WO2020252753A1

WO2020252753A1 - Blockchain node device, authentication method and device thereof, and storage medium

Info

Publication number: WO2020252753A1
Application number: PCT/CN2019/092143
Authority: WO
Inventors: 周茂青
Original assignee: 深圳市网心科技有限公司
Priority date: 2019-06-20
Filing date: 2019-06-20
Publication date: 2020-12-24
Also published as: CN112544057A; CN112544057B

Abstract

Provided by the present invention is a blockchain node device, comprising: a hardware token chip, used for computing to obtain first authentication information; a blockchain program, used for calling a hardware token driving program when the blockchain node device triggers node authentication; the hardware token driving program, used for calling a read interface in the hardware token chip to read the first authentication information when called; and the blockchain program, also used for generating second authentication information containing the first authentication information after reading the first authentication information returned by the hardware token driving program, and for sending an authentication request bearing the second authentication information to an authentication server of a blockchain network. Further provided by the present invention are a blockchain node device authentication method and device, and a storage medium. By embedding or integrating the hardware token chip into the blockchain node device, the present invention achieves binding of the token and the blockchain node device, improves the security of the authentication information, and is capable of automatically authenticating the blockchain node device.

Description

Block chain node equipment and its authentication method, device and storage medium

Technical field

The present invention relates to the field of blockchain technology, in particular to a blockchain node device, a blockchain node device authentication method, device and storage medium.

Background technique

Blockchain technology has become more and more popular with companies in the fields of finance, insurance, etc. due to its decentralization and non-tamperable information, especially the use of blockchain technology to achieve transaction events involving multiple parties (for example, transfers) Events such as transactions, payment transactions, etc.) have increasingly become the focus of attention.

The current authentication methods of blockchain node devices are usually implemented based on public key encryption systems. The basic process is to generate a public-private key pair or Public Key Infrastructure (PKI) certificate (including a public key) and a private key for each blockchain node device. The private key is stored on the blockchain node device. The key or PKI certificate is disclosed to the authentication system and other blockchain node devices. When accessing the blockchain network, it becomes a trusted node by verifying the signature of the private key of the blockchain node device.

However, the disadvantage of this current authentication method is that the private key is not bound to the device, so the security is relatively low. For example, the private key stored on the disk of the networked machine may be stolen by hackers, and the disk hardware may be damaged. The key is lost, the user may copy the private key to other machines and the authentication system cannot identify whether the machine has been replaced, etc.

Therefore, it is necessary to propose a new blockchain node equipment authentication scheme to improve the security of the key, thereby improving the security of the blockchain network.

Summary of the invention

In view of the above, it is necessary to provide a blockchain node device and its authentication method, device, and storage medium. By embedding or integrating the hardware token chip in the blockchain node device, the token and the blockchain are realized. The binding of node devices improves the security of authentication information, and can automatically authenticate blockchain node devices.

To achieve the above objective, the first aspect of the present invention provides a blockchain node device installed with a blockchain program, and the blockchain node device further includes: a hardware token chip and a hardware token driver;

The blockchain program is used to call the hardware token driver when the blockchain node device triggers node authentication;

The hardware token driver is used to, when called, call the read interface in the hardware token chip to read the first authentication information obtained by the hardware token chip operation;

The hardware token chip is used to obtain the first authentication information by calculation and return it to the hardware token driver;

The blockchain program is also used to generate second authentication information containing the first authentication information after reading the first authentication information returned by the hardware token driver, and send the second authentication information The authentication request of the information is sent to the authentication server of the blockchain network.

In an optional embodiment, the hardware token driver is located at the kernel layer of the operating system; the hardware token chip is installed on the motherboard and connected to the bus of the motherboard.

In an optional embodiment, the hardware token chip calculates the first authentication information when it is called by the hardware token driver; or, the hardware token chip periodically automatically calculates the first authentication information. information.

To achieve the above objective, the second aspect of the present invention provides a blockchain node device authentication method, the method is applied to a blockchain node device with a built-in hardware token chip, and the method includes:

When the blockchain node device triggers node authentication, acquiring the first authentication information obtained by the hardware token chip operation;

Generating second authentication information including the first authentication information;

Sending an authentication request carrying the second authentication information to an authentication server in the blockchain network;

Receiving the authentication result returned after the authentication server verifies the authentication request.

In an optional embodiment, the obtaining the first authentication information obtained by the operation of the hardware token chip includes:

The reading interface in the hardware token chip is called by the hardware token driver to read the first authentication information obtained by the hardware token chip operation.

Acquiring the time when the blockchain node device triggers node authentication;

A pre-stored cryptographic algorithm is used to calculate the time and random number to obtain a data result as the first authentication information.

In an optional embodiment, said generating second authentication information including said first authentication information includes:

Acquiring a pre-stored target field, where the target field includes a communication protocol;

Encapsulating the target field and the first authentication information according to the structure specified by the message standard to generate the second authentication information.

In an optional embodiment, after said generating the second authentication information containing the first authentication information, the method further includes:

Encoding the second authentication information according to a preset format;

The sending the authentication request carrying the second authentication information to the authentication server in the blockchain network includes: sending the authentication request carrying the encoded second authentication information to the authentication server in the blockchain network.

In an optional embodiment, the blockchain node device triggers node authentication through one or more of the following combinations:

When the startup of the blockchain node device is detected, determining that the blockchain node device triggers node authentication;

When it is detected that the blockchain node device requests a blockchain transaction, it is determined that the blockchain node device triggers node authentication.

In an optional embodiment, the method further includes:

If the authentication result is that the blockchain node device is successfully authenticated, access the blockchain network.

To achieve the above objective, a third aspect of the present invention provides a blockchain node device authentication device, the device runs in a blockchain node device with a built-in hardware token chip, and the device includes:

An arithmetic module, configured to obtain first authentication information obtained by the hardware token chip operation when the blockchain node device triggers node authentication;

A generating module, configured to generate second authentication information including the first authentication information;

A sending module, configured to send an authentication request carrying the second authentication information to an authentication server in the blockchain network;

The receiving module is configured to receive the authentication result returned by the authentication server after verifying the authentication request.

In order to achieve the above objective, a fourth aspect of the present invention provides a blockchain node device, the blockchain node device includes a processor and a memory, and the memory stores a block that can run on the processor A download program for chain node device authentication, which implements the blockchain node device authentication method when the download program for blockchain node device authentication is executed by the processor.

In order to achieve the foregoing objective, the fifth aspect of the present invention provides a computer-readable storage medium, the computer-readable storage medium stores a download program for blockchain node device authentication, and the download program for the blockchain node device authentication The program can be executed by one or more processors to implement the blockchain node device authentication method.

It can be seen from the above technical solutions that the blockchain node device, the authentication method, device and storage medium of the blockchain node device of the present invention embed or integrate a hardware token chip in the blockchain node device to realize the token and The binding of blockchain node devices is due to the dynamic nature of the hardware token chip (the authentication information generated each time is different), randomness (the authentication information generated each time is random and unpredictable), once The advantages of security (the generated authentication information can only be used once and cannot be reused), anti-theft, non-duplication, etc., so as to ensure the security of the authentication information and will not be stolen, lost or transferred; in addition, hardware tokens The chip provides a reading interface for authentication information. The generated authentication information can be read by the blockchain program. When the blockchain node device triggers node authentication, it can automatically generate an authentication request and send it to the blockchain network The node authentication process is automated, without manual intervention; when the node is authenticated, the blockchain node device can be qualified to establish connections with other blockchain node devices in other blockchain networks and participate in consensus, thus from the overall The above improves the security of the blockchain network and ensures that the blockchain node devices connected to the blockchain network are standardized and trusted hardware.

Description of the drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only It is an embodiment of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on the provided drawings without creative work.

Figure 1 is a schematic structural diagram of a preferred embodiment of a blockchain node device provided by the present invention.

FIG. 2 is a schematic diagram of the environment of a preferred embodiment of the blockchain node device authentication blockchain network provided by the present invention.

Fig. 3 is a flowchart of a preferred embodiment of a method for authenticating a blockchain node device provided by the present invention.

FIG. 4 is a schematic diagram of signaling interaction of a preferred embodiment of a blockchain node device to authenticate a blockchain network provided by the present invention.

Fig. 5 is a functional module diagram of a preferred embodiment of the device for authenticating blockchain node equipment provided by the present invention.

Fig. 6 is a schematic structural diagram of a preferred embodiment of another blockchain node device provided by the present invention.

Detailed ways

In order to be able to understand the above objectives, features and advantages of the present invention more clearly, the present invention will be described in detail below with reference to the drawings and specific embodiments. It should be noted that the embodiments of the present invention and the features in the embodiments can be combined with each other if there is no conflict.

The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of the present invention.

Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the technical field of the present invention. The terms used in the description of the present invention herein are only for the purpose of describing specific embodiments, and are not intended to limit the present invention.

In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

Example one

Please refer to FIG. 1 and FIG. 2 at the same time, which are schematic structural diagrams of a preferred embodiment of the blockchain node device disclosed in the present invention.

Before the blockchain node device 100 requests access to the blockchain network 200, it needs to pass the legality verification of the blockchain network 200. When the blockchain network 200 verifies that the blockchain node device 100 is legal, the blockchain node device 100 is successfully connected to the blockchain network 200; when the blockchain network 200 verifies The blockchain node device 100 is illegal, and it refuses to access the blockchain node device 100 in the blockchain network 200.

In this embodiment, the blockchain node device 100 refers to a device that has installed a blockchain program 10 and a hardware token driver 12, integrated or embedded a hardware token chip 14, and can participate in blockchain consensus and accounting. computer. In the layered architecture of the blockchain node device 100, the blockchain program 10 belongs to the application layer, the hardware token driver 12 belongs to the operating system kernel layer, and the hardware token chip 14 belongs to the hardware layer. .

Wherein, the blockchain program 10 is a software program that runs at the application layer, responsible for the consensus and accounting logic of the blockchain node device 100, and calls the blockchain node device 100 when the node authentication is triggered. The hardware token driver 12 reads the first authentication information calculated by the hardware token chip 14.

The hardware token driver 12 is a driver module located at the kernel layer of the operating system, and provides an application programming interface (Application Programming Interface, API) for the blockchain program 10 at the application layer. When called by the blockchain program 10, it is responsible for calling the reading interface in the hardware token chip 14 and reading the first authentication information calculated by the hardware token chip 14, and at the same time, send it to the blockchain program 10 Return the first authentication information.

Wherein, the hardware token chip 14 is integrated or embedded on the main board of the blockchain node device 100, and has a bus with the main board, for example, an Inter-Integrated Circuit (I2C) bus, a serial peripheral interface (Serial Peripheral Interface, SPI) bus or other suitable computer bus connection. The hardware token chip 14 is pre-stored with a token. When called by the hardware token driver, a pre-stored cryptographic algorithm is used to calculate the time and random number to obtain the first authentication information. The generated first authentication information can be recognized and read by the hardware token driver 12, but the first authentication information cannot be written or modified. If the hardware token chip 14 is forcibly removed, the first authentication information is lost and the function becomes invalid. Even if it is installed on another computer, the first authentication information can no longer be read.

In some embodiments, the hardware token chip 14 may include, but is not limited to: a password generation chip, an algorithm coprocessor, a data memory, a bus pin, and a corresponding signal processor (for example, if it is connected to an I2C bus) , You need pins and signal processors that comply with the I2C bus protocol). The password generation chip runs a special password algorithm to generate the current password according to the current time or the number of times of use; the algorithm coprocessor is used to perform the algorithm calculation of the authentication algorithm; the data memory is used to store the security key and data; the bus pins and corresponding signal processing The device is used to connect with the bus of the computer motherboard and is responsible for data exchange with the kernel driver.

The blockchain program 10 is also used to generate second authentication information containing the first authentication information after reading the first authentication information returned by the hardware token driver, and send the second authentication information that carries the second authentication information. The authentication request of the authentication information is sent to the authentication server of the blockchain network 200.

In an optional embodiment, the blockchain program 10 is further configured to encode the second authentication information according to a preset format after generating the second authentication information, and send the encoded data The authentication request of the second authentication information is sent to the authentication server of the blockchain network 200.

As shown in FIG. 2, an authentication server 20 and several blockchain node devices 22 may exist in the blockchain network 200. The several blockchain node devices 22 are connected to each other through peer to peer (P2P) to form a blockchain network 200. The authentication server 20 is responsible for receiving the authentication request sent by the blockchain node device 100 and verifying the legality of the authentication request. If the authentication server 20 verifies that the authentication request is legal, confirm that the blockchain node device 100 is a trusted node, and return to the blockchain node device 100 an authentication result indicating that the blockchain node device is successfully authenticated . If the authentication server 20 verifies that the authentication request is illegal, confirm that the blockchain node device 100 is an untrusted node, and return to the blockchain node device 100 an authentication result indicating that the blockchain node device has failed authentication . Wherein, the authentication server 20 may be built in the blockchain network 200, or may be an integrated third-party authentication service.

In this embodiment, the hardware token chip 14 is integrated or embedded in the blockchain node device 100, so that the hardware token chip 14 can be bound to the blockchain node device 100, ensuring The security of the token; in addition, the authentication information in the hardware token chip can be read by the application, so there is no need for manual intervention in the subsequent authentication process, and it will not be stolen, lost or transferred. The blockchain network 200 authenticates the blockchain node device 100 based on the hardware token chip 14 to ensure that the blockchain node devices for access or consensus are standardized and trusted hardware.

Example two

Please refer to FIG. 3, which is a flowchart of a preferred embodiment of the blockchain node device authentication method provided by the present invention.

The blockchain node device authentication method is applied to the blockchain node device. According to different requirements, the order of the steps in the flowchart can be changed, and some steps can be omitted.

S31: When the blockchain node device triggers node authentication, obtain first authentication information obtained by the operation of the hardware token chip.

In the embodiment of the present invention, a blockchain program, a hardware token driver, and a hardware token chip are integrated or embedded in the blockchain node device.

When the blockchain node device triggers node authentication, the blockchain program calls the read interface of the hardware token driver, and the hardware token driver calls the read of the hardware token chip Interface, the hardware token chip generates first authentication information when the call signal is detected; after that, the hardware token driver reads the first authentication information calculated by the hardware token chip and returns the first authentication information To the blockchain program, the blockchain program reads the first authentication information.

It should be understood that the block chain program calls the read parameters of the read interface of the hardware token driver, and the hardware token driver calls the read interface of the hardware token chip. The parameters are not the same. The read interface of the hardware token driver is used to encapsulate information to the blockchain program, and the read interface of the hardware token chip is used to encapsulate information to the hardware token driver.

In an optional embodiment, the blockchain node device may trigger node authentication through one or more of the following combinations:

In this optional embodiment, generally, when the blockchain node device starts to connect to the blockchain network, the blockchain network needs to perform identity authentication on the blockchain node device to determine the block Whether the chain node device is a trusted node. Or, when the block chain node device needs to perform a block chain transaction, the transaction information is put into a data packet and broadcast to the block chain network, and the block chain network performs identity authentication on the block chain node device To determine whether the blockchain node device is a trusted node.

In this optional embodiment, tokens are pre-stored in the hardware token chip, for example: KEY tokens based on public key infrastructure (Public Key Infrastructure, PKI) technology, tokens based on challenge/response And tokens based on dynamic passwords.

Since the time interval between the node authentication triggered by the blockchain node device and the hardware token driver calling the hardware token chip is almost negligible, the reading interface of the hardware token chip can be called by the hardware token driver The calling time of is used as the time when the blockchain node device triggers node authentication. When the read interface of the hardware token chip is called by the hardware token driver, the hardware token chip obtains the calling time of the hardware token driver, and uses a cryptographic algorithm to perform the calling time and the generated random number The cryptographic operation returns the calculated data result as the first authentication information to the hardware token driver. The cryptographic operation is a prior art, and the present invention will not be elaborated here.

The random number is an unpredictable number generated by the hardware token chip using a special algorithm. Because uncertain factors such as time and random numbers are added to the first authentication information, the first authentication information can only be used once, so that the attacker cannot obtain the first authentication information by stealing passwords or replaying attacks. The first authentication information obtained by the token chip operation has higher security.

When the authentication server of the blockchain network receives an authentication request, it generates a random number, uses the same cryptographic algorithm for cryptographic operations, and compares whether the generated random number is the same as the random number in the received authentication request To determine whether the authentication request is valid. If the random number generated by the authentication server is the same as the random number in the received authentication request, it is determined that the authentication request is valid. If the random number generated by the authentication server comparison is different from the random number in the received authentication request, it is determined that the authentication request is invalid.

S32: Generate second authentication information including the first authentication information.

In the embodiment of the present invention, after the blockchain program reads the first authentication information, it does not directly send the first authentication information to the authentication server of the blockchain network for verification, but generates the information that meets the requirements based on the first authentication information. The second authentication information is then sent to the authentication server of the blockchain network.

In this optional embodiment, the blockchain program reads the pre-stored target field and combines the first authentication information to generate the second authentication information.

The target field may include, but is not limited to: message version number, authentication purpose, computer equipment identification, computer’s Internet Protocol (IP) address, computer’s media access control (Media Access Control Address, MAC) address and communication Agreement etc.

In an optional embodiment, after the generating the second authentication information including the first authentication information, the method further includes:

The second authentication information is encoded according to a preset format.

The blockchain node device encodes the generated second authentication information according to the format in which the information is transmitted in the blockchain network, for example, compression or encryption. The second authentication information can be transmitted to the blockchain network. Then the sending the authentication request carrying the second authentication information to the authentication server in the blockchain network is: sending the authentication request carrying the encoded second authentication information to the authentication server in the blockchain network.

S33: Send an authentication request carrying the second authentication information to an authentication server in the blockchain network.

After the blockchain node device encodes the second authentication information, it sends an authentication request to the blockchain network, where the authentication request carries the encoded second authentication information.

After receiving the authentication request, the blockchain network forwards the authentication request to the authentication server for verification, so as to determine that the blockchain node device is a trusted node.

S34: Receive an authentication result returned after the authentication server verifies the authentication request.

If the authentication server verifies that the authentication request is legal, it confirms that the blockchain node device is a trusted node, and returns an authentication result that the blockchain node device is successfully authenticated to the blockchain node device. If the authentication server verifies that the authentication request is illegal, confirm that the blockchain node device is an untrusted node, and return an authentication result that the blockchain node device has failed authentication to the blockchain node device.

Wherein, the authentication server verifying the authentication request depends on the token algorithm, such as KEY token based on Public Key Infrastructure (PKI) technology, token based on challenge/response, and based on dynamic password The specific verification method belongs to the prior art, and will not be repeated here.

In an optional embodiment, if the authentication result is that the blockchain node device is successfully authenticated, the method further includes:

Access to the blockchain network.

In this optional implementation, when the blockchain node device needs to be connected to the blockchain network, the blockchain network needs to verify the authentication request. If the authentication succeeds, it indicates that the blockchain node If the device is successfully authenticated, the blockchain node device may send an access request carrying the authentication result to the blockchain network. After receiving the access request, the blockchain network responds to the access request. Enter a request to verify the authentication result. When the verification is passed, the blockchain network allows the blockchain node device to access the blockchain network, and when the blockchain node device receives the permission response from the blockchain network, connects Enter the blockchain network.

In an optional embodiment, when the verification fails, the blockchain network prohibits the blockchain node device from accessing the blockchain network, and the blockchain node device receives the When the block chain network responds to the prohibition, the authentication request can be sent again to the authentication server in the block chain network.

In summary, the blockchain node device authentication method of the present invention embeds or integrates a hardware token chip in the blockchain node device to realize the binding of the token and the blockchain node device, because the hardware token chip Dynamic (the authentication information generated each time is different), random (the authentication information generated each time is random and unpredictable), one-time (the generated authentication information can only be used once and cannot be repeated) Use), anti-theft, non-duplication and other advantages, so as to ensure the security of the authentication information, will not be stolen, lost or transferred; in addition, the hardware token chip provides a reading interface for the authentication information, the generated authentication The information can be read by the blockchain program. When the blockchain node device triggers node authentication, it can automatically generate an authentication request and send it to the authentication server in the blockchain network. The node authentication process is automated without manual intervention; After the node authentication is passed, the blockchain node device can be qualified to establish connections with other blockchain node devices in other blockchain networks and participate in consensus, thereby improving the security of the blockchain network as a whole and ensuring the connection The blockchain node devices in the blockchain network are all standardized and trusted hardware.

In order to further explain the authentication method of the blockchain node device in the present invention, please refer to FIG. 4, which is a schematic diagram of signaling interaction in a preferred embodiment of the blockchain node device authenticating a blockchain network.

S41: When the blockchain node device triggers node authentication, the blockchain program calls the read interface of the hardware token driver.

S42: The hardware token driver calls the read interface of the hardware token chip.

S43: The hardware token chip calculates to obtain first authentication information and returns the first authentication information to the hardware token driver.

S44, the hardware token driver reads the first authentication information and returns it to the blockchain program.

S45: The blockchain program reads the first authentication information and generates second authentication information including the first authentication information.

S46: The blockchain program encodes the second authentication information according to a preset format, and at the same time sends an authentication request carrying the encoded second authentication information to an authentication server in the blockchain network.

S47: The authentication server performs legality verification on the authentication request to obtain an authentication result.

S48: The authentication server returns the authentication result to the blockchain program.

The above are only specific embodiments of the present invention, but the scope of protection of the present invention is not limited to this. For those of ordinary skill in the art, without departing from the inventive concept of the present invention, they can also make Improvements, but these all belong to the protection scope of the present invention.

Example three

Please refer to FIG. 5, which is a functional module diagram of a preferred embodiment of a blockchain node device authentication device disclosed in the present invention.

In some embodiments, the blockchain node device authentication device runs in the blockchain node device. The device for authenticating blockchain node equipment may include a plurality of functional modules composed of program code segments. The program code of each program segment in the blockchain node device authentication device can be stored in a memory and executed by at least one processor to execute part or part of the blockchain node device authentication method described in FIG. 3 All steps.

In this embodiment, the blockchain node equipment authentication device 50 can be divided into multiple functional modules according to the functions it performs. The functional modules may include: an arithmetic module 501, a generating module 502, an encoding module 503, a sending module 504, a receiving module 505, and an access module 506. The module referred to in the present invention refers to a series of computer program segments that can be executed by at least one processor and can complete fixed functions, and are stored in a memory. In some embodiments, the functions of each module will be detailed in subsequent embodiments.

The calculation module 501 is configured to obtain first authentication information obtained by calculation of the hardware token chip when the blockchain node device triggers node authentication.

The generating module 502 is configured to generate second authentication information including the first authentication information.

In an optional embodiment, the generating module 502 generating the second authentication information including the first authentication information includes:

The encoding module 503 is configured to encode the second authentication information according to a preset format.

The blockchain node device encodes the generated second authentication information according to the format in which the information is transmitted in the blockchain network, for example, compression or encryption. The second authentication information can be transmitted to the blockchain network.

The sending module 504 is configured to send the authentication request carrying the second authentication information to the authentication server in the blockchain network; or send the authentication request carrying the encoded second authentication information to the authentication in the blockchain network server.

The receiving module 505 is configured to receive the authentication result returned after the authentication server verifies the authentication request.

If the authentication server verifies that the authentication request is legal, it confirms that the blockchain node device is a trusted node, and returns an authentication result that the blockchain node device is successfully authenticated to the blockchain node device. If the authentication server verifies that the authentication request is illegal, confirm that the blockchain node device is an untrusted node, and return to the blockchain node device an authentication result that the blockchain node device has failed authentication.

In an optional embodiment, if the authentication result is that the blockchain node device is successfully authenticated, the apparatus further includes:

The access module 506 is used to access the blockchain network.

In summary, the blockchain node device authentication device of the present invention embeds or integrates a hardware token chip in the blockchain node device to realize the binding of the token and the blockchain node device, because the hardware token chip Dynamic (the authentication information generated each time is different), random (the authentication information generated each time is random and unpredictable), one-time (the generated authentication information can only be used once and cannot be repeated) Use), anti-theft, non-duplication and other advantages, so as to ensure the security of the authentication information, will not be stolen, lost or transferred; in addition, the hardware token chip provides a reading interface for the authentication information, the generated authentication The information can be read by the blockchain program. When the blockchain node device triggers node authentication, it can automatically generate an authentication request and send it to the authentication server in the blockchain network. The node authentication process is automated without manual intervention; After the node authentication is passed, the blockchain node device can be qualified to establish connections with other blockchain node devices in other blockchain networks and participate in consensus, thereby improving the security of the blockchain network as a whole and ensuring the connection The blockchain node devices in the blockchain network are all standardized and trusted hardware.

Example four

As shown in FIG. 6, FIG. 6 is another schematic diagram of the structure of the blockchain node device in the preferred embodiment of the method for implementing the blockchain node device authentication of the present invention. The blockchain node device 6 includes a memory 61, at least one processor 62, a computer program 63 stored in the memory 61 and running on the at least one processor 62, and at least one communication bus 64.

Those skilled in the art can understand that the schematic diagram shown in FIG. 6 is only an example of the blockchain node device 6 and does not constitute a limitation on the blockchain node device 6, and may include more or more A few components, or a combination of some components, or different components, for example, the blockchain node device 6 may also include input and output devices, network access devices, and the like.

The blockchain node device 6 also includes, but is not limited to, any electronic product that can interact with the user through a keyboard, a mouse, a remote control, a touch panel, or a voice control device, for example, a personal computer, a tablet computer, Smart phones, personal digital assistants (PDAs), game consoles, Internet Protocol Television (IPTV), smart wearable devices, etc. The network where the blockchain node device 6 is located includes, but is not limited to, the Internet, a wide area network, a metropolitan area network, a local area network, a virtual private network (Virtual Private Network, VPN), etc.

The at least one processor 62 may be a central processing unit (Central Processing Unit, CPU), or other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), and application specific integrated circuits (ASICs). ), ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The processor 62 can be a microprocessor or the processor 62 can also be any conventional processor, etc. The processor 62 is the control center of the blockchain node device 6 and connects the entire Various parts of the blockchain node device 6.

The memory 61 may be used to store the computer program 66 and/or modules/units. The processor 62 runs or executes the computer programs and/or modules/units stored in the memory 61 and calls the computer programs and/or modules/units stored in the memory 61. The data in 61 realizes various functions of the blockchain node device 6. The memory 61 may mainly include a program storage area and a data storage area, where the program storage area may store an operating system, an application program required by at least one function (such as a sound playback function, an image playback function, etc.); the storage data area may The data (such as audio data, phone book, etc.) created according to the use of the blockchain node device 6 is stored. In addition, the memory 61 may include a high-speed random access memory, and may also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a Smart Media Card (SMC), and a Secure Digital (SD) Card, Flash Card, at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage device.

Preferably, the processor 62 implements the following steps when executing the foregoing instructions:

Further, the processor 62 obtaining the first authentication information obtained by the operation of the hardware token chip includes:

Further, generating, by the processor 62, second authentication information including the first authentication information includes:

Further, after the second authentication information including the first authentication information is generated, the processor 62 further implements the following steps when executing the above instructions:

Encoding the second authentication information according to a preset format;

Further, the blockchain node device triggers node authentication through one or more of the following combinations:

Further, if the authentication result is that the blockchain node device is successfully authenticated, the processor 62 further implements the following steps when executing the above instructions:

Access to the blockchain network.

For the specific implementation method of the processor 62 on the foregoing instructions, reference may be made to the description of the relevant steps in the embodiment corresponding to FIG. 3, which is not repeated here.

If the integrated module/unit of the blockchain node device 6 is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the present invention implements all or part of the processes in the above-mentioned embodiment methods, and can also be completed by instructing relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium. When executed by the processor, the steps of the foregoing method embodiments can be implemented. Wherein, the computer program includes computer program code, and the computer program code may be in the form of source code, object code, executable file, or some intermediate forms. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory) , Random Access Memory (RAM, Random Access Memory), electrical carrier signal, telecommunications signal, and software distribution media, etc. It should be noted that the content contained in the computer-readable medium can be appropriately added or deleted according to the requirements of the legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to the legislation and patent practice, the computer-readable medium Does not include electrical carrier signals and telecommunication signals.

In the several embodiments provided by the present invention, it should be understood that the disclosed system, device, and method can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the modules is only a logical function division, and there may be other division methods in actual implementation.

The modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

In addition, the functional modules in the various embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional modules.

For those skilled in the art, it is obvious that the present invention is not limited to the details of the foregoing exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic characteristics of the present invention. Therefore, from any point of view, the embodiments should be regarded as exemplary and non-limiting. The scope of the present invention is defined by the appended claims rather than the above description, and therefore it is intended to fall within the claims. All changes within the meaning and scope of equivalent elements of are included in the present invention. Any associated diagram marks in the claims shall not be regarded as limiting the claims involved. In addition, it is obvious that the word "including" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or devices stated in the system claims can also be implemented by one unit or device through software or hardware. The second class words are used to indicate names, and do not indicate any specific order.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be Modifications or equivalent replacements are made without departing from the spirit and scope of the technical solution of the present invention.

Claims

A block chain node device installed with a block chain program, wherein the block chain node device further includes: a hardware token chip and a hardware token driver;

The blockchain program is used to call the hardware token driver when the blockchain node device triggers node authentication;

The hardware token driver is configured to, when called, call the read interface in the hardware token chip to read the first authentication information obtained by the operation of the hardware token chip;

The hardware token chip is used to obtain the first authentication information by calculation and return it to the hardware token driver;

The blockchain program is also used to generate second authentication information containing the first authentication information after reading the first authentication information returned by the hardware token driver, and send the second authentication information The authentication request of the information is sent to the authentication server of the blockchain network.
The blockchain node device according to claim 1, wherein:

The hardware token driver is located at the kernel layer of the operating system;

The hardware token chip is installed on the motherboard and connected to the bus of the motherboard.
The blockchain node device of claim 1 or 2, wherein the hardware token chip calculates the first authentication information when called by the hardware token driver; or, the hardware token The chip periodically automatically calculates the first authentication information.
A blockchain node device authentication method, characterized in that the method is applied to a blockchain node device with a built-in hardware token chip, and the method includes:

When the blockchain node device triggers node authentication, acquiring the first authentication information obtained by the hardware token chip operation;

Generating second authentication information including the first authentication information;

Sending an authentication request carrying the second authentication information to an authentication server in the blockchain network;

Receiving the authentication result returned after the authentication server verifies the authentication request.
The method according to claim 4, wherein the obtaining the first authentication information obtained by the operation of the hardware token chip comprises:

The reading interface in the hardware token chip is called by the hardware token driver to read the first authentication information obtained by the hardware token chip operation.
The method according to claim 4, wherein the obtaining the first authentication information obtained by the operation of the hardware token chip comprises:

Acquiring the time when the blockchain node device triggers node authentication;

A pre-stored cryptographic algorithm is used to calculate the time and a random number to obtain a data result as the first authentication information.
The method according to claim 6, wherein said generating second authentication information including said first authentication information comprises:

Acquiring a pre-stored target field, where the target field includes a communication protocol;

Encapsulating the target field and the first authentication information according to the structure specified by the message standard to generate the second authentication information.
8. The method according to claim 7, wherein after said generating the second authentication information containing the first authentication information, the method further comprises:

Encoding the second authentication information according to a preset format;

The sending the authentication request carrying the second authentication information to the authentication server in the blockchain network includes: sending the authentication request carrying the encoded second authentication information to the authentication server in the blockchain network.
The method according to any one of claims 4 to 8, wherein the blockchain node device triggers node authentication through one or more of the following combinations:

When the startup of the blockchain node device is detected, determining that the blockchain node device triggers node authentication;

When it is detected that the blockchain node device requests a blockchain transaction, it is determined that the blockchain node device triggers node authentication.
The method according to any one of claims 4 to 8, wherein the method further comprises:

If the authentication result is that the blockchain node device is successfully authenticated, access the blockchain network.
A blockchain node device authentication device, characterized in that the device runs in a blockchain node device with a built-in hardware token chip, and the device includes:

An arithmetic module, configured to obtain first authentication information obtained by the hardware token chip operation when the blockchain node device triggers node authentication;

A generating module, configured to generate second authentication information including the first authentication information;

A sending module, configured to send an authentication request carrying the second authentication information to an authentication server in the blockchain network;

The receiving module is configured to receive the authentication result returned by the authentication server after verifying the authentication request.
A blockchain node device, characterized in that the blockchain node device includes a processor and a memory, and a download program for blockchain node device authentication that can be run on the processor is stored in the memory, When the download program for blockchain node device authentication is executed by the processor, the blockchain node device authentication method according to any one of claims 4 to 10 is realized.
A computer-readable storage medium, characterized in that a download program for blockchain node device authentication is stored on the computer-readable storage medium, and the download program for blockchain node device authentication can be processed by one or more The device executes to implement the blockchain node device authentication method according to any one of claims 4 to 10.