DAG-based whole-network unified trust anchor system, establishment method and authentication method

Abstract

The invention provides a DAG-based whole-network unified trust anchor system, an establishment method and an authentication method, and solves the technical problem that the chaotic authentication reliability of an existing CA system cannot be guaranteed. The system comprises a common node used for receiving a client request to form a transaction data forwarding signature node; the signature nodeis used for packaging and signing the transaction data to form block data and broadcasting the block data to the verification node; the verification node is used for verifying the block data to form consensus judgment; and the DAG network stores the block data in a DAG data structure, and updates the block, the signature node and the verification node. The formation randomness of the signature nodes and the verification nodes is utilized to ensure the distribution balance of all levels of nodes of the whole network unified trust anchor; autonomous optimization of each functional node is ensured by utilizing consensus judgment of multiple verification nodes, concurrent processing of authentication transaction data by multiple signature nodes is realized by utilizing a DAG network, and defects of an existing authentication system are overcome to form a whole-network unified trust anchor system and high-concurrency block data processing.

Description

technical field [0001] The invention relates to the technical field of authentication, in particular to a DAG-based whole network unified trust anchor system, an establishment method and an authentication method. Background technique [0002] In the prior art, under the public key cryptography system, the public key digital signature technology needs to rely on the CA certificate issued by the public key infrastructure (PKI) to bind the entity identity and the public key to ensure the authenticity of the entity public key. Binding the user's public key and user identity in the form of a public key certificate forms a mature solution to network security issues. However, PKI introduces a trusted third-party CA (Certificate Authority, certificate authority;), which brings the overhead cost of certificate management, storage and calculation, and there are crossover between users of each trusted third-party CA. Authentication and trust management issues. For example, in cloud s...

AI Technical Summary

Problems solved by technology

[0004] In view of the above problems, the embodiments of the present invention provide a DAG-based unified trust anchor system, establishment method and authentication method for the entire network, so as to solve the technical problem that the existing CA system is chaotic and cannot guarantee the reliability of authentication

Images