WO2024036644A1

WO2024036644A1 - Method and apparatus for acquiring signature information

Info

Publication number: WO2024036644A1
Application number: PCT/CN2022/113778
Authority: WO
Inventors: 王东晖; 刘斐
Original assignee: 华为技术有限公司
Priority date: 2022-08-19
Filing date: 2022-08-19
Publication date: 2024-02-22

Abstract

The present application relates to the field of communications. Disclosed are a method and apparatus for acquiring signature information. In the method, a first node can acquire a private-key fragment of the first node and key information of a terminal, and can sign the key information of the terminal according to the private key fragment of the first node, so as to obtain a signature fragment of the first node, wherein the signature fragment of the first node is used for determining signature information, the signature information being used for performing authentication between the terminal and the first node. By means of the method, authentication can be performed between a terminal and a first node according to signature information, without the need for using a key in a SIM card to perform authentication, such that the SIM card is unbound from a network, and if a user wants to perform network switching, it is not necessary to replace the SIM card, such that the terminal can flexibly access the network, thereby improving the user experience.

Description

Method and device for obtaining signature information

Technical field

The present application relates to the field of communications, and in particular to methods and devices for obtaining signature information.

Background technique

In the communication system, the terminal can access the network provided by the operator through the subscriber identity module (SIM) card. Specifically, the user selects an operator and purchases the corresponding SIM card. The root key of the SIM card is preset in the SIM card. Before the SIM card is used, the SIM card vendor can send the root key of the SIM card to the operator through the production network or offline. In this way, both the operator and the terminal have root keys that can be used for authentication. When a terminal connects to the network, the operator can perform authentication and authentication based on the root key of the SIM card, and provide network services to the terminal after successful authentication and authentication.

As can be seen from the above description, the SIM card is bound to the operator's network. If the user wants to switch networks, he needs to change the SIM card, which is very inconvenient and leads to poor user experience.

Contents of the invention

The embodiments of this application provide methods and devices for obtaining signature information, which can enable authentication between the terminal and the network based on the signature information without using the key in the SIM card for authentication, thus realizing the unbinding of the SIM card from the network.

In order to achieve the above objectives, the embodiments of the present application adopt the following technical solutions:

A first aspect provides a method for obtaining signature information. The communication device executing the method may be a first node; it may also be a module applied in the first node, such as a chip or a chip system. The following description takes the execution subject as the first node as an example. The method includes: obtaining the private key fragment of the first node and the key information of the terminal; signing the key information of the terminal according to the private key fragment of the first node to obtain the signature fragment of the first node, The signature fragment of the first node is used to determine signature information, and the signature information is used for authentication between the terminal and the first node.

Based on the method provided in the first aspect, the first node can obtain the private key fragment of the first node and the key information of the terminal, and sign the key information of the terminal according to the private key fragment of the first node to obtain the third A node’s signature shard. Since the signature fragment of the first node can determine the signature information used for authentication between the terminal and the first node, the terminal and the first node can be authenticated based on the signature information without using the key in the SIM card. Through authentication, the SIM card is unbound from the network. If the user wants to switch networks, there is no need to change the SIM card, allowing the terminal to flexibly access the network and improving the user experience.

In a possible implementation, the method further includes: obtaining N signature fragments, which correspond to Q nodes, and any signature fragment among the N signature fragments is generated using the signature fragment. The private key fragment of the node corresponding to the fragment is obtained by signing the key information of the terminal. N and Q are natural numbers, and Q is less than or equal to N; the signature fragment of the first node and the N signature fragments are used together. to determine the signature information.

Based on the above possible implementation, the first node can obtain N signature fragments, and obtain the signature information based on the N signature fragments and the signature fragment of the first node, so that the first node can send the signature information to the terminal, or so that the third node can send the signature information to the terminal. A node and terminal authenticate based on the signature information.

In a possible implementation, the signature information is also used for authentication between the terminal and the Q nodes.

Based on the above possible implementation methods, the terminal and any one of the Q nodes can be authenticated based on the signature information. In this way, the terminal can authenticate with Q nodes after obtaining the signature information once, which simplifies the authentication process between the terminal and the nodes.

In a possible implementation manner, obtaining N signature fragments includes: receiving the N signature fragments from the Q nodes.

Based on the above possible implementation, the first node can obtain N signature fragments from Q nodes so that the first node can generate signature information.

In a possible implementation, before obtaining N signature fragments, the method further includes: sending first information to M nodes, where the first information includes the key information of the terminal, and the M nodes include the Q nodes, M is a natural number greater than or equal to Q.

Based on the above possible implementation manner, the first node can send the key information of the terminal to M nodes, so that the M nodes generate corresponding signature fragments based on the key information of the terminal.

In a possible implementation, the method further includes: sending at least one of the following information to the M nodes: a verification result of the terminal's subscription information by the first node or a signature fragment of the first node.

Based on the above possible implementation, the M nodes can determine whether the first node has successfully verified the terminal's subscription information based on the first node's verification result of the terminal's subscription information, and/or generate a signature based on the signature fragments of the first node. information.

In one possible implementation, N signature shards are stored in blockchain nodes.

Based on the above possible implementation methods, N signature fragments can be uploaded to the chain to ensure that the N signature fragments are not tampered with and improve communication security.

In a possible implementation, before obtaining the N signature fragments, the method further includes: sending the terminal's key information and the signature fragment of the first node to the blockchain node.

Based on the above possible implementation, the terminal's key information and the first node's signature fragments can be uploaded to the chain to ensure that the terminal's key information and the first node's signature fragments are not tampered with and improve communication security.

In a possible implementation, the method further includes: sending third information to the terminal, where the third information includes the signature information.

Based on the above possible implementation, the terminal can obtain the signature information so that the terminal can authenticate with the node holding the signature information.

In a possible implementation, if the signature information is stored in the blockchain node, the method further includes: sending an identifier of the blockchain transaction corresponding to the signature information to the terminal.

Based on the above possible implementation methods, the terminal can also obtain the identifier of the blockchain transaction corresponding to the signature information. In this way, the terminal can carry the identifier when authenticating with the node holding the signature information, so that the node can query the blockchain to see whether the signature information corresponding to the identifier is the same as the signature information sent by the terminal to improve communication security.

In a possible implementation, obtaining the private key fragment of the first node includes: receiving the private key fragment of the first node from a third-party node.

Based on the above possible implementation manner, the first node can obtain the private key fragment of the first node from the third party node, so that the first node signs the key information of the terminal based on the private key fragment of the first node.

In a possible implementation, the method further includes: receiving a first request from the terminal, the first request including the signature information and a first random number; and performing authentication with the terminal according to the first request.

Based on the above possible implementation, the first node can authenticate with the terminal based on the signature information. In this way, there is no need to use the key in the SIM card for authentication between the first node and the terminal, thus realizing the unbinding of the SIM card from the network.

In a possible implementation, the first node is included in a node set, and the method further includes: obtaining a public key of the node set; authenticating with the terminal according to the first request, including: sending a third request to the terminal. A message, the first message includes the certificate of the first node, first authentication information and a second random number, the first authentication information is obtained based on the private key of the first node and the first random number; received from The second message of the terminal, the second message includes second authentication information, the second authentication information is obtained according to the private key of the terminal and the second random number; according to the public key of the node set and the signature information, Obtain the key information of the terminal; authenticate the second authentication information according to the key information of the terminal.

Based on the above possible implementation, double authentication can be performed between the first node and the terminal based on the public key and signature information of the node set to improve communication security.

In a possible implementation, after receiving the first request from the terminal, the method further includes: sending a third message to the blockchain node, the third message being used to query the signature information; receiving the request from the terminal. The fourth message of the blockchain node includes the signature information.

Based on the above possible implementation, the first node can query the signature information in the blockchain, so that the first node can determine whether the signature information is the same as the signature information sent by the terminal, thereby improving communication security.

The second aspect provides a method for obtaining signature information. The communication device that executes the method can be a terminal; it can also be a module applied in the terminal, such as a chip or a chip system. The following description takes the execution subject as the terminal as an example. The method includes: sending key information of the terminal to a first node; receiving third information from the first node, where the third information includes signature information, and the signature information is used for communication between the terminal and the first node. Authentication, the signature information is obtained based on N signature fragments and the signature fragment of the first node. The signature fragment of the first node is the key information of the terminal using the private key of the first node. Obtained by signing, the N signature fragments correspond to Q nodes, and any signature fragment among the N signature fragments is the key information of the terminal using the private key fragment of the node corresponding to the signature fragment. From the signature, N and Q are natural numbers, and Q is less than or equal to N.

Based on the method provided in the second aspect above, the terminal can obtain the signature information. In this way, the terminal and the first node can be authenticated based on the signature information without using the key in the SIM card for authentication. This realizes the unbinding of the SIM card from the network. If the user wants to switch networks, there is no need to change the SIM card. This enables terminals to flexibly access the network and improves user experience.

In a possible implementation, the method further includes: receiving an identifier of the blockchain transaction corresponding to the signature information from the first node.

In a possible implementation, the first node and the Q nodes are included in a node set, and the method further includes: determining the node set according to a preset strategy, where the preset strategy includes at least one of the following: the terminal corresponds to The user's choice, the network access requirements of the nodes in the node set, the network scale of the network where the nodes in the node set are located, or the security level of the network where the nodes in the node set are located.

Based on the above possible implementation methods, the terminal can determine the node set according to multiple methods, which improves the flexibility and diversity of the terminal in determining the node set.

In a possible implementation, the method further includes: sending a first request to the first node, the first request including the signature information and a first random number; and performing authentication with the first node according to the first request. .

Based on the above possible implementation, the terminal and the first node can perform authentication based on the signature information. In this way, there is no need to use the key in the SIM card for authentication between the first node and the terminal, thus realizing the unbinding of the SIM card from the network.

In a possible implementation, performing authentication with the first node according to the first request includes: receiving a first message from the first node, the first message including a certificate of the first node, a first authentication information and a second random number. The first authentication information is obtained based on the private key of the first node and the first random number; if the first authentication information is successfully authenticated, the second authentication information is sent to the first node. message, the second message includes second authentication information, and the second authentication information is obtained according to the private key of the terminal and the second random number.

Based on the above possible implementation methods, double authentication can be performed between the terminal and the first node to improve communication security.

A third aspect provides a communication device for implementing the method provided in the first aspect. The communication device may be the first node in the above-mentioned first aspect, or a device including the above-mentioned first node. The communication device includes modules, units, or means (means) corresponding to the method provided in the first aspect. The modules, units, or means can be implemented by hardware, software, or by hardware executing corresponding software. The hardware or software includes one or more modules or units corresponding to the above functions.

In a possible implementation, the communication device may include a processing module. This processing module can be used to implement the processing functions in the above first aspect and any possible implementation manner thereof. The processing module may be, for example, a processor.

In a possible implementation, the communication device further includes a transceiver module. The transceiver module, which may also be called a transceiver unit, is used to implement the sending and/or receiving functions in the above first aspect and any possible implementation thereof. The transceiver module can be composed of a transceiver circuit, a transceiver, a transceiver or a communication interface.

In a possible implementation, the transceiver module includes a sending module and a receiving module, respectively configured to implement the sending and receiving functions in the above-mentioned first aspect and any possible implementation thereof.

In a possible implementation, the processing module is used to obtain the private key fragments of the communication device and the key information of the terminal; the processing module is also used to obtain the private key fragments of the communication device and the terminal. The key information is signed to obtain signature fragments of the communication device. The signature fragments of the communication device are used to determine signature information. The signature information is used for authentication between the terminal and the communication device.

In a possible implementation, the processing module is also used to obtain N signature fragments, which correspond to Q nodes, and any signature fragment among the N signature fragments is generated using the The private key fragment of the node corresponding to the signature fragment is obtained by signing the key information of the terminal. N and Q are natural numbers, and Q is less than or equal to N; the signature fragment of the communication device and the N signature fragments are the same Used to determine the signature information.

In a possible implementation manner, the processing module is specifically configured to receive the N signature fragments from the Q nodes through the transceiver module.

In a possible implementation, the transceiver module is also configured to send first information, where the first information includes the key information of the terminal, to M nodes, where the M nodes include the Q nodes, and M is greater than Or a natural number equal to Q.

In a possible implementation, the transceiver module is also configured to send at least one of the following information to the M nodes: the communication device's verification result of the terminal's subscription information or the communication device's signature fragment.

In a possible implementation, the N signature shards are stored in the blockchain node.

In a possible implementation, the transceiver module is also used to send the key information of the terminal and the signature fragment of the communication device to the blockchain node.

In a possible implementation manner, the transceiver module is also configured to send third information to the terminal, where the third information includes the signature information.

In a possible implementation manner, the transceiver module is also used to send the identifier of the blockchain transaction corresponding to the signature information to the terminal.

In a possible implementation, the processing module is also configured to receive the private key fragment of the communication device from the third-party node through the transceiver module.

In a possible implementation, the transceiver module is also configured to receive a first request from the terminal, where the first request includes the signature information and a first random number; the processing module is also configured to receive a first request based on the first random number. Requests authentication with this terminal.

In a possible implementation, the communication device is included in a node set, and the processing module is also used to obtain the public key of the node set; the processing module is specifically used to send the first message to the terminal through the transceiver module. message, the first message includes the certificate of the communication device, first authentication information and a second random number, the first authentication information is obtained based on the private key of the communication device and the first random number; the processing module further Specifically used to receive a second message from the terminal through the transceiver module, the second message includes second authentication information, the second authentication information is obtained according to the private key of the terminal and the second random number; the processing module , is also specifically configured to obtain the key information of the terminal based on the public key of the node set and the signature information; the processing module is also specifically configured to authenticate the second authentication information based on the key information of the terminal.

In a possible implementation, the transceiver module is also used to send a third message to the blockchain node, and the third message is used to query the signature information; the transceiver module is also used to receive data from the blockchain node. The fourth message of the node includes the signature information.

A fourth aspect provides a communication device for implementing the method provided in the second aspect. The communication device may be the terminal in the above second aspect, or a device including the above second node. The communication device includes modules, units, or means (means) corresponding to the method provided in the second aspect. The modules, units, or means can be implemented by hardware, software, or by hardware executing corresponding software. The hardware or software includes one or more modules or units corresponding to the above functions.

In a possible implementation, the communication device may include a transceiver module. The transceiver module, which may also be called a transceiver unit, is used to implement the sending and/or receiving functions in the above second aspect and any possible implementation thereof. The transceiver module can be composed of a transceiver circuit, a transceiver, a transceiver or a communication interface.

In a possible implementation, the communication device further includes a processing module. This processing module can be used to implement the processing functions in the above second aspect and any possible implementation manner thereof. The processing module may be, for example, a processor.

In a possible implementation, the transceiver module includes a sending module and a receiving module, respectively used to implement the sending and receiving functions in the above second aspect and any possible implementation thereof.

In a possible implementation, the transceiver module is used to send the key information of the communication device to the first node; the transceiver module is also used to receive third information from the first node. The third information Including signature information, the signature information is used for authentication between the communication device and the first node. The signature information is obtained based on N signature fragments and the signature fragments of the first node. The signature of the first node The fragments are obtained by signing the key information of the communication device with the private key fragments of the first node. The N signature fragments correspond to Q nodes. Any one of the N signature fragments is signed. It is obtained by signing the key information of the communication device with the private key fragment of the node corresponding to the signature fragment. N and Q are natural numbers, and Q is less than or equal to N.

In a possible implementation manner, the transceiver module is also configured to receive the identifier of the blockchain transaction corresponding to the signature information from the first node.

In a possible implementation, the first node and the Q nodes are included in a node set, and the processing module is configured to determine the node set according to a preset strategy, where the preset strategy includes at least one of the following: the The selection of the user corresponding to the communication device, the network access requirements of the nodes in the node set, the network scale of the network where the nodes in the node set are located, or the security level of the network where the nodes in the node set are located.

In a possible implementation, the transceiver module is also configured to send a first request to the first node, where the first request includes the signature information and a first random number; the processing module is also configured to send a first request to the first node according to the first random number. A request is made for authentication with the first node.

In a possible implementation, the processing module is specifically configured to receive a first message from the first node through the transceiver module. The first message includes the certificate of the first node, the first authentication information and the second Random number, the first authentication information is obtained based on the private key of the first node and the first random number; the processing module is also specifically configured to use the transceiver module when the first authentication information is authenticated successfully, A second message is sent to the first node, where the second message includes second authentication information, and the second authentication information is obtained according to the private key of the communication device and the second random number.

A fifth aspect provides a communication device, including: a processor; the processor is configured to be coupled to a memory, and after reading instructions in the memory, execute the method as described in any of the above aspects according to the instructions. The communication device may be the first node in the first aspect, or a device including the first node; or the communication device may be a terminal in the second aspect, or a device including the terminal.

In conjunction with the above fifth aspect, in a possible implementation manner, the communication device further includes a memory, and the memory is used to store necessary program instructions and data.

In conjunction with the fifth aspect, in a possible implementation, the communication device is a chip or a chip system. Optionally, when the communication device is a chip system, it may be composed of a chip, or may include a chip and other discrete devices.

A sixth aspect provides a communication device, including: a processor and an interface circuit; the interface circuit is used to receive a computer program or instructions and transmit them to the processor; the processor is used to execute the computer program or instructions to enable the communication The device performs the method described in any of the above aspects.

In conjunction with the above sixth aspect, in a possible implementation manner, the communication device is a chip or a chip system. Optionally, when the communication device is a chip system, it may be composed of a chip, or may include a chip and other discrete devices.

In a seventh aspect, a computer-readable storage medium is provided. Instructions are stored in the computer-readable storage medium, and when run on a computer, the computer can perform the method described in any of the above aspects.

In an eighth aspect, a computer program product containing instructions is provided, which, when run on a computer, enables the computer to execute the method described in any of the above aspects.

Among them, the technical effects brought by any possible implementation method in the third aspect to the eighth aspect can be referred to the technical effects brought by any one of the above-mentioned first to second aspects or different possible implementation methods in any aspect. The technical effects will not be repeated here.

A ninth aspect provides a communication system, which includes a first node for performing the method described in the first aspect, and a terminal for performing the method described in the second aspect.

It is understandable that, on the premise that the solutions are not inconsistent, the solutions in each of the above aspects can be combined.

Description of drawings

Figure 1 is a schematic diagram of the communication system architecture provided by an embodiment of the present application;

Figure 2 is a schematic diagram of the hardware structure of a communication device provided by an embodiment of the present application;

Figure 3 is a schematic flowchart 1 of a method for obtaining signature information provided by an embodiment of the present application;

Figure 4 is a schematic flow chart of the authentication method provided by the embodiment of the present application;

Figure 5 is a schematic flowchart 2 of a method for obtaining signature information provided by an embodiment of the present application;

Figure 6 is a schematic structural diagram of a communication device provided by an embodiment of the present application;

Figure 7 is a schematic second structural diagram of a communication device provided by an embodiment of the present application.

Detailed ways

Before introducing the embodiments of the present application, relevant technical terms involved in the embodiments of the present application will be explained. It can be understood that these explanations are intended to make the embodiments of the present application easier to understand and should not be regarded as limiting the scope of protection required by the embodiments of the present application.

1. Blockchain (BC)

In the embodiment of this application, the blockchain is a tamper-proof technology guaranteed by a cryptographic mechanism. Generally speaking, blockchain nodes can run on physical nodes, or they can also run in a virtual environment in physical nodes without restrictions.

One possible design, blockchain is a ledger technology. The ledger is distributed and can be maintained simultaneously through multiple nodes. When maintaining the ledger, the multiple nodes can use cryptography mechanisms to prevent the ledger from being tampered with.

For example, a blockchain is a chained data structure that combines data blocks in a chronological manner and is cryptographically guaranteed to be an untamperable and unforgeable distributed ledger. Generally speaking, a blockchain system has multiple blockchain nodes, and since there is no centralized management organization in the blockchain, the blockchain nodes must reach a consensus on each block of information, that is, Each blockchain node stores the same blockchain information. Relying on the characteristics of blockchain technology, blockchain can serve as a unified trusted platform to realize the tracing of historical events and/or automated network management. For example: Blockchain can realize at least one of the following functions: log auditing, automated settlement, or secure access and verification, etc.

It can be understood that in the embodiment of this application, the blockchain can also have other naming methods, such as distributed ledger or ledger, etc., which are not limited.

2. Threshold signature

Threshold signature is a multi-party signature technology. For example, the group includes n participants, and the weight of the threshold signature is t, that is, the threshold signature scheme of (n, t), which can mean that any t or more participants among the n participants can represent the entire group (i.e. n participants), a scheme that generates valid signatures. Specifically, each of n participants can hold one public key shard and one private key shard. According to the n public key shards held by n participants, the public key of the group can be obtained (the public key of the group can also be called the system public key). According to the n private key shards held by n participants, the private key of the group can be obtained (the private key of the group can also be called the system private key). Participants greater than or equal to t among n participants each sign the information with the private key fragments they hold, and the signature fragments of each participant can be obtained. By calculating these signature fragments according to the threshold signature algorithm, the signature information of the group can be obtained (the signature information of the group can also be called system signature information). The group's signature information can be verified using the group's public key.

In the previous paragraph, threshold signatures were introduced using the example of each participant holding one public key shard and one private key shard. However, the embodiments of this application may not limit the number of public key shards and/or the number of private key shards held by each participant. For example, in the embodiment of this application, each participant may hold at least one public key shard and at least one private key shard. The number of public key shards held by different participants can be the same or different. Likewise, the number of private key shards held by different participants can be the same or different.

A possible design. The group includes n participants. Each participant holds at least one public key shard and at least one private key shard. The threshold signature scheme with a threshold signature weight of s can refer to n participants. Among the multiple private key shards, any s or more private key shards can represent the entire group (that is, n participants) and generate a valid signature scheme.

For example, a group includes 5 participants, participants 1 to 4 each hold 1 public key shard and 1 private key shard, and participant 5 holds 1 public key shard and 2 Taking private key sharding as an example, if the weight is 4, then the private key sharding of participant 1, the private key sharding of participant 2, the private key sharding of participant 3 and the private key sharding of participant 4 can be Get the signature information of the group. Alternatively, the signature information of the group can be obtained based on any two private key fragments among participants 1 to 4 and the two private key fragments of participant 5.

In this embodiment of the present application, the terminal can obtain the signature information of the group, and the participants in the group can obtain the public key of the group. In this way, terminals and participants in the group can be authenticated based on the group's signature information and the group's public key.

The implementation of the embodiments of the present application will be described in detail below with reference to the accompanying drawings.

The method provided by the embodiments of this application can be used in various communication systems that can support threshold signature technology. The following uses the communication system 10 shown in Figure 1 as an example to describe the method provided by the embodiment of the present application. Figure 1 is only a schematic diagram and does not constitute a limitation on the applicable scenarios of the technical solution provided by this application.

As shown in Figure 1, it is a schematic architectural diagram of a communication system 10 provided by an embodiment of the present application. In FIG. 1 , the communication system 10 may include a node 101 and a terminal 102 that may communicate with the node 101 . Optionally, the communication system 10 also includes a node 103, and/or a blockchain node 104, and/or a node 105.

In Figure 1, node 101, node 103 or node 105 may provide services for terminal 102. For example, node 101, node 103 or node 105 is a node in a network, and the network is an operator's network. Node 101, node 103 or node 105 can provide access services for the terminal 102. The operators corresponding to node 101, node 103 or node 105 may be the same or different. It should be understood that the network to which node 101, node 103 or node 105 belongs can also be other types of networks, such as wireless local area networks, or networks corresponding to vertical applications (such as the Internet of Things), etc., without limitation.

In Figure 1, node 101, node 103 or node 105 can be any device with wireless transceiver function, for example, it can be any access network device or core network device.

Among them, access network equipment includes but is not limited to: evolutionary base stations (NodeB or eNB or e-NodeB, evolutionary Node B) in long term evolution (long term evolution, LTE), base stations in new radio (NR) (gNodeB or gNB) or transceiver point (transmission receiving point/transmission reception point, TRP), the subsequent evolved base station of the 3rd generation partnership project (3GPP), the access node in the Wi-Fi system, Wireless relay nodes, wireless backhaul nodes, etc. The base station can be: macro base station, micro base station, pico base station, small station, relay station, or balloon station, etc. The access network device can also be a wireless controller in a cloud radio access network (CRAN) scenario. The access network equipment may also be a centralized unit (CU) and/or a distributed unit (DU). The access network device can also be a server, wearable device, machine communication device, or vehicle-mounted device, etc.

Core network equipment includes but is not limited to: access and mobility management function (AMF) network elements, session management function (SMF) network elements, user plane function (UPF) Network element, unified data management (UDM) network element, unified data repository (UDR) network element, network exposure function (NEF) network element or policy control function , PCF) network elements, etc.

The terminal in the embodiment of the present application, for example, the terminal 102 may be a device with a wireless transceiver function. Terminals can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; they can also be deployed on water (such as ships, etc.); they can also be deployed in the air (such as aircraft, balloons, satellites, etc.). The terminal may also be called a terminal device, and the terminal device may be a user equipment (UE), where the UE includes a handheld device, a vehicle-mounted device, a wearable device or a computing device with wireless communication functions. For example, the UE may be a mobile phone, a tablet computer, or a computer with wireless transceiver functions. The terminal device can also be a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal in industrial control, a wireless terminal in driverless driving, a wireless terminal in telemedicine, or a smart terminal. Wireless terminals in the power grid, wireless terminals in smart cities, or wireless terminals in smart homes, etc.

As an example and not a limitation, in this application, the terminal may be a wearable device. Wearable devices can also be called wearable smart devices. It is a general term for applying wearable technology to intelligently design daily wear and develop wearable devices, such as glasses, gloves, watches, clothing and shoes, etc. A wearable device is a portable device that is worn directly on the body or integrated into the user's clothing or accessories. For example, a wearable device is not only a hardware device, but also a device that achieves powerful functions through software support, data interaction, and cloud interaction. Broadly defined wearable smart devices include devices that are full-featured, large in size, and can achieve complete or partial functions without relying on smartphones, such as smart watches or smart glasses, as well as devices that only focus on a certain type of application function and need to be integrated with other devices such as Devices used with smartphones, such as various smart bracelets, smart jewelry, etc. for monitoring physical signs.

In this application, the terminal can be a terminal in the Internet of things (IoT) system. IoT is an important part of the future development of information technology. Its main technical feature is to connect objects to the network through communication technology, thereby realizing the realization of human An intelligent network that interconnects machines and things. The terminal in this application may be a terminal in machine type communication (MTC). The terminal of this application may be a vehicle-mounted module, vehicle-mounted module, vehicle-mounted component, vehicle-mounted chip or vehicle-mounted unit built into the vehicle as one or more components or units. The vehicle uses the built-in vehicle-mounted module, vehicle-mounted module, vehicle-mounted component , vehicle-mounted chip or vehicle-mounted unit can implement the method of this application.

In Figure 1, the blockchain node 104 may be a node capable of applying blockchain technology. For example, the blockchain node 104 can protect the information in the node from being tampered with through a cryptographic mechanism. As an example, the blockchain node 104 is a blockchain network element in the core network, or the blockchain node 104 is a node that can communicate with a ledger anchor function (LAF) network element in the core network. .

The communication system 10 shown in FIG. 1 is only used as an example and is not used to limit the technical solution of the present application. Those skilled in the art should understand that during specific implementation, the communication system 10 may also include other devices, and the number of nodes, terminals or blockchain nodes may also be determined according to specific needs without limitation.

Optionally, each network element or device (such as node 101, node 103, node 105, terminal 102 or blockchain node 104, etc.) in Figure 1 of the embodiment of this application can also be called a communication device, which can be a It may be a general-purpose device or a special-purpose device, which is not specifically limited in the embodiments of this application.

Optionally, the relevant functions of each network element or device (such as node 101, node 103, node 105, terminal 102 or blockchain node 104, etc.) in Figure 1 of the embodiment of this application can be implemented by one device, or can be implemented by It can be jointly implemented by multiple devices, or it can also be implemented by one or more functional modules in one device, which is not specifically limited in the embodiments of the present application. It can be understood that the above functions can be either network elements in hardware devices, software functions running on dedicated hardware, or a combination of hardware and software, or virtualization instantiated on a platform (for example, a cloud platform) Function.

During specific implementation, each network element or device (such as node 101, node 103, node 105, terminal 102 or blockchain node 104, etc.) in Figure 1 of the embodiment of this application can adopt the composition structure shown in Figure 2. Or include the components shown in Figure 2. FIG. 2 shows a schematic diagram of the hardware structure of a communication device applicable to embodiments of the present application. The communication device 20 includes at least one processor 201 and at least one communication interface 204, which are used to implement the method provided by the embodiment of the present application. The communication device 20 may also include a communication line 202 and a memory 203 .

The processor 201 can be a general central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more processors used to control the execution of the program of the present application. integrated circuit.

Communication line 202 may include a path, such as a bus, that carries information between the above-mentioned components.

Communication interface 204 is used to communicate with other devices or communication networks. The communication interface 204 can be any device such as a transceiver, such as an Ethernet interface, a radio access network (RAN) interface, a wireless local area networks (WLAN) interface, a transceiver, and pins , bus, or transceiver circuit, etc.

The memory 203 may be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (random access memory (RAM)) or other type that can store information and instructions. A dynamic storage device can also be an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disk storage, optical disc storage (including compressed optical discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), disk storage media or other magnetic storage devices, or can be used to carry or store desired program code in the form of instructions or data structures and can be used by a computer Any other medium for access, but not limited to this. The memory may exist independently and be coupled to the processor 201 through a communication line 202. The memory 203 may also be integrated with the processor 201. The memory provided by the embodiment of the present application may generally be non-volatile.

Among them, the memory 203 is used to store computer execution instructions involved in executing the solutions provided by the embodiments of the present application, and the processor 201 controls the execution. The processor 201 is used to execute computer execution instructions stored in the memory 203, thereby implementing the method provided by the embodiment of the present application. Or, optionally, in this embodiment of the present application, the processor 201 may also perform processing-related functions in the methods provided in the following embodiments of the present application, and the communication interface 204 is responsible for communicating with other devices or communication networks. This application implements The example does not specifically limit this.

Optionally, the computer-executed instructions in the embodiments of the present application may also be called application codes, which are not specifically limited in the embodiments of the present application.

The coupling in the embodiment of this application is an indirect coupling or communication connection between devices, units or modules, which may be in electrical, mechanical or other forms, and is used for information interaction between devices, units or modules.

As an embodiment, the processor 201 may include one or more CPUs, such as CPU0 and CPU1 in FIG. 2 .

As an embodiment, the communication device 20 may include multiple processors, such as the processor 201 and the processor 207 in FIG. 2 . Each of these processors may be a single-CPU processor or a multi-CPU processor. A processor here may refer to one or more devices, circuits, and/or processing cores for processing data (eg, computer program instructions).

As an embodiment, the communication device 20 may also include an output device 205 and/or an input device 206. Output device 205 is coupled to processor 201 and can display information in a variety of ways. For example, the output device 205 may be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector (projector), etc. The input device 206 is coupled to the processor 201 and can receive user input in a variety of ways. For example, the input device 206 may be a mouse, a keyboard, a touch screen device, a sensing device, or the like.

It can be understood that the composition structure shown in Figure 2 does not constitute a limitation on the communication device. In addition to the components shown in Figure 2, the communication device may include more or fewer components than shown in the figure, or a combination of certain components. components, or different component arrangements.

The method provided by the embodiment of the present application will be described below with reference to the accompanying drawings. Each network element in the following embodiments may be equipped with the components shown in Figure 2, which will not be described again.

It can be understood that in the following embodiments of the present application, the names of messages between network elements or the names of parameters in the messages are just examples, and other names may also be used in specific implementations. This is not specified in the embodiments of the present application. limited.

It can be understood that in the embodiment of the present application, "/" may indicate that the related objects are in an "or" relationship. For example, A/B may indicate A or B; "and/or" may be used to describe There are three relationships between associated objects. For example, A and/or B can represent three situations: A exists alone, A and B exist simultaneously, and B exists alone. A and B can be singular or plural. In addition, expressions similar to "at least one of A, B and C" or "at least one of A, B or C" are often used to mean any of the following: A alone; B alone; alone C exists; A and B exist simultaneously; A and C exist simultaneously; B and C exist simultaneously; A, B, and C exist simultaneously. The above is an example of three elements A, B and C to illustrate the optional items of this project. When there are more elements in the expression, the meaning of the expression can be obtained according to the aforementioned rules.

In order to facilitate the description of the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" may be used to distinguish technical features with the same or similar functions. The words "first", "second" and other words do not limit the quantity and execution order, and the words "first" and "second" do not limit the number and execution order. In the embodiments of this application, words such as "exemplary" or "for example" are used to express examples, illustrations or illustrations, and any embodiment or design solution described as "exemplary" or "for example" shall not be interpreted. To be more preferred or advantageous than other embodiments or designs. The use of words such as "exemplary" or "such as" is intended to present related concepts in a concrete manner that is easier to understand.

It will be understood that reference throughout this specification to "an embodiment" means that a particular feature, structure, or characteristic associated with the embodiment is included in at least one embodiment of the present application. Therefore, various embodiments are not necessarily referred to the same embodiment throughout this specification. Furthermore, the particular features, structures or characteristics may be combined in any suitable manner in one or more embodiments. It can be understood that in the various embodiments of the present application, the size of the sequence numbers of each process does not mean the order of execution. The execution order of each process should be determined by its functions and internal logic, and should not be determined by the execution order of the embodiments of the present application. The implementation process constitutes no limitation.

It can be understood that in this application, "when..." and "if" both refer to the corresponding processing under certain objective circumstances. They do not limit the time, and do not require that there must be a judgment action when implementing it. Nor does it imply the existence of other limitations.

“At the same time” in this application can be understood as at the same point in time, within a period of time, or within the same cycle.

It can be understood that some optional features in the embodiments of the present application, in certain scenarios, can be implemented independently without relying on other features, such as the solutions they are currently based on, to solve corresponding technical problems and achieve corresponding effects. , and can also be combined with other features according to needs in certain scenarios. Correspondingly, the devices provided in the embodiments of the present application can also implement these features or functions, which will not be described again here.

It can be understood that the same step or steps with the same function or technical features in the embodiments of the present application can be used as reference between different embodiments.

It can be understood that in the embodiment of the present application, the first node and/or terminal and/or node 101 and/or node 103 and/or node 105 and/or terminal 102 can perform some or all of the steps in the embodiment of the present application, These steps are only examples, and the embodiments of the present application may also perform other steps or variations of various steps. In addition, various steps may be performed in a different order than those presented in the embodiments of the present application, and it may not be necessary to perform all the steps in the embodiments of the present application.

As shown in Figure 3, an embodiment of the present application provides a method for obtaining signature information. The method may include the following steps:

S301: The first node obtains the private key fragment of the first node and the key information of the terminal.

The first node may be the node 101 in the communication system 10 shown in FIG. 1 , and the terminal may be the terminal 102 in the communication system 10 shown in FIG. 1 .

In one possible design, the terminal's key information includes information that can be used for authentication with other nodes or devices, such as the terminal's public key. Optionally, the terminal's key information also includes the terminal's private key.

One possible implementation method is that the first node generates the first node's private key fragments by itself; or the first node pre-stores the first node's private key fragments, and the first node obtains the first node's private key fragments locally. key shard; alternatively, the first node receives the first node's private key shard from the third party node.

Among them, the third-party node is a trusted node and can generate the private key shards of the node for different nodes. For example, a third-party node can generate a private key shard for a node in a node collection. A node set may include at least two nodes. At least two nodes include the first node. A node set may also be called a node alliance or a node group, etc., without limitation.

In one possible implementation, the first node receives the key information of the terminal from the terminal; or, the first node receives the key of the terminal from other nodes in the node set except the first node (hereinafter referred to as other nodes). information; or, the first node obtains the terminal’s key information from the blockchain.

S302: The first node signs the key information of the terminal according to the private key fragment of the first node to obtain the signature fragment of the first node.

In one possible implementation, the first node uses the first node's private key fragment to sign the terminal's key information to obtain the first node's signature fragment.

Among them, the signature fragment of the first node can be used to determine the signature information of the node set (hereinafter referred to as signature information). The signature information can be used for authentication between the terminal and the first node. For example, the signature fragment of the first node is used to determine the signature information together with the signature fragments of other nodes. This signature information can also be used for authentication between the terminal and other nodes. It can be understood that the node holding the public key of the node set can authenticate with the terminal based on the signature information.

The actions of the first node in the above-mentioned S301-S302 can be executed by the processor 201 in the communication device 20 shown in FIG. 2 by calling the application code stored in the memory 203. This embodiment of the present application does not impose any restrictions on this. .

Based on the method shown in Figure 3, the first node can obtain the private key fragment of the first node and the key information of the terminal, and sign the key information of the terminal according to the private key fragment of the first node to obtain the first The node’s signature shard. Since the signature fragment of the first node can determine the signature information used for authentication between the terminal and the first node, the terminal and the first node can be authenticated based on the signature information without using the key in the SIM card. Through authentication, the SIM card is unbound from the network. If the user wants to switch networks, there is no need to change the SIM card, allowing the terminal to flexibly access the network and improving the user experience.

Optionally, in a possible implementation scenario of the method shown in Figure 3, the first node obtains N signature fragments. The signature fragment of the first node and the N signature fragments are jointly used to determine the signature information.

Among them, N signature fragments correspond to Q nodes, and any signature fragment among the N signature fragments is obtained by signing the terminal's key information with the private key fragment of the node corresponding to the signature fragment. N and Q are natural numbers, and Q is less than or equal to N. Q nodes are included in the node set. That is to say, the nodes in the node set can use threshold signature to sign the key information of the terminal to obtain the signature information. This signature information can be verified using the public key of the node collection. Therefore, if a node in the node set holds the public key of the node set, the terminal can be authenticated. In other words, the signature information is also used for authentication between the terminal and Q nodes.

It can be understood that the weight of the threshold signature is less than or equal to N+1.

Optionally, the first node obtains N signature shards directly from Q nodes; or, the first node obtains N signature shards through the blockchain. For example, the first node receives N signed shards from Q nodes. For another example, N signature shards are stored in the blockchain node, and the first node obtains them from the blockchain node. The blockchain node may be the blockchain node 104 in the communication system 10 shown in FIG. 1 .

As an example, if Q nodes are node 1, node 2 and node 3 respectively, node 1 and node 2 have one private key shard, and node 3 has two private key shards, then node 1 uses its own The private key fragment signs the key information of the terminal, obtains the signature fragment of node 1, and sends the signature fragment of node 1 to the first node. Node 2 uses its own private key fragment to sign the terminal's key information, obtains the signature fragment of node 2, and sends the signature fragment of node 2 to the first node. Node 3 uses its two private key fragments to sign the key information of the terminal respectively, obtains signature fragment 1 of node 3 and signature fragment 2 of node 3, and sends signature fragment 1 and signature to the first node Shard 2. After receiving the above signature fragment, the first node calculates the signature fragment of the first node, the signature fragment of node 1, the signature fragment of node 2, the signature fragment 1 and the signature fragment 2 according to the threshold signature algorithm, and obtains Signature information.

As another example, if Q nodes are node 1, node 2 and node 3 respectively, node 1 and node 2 have one private key fragment, node 3 has two private key fragments, the first node, node 1. Node 2 and node 3 are both nodes in the blockchain. Then node 1 uses its own private key fragment to sign the key information of the terminal to obtain the signature fragment of node 1. Use the first node on the chain to The public key of node 1 encrypts the signature fragment and publishes the encrypted information on the chain. Node 2 uses its own private key fragment to sign the key information of the terminal, and obtains the signature fragment of node 2. It uses the public key of the first node on the chain to encrypt the signature fragment of node 2, and then encrypts the signature fragment. The information is published on the chain. Node 3 uses its own two private key fragments to sign the key information of the terminal respectively, and obtains the signature fragment 1 of node 3 and the signature fragment 2 of node 3, and signs the pair with the public key of the first node on the chain. Shard 1 and signature shard 2 are encrypted and the encrypted information is published on the chain. After receiving the above encrypted information, the first node decrypts the information with its own private key on the chain. It can obtain the signature fragment of node 1, the signature fragment of node 2, the signature fragment 1 and the signature fragment 2, and then use the threshold The signature algorithm calculates the signature fragment of the first node, the signature fragment of node 1, the signature fragment of node 2, the signature fragment 1 and the signature fragment 2 to obtain the signature information.

As another example, if Q nodes are node 1, node 2 and node 3 respectively, node 1 and node 2 have one private key shard, node 3 has two private key shards, node 1, node 2 Both node 3 and node 3 are nodes in the blockchain. The first node may be a blockchain node or not a blockchain node. Then node 1 uses its own private key shard to sign the terminal’s key information to obtain the node 1’s signature fragment, use the public key of the blockchain node on the chain to encrypt the signature fragment of node 1, and publish the encrypted information on the chain. Node 2 uses its own private key fragment to sign the key information of the terminal to obtain the signature fragment of node 2. It uses the public key of the blockchain node on the chain to encrypt the signature fragment of node 2 and encrypts it. The final information is published on the chain. Node 3 uses its own two private key fragments to sign the key information of the terminal respectively, and obtains the signature fragment 1 of node 3 and the signature fragment 2 of node 3, using the public key pair of the blockchain node on the chain. Signature Shard 1 and Signature Shard 2 encrypt and publish the encrypted information on the chain. After the blockchain node receives the above encrypted information, it uses its own private key on the chain to decrypt the information. It can obtain the signature fragment of node 1, the signature fragment of node 2, the signature fragment 1 and the signature fragment 2, and send it to The first node sends these signed shards. After receiving these signature fragments, the first node uses the threshold signature algorithm to calculate the signature fragment of the first node, the signature fragment of node 1, the signature fragment of node 2, the signature fragment 1 and the signature fragment 2, and obtain Signature information.

Optionally, before the first node obtains N signature fragments, the first node sends the first information to M nodes. The first information includes key information of the terminal. M nodes include Q nodes, M is a natural number greater than or equal to Q, and M nodes are included in the node set. That is to say, the first node can send the terminal's key information to M nodes to trigger the M nodes to sign the terminal's key information according to their own private key fragments to obtain corresponding signature fragments.

It can be understood that in specific applications, when the number of signature fragments obtained by the first node is greater than or equal to the authority of the threshold signature, the first node can obtain the signature information. Therefore, some of the M nodes can sign the terminal's key information based on their own private key fragments to obtain the corresponding signature fragments. It is possible that all M nodes do not need to obtain their own signature fragments.

It can be understood that the first node can directly send the first information to the M nodes, or send the first information to the M nodes through the blockchain.

For example, the first node sends the first information to the blockchain node. After receiving the first information, the blockchain node uploads the first information to the chain and sends the first information to M nodes.

Optionally, before S302, the first node obtains the subscription information of the terminal and verifies the terminal according to the subscription information of the terminal. The subscription information of the terminal may include information related to the terminal's subscription with the network to which the nodes in the node set belong. For example, the terminal's subscription information may include at least one of the following: the terminal's contract time, the validity period of the terminal's contract, information about the package contracted by the terminal, the terminal's identification, the identification of the SIM card in the terminal or the identification of the user corresponding to the terminal (such as user’s ID number). The information on the package contracted by the terminal may include traffic information and/or call time, etc.

It can be understood that the first node can verify whether the terminal can register to the network based on the above information. For example, if the validity period of the terminal subscription has expired, the first node determines that the verification failed and the terminal cannot be registered in the network. For another example, if the identification of the SIM card is illegal, the first node determines that the verification failed and the terminal cannot be registered in the network.

In one possible implementation manner, the first node receives subscription information from a terminal of a terminal, or the first node receives subscription information from a terminal of another node.

Optionally, the first node also sends at least one of the following information to the M nodes: the first node's verification result of the terminal's subscription information, the first node's signature fragment, or the terminal's subscription information. The verification result may include verification success or verification failure. It can be understood that the above-mentioned at least one kind of information may be included in the first information, or may be included in other information and sent to M nodes, without limitation.

It can be understood that the first node sends the verification result of the terminal's subscription information by the first node to M nodes, so that the node that receives the verification result can determine whether the first node successfully verified the terminal. Optionally, if the first node successfully verifies the terminal, the node that receives the verification result can sign the terminal's key information based on its own private key fragments to obtain the corresponding signature fragments; if the first node verifies the terminal If it fails, the node that receives the verification result may not generate signature fragments.

It can be understood that the first node sends the signature fragments of the first node to M nodes, so that the nodes that receive the signature fragments can obtain signature information based on the signature fragments.

It can be understood that the first node sends the terminal's subscription information to M nodes, so that the nodes that receive the subscription information can verify the terminal based on the subscription information.

It can be understood that the first node directly sends the above-mentioned at least one kind of information to the M nodes; or the first node sends the above-mentioned at least one kind of information to the M nodes through the blockchain.

Optionally, the first node sends third information to the terminal. Correspondingly, the terminal receives the third information from the first node. The third information includes signature information. In this way, the terminal can obtain the signature information and perform authentication with the first node based on the signature information.

Optionally, if N signature shards are stored in the blockchain node, the first node also obtains the identifier of the blockchain transaction corresponding to the signature information. Among them, the identification includes the address of the blockchain transaction corresponding to the signature information.

Optionally, the first node also sends the identifier of the blockchain transaction corresponding to the signature information to the terminal. Correspondingly, the terminal receives the identifier of the blockchain transaction corresponding to the signature information from the first node.

Optionally, the first node also sends signature information to other nodes. Correspondingly, other nodes receive the signature information from the first node. In this way, other nodes do not need to generate signature information themselves.

It can be understood that the first node can directly send signature information to other nodes, or the first node can send signature information to other nodes through the blockchain.

The following describes the specific process of authentication between the terminal and the first node based on the signature information.

As shown in Figure 4, an authentication method is provided in an embodiment of the present application. The method may include the following steps:

S401: The first node obtains signature information.

Wherein, the first node may be the node 101 in the communication system 10 shown in FIG. 1 .

In one possible implementation, the first node obtains the signature information through the method shown in Figure 3. For example, the first node obtains the signature information based on the signature fragment of the first node and N signature fragments; or, the first node obtains the signature information. Receive signature information from other nodes; alternatively, the first node receives signature information from the blockchain node. Alternatively, the first node obtains the signature information through other methods, which is not restricted.

S402: The terminal obtains signature information.

The terminal may be the terminal 102 in the communication system 10 shown in FIG. 1 .

In one possible implementation, the terminal obtains signature information through the method shown in Figure 3. For example, the terminal receives signature information from the first node or other nodes. Or, the terminal obtains the signature information through other methods, which is not restricted.

It can be understood that this application does not limit the execution order of S401 and S402. For example, S401 may be executed first and then S402, or S402 may be executed first and then S401, or S401 and S402 may be executed simultaneously.

Optionally, before S401, the terminal determines a node set according to a preset policy.

In one possible design, the preset strategy includes at least one of the following: selection of the user corresponding to the terminal, network access requirements of the nodes in the node set, the network scale of the network where the nodes in the node set are located, or the security level of the network where the nodes in the node set are located. .

For example, the user selects a node set through software on the terminal, and in response to the user's operation, the terminal determines the node set. Alternatively, the terminal determines the node set based on the network access requirements of the nodes in the node set, such as traffic requirements, and/or call time requirements, etc., for example, the terminal selects the node set where the node that best meets the user's needs is located. Or, the terminal selects the node set where the node with the largest network scale is located. Alternatively, the terminal selects a node set including a large number of nodes with a large network scale. Or, the terminal selects the node set where the node with the highest security level is located. Alternatively, the terminal selects a node set including a larger number of nodes with higher security levels.

S403: The terminal and the first node perform authentication based on the signature information.

In one possible implementation, the terminal and the first node can be authenticated through S4031-S4032.

S4031: The terminal sends the first request to the first node. Correspondingly, the first node receives the first request from the terminal.

The first request may include signature information and a first random number. The first random number may be generated by the terminal, or obtained by the terminal from other devices.

Optionally, the terminal also sends at least one of the following information to the first node: the identification of the terminal (such as the international mobile equipment identity (IMEI) or the serial number of the terminal), information about the signature algorithm supported by the terminal, or The identifier of the blockchain transaction corresponding to the signature information. Correspondingly, the first node receives at least one of the above information from the terminal.

It can be understood that the above-mentioned at least one kind of information may be included in the first request and sent to the first node, or may be sent to the first node through other information, without limitation.

S4032: The first node authenticates with the terminal according to the first request.

In a possible implementation manner, the first node sends the first message to the terminal. Wherein, the first message may include the certificate of the first node, the first authentication information and the second random number. The first authentication information is obtained based on the private key of the first node and the first random number. For example, the first node signs the first random number with the first node's private key to obtain the first authentication information. For another example, the first node uses a signature algorithm supported by the terminal to sign the first random number with the private key of the first node to obtain the first authentication information. After receiving the first message, the terminal sends the second message to the first node. The second message includes second authentication information, and the second authentication information is obtained based on the terminal's private key and the second random number. For example, the terminal verifies the validity of the first node's certificate, verifies the first authentication information based on the first node's public key, and sends the first node to the first node when the first node's certificate is valid and the first authentication information is successfully verified. Second news. After receiving the second message, the first node obtains the key information of the terminal based on the public key and signature information of the node set, and authenticates the second authentication information based on the key information of the terminal. For example, the first node verifies the signature information according to the public key of the node set. If the verification is successful, the first node obtains the key information of the terminal, for example, obtains the public key of the terminal, and authenticates the second authentication information according to the public key of the terminal.

It can be understood that the above-mentioned certificate, first authentication information and second random number of the first node may be included in the first message and sent to the terminal, or may be included in different messages and sent to the terminal, without limitation.

Optionally, the first node sends the authentication result to the terminal. Correspondingly, the terminal receives the authentication result from the first node. The authentication result includes authentication failure or authentication success.

For example, if the first node fails to verify the signature information based on the public key of the node set, the first node sends the authentication result to the terminal to indicate to the terminal that the first node has failed to authenticate the terminal. Or, if the first node fails to authenticate the second authentication information, the first node sends the authentication result to the terminal to indicate to the terminal that the first node fails to authenticate the terminal. Alternatively, if the first node successfully authenticates the second authentication information, the first node sends the authentication result to the terminal to indicate to the terminal that the first node successfully authenticates the terminal.

Optionally, the first node also verifies the signature information through the blockchain.

For example, after receiving the identifier of the blockchain transaction corresponding to the signature information from the terminal, the first node sends the third message to the blockchain node. The third message can be used to query signature information. For example, the third message includes the identification of the blockchain transaction corresponding to the signature information. After receiving the third message, the blockchain node sends the fourth message to the first node. The fourth message includes the signature information queried based on the above identification. In this way, the first node can verify whether the signature information sent by the terminal is correct based on the signature information included in the fourth message, so as to further improve communication security.

Among them, the actions of the first node or terminal in the above-mentioned S401-S403 can be executed by the processor 201 in the communication device 20 shown in FIG. 2 by calling the application code stored in the memory 203. This embodiment of the present application does not do this. Any restrictions.

Based on the method shown in Figure 4, the terminal and the first node can be authenticated based on signature information without using the key in the SIM card for authentication. This realizes the unbinding of the SIM card from the network. If the user wants to switch networks, There is no need to replace the SIM card, allowing the terminal to flexibly access the network and improving user experience. In addition, if the terminal switches among nodes in the node set, for example, after the terminal switches from the first node to the second node, the terminal can still authenticate with the second node based on the signature information without needing to obtain the signature information again, which simplifies Certification process.

Optionally, in a possible scenario of the method shown in Figure 3 or the method shown in Figure 4, the nodes in the node set obtain their own private key fragments and the public key of the node set.

One possible implementation method is that the third-party node determines the private key of the node set and the public key of the node set, determines the private key fragments of the nodes in the node set based on the private key of the node set, and sends the node's private key to the corresponding node. The private key shard and the public key of the node collection. It can be understood that the third-party node can encrypt the private key fragments and the public key of the node set before sending them, for example, encrypt them with the public key of the receiving node and then send them.

Optionally, the third-party node determines the weight of the threshold signature and/or the corresponding weight of the node in the node set.

As an example, if the node set includes node 1, node 2 and node 3, after the third-party node determines the private key of the node set and the public key of the node set, it uses an algorithm to calculate the private key of the node set and obtains the node 1's private key. The private key fragment, the private key fragment of node 2 and the private key fragment of node 3 determine the weight of the threshold signature based on the information of the node set, and send the private key fragment of node 1 and the public key of the node set to node 1 and the weight of the threshold signature, send the private key fragment of node 2, the public key of the node set and the weight of the threshold signature to node 2, and send the private key fragment of node 3, the public key of the node set and the threshold signature to node 3 Weights. The third-party node also determines the weight corresponding to node 1, the weight corresponding to node 2, and the weight corresponding to node 3 based on the information of the node set, and sends the above weights to node 1, node 2, and node 3. The information about the node set may include information about the network scale of the network where the nodes in the node set are located, and/or the information about the security level of the network where the nodes in the node set are located.

It can be understood that after node 1 receives the private key fragment of node 1, the public key of the node collection and the weight S of the threshold signature, it can know that it can obtain the signature information of the node collection using S signature fragments. According to the node collection The public key verifies the signed information. If node 1 also receives the weight Y corresponding to node 1, the weight Z corresponding to node 2, and the weight G corresponding to node 3, then node 1 can determine that the signature fragment of node 1 can be equivalent to Y signature fragments, and that of node 2 A signature shard can be equivalent to Z signature shards, and the signature shard of node 3 can be equivalent to G signature shards.

For example, if node 1 receives the private key fragment of node 1, the public key of the node set and the weight S of the threshold signature, S is 2, then node 1 determines that the signature information can be obtained by using 2 signature fragments, for example, node 1 The signature information can be obtained based on the signature fragment of node 1 and the signature fragment of node 2, or the signature information can be obtained by node 1 based on the signature fragment of node 1 and the signature fragment of node 3.

For another example, if node 1 receives the private key fragment of node 1, the public key of the node set, and the weight S of the threshold signature, the weight Y corresponding to node 1, the weight Z corresponding to node 2, and the weight G, S corresponding to node 3 is 3, Y is 2, Z is 1, and G is 1, then node 1 determines that the signature information can be obtained by using 3 signature fragments. For example, node 1 can obtain the signature information based on the signature fragment of node 1 and the signature fragment of node 2. Signature information, or node 1 can obtain the signature information based on the signature fragment of node 1 and the signature fragment of node 3.

It can be understood that the larger the network scale of the network where the node is located in the node set, the greater the weight corresponding to the node; the smaller the network scale of the network where the node is located in the node set, the smaller the weight corresponding to the node is. The lower the security level of the network where the node is located in the node set, the smaller the weight corresponding to the node.

It can be understood that after node 2 receives the private key fragment of node 2, the public key of the node set, and the weight S of the threshold signature, it can perform similar operations to node 1. After receiving the private key fragment of node 3, the public key of the node set, and the weight S of the threshold signature, node 3 can perform similar operations to node 1. No further details will be given here.

Optionally, the third-party node can also determine the public key shard of the node for the node in the node set.

Another possible implementation method is that the nodes in the node set determine their corresponding weights based on the network scale of the network where they are located and/or the security level of the network where they are located, and send the weights to third-party nodes. The third-party node determines the private key of the node set and the public key of the node set, and after receiving the weight, determines the weight of the private key fragmentation and threshold signature of the nodes in the node set based on the weight, and sends the weight to the corresponding node. The node’s private key shard, the node set’s public key, and the weight of the threshold signature.

Optionally, the third-party node can also re-determine the weights corresponding to the nodes in the node set, and send the re-determined weights to the nodes in the node set.

In another possible implementation, the nodes in the node set generate the private key fragments and public key fragments of the node, and send their own public key fragments to the nodes in the node set. In this way, each node receives the public key fragments of other nodes and can obtain the public key of the node set.

Optionally, the nodes in the node set determine the weight of the signature threshold based on the number of nodes in the node set. For example, if the node combination includes 10 nodes, the weight of the signature threshold can be greater than or equal to 5.

Optionally, the nodes in the node set also determine their own corresponding weights, and the weight of the signature threshold is also determined based on the number of nodes in the node set and the weight corresponding to each node.

As an example, if the node set includes node 1, node 2 and node 3, node 1 determines the private key fragment of node 1, the public key fragment of node 1 and the weight Y corresponding to node 1, and sends the information to node 2 and node 3. Send the public key fragment of node 1 and the weight Y corresponding to node 1. Node 2 determines the private key fragment of node 2, the public key fragment of node 2 and the weight Z corresponding to node 2, and sends the public key fragment of node 2 and the weight Z corresponding to node 2 to node 1 and node 3. Node 3 determines the private key fragment of node 3, the public key fragment of node 3 and the weight G corresponding to node 3, and sends the public key fragment of node 3 and the weight G corresponding to node 3 to node 1 and node 2.

It can be understood that if Y is 2, Z is 1, and G is 1, after node 1 receives the public key fragment of node 2, the corresponding weight of node 2, the public key fragment of node 3, and the corresponding weight of node 3, The weight of the signature threshold can be determined to be 3, and the public key of the node set can be obtained based on the public key fragmentation of node 1 and the public key fragmentation of node 2, or based on the public key fragmentation of node 1 and the public key fragmentation of node 3. Get the public key of the node set.

The following takes the node set including node 101, node 103 and node 105 in Figure 1 as an example to introduce the method of obtaining signature information provided by the embodiment of the present application and the authentication method provided by the embodiment of the present application. Specifically, reference may be made to the method shown in Figure 5 below.

It can be understood that the explanations of each step or feature in the method shown in FIG. 3 and the explanations of each step or feature in the method shown in FIG. 4 are applicable to the method shown in FIG. 5 . In the same way, the following explanations of each step or feature in the method shown in Figure 5 are also applicable to the method shown in Figure 3 and the method shown in Figure 4 .

As shown in Figure 5, an embodiment of the present application provides a method for obtaining signature information. The method may include the following steps:

S501: Node 101 obtains the private key fragment of node 101, the public key of the node set, and the weight of the threshold signature.

S502: Node 103 obtains the private key fragment of node 103, the public key of the node set, and the weight of the threshold signature.

S503: Node 105 obtains the private key fragment of node 105, the public key of the node set, and the weight of the threshold signature.

It can be understood that the embodiment of the present application does not limit the execution order of S501-S503. For example, you can execute S501 first, then S502, and finally S503, or execute S502 first, then S503, and finally S501, or execute S503 first, then S502, and finally S501, or execute S503 first, and then S501. Finally execute S502, or execute S501-S503 at the same time and so on.

In the method shown in Figure 5, node 101, and/or node 103, and/or node 105 are nodes in the blockchain, or node 101, node 103, and node 105 are not nodes in the blockchain, No restrictions.

S504: The terminal 102 sends the key information of the terminal 102 and the subscription information of the terminal 102 to the node 101. Correspondingly, the node 101 receives the key information of the terminal 102 and the subscription information of the terminal 102 from the terminal 102 .

In one possible implementation, the terminal 102 determines a node set according to a preset policy, and sends the key information of the terminal 102 and the subscription information of the terminal 102 to the nodes in the node set, such as the node 101.

Optionally, after determining the node set, the terminal 102 obtains a subscription (profile) template corresponding to the node set, and fills in relevant information in the template in response to the user's input to obtain the subscription information of the terminal 102.

Optionally, the terminal 102 generates the public key of the terminal 102 and the private key of the terminal 102.

Optionally, the terminal 102 also sends the identifier of the node set to the node 101 to indicate to the node 101 the node set determined by the terminal 102.

In one possible implementation, the key information of the terminal 102, and/or the subscription information of the terminal 102, and/or the identity of the node set is sent by the terminal 102 to the node 101 through Wi-Fi or a traditional hard card. .

S505: Node 101 signs the key information of terminal 102 according to the private key fragment of node 101, and obtains the signature fragment of node 101.

In one possible implementation, node 101 verifies terminal 102 based on the contract information of terminal 102. After successful verification, it signs the key information of terminal 102 based on the private key fragments of node 101 to obtain the signature fragments of node 101.

S506: Node 101 sends the key information of terminal 102 to node 103 and node 105. Correspondingly, the node 103 and the node 105 receive the key information from the terminal 102 of the node 101.

One possible implementation is that if the terminal 102 sends the identifier of the node set to the node 101, the node 101 obtains the nodes in the node set, such as node 103 and node 105, based on the identifier of the node set, and sends the terminal to node 103 and node 105. 102 key information.

Optionally, the node 101 also sends the subscription information of the terminal 102 to the node 103 and the node 105, and/or the verification result of the subscription information of the terminal 102 by the node 101, and/or the signature fragment of the node 101.

It can be understood that the key information of the terminal 102, and/or the subscription information of the terminal 102, and/or the verification results of the node 101 on the subscription information of the terminal 102, and/or the signature fragments of the node 101 can be stored in in the blockchain.

As an example, if node 101, node 103 and node 105 are nodes in the blockchain, node 101 encrypts the above information with the public key of node 103 on the chain to obtain encrypted information 1, and publishes it on the blockchain Encrypted information 1. Node 101 also encrypts the above information with the public key of node 105 on the chain to obtain encrypted information 2, and publishes encrypted information 2 on the blockchain. Subsequently, after node 103 receives the encrypted information 1, it decrypts the information according to the private key of node 103 on the chain to obtain the above information. In the same way, after node 105 receives the encrypted information 2, it can decrypt the information according to the private key of node 105 on the chain to obtain the above information.

As another example, if node 103 and node 105 are not nodes in the blockchain, node 101, in addition to sending the above information to node 103 and node 105, also sends the above information to blockchain node 104, so that the blockchain Node 104 stores the above information in the blockchain.

S507: Node 103 sends the signature fragment of node 103 to node 101. Correspondingly, node 101 receives node 103's signature fragment from node 103.

One possible implementation is that node 103 verifies terminal 102 based on the contract information of terminal 102. After successful verification, it signs the key information of terminal 102 based on the private key fragments of node 103 to obtain the signature fragments of node 103. And send the signature fragment of node 103 to node 101.

Optionally, node 103 also sends the signature fragment of node 103 to node 105. Correspondingly, node 105 receives the signed fragment of node 103 from node 103 .

It can be understood that the signature fragments of node 103 can also be stored in the blockchain. For details, please refer to the corresponding description above.

S508: Node 105 sends the signature fragment of node 105 to node 101. Correspondingly, node 101 receives the signed fragment of node 105 from node 105 .

One possible implementation is that the node 105 verifies the terminal 102 based on the contract information of the terminal 102. After the verification is successful, it signs the key information of the terminal 102 based on the private key fragments of the node 105 to obtain the signature fragments of the node 105. And send the signature fragment of node 105 to node 101.

Optionally, node 105 also sends the signature fragment of node 105 to node 103. Correspondingly, node 103 receives the signed fragment of node 105 from node 105 .

It can be understood that the signature fragments of node 105 can also be stored in the blockchain. For details, please refer to the corresponding description above.

It can be understood that the embodiment of the present application does not limit the execution order of S507 and S508. For example, S507 may be executed first and then S508, or S508 may be executed first and then S507, or S507 and S508 may be executed simultaneously.

It can be understood that if the weight of the threshold signature is 2, then at least one of S507 and S508 can be executed.

S509: Node 101 obtains the signature information of the node set.

One possible implementation method is that if the weight of the threshold signature is 2, node 101 obtains the signature information based on the signature fragment of node 101 and the signature fragment of node 103, or node 101 obtains the signature information based on the signature fragment of node 101 and node 105. Signature fragments to obtain signature information.

It is understood that the signature information can be stored in the blockchain. For example, if the node 101 is a node in the blockchain, the node 101 uploads the signature information to the blockchain. If the node 101 is not a node in the blockchain, the node 101 sends the signature information to the blockchain node 104.

S510: Node 101 sends signature information to terminal 102. Correspondingly, the terminal 102 receives the signature information from the node 101.

Optionally, if the signature information can be stored in the blockchain, the node 101 also sends the identifier of the blockchain transaction corresponding to the signature information to the terminal 102.

It can be understood that after receiving the signature information, the terminal 102 can perform authentication with the nodes in the node set based on the signature information. The following takes the authentication between terminal 102 and node 103 as an example to introduce, specifically including the following S511-S512:

S511: The terminal 102 sends the first request to the node 103. Correspondingly, node 103 receives the first request from terminal 102.

S512: The node 103 authenticates with the terminal 102 according to the first request.

It can be understood that after S512, if the terminal 102 wants to switch to a node other than node 103 in the node set, such as node 105, the terminal can perform authentication based on the signature information and the node.

Among them, the actions of the node 101 or the node 103 or the node 105 or the terminal 102 in the above-mentioned S501-S512 can be executed by the processor 201 in the communication device 20 shown in Figure 2 by calling the application code stored in the memory 203. This application The embodiment does not impose any restrictions on this.

Based on the method shown in Figure 5, the terminal 102 can obtain signature information that can be authenticated with the nodes in the node set without using the key in the SIM card for authentication, thus unbinding the SIM card from the network. If the user If you want to switch networks, you don't need to change the SIM card, which allows the terminal to flexibly access the network and improves the user experience. In addition, if the terminal 102 switches among nodes in the node set, for example, after the terminal 102 switches from node 103 to node 105, the terminal 102 can still authenticate with the node 105 based on the signature information without needing to obtain the signature information again, which simplifies Certification process.

The various embodiments mentioned above in this application can be combined without any limitation, as long as the solutions are not inconsistent.

It can be understood that in the above embodiments, the methods and/or steps implemented by the first node can also be implemented by components (such as chips or circuits) available for the first node; the methods and/or steps implemented by the terminal, It can also be implemented by components (such as chips or circuits) that can be used in terminals.

The above mainly introduces the solution provided by the embodiment of the present application from the perspective of interaction between various network elements. Correspondingly, embodiments of the present application also provide a communication device, which may be the first node in the above method embodiment, or a device including the above first node, or a component usable for the first node; or, the communication device The communication device may be the terminal in the above method embodiment, or a device including the above terminal, or a component that can be used in the terminal. It can be understood that, in order to implement the above functions, the above-mentioned first node or terminal includes hardware structures and/or software modules corresponding to each function. Persons skilled in the art should easily realize that, with the units and algorithm operations of each example described in conjunction with the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is performed by hardware or computer software driving the hardware depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each specific application, but such implementations should not be considered beyond the scope of this application.

Embodiments of the present application can divide the first node or terminal into functional modules according to the above method examples. For example, each functional module can be divided corresponding to each function, or two or more functions can be integrated into one processing module. The above integrated modules can be implemented in the form of hardware or software function modules. It can be understood that the division of modules in the embodiment of the present application is schematic and is only a logical function division. In actual implementation, there may be other division methods.

For example, when each functional module is divided into integrated modules, FIG. 6 shows a schematic structural diagram of a communication device 60 . The communication device 60 includes a processing module 601. Optionally, the communication device 60 also includes a transceiver module 602. The processing module 601, which may also be called a processing unit, is used to perform operations other than sending and receiving operations, and may be, for example, a processing circuit or a processor. The transceiver module 602, which may also be called a transceiver unit, is used to perform transceiver operations, and may be, for example, a transceiver circuit, transceiver, transceiver, or communication interface.

In some embodiments, the communication device 60 may also include a storage module (not shown in FIG. 6) for storing program instructions and data.

Illustratively, the communication device 60 is used to implement the function of the first node. The communication device 60 is, for example, the first node described in the embodiment shown in FIG. 3 , the embodiment shown in FIG. 4 or the embodiment shown in FIG. 5 .

Among them, the processing module 601 is used to obtain the private key fragments of the communication device 60 and the key information of the terminal. For example, the processing module 601 may be used to perform S301.

The processing module 601 is also configured to sign the key information of the terminal according to the private key fragment of the communication device 60 to obtain the signature fragment of the communication device 60 . The signature fragment of the communication device 60 is used to determine signature information, and the signature information is used for authentication between the terminal and the communication device 60 . For example, the processing module 601 can also be used to perform S302.

In a possible implementation, the processing module 601 is also used to obtain N signature fragments, which correspond to Q nodes, and any signature fragment among the N signature fragments is generated using the The private key fragment of the node corresponding to the signature fragment is obtained by signing the key information of the terminal. N and Q are natural numbers, and Q is less than or equal to N; the signature fragment of the communication device 60 and the N signature fragments are used together to determine the signature information.

In a possible implementation, the processing module 601 is specifically configured to receive the N signature fragments from the Q nodes through the transceiver module 602.

In a possible implementation, the transceiver module 602 is also configured to send first information, where the first information includes the key information of the terminal, to M nodes, which include the Q nodes, and M is greater than Or a natural number equal to Q.

In a possible implementation, the transceiver module 602 is also configured to send at least one of the following information to the M nodes: the verification result of the terminal's subscription information by the communication device 60 or the signature fragment of the communication device 60 .

In a possible implementation, the transceiver module 602 is also used to send the terminal's key information and the signature fragment of the communication device 60 to the blockchain node.

In a possible implementation, the transceiving module 602 is also configured to send third information to the terminal, where the third information includes the signature information.

In a possible implementation, the transceiver module 602 is also configured to send the identifier of the blockchain transaction corresponding to the signature information to the terminal.

In a possible implementation, the processing module 601 is also configured to receive the private key fragment of the communication device 60 from a third-party node through the transceiver module 602.

In a possible implementation, the transceiver module 602 is also configured to receive a first request from the terminal, where the first request includes the signature information and a first random number; the processing module 601 is also configured to receive a request based on the first request. Requests authentication with this terminal.

In a possible implementation, the communication device 60 is included in the node set, and the processing module 601 is also used to obtain the public key of the node set; the processing module 601 is specifically used to send the first message to the terminal through the transceiver module 602. message, the first message includes the certificate of the communication device 60, first authentication information and a second random number, the first authentication information is obtained according to the private key of the communication device 60 and the first random number; processing module 601 , and is also specifically used to receive a second message from the terminal through the transceiver module 602. The second message includes second authentication information. The second authentication information is obtained according to the private key of the terminal and the second random number; processing Module 601 is also specifically configured to obtain the key information of the terminal based on the public key of the node set and the signature information; the processing module 601 is also specifically configured to authenticate the second authentication information based on the key information of the terminal.

In a possible implementation, the transceiver module 602 is also used to send a third message to the blockchain node, where the third message is used to query the signature information; the transceiver module 602 is also used to receive messages from the blockchain node. The fourth message of the node includes the signature information.

When used to implement the function of the first node, regarding other functions that the communication device 60 can implement, reference may be made to the embodiment shown in FIG. 3 , the method embodiment shown in FIG. 4 or the related information of the embodiment shown in FIG. 5 Introduction without going into details.

In a simple embodiment, those skilled in the art can imagine that the communication device 60 can take the form shown in FIG. 2 . For example, the processor 201 in Figure 2 can cause the communication device 60 to execute the method described in the above method embodiment by calling the computer execution instructions stored in the memory 203.

For example, the functions/implementation processes of the processing module 601 and the transceiver module 602 in Figure 6 can be implemented by the processor 201 in Figure 2 calling computer execution instructions stored in the memory 203. Alternatively, the function/implementation process of the processing module 601 in Figure 6 can be implemented by the processor 201 in Figure 2 calling the computer execution instructions stored in the memory 203. The function/implementation process of the transceiver module 602 in Figure 6 can be implemented by Figure 6 It is implemented by the communication interface 204 in 2.

For example, when each functional module is divided in an integrated manner, FIG. 7 shows a schematic structural diagram of a communication device 70 . The communication device 70 includes a transceiver module 701. Optionally, the communication device 70 also includes a processing module 702. The transceiver module 701, which may also be called a transceiver unit, is used to perform transceiver operations. For example, it may be a transceiver circuit, a transceiver, a transceiver or a communication interface. The processing module 702, which may also be called a processing unit, is used to perform operations other than sending and receiving operations, and may be, for example, a processing circuit or a processor.

In some embodiments, the communication device 70 may also include a storage module (not shown in Figure 7) for storing program instructions and data.

Illustratively, the communication device 70 is used to implement the functions of the terminal. The communication device 70 is, for example, the terminal described in the embodiment shown in FIG. 4 or the embodiment shown in FIG. 5 .

Among them, the transceiver module 701 is used to send the key information of the communication device 70 to the first node.

The transceiver module 701 is also used to receive the third information from the first node. The third information includes signature information. The signature information is used for authentication between the communication device 70 and the first node. The signature information is obtained based on N signature fragments and the signature fragment of the first node. , the signature fragment of the first node is obtained by signing the key information of the communication device 70 with the private key fragment of the first node, the N signature fragments correspond to Q nodes, and the N signature fragments Any signature fragment in the slice is obtained by signing the key information of the communication device 70 with the private key fragment of the node corresponding to the signature fragment. N and Q are natural numbers, and Q is less than or equal to N.

In a possible implementation, the transceiving module 701 is also configured to receive the identification of the blockchain transaction corresponding to the signature information from the first node.

In a possible implementation, the first node and the Q nodes are included in a node set. The processing module 702 is configured to determine the node set according to a preset strategy. The preset strategy includes at least one of the following: the user's selection corresponding to the communication device 70, the network access requirements of the nodes in the node set, and the location of the nodes in the node set. The networking scale of the network or the security level of the network where the nodes in the node set are located.

In a possible implementation, the transceiver module 701 is also configured to send a first request to the first node, where the first request includes the signature information and the first random number; the processing module 702 is also configured to send a first request to the first node according to the first random number. A request is made for authentication with the first node.

In a possible implementation, the processing module 702 is specifically configured to receive a first message from the first node through the transceiver module 701. The first message includes the certificate of the first node, the first authentication information and the second Random number, the first authentication information is obtained based on the private key of the first node and the first random number; the processing module 702 is also specifically configured to use the transceiver module 701 when the first authentication information is authenticated successfully, A second message is sent to the first node. The second message includes second authentication information. The second authentication information is obtained according to the private key of the communication device 70 and the second random number.

When used to implement terminal functions, regarding other functions that the communication device 70 can implement, reference may be made to the method embodiment shown in FIG. 4 or the relevant introduction to the embodiment shown in FIG. 5 , and will not be described again.

In a simple embodiment, those skilled in the art can imagine that the communication device 70 may take the form shown in FIG. 2 . For example, the processor 201 in Figure 2 can cause the communication device 70 to execute the method described in the above method embodiment by calling the computer execution instructions stored in the memory 203.

For example, the functions/implementation processes of the transceiver module 701 and the processing module 702 in Figure 7 can be implemented by the processor 201 in Figure 2 calling computer execution instructions stored in the memory 203. Alternatively, the function/implementation process of the processing module 702 in Figure 7 can be implemented by the processor 201 in Figure 2 calling the computer execution instructions stored in the memory 203. The function/implementation process of the transceiver module 701 in Figure 7 can be implemented by Figure 7 It is implemented by the communication interface 204 in 2.

It can be understood that one or more of the above modules or units can be implemented in software, hardware, or a combination of both. When any of the above modules or units is implemented in software, the software exists in the form of computer program instructions and is stored in the memory. The processor can be used to execute the program instructions and implement the above method flow. The processor can be built into an SoC (System on a Chip) or ASIC, or it can be an independent semiconductor chip. In addition to the core used to execute software instructions for calculation or processing, the processor can further include necessary hardware accelerators, such as field programmable gate array (FPGA), PLD (programmable logic device) , or a logic circuit that implements dedicated logic operations.

When the above modules or units are implemented in hardware, the hardware can be a CPU, a microprocessor, a digital signal processing (DSP) chip, a microcontroller unit (MCU), an artificial intelligence processor, an ASIC, Any one or any combination of SoC, FPGA, PLD, dedicated digital circuits, hardware accelerators or non-integrated discrete devices, which can run the necessary software or not rely on software to perform the above method flow.

Optionally, embodiments of the present application also provide a chip system, including: at least one processor and an interface. The at least one processor is coupled to the memory through the interface. When the at least one processor executes the computer program or instructions in the memory When, the method in any of the above method embodiments is executed. In a possible implementation, the chip system further includes a memory. Optionally, the chip system may be composed of chips, or may include chips and other discrete devices, which is not specifically limited in the embodiments of the present application.

Optionally, embodiments of the present application also provide a computer-readable storage medium. All or part of the processes in the above method embodiments can be completed by instructing relevant hardware through a computer program. The program can be stored in the above computer-readable storage medium. When executed, the program can include the processes of the above method embodiments. . The computer-readable storage medium may be an internal storage unit of the communication device of any of the aforementioned embodiments, such as a hard disk or memory of the communication device. The above-mentioned computer-readable storage medium may also be an external storage device of the above-mentioned communication device, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card equipped on the above-mentioned communication device, Flash card, etc. Furthermore, the computer-readable storage medium may also include both an internal storage unit of the communication device and an external storage device. The above-mentioned computer-readable storage medium is used to store the above-mentioned computer program and other programs and data required by the above-mentioned communication device. The above-mentioned computer-readable storage media can also be used to temporarily store data that has been output or is to be output.

Optionally, the embodiment of the present application also provides a computer program product. All or part of the processes in the above method embodiments can be completed by instructing relevant hardware through a computer program. The program can be stored in the above computer program product. When executed, the program can include the processes of the above method embodiments.

Optionally, the embodiment of the present application also provides a computer instruction. All or part of the processes in the above method embodiments can be completed by computer instructions to instruct related hardware (such as computers, processors, access network equipment, mobility management network elements or session management network elements, etc.). The program may be stored in the above-mentioned computer-readable storage medium or in the above-mentioned computer program product.

Optionally, this embodiment of the present application also provides a communication system, including: the first node and the terminal in the above embodiment.

Through the above description of the embodiments, those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above functional modules is used as an example. In actual applications, the above functions can be allocated as needed. It is completed by different functional modules, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above.

In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of modules or units is only a logical function division. In actual implementation, there may be other division methods, for example, multiple units or components may be The combination can either be integrated into another device, or some features can be omitted, or not implemented. On the other hand, the coupling or direct coupling or communication connection between each other shown or discussed may be through some interfaces, and the indirect coupling or communication connection of the devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated. The components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place, or they may be distributed to multiple different places. . Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application can be integrated into one processing unit, each unit can exist physically alone, or two or more units can be integrated into one unit. The above integrated units can be implemented in the form of hardware or software functional units.

The above are only specific embodiments of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present application shall be covered by the protection scope of the present application. . Therefore, the protection scope of this application should be subject to the protection scope of the claims.

Claims

A method for obtaining signature information, characterized in that, applied to the first node, the method includes:

Obtain the private key fragment of the first node and the key information of the terminal;

Sign the key information of the terminal according to the private key fragment of the first node to obtain the signature fragment of the first node. The signature fragment of the first node is used to determine the signature information. The signature information is used for authentication between the terminal and the first node.
The method of claim 1, further comprising:

Obtain N signature fragments, the N signature fragments correspond to Q nodes, and any signature fragment among the N signature fragments is obtained by using the private key fragment pair of the node corresponding to the signature fragment. Obtained by signing the key information of the above terminal, N and Q are natural numbers, Q is less than or equal to N;

The signature fragment of the first node and the N signature fragments are jointly used to determine the signature information.
The method according to claim 2, characterized in that the signature information is also used for authentication between the terminal and the Q nodes.
The method according to claim 2 or 3, characterized in that said obtaining N signature fragments includes:

The N signed shards from the Q nodes are received.
The method according to any one of claims 2-4, characterized in that,

Before obtaining N signature fragments, the method further includes:

Send first information to M nodes, where the first information includes key information of the terminal, where the M nodes include the Q nodes, and M is a natural number greater than or equal to Q.
The method of claim 5, further comprising:

Send at least one of the following information to the M nodes: a verification result of the first node on the subscription information of the terminal or a signature fragment of the first node.
The method according to claim 2 or 3, characterized in that the N signature fragments are stored in a blockchain node.
The method according to claim 7, characterized in that, before obtaining the N signature fragments, the method further includes:

Send the key information of the terminal and the signature fragment of the first node to the blockchain node.
The method according to any one of claims 1-8, characterized in that the method further includes:

Send third information to the terminal, where the third information includes the signature information.
The method according to claim 9, characterized in that if the signature information is stored in a blockchain node, the method further includes:

Send the identifier of the blockchain transaction corresponding to the signature information to the terminal.
The method according to any one of claims 1-10, characterized in that obtaining the private key fragment of the first node includes:

A private key shard of the first node is received from a third party node.
The method according to any one of claims 1-11, characterized in that the method further includes:

Receive a first request from the terminal, the first request including the signature information and a first random number;

Perform authentication with the terminal according to the first request.
The method of claim 12, wherein the first node is included in a node set, and the method further includes:

Obtain the public key of the node set;

The authentication with the terminal according to the first request includes:

Send a first message to the terminal, the first message including the certificate of the first node, first authentication information and a second random number, the first authentication information is based on the private key of the first node and The first random number is obtained;

Receive a second message from the terminal, the second message including second authentication information, the second authentication information being obtained based on the private key of the terminal and the second random number;

Obtain the key information of the terminal according to the public key of the node set and the signature information;

The second authentication information is authenticated according to the key information of the terminal.
The method according to claim 12 or 13, characterized in that, after receiving the first request from the terminal, the method further includes:

Send a third message to the blockchain node, the third message being used to query the signature information;

A fourth message is received from the blockchain node, the fourth message including the signature information.
A method for obtaining signature information, characterized in that it is applied to a terminal, and the method includes:

Send the key information of the terminal to the first node;

Receive third information from the first node, the third information includes signature information, the signature information is used for authentication between the terminal and the first node, the signature information is based on N signatures fragments and the signature fragments of the first node. The signature fragments of the first node are obtained by signing the key information of the terminal with the private key fragments of the first node, so The N signature fragments correspond to Q nodes, and any one of the N signature fragments uses the private key fragment of the node corresponding to the signature fragment to sign the key information of the terminal. Obtained, N and Q are natural numbers, Q is less than or equal to N.
The method of claim 15, further comprising:

Receive the identification of the blockchain transaction corresponding to the signature information from the first node.
The method according to claim 15 or 16, characterized in that the first node and the Q nodes are included in a node set, and the method further includes:

The node set is determined according to a preset strategy. The preset strategy includes at least one of the following: the selection of the user corresponding to the terminal, the network access requirements of the nodes in the node set, and the group of the network where the nodes in the node set are located. The network size or the security level of the network where the nodes in the node set are located.
The method according to any one of claims 15-17, characterized in that the method further includes:

Send a first request to the first node, where the first request includes the signature information and a first random number;

Perform authentication with the first node according to the first request.
The method according to claim 18, wherein the authentication with the first node according to the first request includes:

Receive a first message from the first node, the first message includes a certificate of the first node, first authentication information and a second random number, the first authentication information is based on the first node The private key and the first random number are obtained;

If the first authentication information is authenticated successfully, a second message is sent to the first node, where the second message includes second authentication information, and the second authentication information is based on the terminal's private key and The second random number is obtained.
A communication device, characterized by comprising a unit or module for executing the method as claimed in any one of claims 1 to 14, or a unit for executing the method as claimed in any one of claims 15 to 19 or module.
A communication device, characterized in that it includes: a processor, the processor is coupled to a memory, the memory is used to store programs or instructions, and when the programs or instructions are executed by the processor, the device causes the device to Perform a method as claimed in any one of claims 1 to 14, or perform a method as described in any one of claims 15 to 19.
A chip, characterized in that it includes: a processor, the processor is coupled to a memory, the memory is used to store programs or instructions, and when the programs or instructions are executed by the processor, the chip executes A method as claimed in any one of claims 1 to 14 or a method as claimed in any one of claims 15 to 19.
A computer-readable storage medium with computer programs or instructions stored thereon, characterized in that, when executed, the computer program or instructions cause the computer to perform the method as described in any one of claims 1 to 14 or as claimed in claim 1 The method of any one of claims 15 to 19.
A computer program product, the computer program product includes computer program code, characterized in that when the computer program code is run on a computer, it causes the computer to implement the method described in any one of claims 1 to 14 or The method of any one of claims 15 to 19 is implemented.