方法、激活方法、装置、设备及存储介质
US10601795B2 (en) Service processing method and electronic device
CN110598482B (zh) 基于区块链的数字证书管理方法、装置、设备及存储介质
CN111475841B (zh) 一种访问控制的方法、相关装置、设备、系统及存储介质
US7185199B2 (en) Apparatus and methods for providing secured communication
CN108614878B (zh) 协议数据管理方法、装置、存储介质及系统
WO2018157858A1 (zh) 信息存储方法、装置及计算机可读存储介质
US7840812B1 (en) Authentication of digital certificates used by portable computing devices
KR20210041404A (ko) 전자 장치 및 그 전자 장치를 이용한 블록체인 주소 관리 방법
KR20140050322A (ko) 사용자 디바이스의 고유 식별자 제공 방법 및 장치
US11082214B2 (en) Key generation apparatus and key update method
US20160301530A1 (en) Sensitive operation verification method, apparatus, and system
CN112035897A (zh) 区块链存证方法和相关装置
CN110598386B (zh) 基于区块链的数据处理方法、装置、设备及存储介质
CN115001841A (zh) 一种身份认证方法、装置及存储介质
CN110572268B (zh) 一种匿名认证方法和装置
CN111259452A (zh) 一种基于区块链的数据管理方法以及相关装置
CN110532324A (zh) 基于区块链的公告信息展示方法、装置、设备及存储介质
KR20200088030A (ko) 암호화될 데이터의 정보량에 기반하여 암호화에 사용될 키를 선택하는 전자 장치 및 전자 장치의 동작 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18856268

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 08/09/2020)

122 Ep: pct application non-entry in european phase

Ref document number: 18856268

Country of ref document: EP

Kind code of ref document: A1