WO2020119477A1

WO2020119477A1 - Identity authentication method employing blockchain, and terminal apparatus

Info

Publication number: WO2020119477A1
Application number: PCT/CN2019/121867
Authority: WO
Inventors: 冯承勇
Original assignee: 深圳壹账通智能科技有限公司
Priority date: 2018-12-14
Filing date: 2019-11-29
Publication date: 2020-06-18
Also published as: CN109740320A

Abstract

The present application is applicable to the technical field of blockchains, and provides an identity authentication method employing a blockchain and a terminal apparatus. The method comprises: acquiring identity identification information of middleware, and determining, according to the identity identification information, whether the middleware belongs to the same blockchain as a first node; if so, writing the identity identification information of the middleware into a smart contract, and performing detection on an authorization request of a second node in the blockchain; and if the authorization request of the second node is detected, performing smart contract authorization for the second node, and sending to the second node the smart contract used to instruct the second node to perform identity authentication on the middleware according to the smart contract. The method effectively solves the problem in which a node of a blockchain lacks the capability to perform trusted identity authentication on middleware of an application.

Description

Block chain-based identity authentication method and terminal equipment

This application requires the priority of the Chinese patent application submitted to the Chinese Patent Office on December 14, 2018, with the application number 201811529951.2 and the invention titled "A Blockchain-based Identity Authentication Method and Terminal Equipment", all of which are approved by The reference is incorporated in this application.

Technical field

This application relates to the field of blockchain technology, in particular to a blockchain-based identity authentication method and terminal device.

Background technique

Blockchain is a new application model of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, encryption algorithm, etc. It is essentially a decentralized database. The blockchain contains multiple nodes, and each node establishes trust and obtains rights and interests through a consensus mechanism. When the nodes in the blockchain need to interact with the nodes in the non-blockchain, they need to use middleware as a medium.

However, the application middleware does not belong to the blockchain node, and the blockchain node cannot directly authenticate and establish trust for the application middleware through the consensus mechanism, and cannot effectively manage the identity information of the application middleware.

technical problem

One of the purposes of the embodiments of the present application is to provide a blockchain-based identity authentication method and terminal device to solve the problem that nodes in the blockchain cannot perform trusted identity authentication on application middleware in the prior art.

Technical solution

The first aspect of the embodiments of the present application provides a blockchain-based identity authentication method applied to the first node in the blockchain, which may include:

Obtain the identity identification information of the middleware, and determine whether the middleware belongs to the same blockchain as the first node according to the identity identification information;

If the middleware and the first node belong to the same blockchain, write the identity information of the middleware into a smart contract, and monitor the authorization request of the second node in the blockchain;

If the authorization request of the second node is monitored, the second node is authorized by a smart contract and the smart contract is sent to the second node, and the smart contract is used to instruct the second node to The smart contract authenticates the middleware.

In a second aspect of an embodiment of the present application, a method for identity authentication based on a blockchain is provided, which is applied to a second node in the blockchain. The method includes:

Send an authorization request to the first node in the blockchain, where the authorization request is used to instruct the first node to authorize the second node for a smart contract;

After obtaining the authorization of the smart contract of the first node, receive the smart contract sent by the first node, and load and install the smart contract;

After monitoring the communication request of the middleware, obtain the identity identification information of the middleware, and authenticate the identity identification information of the middleware according to the smart contract;

If the authentication of the identity identification information of the middleware is passed, a communication connection is established with the middleware.

According to a third aspect of the embodiments of the present application, a computer-readable storage medium is provided. The computer-readable storage medium stores computer-readable instructions. When the computer-readable instructions are executed by a processor, they are implemented as the embodiments of the present application. The method described in the first aspect or the steps in the method described in the second aspect of the embodiments of the present application.

A fourth aspect of the embodiments of the present application provides a terminal device, including a memory, a processor, and computer-readable instructions stored in the memory and executable on the processor, and the processor executes the The computer readable instructions implement the steps in the method described in the first aspect of the embodiments of the present application or the method described in the second aspect of the embodiments of the present application.

Beneficial effect

In the embodiment of the present application, the identity information of the middleware is obtained through the first node in the blockchain. If the middleware and the first node belong to the same blockchain, the identity information of the middleware is written into the smart contract. Through the above method, the first identity authentication of the middleware can be achieved; after monitoring the second quarter point in the blockchain to the authorization request, the second node is authorized by the smart contract, so that the second node can be based on the smart contract Identity authentication is performed on the middleware to realize the second identity authentication on the middleware. Through the above method, the nodes in the blockchain can perform trusted identity authentication on the middleware, and the double authentication process effectively improves the reliability of the middleware authentication.

BRIEF DESCRIPTION

In order to more clearly explain the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings required in the embodiments or the description of the prior art. Obviously, the drawings in the following description are only for the application In some embodiments, for those of ordinary skill in the art, without paying creative labor, other drawings may be obtained based on these drawings.

1 is a schematic diagram of an implementation process of a blockchain-based identity authentication method provided by an embodiment of the present application;

2 is a schematic diagram of an implementation process of a blockchain-based identity authentication method provided by another embodiment of the present application;

3 is a schematic diagram of a terminal device provided by an embodiment of the present application;

4 is a schematic diagram of a terminal device provided by another embodiment of the present application.

Embodiments of the invention

In the following description, for the purpose of illustration rather than limitation, specific details such as specific system structure and technology are proposed to thoroughly understand the embodiments of the present application. However, those skilled in the art should understand that the present application can also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to avoid unnecessary details hindering the description of the present application.

It should be understood that when used in this specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements, and/or components, but does not exclude one or more other features , Wholes, steps, operations, elements, components and/or their existence or addition.

It should also be further understood that the term "and/or" used in the specification of the present application and the appended claims refers to any and all possible combinations of one or more of the associated listed items and includes these combinations .

As used in this specification and the appended claims, the terms "if" and "if" can be interpreted as "when" or "once" or "in response to a determination" or "response" depending on the context Detected". Similarly, the phrase "if determined" or "if [described condition or event] is detected" can be interpreted in the context to mean "once determined" or "in response to a determination" or "once detected [described condition or event ]" or "In response to detection of [the described condition or event]".

Before introducing the embodiments of the present application, an application scenario of the present application is introduced first.

In blockchain technology, the nodes in the alliance chain can be divided into application layer nodes, intermediate layer nodes and blockchain layer nodes according to their functions. When the blockchain layer nodes interact with application layer nodes, they need to use intermediate layer nodes As a medium. The blockchain layer is composed of multiple alliance chain nodes, the middle layer can be composed of multiple middleware, and each blockchain node can be used for information exchange by a system in the application layer through the middleware. In other words, the middleware can be regarded as an application interface, through which the two systems can be connected for communication.

Blockchain nodes must first authenticate the middleware. After the identity authentication is passed, the blockchain nodes can interact with the middleware. Therefore, this application proposes an identity authentication method based on the alliance chain to implement trusted identity authentication for middleware.

In order to explain the technical solutions described in the present application, the following will be described with specific embodiments.

FIG. 1 is a schematic diagram of an implementation process of a blockchain-based identity authentication method provided by an embodiment of the present application. The method in this embodiment is applied to a first node in a blockchain. As shown in the figure, the method may include the following step:

Step S101: Obtain the identity identification information of the middleware, and determine whether the middleware belongs to the same blockchain as the first node according to the identity identification information.

In the embodiment of the present application, the nodes in the alliance chain are divided into two types, one is an administrator node (that is, a first node), and one is a member node (that is, a second node). Only the administrator node can have permission to write smart contracts. Therefore, the administrator node is responsible for publishing the identity information of middleware in the blockchain. For middleware that is no longer used or is no longer safe, the administrator node can Revoke its identity information and write it into the blockchain through a smart contract. After obtaining the contract authorization, the member nodes can verify the identity information of the middleware through the smart contract and obtain detailed identity information of the middleware, but they have no right to rewrite the smart contract.

Smart contracts can be deployed on all nodes in the blockchain, or only on some nodes. Only nodes with smart contracts can provide smart contract services, that is, they can participate in middleware identity authentication and information interaction.

Steps S101-S103 are the authentication process of the middleware by the administrator node (ie the first node) in the blockchain. Only through the identity authentication of the chain administrator node can the identity information of the middleware be written into the smart contract.

In one embodiment, the judging whether the middleware belongs to the same blockchain as the first node according to the identity identification information includes:

Judging whether the root certificate in the identity information of the middleware is the same as the root certificate in the identity information of the first node.

If the root certificate in the identity information of the middleware is the same as the root certificate in the identity information of the first node, it is determined that the middleware and the first node belong to the same blockchain.

Step S102: If the middleware and the first node belong to the same blockchain, write the identity information of the middleware into a smart contract, and monitor the authorization request of the second node in the blockchain.

Here, the identity identification information of the middleware node may be a digital certificate issued on behalf of the root CA of the organization. An organization creates a root CA and uses the root certificate as the identification method of the organization. The root CA can issue an identity certificate to the middleware, which contains the identity information of the middleware, such as name, type, and description. Similarly, the root CA representing the organization can also issue an identity certificate to the blockchain nodes. Nodes whose identity certificates are issued by the same root CA belong to the same alliance chain organization member.

In one embodiment, after the identity information of the middleware is written into the smart contract, the method further includes:

It is determined whether the number of times the middleware is used within a preset time is less than the preset number of times, and whether the security level of the middleware is less than the preset level.

If the number of times the middleware is used within a preset time is less than the preset number of times, or the security level of the middleware is less than the preset level, it is determined that the middleware is invalid middleware. The identification information of the invalid middleware is deleted and the updated smart contract is deleted.

This embodiment is used to determine whether the middleware is effective. If the middleware is used too few times, it means that the middleware is not commonly used or rarely used. If the security level of the middleware is less than the preset level, it means that the middleware Not safe. Middleware used too few times or unsafe will be judged as invalid middleware. Monitoring the invalidity of middleware can improve the reliability of middleware in the alliance chain.

In one embodiment, the sending the smart contract to the second node includes:

Sending the updated smart contract to the second node.

Step S103, if the authorization request of the second node is monitored, the second node is authorized with a smart contract, and the smart contract is sent to the second node, and the smart contract is used to indicate the first The two nodes authenticate the middleware according to the smart contract.

In practical applications, the administrator node of the blockchain can perform contract authorization on the member node after receiving the authorization request from the member node, or it can perform contract authorization on the member nodes in the blockchain on its own.

2 is a schematic diagram of an implementation process of a blockchain-based identity authentication method provided by another embodiment of the present application. The method in this embodiment is applied to the second node in the blockchain. As shown in the figure, the method may It includes the following steps:

Step S201: Send an authorization request to the first node in the blockchain, where the authorization request is used to instruct the first node to authorize the second node for a smart contract.

Steps S201-S204 are the identity authentication process of the middleware by the member nodes (ie, the second node) in the blockchain. Only after the member nodes are authenticated can the member nodes interact with the middleware.

In one embodiment, the sending an authorization request to the first node in the blockchain includes:

Obtain an administrator list from the genesis block of the blockchain, and separately count the number of historical communications with each first node in the administrator list. The administrator list includes the block All first nodes in the chain.

According to the order of the number of historical communication times, select a first node and send an authorization request to the first node.

The more communication times, the higher the interaction between the member node and the administrator node, and the higher the success rate of communication between them.

In one embodiment, the sending an authorization request to the first node in the blockchain further includes:

The communication efficiency with each third node in the blockchain is calculated separately, and the third node is a node in the blockchain other than the current second node.

According to the order of communication efficiency from high to low, select a node as the candidate node.

Obtain the extension item information of the digital certificate of the node to be selected, and determine whether the extension item information includes administrator identification information.

If the extension item information includes administrator identification information, the node to be selected is used as the first node, and an authorization request is sent to the first node.

In practical applications, the node with administrator status is generally written into the administrator list of the genesis block. The administrator identity can be marked in the extension information of the digital certificate of the node in the form of administrator identification information, so that the node's status can be judged by the administrator identification information in the extension information of the digital certificate of the blockchain node Administrator status.

Higher communication efficiency means higher communication quality or closer communication distance. Choosing an administrator node with higher communication efficiency is helpful to improve the success rate of authorization.

Step S202: After obtaining the authorization of the smart contract of the first node, receive the smart contract sent by the first node, and load and install the smart contract.

Only the second node loaded with the smart contract can provide smart contract services to the outside, that is, it can participate in the identity authentication and information exchange of the middleware.

Step S203: After monitoring the communication request of the middleware, obtain the identity identification information of the middleware, and authenticate the identity identification information of the middleware according to the smart contract.

In one embodiment, the authentication of the identity information of the middleware according to the smart contract includes:

Find whether there is identification information of the middleware in the smart contract.

If the identity identification information of the middleware exists in the smart contract, it is determined whether the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the second node.

If the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the second node, the authentication of the identity identification information of the middleware is successful.

Step S204, if the authentication of the identity identification information of the middleware is passed, establish a communication connection with the middleware.

It should be understood that the size of the sequence numbers of the steps in the above embodiments does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

Those skilled in the art can clearly understand that, for convenience and conciseness of description, only the above-mentioned division of each functional unit and module is used as an example for illustration. In practical applications, the above-mentioned functions may be allocated by different functional units, Module completion means that the internal structure of the device is divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiments may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above integrated unit may use hardware It can also be implemented in the form of software functional units. In addition, the specific names of each functional unit and module are only for the purpose of distinguishing each other, and are not used to limit the protection scope of the present application. For the specific working processes of the units and modules in the above system, reference may be made to the corresponding processes in the foregoing method embodiments, which will not be repeated here.

FIG. 3 is a schematic diagram of a terminal device provided by an embodiment of the present application. As shown in FIG. 3, the terminal device 3 of this embodiment includes: a processor 30, a memory 31, and computer-readable instructions 32 stored in the memory 31 and executable on the processor 30. When the processor 30 executes the computer-readable instructions 32, the steps in the above embodiments of each blockchain-based identity authentication method are implemented, for example, steps S101 to S103 shown in FIG. 1.

Exemplarily, the computer-readable instructions 32 may be divided into one or more modules/units, the one or more modules/units are stored in the memory 31 and executed by the processor 30, To complete this application. The one or more modules/units may be an instruction segment of a series of computer-readable instructions capable of performing specific functions, and the instruction segment is used to describe the execution process of the computer-readable instructions 32 in the terminal device 3. For example, the computer-readable instructions 32 may be divided into an acquisition unit, a writing unit, and an authorization unit. The specific functions of each unit are as follows:

The acquiring unit is used to acquire the identity identification information of the middleware, and determine whether the middleware belongs to the same blockchain as the first node according to the identity identification information.

Write unit, used to write the identity information of the middleware to the smart contract if the middleware and the first node belong to the same blockchain, and monitor the authorization of the second node in the blockchain request.

The authorization unit is configured to authorize the second node for a smart contract and send the smart contract to the second node if the authorization request of the second node is monitored, and the smart contract is used to indicate The second node authenticates the middleware according to the smart contract.

Optionally, the acquiring unit includes:

The first judgment module is used to judge whether the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the first node.

A first determining module, configured to determine that the middleware and the first node belong to the same if the root certificate in the identity information of the middleware is the same as the root certificate in the identity information of the first node Blockchain.

Optionally, the computer storage medium further includes:

The judging unit is used to judge whether the number of times the middleware is used within a preset time is less than the preset number after writing the identity identification information of the middleware into the smart contract, and judge whether the security level of the middleware is Less than the preset level.

The determining unit is configured to determine that the middleware is an invalid middleware if the number of times the middleware is used within a preset time is less than a preset number of times, or the security level of the middleware is less than a preset level. In the smart contract, the identification information of the invalid middleware is deleted to obtain the updated smart contract.

Optionally, the authorization unit includes:

A sending module, configured to send the updated smart contract to the second node.

4 is a schematic diagram of a terminal device provided by an embodiment of the present application. As shown in FIG. 4, the terminal device 4 of this embodiment includes: a processor 40, a memory 41, and computer-readable instructions 42 stored in the memory 41 and executable on the processor 40. When the processor 40 executes the computer-readable instructions 42, the steps in the above embodiments of each blockchain-based identity authentication method are implemented, for example, steps S201 to S204 shown in FIG. 2.

Exemplarily, the computer-readable instructions 42 may be divided into one or more modules/units, the one or more modules/units are stored in the memory 41, and executed by the processor 40, To complete this application. The one or more modules/units may be an instruction segment of a series of computer-readable instructions capable of performing specific functions, and the instruction segment is used to describe the execution process of the computer-readable instructions 42 in the terminal device 4. For example, the computer-readable instructions 42 can be divided into a sending unit, a receiving unit, an authentication unit, and a communication unit. The specific functions of each unit are as follows:

The sending unit is configured to send an authorization request to the first node in the blockchain, and the authorization request is used to instruct the first node to authorize the second node for the smart contract.

The receiving unit is configured to receive the smart contract sent by the first node after obtaining the authorization of the smart contract of the first node, and load and install the smart contract.

The authentication unit is used for acquiring the identity identification information of the middleware after monitoring the communication request of the middleware, and authenticating the identity identification information of the middleware according to the smart contract.

The communication unit is configured to establish a communication connection with the middleware if the authentication of the identity information of the middleware is passed.

Optionally, the sending unit includes:

The statistics module is used to obtain an administrator list from the genesis block of the blockchain, and separately count the historical communication times with each first node in the administrator list. Including all the first nodes in the blockchain.

The first selection module is used to select a first node according to the order of the historical communication times from more to less and send an authorization request to the first node.

Optionally, the sending unit further includes:

The calculation module is used to separately calculate the communication efficiency with each third node in the blockchain, and the third node is a node other than the current second node in the blockchain.

The second selection module is used to select a node as the candidate node according to the order of communication efficiency from high to low.

The obtaining module is used to obtain the extended item information of the digital certificate of the node to be selected, and determine whether the extended item information includes administrator identification information.

The sending module is configured to use the node to be selected as the first node and send an authorization request to the first node if the extension item information includes administrator identification information.

Optionally, the authentication unit includes:

A search module is used to search for the existence of the identity information of the middleware in the smart contract.

The second judgment module is used to judge whether the root certificate in the middleware's identity information and the second node's identity information in the smart contract if the middleware's identity information exists in the smart contract The root certificate is the same.

The second determination module is used to authenticate the identity identification information of the middleware if the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the second node.

The terminal device 3/4 may be a computing device such as a desktop computer, a notebook, a palmtop computer and a cloud server. The terminal device may include, but is not limited to, a processor and a memory. Those skilled in the art may understand that FIG. 3/4 is only an example of the terminal device 3/4, and does not constitute a limitation on the terminal device 3/4, and may include more or less components than the illustration, or a combination Components, or different components, for example, the terminal device may further include an input output device, a network access device, a bus, and the like.

The so-called processor may be a central processing unit (Central Processing Unit, CPU) or other general-purpose processors or digital signal processors (Digital Signal Processor, DSP), Application Specific Integrated Circuit (ASIC), ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

The memory may be an internal storage unit of the terminal device 3/4, for example, a hard disk or a memory of the terminal device 3/4. The memory may also be an external storage device of the terminal device 3/4, for example, a plug-in hard disk equipped on the terminal device 3/4, a smart memory card (Smart Media Card, SMC), or secure digital (Secure Digital) , SD) card, flash memory card (Flash Card) etc. Further, the memory may include both an internal storage unit of the terminal device 3/4 and an external storage device. The memory is used to store the computer-readable instructions and other programs and data required by the terminal device. The memory can also be used to temporarily store data that has been or will be output.

In the above embodiments, the description of each embodiment has its own emphasis. For a part that is not detailed or recorded in an embodiment, you can refer to the related descriptions of other embodiments.

Those of ordinary skill in the art may realize that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed in hardware or software depends on the specific application of the technical solution and design constraints. Professional technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

In the embodiments provided in this application, it should be understood that the disclosed device/terminal device and method may be implemented in other ways. For example, the device/terminal device embodiments described above are only schematic. For example, the division of the module or unit is only a logical function division, and in actual implementation, there may be another division manner, such as multiple units Or components can be combined or integrated into another system, or some features can be ignored or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or software functional unit.

A person of ordinary skill in the art may understand that all or part of the processes in the method of the foregoing embodiments may be completed by instructing relevant hardware through computer-readable instructions, and the computer-readable instructions may be stored in a computer-readable storage In the medium, when the computer-readable instructions are executed, the processes of the foregoing method embodiments may be included. Wherein, any reference to the memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and/or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

The above-mentioned embodiments are only used to illustrate the technical solutions of the present application, not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still implement the foregoing The technical solutions described in the examples are modified, or some of the technical features are equivalently replaced; and these modifications or replacements do not deviate from the spirit and scope of the technical solutions of the embodiments of the present application. Within the scope of protection of this application.

Claims

A block chain-based identity authentication method is characterized by being applied to the first node in the block chain. The method includes:

Obtain the identity identification information of the middleware, and determine whether the middleware belongs to the same blockchain as the first node according to the identity identification information;

If the middleware and the first node belong to the same blockchain, write the identity information of the middleware into a smart contract, and monitor the authorization request of the second node in the blockchain;

If the authorization request of the second node is monitored, the second node is authorized by a smart contract and the smart contract is sent to the second node, and the smart contract is used to instruct the second node to The smart contract authenticates the middleware.
The blockchain-based identity authentication method according to claim 1, wherein the determining whether the middleware belongs to the same blockchain as the first node according to the identity identification information includes:

Determine whether the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the first node;

If the root certificate in the identity information of the middleware is the same as the root certificate in the identity information of the first node, it is determined that the middleware and the first node belong to the same blockchain.
The blockchain-based identity authentication method according to claim 1, wherein after writing the identity information of the middleware into the smart contract, the method further includes:

Determine whether the number of times the middleware is used within a preset time is less than the preset number, and determine whether the security level of the middleware is less than the preset level;

If the number of times the middleware is used within a preset time is less than the preset number of times, or the security level of the middleware is less than the preset level, it is determined that the middleware is invalid middleware. The smart contract with the updated ID information of the invalid middleware is deleted;

The sending the smart contract to the second node includes:

Sending the updated smart contract to the second node.
A block chain-based identity authentication method is characterized in that it is applied to the second node in the block chain. The method includes:

Send an authorization request to the first node in the blockchain, where the authorization request is used to instruct the first node to authorize the second node for a smart contract;

After obtaining the authorization of the smart contract of the first node, receive the smart contract sent by the first node, and load and install the smart contract;

After monitoring the communication request of the middleware, obtain the identity identification information of the middleware, and authenticate the identity identification information of the middleware according to the smart contract;

If the authentication of the identity identification information of the middleware is passed, a communication connection is established with the middleware.
The blockchain-based identity authentication method according to claim 4, wherein the sending an authorization request to the first node in the blockchain includes:

Obtain an administrator list from the genesis block of the blockchain, and separately count the number of historical communications with each first node in the administrator list. The administrator list includes the block All first nodes in the chain;

According to the order of the number of historical communication times, select a first node and send an authorization request to the first node.
The blockchain-based identity authentication method according to claim 4, wherein the sending an authorization request to the first node in the blockchain further comprises:

Calculate the communication efficiency with each third node in the blockchain separately, the third node is a node in the blockchain other than the current second node;

According to the order of communication efficiency from high to low, select a node as the candidate node;

Obtain the expansion item information of the digital certificate of the node to be selected, and determine whether the expansion item information includes administrator identification information;

If the extension item information includes administrator identification information, the node to be selected is used as the first node, and an authorization request is sent to the first node.
The blockchain-based identity authentication method according to claim 4, wherein the authenticating the identity information of the middleware according to the smart contract includes:

Searching whether the identity information of the middleware exists in the smart contract;

If the identity identification information of the middleware exists in the smart contract, determine whether the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the second node;

If the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the second node, the authentication of the identity identification information of the middleware is successful.
A computer-readable storage medium, the computer-readable storage medium stores computer-readable instructions, characterized in that, when the computer-readable instructions are executed by a processor, the following steps are realized:

Obtain the identity identification information of the middleware, and determine whether the middleware belongs to the same blockchain as the first node according to the identity identification information;

If the middleware and the first node belong to the same blockchain, write the identity information of the middleware into a smart contract, and monitor the authorization request of the second node in the blockchain;

If the authorization request of the second node is monitored, the second node is authorized by a smart contract and the smart contract is sent to the second node, and the smart contract is used to instruct the second node to The smart contract authenticates the middleware.
The computer-readable storage medium according to claim 8, wherein the judging whether the middleware belongs to the same blockchain as the first node according to the identification information includes:

Determine whether the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the first node;

If the root certificate in the identity information of the middleware is the same as the root certificate in the identity information of the first node, it is determined that the middleware and the first node belong to the same blockchain.
The computer-readable storage medium according to claim 8, wherein after writing the identity information of the middleware into the smart contract, the method further comprises:

Determine whether the number of times the middleware is used within a preset time is less than the preset number, and determine whether the security level of the middleware is less than the preset level;

If the number of times the middleware is used within a preset time is less than the preset number, or the security level of the middleware is less than the preset level, the middleware is determined to be invalid middleware, and all The smart contract with the updated ID information of the invalid middleware is deleted;

The sending the smart contract to the second node includes:

Sending the updated smart contract to the second node.
A computer-readable storage medium, the computer-readable storage medium stores computer-readable instructions, characterized in that, when the computer-readable instructions are executed by a processor, the following steps are realized:

Send an authorization request to the first node in the blockchain, where the authorization request is used to instruct the first node to authorize the second node for a smart contract;

After obtaining the authorization of the smart contract of the first node, receive the smart contract sent by the first node, and load and install the smart contract;

After monitoring the communication request of the middleware, obtain the identity identification information of the middleware, and authenticate the identity identification information of the middleware according to the smart contract;

If the authentication of the identity identification information of the middleware is passed, a communication connection is established with the middleware.
The computer-readable storage medium of claim 11, wherein the sending an authorization request to the first node in the blockchain includes:

Obtain an administrator list from the genesis block of the blockchain, and separately count the number of historical communications with each first node in the administrator list. The administrator list includes the block All first nodes in the chain;

According to the order of the number of historical communication times, select a first node and send an authorization request to the first node.
The computer-readable storage medium of claim 11, wherein the sending an authorization request to the first node in the blockchain further comprises:

Calculate the communication efficiency with each third node in the blockchain separately, the third node is a node in the blockchain other than the current second node;

According to the order of communication efficiency from high to low, select a node as the candidate node;

Obtain the expansion item information of the digital certificate of the node to be selected, and determine whether the expansion item information includes administrator identification information;

If the extension item information includes administrator identification information, the node to be selected is used as the first node, and an authorization request is sent to the first node.
The computer-readable storage medium of claim 11, wherein the authenticating the identity information of the middleware according to the smart contract includes:

Searching whether the identity information of the middleware exists in the smart contract;

If the identity identification information of the middleware exists in the smart contract, determine whether the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the second node;

If the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the second node, the authentication of the identity identification information of the middleware is successful.
A terminal device includes a memory, a processor, and computer-readable instructions stored in the memory and executable on the processor, characterized in that the processor is implemented as follows when executing the computer-readable instructions step:

Obtain the identity identification information of the middleware, and determine whether the middleware belongs to the same blockchain as the first node according to the identity identification information;

If the middleware and the first node belong to the same blockchain, write the identity information of the middleware into a smart contract, and monitor the authorization request of the second node in the blockchain;

If the authorization request of the second node is monitored, the second node is authorized by a smart contract and the smart contract is sent to the second node, and the smart contract is used to instruct the second node to The smart contract authenticates the middleware.
The terminal device according to claim 15, wherein the determining whether the middleware belongs to the same blockchain as the first node according to the identity identification information includes:

Determine whether the root certificate in the identity identification information of the middleware is the same as the root certificate in the identity identification information of the first node;

If the root certificate in the identity information of the middleware is the same as the root certificate in the identity information of the first node, it is determined that the middleware and the first node belong to the same blockchain.
The terminal device according to claim 15, wherein after the identity information of the middleware is written into the smart contract, the method further includes:

Determine whether the number of times the middleware is used within a preset time is less than the preset number, and determine whether the security level of the middleware is less than the preset level;

If the number of times the middleware is used within a preset time is less than the preset number of times, or the security level of the middleware is less than the preset level, it is determined that the middleware is invalid middleware. The smart contract with the updated ID information of the invalid middleware is deleted;

The sending the smart contract to the second node includes:

Sending the updated smart contract to the second node.
A terminal device includes a memory, a processor, and computer-readable instructions stored in the memory and executable on the processor, characterized in that the processor is implemented as follows when executing the computer-readable instructions step:

Send an authorization request to the first node in the blockchain, where the authorization request is used to instruct the first node to authorize the second node for a smart contract;

After obtaining the authorization of the smart contract of the first node, receive the smart contract sent by the first node, and load and install the smart contract;

After monitoring the communication request of the middleware, obtain the identity identification information of the middleware, and authenticate the identity identification information of the middleware according to the smart contract;

If the authentication of the identity identification information of the middleware is passed, a communication connection is established with the middleware.
The terminal device according to claim 18, wherein the sending of the authorization request to the first node in the blockchain includes:

Obtain an administrator list from the genesis block of the blockchain, and separately count the number of historical communications with each first node in the administrator list. The administrator list includes the block All first nodes in the chain;

According to the order of the number of historical communication times, select a first node and send an authorization request to the first node.
The terminal device according to claim 18, wherein the sending an authorization request to the first node in the blockchain further comprises:

Calculate the communication efficiency with each third node in the blockchain separately, the third node is a node in the blockchain other than the current second node;

According to the order of communication efficiency from high to low, select a node as the candidate node;

Obtain the expansion item information of the digital certificate of the node to be selected, and determine whether the expansion item information includes administrator identification information;

If the extension item information includes administrator identification information, the node to be selected is used as the first node, and an authorization request is sent to the first node.