CN108900298A - Privately owned block chain honesty entity authentication cut-in method based on quantum cryptography watermark - Google Patents

Abstract

The honest node authentication access method of private blockchain based on quantum cryptographic watermark belongs to the field of quantum secure communication. This method can generate a secure password with true randomness. Applying it to digital watermarking technology can effectively improve the security of watermarking algorithm And robustness, combined with unique and stable fingerprint recognition technology, a more credible authentication node network greatly reduces the possibility of fraud and attacking the blockchain, and authority control can also greatly reduce risks. The honest node authentication access method of the private block chain based on the quantum cryptography watermark proposed by the present invention can perform honest node authentication on some or all access nodes in the block chain, and then make some or all nodes in the block chain fully credible .

Description

Authentication access method of honest nodes in private blockchain based on quantum cryptography watermark

technical field

The invention relates to the field of quantum secure communication, in particular to a method for authenticating and accessing private blockchain honest nodes based on quantum cryptography watermarks.

Background technique

Blockchain is a decentralized, non-tamperable, and credible distributed ledger. It provides a safe, stable, transparent, auditable, and efficient way of recording transactions and data information interaction. It can store data, It is also possible to run applications. At present, blockchain technology is mainly used in proof of existence, smart contracts, Internet of Things, identity verification, prediction markets, asset transactions, file storage and other fields.

Its characteristics are as follows:

1) Highly secure, non-tamperable distributed ledger.

2) It exists on the Internet and is open to all users.

3) Help realize point-to-point transactions and exchanges between people and things.

4) The exchange of value can be completed without the intervention of a third party.

There are three main forms of blockchain: public chain, alliance chain, and private chain.

1) Public chain: Anyone can read the blockchain information, send transactions and be confirmed, and participate in the consensus process of the blockchain.

2) Consortium chain: Nodes set according to certain characteristics can participate and trade, and the consensus process is controlled by pre-selected nodes. Although it is between the public chain and the private chain, it actually still belongs to the category of the private chain.

3) Private chain: The write permission is only in the hands of one organization, and the read permission may be restricted. Of great value for audit testing within corporate governments and for transaction settlement within banking institutions.

Unlike public chains that are completely open and license-free, consortium chains and private chains have restrictions on information disclosure and central control. These restrictions can help blockchains meet different types of application requirements. However, as the scope shrinks, the security of the private chain is inevitably doubted. Even if the system security guaranteed by the consensus mechanism is more credible, there are still 51% attacks on the consensus mechanism of the private chain with a smaller scope. And other hidden dangers. Among them, the 51% attack refers to that after a certain client or organization has mastered 51% of the computing power of the entire blockchain network, it uses these computing power to recalculate the confirmed blocks, causing the blockchain to fork and obtain behavior of interest.

Since the private chain still retains the authenticity and partial decentralization of the blockchain, on this basis, it is necessary to create a system with stricter access control, and a system in which modification and even reading permissions are limited to a few users. It has the characteristics of decentralization and centralization. At the same time, authority settings and access mechanisms need to be designed to ensure that the nodes of the blockchain are basically harmless.

Therefore, although compared with the public chain, the private chain has the advantages of broad prospects, learning from others, reducing threats, and flexibility, but at the same time, due to its relatively closed and doubtful innovation ability, there are trust issues.

The information security of quantum communication technology is based on quantum cryptography, using the quantum state as the key to break through the shackles of traditional encryption methods, and it is non-eavesdropping, non-replicable and theoretically "unconditional security". Any operation that intercepts or tests quantum keys will change the quantum state, and quantum communication can ensure the absolute security of key distribution and communication between the two places.

Contents of the invention

In view of the hidden dangers of the consensus mechanism in the blockchain technology, the honest node authentication access method of the private blockchain based on the quantum cryptography watermark proposed by the present invention can perform honest node authentication on some or all of the access nodes in the blockchain, and then Make some or all nodes in the blockchain fully credible.

The present invention adopts following technical scheme:

The honest node authentication access method of private blockchain based on quantum cryptography watermark is characterized in that the system adopted by the method includes: quantum cryptography service area, authentication service area and authentication terminal area,

The quantum cryptography service area includes a quantum cryptography distribution system and a quantum cryptography cloud. The quantum cryptography cloud contains a quantum cryptography management server. The quantum cryptography management server is used to receive quantum cryptography applications and distribute quantum cryptography, analyze mobile terminal identification codes, and select mobile terminal The nearest quantum cryptography distribution terminal matches the mobile terminal, and forwards the mobile terminal identification code to the quantum cryptography distribution terminal;

The authentication service area contains a private block chain honest node network and an honest node authentication server, wherein the private block chain honest node network is a network that a mobile terminal applies for authentication to access; the honest node authentication server is used for authentication to access a private The mobile terminal of the blockchain honest node network, the honest node authentication server pre-stores the user's registration information and fingerprint information;

The authentication terminal area contains several quantum cryptography distribution terminals and mobile terminals to be authenticated, each quantum cryptography distribution terminal has its corresponding quantum cryptography distribution area, and receives quantum cryptography applications from mobile terminals in the quantum cryptography distribution area To request and distribute quantum cryptography, the quantum cryptography distribution area where the mobile terminal is located is included in the mobile terminal identification code of the mobile terminal as an area identifier; when the mobile terminal submits an authentication application to the honest node authentication server, it and its own unique identification to generate a string of mobile terminal identification codes and submit them to the honest node authentication server together with the authentication application;

The specific authentication access method includes the following steps:

1) The mobile terminal to be authenticated sends an authentication application and a mobile terminal identification code to the honest node authentication server;

2) The honest node authentication server verifies the user name and password of the mobile terminal. After the verification is successful, the honest node authentication server forwards the mobile terminal identification code to the quantum cryptography management server and sends a request for quantum cryptography;

3) The quantum cryptography management server receives the mobile terminal identification code and the quantum cryptography request sent by the honest node authentication server, the quantum cryptography management server distributes a pair of quantum cryptography KEYs and associates them with the received mobile terminal identification codes, and transfers the quantum cryptography KEY The associated mobile terminal identification code replies to the honest node authentication server; at the same time, the quantum cryptography management server analyzes the mobile terminal identification code, obtains the quantum cryptography distribution area where the mobile terminal is located, and sends the quantum cryptography KEY and the associated mobile terminal identification code to the corresponding The quantum cryptography distribution terminal in the quantum cryptography distribution area;

4) After the honest node authentication server receives the quantum cryptography KEY of the reply, it sends an authentication prompt of the quantum watermark fingerprint image to the mobile terminal;

5) After receiving the authentication prompt, the mobile terminal sends the mobile terminal identification code to the quantum cryptography distribution terminal in the quantum cryptography distribution area where it is located to submit a quantum cryptography application;

6) The quantum cryptography distribution terminal queries the quantum cryptography KEY associated with the mobile terminal identification code in its internal storage according to the mobile terminal identification code sent by the mobile terminal, and replies the quantum cryptography KEY to the mobile terminal;

7) After receiving the quantum cryptography KEY, the mobile terminal prompts the user to enter the specified fingerprint through the last two digits of the quantum cryptography KEY, and generates a fingerprint image from the entered fingerprint; meanwhile, converts the rest of the quantum cryptography KEY into a binary image, according to The embedding position information provided by the quantum cryptography KEY uses the digital watermark embedding algorithm to embed the binary image into the fingerprint image to generate a quantum watermark fingerprint image, and sends it to the honest node authentication server, waiting for authentication;

8) After the honest node authentication server receives the quantum cryptography KEY replied by the quantum cryptography management server, it retrieves the corresponding fingerprint information of the user in the local database according to the last two digits of the quantum cryptography KEY, and converts the rest of the quantum cryptography KEY into a binary value picture;

9) The honest node authentication server extracts the fingerprint image and binary image from the quantum watermark fingerprint image sent by the mobile terminal according to the embedded position information in the quantum cryptography KEY;

10) The honest node authentication server compares the extracted fingerprint image and binary image with the fingerprint image and binary image stored locally. If the comparison fails, the authentication request of the mobile terminal is rejected. If the comparison is successful, the Authenticate the mobile terminal as an honest node, and pass the mobile terminal authentication request.

Wherein, the value of the last two digits of the quantum cryptography KEY described in step 7) is 00, 01, 10 or 11, 00, 01, 10 and 11 are the entry fingerprint numbers, and 00, 01, 10 and 11 respectively correspond to the thumb, Fingerprint information of the index finger, middle finger and ring finger.

Through the above-mentioned design scheme, the present invention can bring the following beneficial effects: the private block chain honest node authentication access method based on quantum cryptography watermark proposed by the present invention can perform honest node authentication on some or all access nodes in the block chain , and then make some or all nodes in the blockchain fully credible. Among them, the quantum secret communication system based on the quantum password distribution mechanism can generate a secure password with true randomness, and its application in digital watermarking technology can effectively improve the security and robustness of the watermarking algorithm, combined with uniqueness and stability Advanced fingerprint identification technology, a more credible authentication node network greatly reduces the possibility of fraud and attacking the blockchain, and authority control can also greatly reduce risks.

Description of drawings

The present invention will be further described below in conjunction with accompanying drawing description and specific embodiment:

Fig. 1 is the network implementation schematic diagram of the private block chain honest node authentication access method based on the quantum cryptography watermark of the present invention;

Fig. 2 is the working flow chart of the private block chain honest node authentication access method based on the quantum cryptography watermark of the present invention;

Fig. 3 is the authentication access sequence diagram of the private block chain honest node authentication access method based on the quantum cryptography watermark of the present invention;

Fig. 4 is the processing flowchart of quantum cryptography management server;

Fig. 5 is a flow chart of quantum watermarking fingerprint image generation;

Fig. 6 is the flow chart of honest node authentication server authentication quantum watermark fingerprint image;

Fig. 7 is a structural diagram of quantum cryptography.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with specific embodiments and with reference to the accompanying drawings.

Referring to Figure 1, there are three areas in the system adopted by the private blockchain honest node authentication access method based on the quantum cryptography watermark, namely the quantum cryptography service area, the authentication service area and the authentication terminal area. In the connection relationship between the components and the connection between the components, the solid line connection indicates the transmission data of the classical wired channel, the dotted line connection indicates the transmission data of the quantum channel, and the wifi connection indicates the transmission data of the classical wireless channel, and the specific description is as follows:

The quantum cryptography service area mainly includes two parts: the quantum cryptography distribution system and the quantum cryptography cloud, which are used to realize the generation, storage and management of quantum cryptography. The quantum cryptography distribution system includes Alice’s sender and Bob’s receiver, whose main function is to generate quantum cryptography with true randomness; the quantum cryptography cloud contains a quantum cryptography management server, whose role is to process applications for quantum cryptography, distribute quantum cryptography, and analyze mobile terminal identification code, select a quantum cryptography distribution terminal near the mobile terminal, and forward the mobile terminal identification code to the quantum cryptography distribution terminal.

The authentication service area contains a private blockchain honest node network and an honest node authentication server. Among them, the private blockchain honest node network is the network that mobile terminals want to access when applying for authentication. All nodes in the private blockchain honest node network can be regarded as honest nodes, that is, the area generated by nodes in the private blockchain honest node network. All blocks are credible; the honest node authentication server plays a role in authenticating mobile terminals that want to access the private blockchain honest node network, and the honest node authentication server pre-stores user registration information and fingerprint information.

The authentication terminal area contains several quantum cryptography distribution terminals, and mobile terminals to be authenticated are also divided into this area. Among them, each quantum cryptography distribution terminal has its own quantum cryptography distribution area, which is responsible for the quantum cryptography application of mobile terminals in its area, and the quantum cryptography distribution area where the mobile terminal is located will be reflected in the part of the mobile terminal identification code it sends. , that is, the quantum cryptography distribution area where the mobile terminal is located is included in the mobile terminal identification code of the mobile terminal as the area identifier. The mobile terminal is the initiator of an authentication and also the authenticated person of an authentication. When submitting an authentication application to the honest node authentication server, it will generate a string of mobile terminal identification codes according to the quantum cryptography distribution area where it is located and its own unique identifier. Submit to the honest node authentication server together with the authentication application.

Combining Figure 2, Figure 3, Figure 4, Figure 5 and Figure 6, the specific process of the private blockchain honest node authentication access method based on quantum cryptography watermark is described as follows:

1) The mobile terminal to be authenticated sends the authentication application and the mobile terminal identification code to the honest node authentication server, and the honest node authentication server verifies the user name and password of the mobile terminal, and starts to process the authentication application of the mobile terminal after the verification is successful;

2) The honest node authentication server submits a quantum cryptography application to the quantum cryptography management server and forwards the mobile terminal identification code sent by the mobile terminal to it;

3) After the quantum cryptography management server assigns a pair of quantum cryptography KEYs to be associated with the received mobile terminal identification code, the quantum cryptography management server sends one of the pair of quantum cryptography KEYs to the honest node authentication server;

4) The quantum cryptography management server analyzes the mobile terminal identification code, obtains the quantum cryptography distribution area where the mobile terminal is located, and sends another quantum cryptography KEY and its paired mobile terminal identification code to the quantum cryptography in the nearby quantum cryptography distribution area of the mobile terminal. password distribution terminal;

5) After receiving the quantum cryptography KEY, the honest node authentication server sends an authentication prompt of the quantum watermark fingerprint image to the mobile terminal;

6) After receiving the authentication prompt, the mobile terminal sends the mobile terminal identification code to the quantum cryptography distribution terminal in the quantum cryptography distribution area where it is located to submit a quantum cryptography application;

7) The quantum cryptography distribution terminal queries the quantum cryptography KEY associated with the mobile terminal identification code in its internal storage according to the mobile terminal identification code sent by the mobile terminal, and replies the quantum cryptography KEY to the mobile terminal;

8) After receiving the quantum cryptography KEY, the mobile terminal prompts the user to enter the fingerprint of the corresponding number according to the last two digits of the quantum cryptography KEY, and converts the rest of the quantum cryptography KEY into a binary image;

9) The mobile terminal uses the digital watermark embedding algorithm to embed the binary image into the fingerprint image in combination with the embedding position information provided by the quantum cryptography KEY to generate a quantum watermark fingerprint image, and sends it to the honest node authentication server, waiting for authentication;

10) After the honest node authentication server receives the quantum cryptography KEY replied by the quantum cryptography management server, it retrieves the corresponding fingerprint information of the user in the local database according to the last two digits of the quantum cryptography KEY, and converts the rest of the quantum cryptography KEY into a binary value picture;

11) The honest node authentication server extracts the fingerprint image and binary image from the quantum watermark fingerprint image sent by the mobile terminal according to the embedded position information in the quantum cryptography KEY;

12) The honest node authentication server compares the extracted fingerprint image and binary image with the fingerprint image and binary image stored locally. If the comparison fails, the authentication request of the mobile terminal is rejected. If the comparison is successful, the Authenticate the mobile terminal as an honest node, and pass the mobile terminal authentication request.

Figure 7 shows the quantum cryptography structure diagram of the private blockchain honest node authentication access method based on the quantum cryptography watermark, and the specific description is as follows:

1) A quantum cipher used in the private blockchain honest node authentication access method based on quantum cryptography watermark should have (n×m+n+2) characters, which are divided into (n+1) parts. Each of the n parts has (m+1) characters;

2) The first m characters of each part of the first n parts are used as the quantum digital watermark to embed the position information, and the (m+1)th character is used as the pixel value for generating the quantum digital watermark;

3) The (n+1) part of the quantum cipher is the fingerprint selection bit. There are 2 quantum ciphers in total. The possible values are 00, 01, 10 and 11 respectively. 00, 01, 10 and 11 are the fingerprint numbers, and 00, 01, 10 and 11 correspond to the fingerprint information of the thumb, index finger, middle finger and ring finger respectively;

4) To sum up, a (n×m+n+2)-bit quantum cryptography can generate a quantum digital watermark with n pixels, and each pixel has its corresponding m-bit quantum cryptography as its Embedding the position information of the fingerprint image, wherein the fingerprint image embedded in the quantum digital watermark is determined by the fingerprint selection bit of the quantum cryptography.

Claims (2)

1. the privately owned block chain honesty entity authentication cut-in method based on quantum cryptography watermark, which is characterized in that this method uses System include：Quantum cryptography service area, authentication service area and certification termination environment,

The quantum cryptography service area includes quantum cryptography dissemination system and quantum cryptography cloud, and it is close that quantum cryptography cloud contains quantum Code management server, quantum cryptography management server is for receiving quantum cryptography application and distributing quantum cryptography, parsing movement eventually The nearest quantum cryptography distribution terminal of end identification code, selection mobile terminal is matched with mobile terminal, and transmitting mobile terminal identifies Code distributes terminal to the quantum cryptography；

Contain privately owned block chain honesty meshed network and honest entity authentication server in the authentication service area, wherein privately owned area Block chain honesty meshed network is the mobile terminal application authentication network to be accessed；Honest entity authentication server is intended to connect for authenticating Enter the mobile terminal of privately owned block chain honesty meshed network, prestored in honest entity authentication server user registration information and Finger print information；

Contain several quantum cryptographys distribution terminal and mobile terminal to be certified, each quantum cryptography point in the certification termination environment Hair terminal has its corresponding quantum cryptography distribution area, the quantum of receiving area's mobile terminal in the quantum cryptography distribution area Quantum cryptography is requested and is distributed in password application, and quantum cryptography distribution area locating for mobile terminal is included in as area identification and moves In the mobile terminal identification code of dynamic terminal；When mobile terminal submits certification application to honest entity authentication server, according to institute The quantum cryptography distribution area at place and the unique identification of itself generate a string of mobile terminal identification codes and mention together with certification application Give honest entity authentication server；

Specific authentication accessing method includes the following steps：

1) mobile terminal to be certified sends certification application and mobile terminal identification code to honest entity authentication server；

2) user name and password of honest entity authentication server authentication mobile terminal, after being proved to be successful, honest entity authentication clothes Business device to quantum password management services transmitting mobile terminal identification code and sends the sub- password request of applications；

3) quantum cryptography management server receives the mobile terminal identification code and application that honest entity authentication server is sent to it Quantum cryptography request, quantum cryptography management server distribution a pair of quantum cryptography KEY simultaneously match with received mobile terminal identification code To association, quantum cryptography KEY and associated mobile terminal identification code are replied into honest entity authentication server；Quantum is close simultaneously Code management server parses mobile terminal identification code, quantum cryptography distribution area locating for mobile terminal is obtained, by quantum cryptography KEY distributes terminal to the quantum cryptography that associated mobile terminal identification code is sent to corresponding quantum cryptography distribution area；

4) after honest entity authentication server receives the quantum cryptography KEY of answer, to mobile terminal quantum watermark fingerprint The authorization prompt of image；

5) after mobile terminal receives authorization prompt, the quantum cryptography distribution terminal of quantum cryptography distribution area where to it is sent Mobile terminal identification code submits quantum cryptography application；

6) the mobile terminal identification code that is sent according to mobile terminal of quantum cryptography distribution terminal store inside it in inquire and shifting The dynamic associated quantum cryptography KEY of host ID, and quantum cryptography KEY is replied into mobile terminal；

7) after mobile terminal receives quantum cryptography KEY, prompt the user with what input was specified by two, the end of quantum cryptography KEY Fingerprint, and the fingerprint of typing is generated into fingerprint image；Quantum cryptography KEY rest part is converted into binary map simultaneously, according to amount Binary map is embedded into the fingerprint image raw by the embedded position information that sub- password KEY is provided using Digital Watermarking Embedded Algorithm At quantum watermark fingerprint image, and it is sent to honest entity authentication server, waited to be certified；

8) after honest entity authentication server receives the quantum cryptography KEY that quantum cryptography management server replies, according to quantum Two, the end of password KEY corresponding finger print information of calling and obtaining user in local library, and quantum cryptography KEY rest part is converted to Binary map；

9) the quantum water that honest entity authentication server is sent according to the embedded position information in quantum cryptography KEY from mobile terminal Print fingerprint image extracts fingerprint image and binary map；

10) fingerprint image that honest entity authentication server is carried out and is locally stored respectively to the fingerprint image and binary map that extract Picture and binary map are compared, and the certification request of mobile terminal are rejected if comparing failure, if comparing successfully, by mobile terminal Certification is honest node, is requested by mobile terminal authentication.

2. the privately owned block chain honesty entity authentication cut-in method according to claim 1 based on quantum cryptography watermark, It is characterized in that：It is typing that two, the end value of quantum cryptography KEY described in step 7), which is 00,01,10 or 11,00,01,10 and 11, Fingerprint number, and 00,01,10 and 11 finger print informations for respectively corresponding thumb, index finger, middle finger and the third finger.