Alliance chain distributed certificate management method

Abstract

The invention discloses an alliance chain distributed certificate management method. According to the method, a certificate admission mechanism is adopted, an alliance chain distributed CA collaborative management mechanism is constructed based on an intelligent contract and consensus algorithm technology, alliance chain participated organizations all have independent CA systems, all organizations sign in to generate root certificates, nodes and users in the organizations are managed through the CA systems of the organizations, the organizations share data such as the root certificates and revocation lists, and therefore the system can achieve the collaborative management of the alliance chains. The method realizes mutual trust and intercommunication of organizations and cross-organization identity authentication and authorization of node users, can be applied to various blockchain applications, and supports blockchain system node and user security management.

Description

technical field [0001] The invention belongs to the technical field of block chains, and in particular relates to a distributed certificate management method of an alliance chain. Background technique [0002] Blockchain technology is a distributed ledger technology that is based on cryptographic technology and is maintained by multiple parties, trustless, and cannot be tampered with. As an important development branch of blockchain technology, the alliance chain has seen more and more well-known enterprises and organizations participate in the research in this field since its birth. As an important security guarantee of the alliance chain system, the certificate access mechanism has very important research significance for the development of blockchain technology and applications. However, there is no complete and systematic certificate management solution or related products. Blockchain As a distributed and multi-center innovative technology, it is quite different from th...

AI Technical Summary

Problems solved by technology

[0004] (1) The alliance chain system represented by Hyperledger Fabric adopts a CA-oriented access mechanism, manages blockchain nodes and users through MSP membership services, and realizes the privacy and auditability of blockchain transactions, but cannot Multi-organization node certificate revocation status synchronization

[0005] (2) The alliance chain system represented by FISCO BCOS adopts a chain certificate, organization certificate, and node certificate three-level certificate structure to manage blockchain network access verification, but it assumes that there is an authoritative organization, and the certificate of the chain participating organization needs authority Organizations are generated based on chain certificates. This management model similar to traditional central management weakens the distributed and trustless technical advantages of the blockchain itself, and the complexity of certificate management is relatively high.

Images