CN113779605B - A parsing and authentication method for industrial Internet Handle identification system based on alliance chain - Google Patents

Abstract

The invention discloses an industrial Internet Handle identification system analysis and authentication method based on a alliance chain, which comprises the following steps: constructing a alliance chain architecture, setting an admission node to verify qualification of entering the alliance chain by an industrial Internet identification analysis admission mechanism, writing identity information of a user node into a distributed database under the chain by a storage node, maintaining an alliance chain account book by a consensus node, and packaging a node ID and an identity information hash value into a block uplink. When the user node requests the industrial Internet identification analysis service, the admission qualification of the alliance chain is firstly obtained, and the admission qualification can be obtained after the admission node is audited and the consensus node records the uplink. After obtaining the admission qualification of the alliance chain, the user node can request service from the Handle system, the user node requests service from the system node, the system node obtains the identity information hash value and specific identity information from the alliance chain account book and the admission node respectively, and the identity of the user node can be verified after calculation and comparison.

Description

A parsing and authentication method for industrial Internet Handle identification system based on alliance chain

Technical Field

The present invention belongs to the technical field of industrial Internet management and relates to an industrial Internet authentication method based on alliance chain.

Background technique

At present, the construction of industrial Internet in my country is developing rapidly, and it has become an important driving force for promoting industrial transformation and upgrading. The industrial Internet identification and resolution system is its most important infrastructure, providing coding, registration and resolution services for industrial equipment, machines, materials, parts and products. It is the link for the coordination of key elements of the industrial Internet such as platforms, networks, equipment, control, and data. It is a key measure to solve the information islands between different industries and enterprises.

At present, the main identity resolution system used in my country is the Handle system. The Handle system is a globally distributed universal identity service system. It was proposed in 1994 and aims to provide efficient, scalable and secure global identity resolution services. The Handle system adopts a layered service model without a single root node. The top layer is several parallel global handle registries (GHRs), and the data between GHRs is synchronized and communicated equally; the lower layer is the local Handle service (LHS). China's industrial Internet identity resolution system using the Handle system includes international root nodes (responsible for providing public root zone data management and root resolution services to the world), national top-level nodes (responsible for domestic top-level identity coding registration and identity resolution services, identity filing and certification, etc.), secondary nodes (mainly referring to industry nodes, responsible for identity coding registration and identity resolution services within the industry or region, as well as identity business management and application docking services), enterprise nodes (the enterprise's own nodes, also called third-level nodes, responsible for the enterprise's identity coding registration and identity resolution services), recursive resolution nodes (providing a unified entrance for industrial Internet terminals, improving identity resolution service performance through caching and other technologies), and clients (users of identity data or management terminals of identity resolution nodes).

The Handle system is a flat and layered service model. The security authentication mechanism of the Handle system includes administrator and authority design, client identity security and legal and secure operation, etc. These mechanisms are mainly based on the traditional centralized certificate authority (CA) as a trusted third party to be responsible for security authentication in the industrial Internet parsing scenario. At present, network security issues frequently occur in the industrial Internet. Traditional trusted third-party CA authentication is easily attacked and has poor resistance to malicious attacks, resulting in security risks such as resource abuse, data leakage, data tampering, and identity fraud.

Based on this, blockchain technology is used in the field of industrial Internet identity resolution and authentication. Blockchain technology originates from digital cryptocurrency and has the advantages of decentralization, trustlessness, data immutability, and traceability. It can effectively solve the security problems encountered by traditional centralized CA authentication. However, in the industrial Internet environment, the amount of identity registration and resolution data is large, and it is necessary to ensure a certain throughput while ensuring security. The transaction volume of traditional blockchain is limited and the resource consumption is large. It is not suitable for the current industrial Internet environment. At the same time, the amount of data in the traditional blockchain structure only increases and does not decrease. It is difficult to ensure the transaction volume under the current network bandwidth, and it is impossible to effectively store massive data. When blockchain is used for industrial Internet authentication, the storage solution must be improved to support large amounts of data without wasting network bandwidth and block storage resources. The patent applied by Hu Xiangdong et al. (A blockchain-based industrial Internet identity authentication method, CN111818056A) uses blockchain for industrial Internet authentication, and uses dual-chain interaction to complete node registration, authentication and token issuance. However, the dual-chain interaction is complex and cannot meet the needs of large-scale identity resolution.

Summary of the invention

The purpose of the present invention is to overcome the problems existing in the prior art, and propose an industrial Internet Handle identification system authentication method based on alliance chain, which mainly adopts the alliance chain system architecture and the method of using the interaction between the chain and the off-chain. The blockchain consensus mechanism is used on the chain to write the hash value of the identity authentication information data into the block, and the distributed storage system is used to store the identity authentication information off the chain. The present invention can process a large amount of authentication data, ensure a high transaction volume, and use the blockchain to ensure that the identity authentication information is not tampered with.

In order to achieve the purpose of the present invention, the technical solution adopted by the present invention is as follows:

A method for parsing and authenticating an industrial Internet Handle identification system based on a consortium chain includes the following steps:

Step 1: Build a consortium chain authentication architecture;

Step 2: The constructed alliance chain authentication architecture realizes the registration and authentication requests of user nodes.

In the step one, the alliance chain authentication architecture consists of four modules: the industrial Internet identity resolution access agency, the off-chain distributed storage system, the alliance chain, and the Handle system; the industrial Internet identity resolution access agency certifies the qualifications of a specific industry or enterprise to enter the alliance chain, and the industrial Internet identity resolution access agency sets the access node; the off-chain distributed storage system stores specific identity authentication information, which is maintained by the storage node; the alliance chain stores the user's identity authentication information hash value, which is maintained by the consensus node; the Handle system is responsible for the industrial Internet data identity resolution service, and initiates authentication or registration requests to the system.

Furthermore, in step one, the access node has a credit endorsement to achieve the first authentication in the alliance chain; the consensus node is a server group provided when various industries or enterprises access the alliance chain, and jointly builds and maintains the alliance chain ledger.

In step 2, the user needs to register in the system before the user node authentication request. The registration method is as follows:

(1) The user node sends a registration request to the admission node and attaches identity information; the admission node reviews the user node identity information and decides whether it can access the alliance chain;

The registration of user nodes includes the entry nodes, consensus nodes, the joining of nodes in the Handle system, and the client requesting the identity resolution service. The above nodes are collectively referred to as user nodes. When applying for registration with the entry nodes, these nodes must attach qualification information to prove their identity.

(2) The admission node approves the user node to access the consortium chain network, generates a user ID and a public-private key pair, and forwards the user identity information hash value and user ID as a transaction to the consensus node;

Among them, the identity information of the user node allowed to access the alliance chain is generated by the access node, which is: {ID, public key, address, timestamp, identity information}.

(3) The consensus node verifies the received transaction, reaches a consensus, and writes the hash value of the user ID and user identity information into the alliance chain; the consensus node responsible for packaging the block returns a write success message to the access node.

(4) After receiving the message, the access node forwards the user identity information to the storage node, which writes it into the off-chain database. The access node also returns the user node ID, public key and private key to the user node.

Furthermore, in step (3) of the above registration process, the consensus method between consensus nodes is as follows:

a. During the alliance chain consensus process, the access node monitors the alliance chain network and maintains a local log recording the scores of all consensus nodes. The scoring method is as follows: Initially, the score of all consensus nodes is 0. During the consensus process: if the access node receives less than 2/3 of the total number of consensus nodes, the score of the elected master node will be reduced by 2, and the scores of other nodes will be increased by 1; the score of the accounting node that successfully generates a block will be increased by 1; the score of the newly added node is 0; after a new round of consensus begins, the access node selects the consensus node with the highest score as the accounting node according to the local scoring log, sends a consensus request to the accounting node, and broadcasts the user identity information hash value and user ID as a transaction to the consensus nodes of the entire network;

b. All consensus nodes independently monitor transactions on the entire network, and store the monitored transactions in memory after verifying their legitimacy; the accounting node that receives the consensus request packs the collected transaction data into blocks in chronological order, and forwards the blocks to other consensus nodes;

c. After receiving the block, other consensus nodes verify the transactions in the block and the block itself. After the verification is correct, a verification success message is returned to the access node. If the verification fails, the block is discarded and no information is returned. First, the legitimacy of the block is verified: whether the format of the block complies with the rules, whether the timestamp of the block is within the legal range, whether the hash value in the header of this block is the same as the hash value of the previous block, and whether the transactions in the block are legal; then verify the legitimacy of the transactions in the block: whether the format of the transactions complies with the rules, and whether the transactions already exist in the alliance chain ledger.

d. If the admission node receives replies from more than 2/3 of the total number of consensus nodes, it means that a new block is generated and the consensus is completed. Otherwise, it means that the consensus fails and this round of consensus ends. Finally, the admission node will update the local scoring log according to the consensus result.

Furthermore, in the above registration process, the public-private key pair will be used as a tool for user nodes to communicate with nodes in the system, that is, the communication between nodes in the system is realized through the public-private key pair. The sender uses the recipient's public key to encrypt the request and attaches the request hash encrypted with its own private key. The recipient uses its own private key to decrypt the information and decrypts the request hash with the sender's public key for verification.

In step 2, the user node requests identity authentication from the system as follows:

(1) The user node requests services from the Handle system and attaches its own ID and public key.

(2) The Handle system node that receives the request reads {ID, identity information hash value} from the consortium chain ledger; the nodes that receive a specific request and request authentication from the system are collectively referred to as system nodes, and system nodes are all nodes in the Handle system that can provide identity resolution services;

(3) The system node requests the access node to read the off-chain database;

(4) The access node verifies the identity of the system node. After verification, it reads the database from the storage node and returns the identity information. The method by which the access node verifies the system node is to read the identity information hash value from the consortium chain ledger and to search for the identity information in the off-chain database and calculate the hash value for comparison.

(5) After receiving the return information, the system node calculates the hash value and compares it with the hash value read from the alliance chain ledger. If the two are consistent, an authentication success message is returned; otherwise, the request is discarded.

In summary, the Industrial Internet Handle identification system parsing and authentication method based on the alliance chain described in the present invention: build an alliance chain architecture based on the current Handle identification resolution system, and the Industrial Internet identification resolution access agency sets an access node to verify the qualification to enter the alliance chain. The storage node is responsible for writing the identity information of the user node into the off-chain distributed database, and the consensus node maintains the alliance chain account book, and packages the node ID and the identity information hash value into a block chain. When a user node wants to request an industrial Internet identification resolution service, it must first obtain the access qualification of the alliance chain, and the access qualification can be obtained after the access node reviews and the consensus node records it on the chain. After obtaining the alliance chain access qualification, the user node can request services from the Handle system, and the user node requests services from the system node. The system node obtains the identity information hash value and specific identity information from the alliance chain account book and the access node respectively, and the identity of the user node can be verified after calculation and comparison.

Compared with the prior art, the advantages of the present invention are:

1. The present invention introduces an architecture system based on alliance chain, which is only open to specific organizations. It has advantages in availability, high performance, privacy protection, and data supervision, and the system operates more efficiently and at a lower cost.

2. The present invention adopts an improved consensus algorithm and introduces a scoring mechanism, which can effectively prevent malicious or faulty nodes in the alliance chain environment and realize the dynamic joining of nodes.

3. The present invention uses data collaboration on and off the chain. The storage capacity of the chain is expanded by using the off-chain storage system. The off-chain hash value is used to achieve the tamper-proof nature of the on-chain information, which not only ensures the security of the off-chain information, but also achieves high transmission efficiency by using off-chain storage.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 shows a system architecture diagram of the Handle identification system parsing and authentication method based on the alliance chain described in the present invention.

FIG2 shows a flow chart of the industrial Internet identity registration method based on alliance chain described in the present invention.

FIG3 shows a flow chart of the consensus algorithm for maintaining the consensus nodes of the alliance chain according to the present invention.

FIG4 is a flow chart of the industrial Internet identity authentication method based on alliance chain described in the present invention.

Detailed ways

The present invention is described in detail below through specific embodiments in conjunction with the accompanying drawings, but does not constitute a limitation of the present invention.

This embodiment provides an industrial Internet Handle identification system parsing and authentication method based on a consortium chain, which specifically includes:

Step 1: Build a consortium chain authentication architecture based on the current Handle identity resolution system;

Step 2: The system implements the registration and authentication request of the user node.

First, we need to establish a consortium chain authentication architecture based on the existing Handle system. As shown in Figure 1, the consortium chain authentication architecture consists of four modules: the industrial Internet identity resolution access agency, the off-chain distributed storage system, the consortium chain, and the Handle system.

The Industrial Internet identity resolution access agency sets up access nodes to certify the qualifications of specific industries or enterprises to enter the alliance chain. These specific access agencies operate access nodes, which have credit endorsements and accept registration and certification requests.

The off-chain distributed storage system stores specific identity authentication information and is maintained by the storage nodes, that is, the storage nodes maintain the off-chain distributed storage. The alliance chain stores the hash value of the user's identity authentication information and is maintained by the consensus node; the consensus node is a server group provided by various industries or enterprises when they access the alliance chain, and jointly builds and maintains the alliance chain ledger. When an industry or enterprise accesses the alliance chain, it must maintain one or more consensus nodes. These member consensus nodes reach consensus through mutual trust in weak centers and jointly maintain the alliance chain data. Any node's processing of identity data is considered a transaction.

The creation of the alliance chain starts with the genesis block. The access node forwards the {ID, identity information hash value} of the authenticated access node, consensus node and each node in the Handle system as a transaction to the consensus node. The consensus node forms the genesis block after consensus. At the same time, the storage node writes the specific identity information into the off-chain distributed database.

The Handle system is responsible for the industrial Internet data identification resolution service and initiates authentication or registration requests to the system. The industrial Internet identification resolution system provides identification coding, registration and resolution services for industrial equipment and products. The service requester is collectively referred to as the user node. Due to the confidentiality requirements of industrial production, the service requester must first register with the alliance chain and request to be granted a legal user identity.

The parties requesting registration are collectively referred to as user nodes, including but not limited to access nodes, consensus nodes, nodes in the Handle system, and clients requesting identity resolution services. When applying for registration with access nodes, these nodes must attach qualification information to prove their identity, as shown in the flowchart of Figure 2. Before the user authentication request, the user must first register in the system. The specific operations are as follows:

(1) The user node first sends a registration request to the access node and attaches relevant identity information. This process can be carried out through the Internet, or by submitting an application offline to the Industrial Internet Identity Resolution Access Agency. The access node reviews the user node identity information and decides whether it can access the alliance chain. After receiving the request, the access node conducts an audit, including whether the identity information provided is eligible to enter the alliance chain or whether the user node has been registered. If the audit is passed, it will proceed to the next step.

(2) After the admission node passes the review, it generates the user ID and public-private key pair of the user node, and broadcasts the registration to the consensus nodes of the entire network, that is, forwarding the user node identity information hash value and user node ID as a transaction to the consensus node. The identity information of the user node allowed to access the alliance chain is generated by the admission node, which is: {ID, public key, address, timestamp, identity information}.

(3) The consensus node first verifies the identity of the access node that initiated the transaction request, and then verifies the received transaction. The consensus nodes of the entire network verify the received transactions and reach a consistent consensus. {ID, identity information hash value} is written into the blockchain. The consensus node responsible for packaging the block selected by consensus returns a message to the access node.

(4) When the admission node receives the return message from the consensus node, it first verifies the identity of the consensus node. If the verification is correct, the storage node writes the user identity information into the off-chain distributed database. The user identity information is {ID, public key, address, timestamp, identity authentication information}, which is generated by the admission node. Finally, the admission node returns the user node ID, public key and private key to the user node.

In the above registration process, the public-private key pair will be used as a tool for the user node to communicate with all nodes in the system (including user nodes, access nodes, consensus nodes, etc.), that is, the communication between system nodes is realized through the public-private key pair to ensure security. The sender uses the public key of the receiver to encrypt the request and attaches the request hash encrypted with its own private key. The receiver uses its own private key to decrypt the information and decrypts the request hash with the sender's public key for verification. Among them, the public keys of the access node and consensus node are public.

In step (3) of the above registration process, the consensus method between consensus nodes is as follows, as shown in the flowchart of Figure 3:

1) During the alliance chain consensus process, the access node monitors the alliance chain network and maintains a local log recording the scores S of all consensus nodes. The scoring method is as follows: Initially, all consensus nodes are scored 0. During the consensus process: if the access node receives less than 2/3 of the total number of consensus nodes, the score of the elected master node is reduced by 2, and the scores of other nodes are increased by 1; the score of the accounting node that successfully generates a block is increased by 1; the score of the newly added node is 0. After the start of a new round of consensus, the access node selects the consensus node with the highest score as the accounting node according to the local scoring log, sends a consensus request to the accounting node, and broadcasts the user identity information hash value and user ID as a transaction to the consensus nodes of the entire network.

2) All consensus nodes independently monitor transactions in the entire network, and store the monitored transactions in memory after verifying their legitimacy. The accounting node that receives the consensus request will package the collected transaction data into blocks in chronological order and forward the block to other consensus nodes.

3) After receiving the block, other consensus nodes verify the transactions in the block and the block itself. After the verification is correct, they return a verification success message to the access node. If the verification fails, the block is discarded and no information is returned. First, verify the legitimacy of the block. The legitimacy of the block is judged as follows: ⅰWhether the format of the block complies with the rules; ⅱWhether the timestamp of the block is within the legal range; ⅲWhether the hash value in the header of this block is the same as the hash value of the previous block; ⅳWhether the transactions in the block are legal. Then verify the legitimacy of the transactions in the block. The legitimacy of the transactions is judged as follows: ⅰWhether the format of the transaction complies with the rules; ⅱWhether the transaction already exists in the alliance chain account book.

4) If the admission node receives replies from more than 2/3 of the total number of consensus nodes, it means that a new block is generated and the consensus is completed. Otherwise, it means that the consensus fails and this round of consensus ends. Finally, the admission node will update the local scoring log according to the consensus result.

After the user node passes the access review and completes the registration, it can apply for the identity resolution service from the Handle system. Here, the initiator of the request service is collectively referred to as the user node, and the nodes providing services in the Handle system are collectively referred to as system nodes. As shown in the flowchart of Figure 4, the user node requests services from the receiving node, and the specific operations of identity authentication are as follows:

(1) The user node requests the identity resolution service from a specific node in the Handle system, attaching its own user ID and public key. The communication between nodes is the same as the registration operation. The public key of the system node is public. User nodes include but are not limited to nodes or clients that request services from the Handle system.

(2) After receiving the request, the system node reads {ID, identity information hash value} from the consortium chain ledger based on the decrypted user ID. If the read fails, the request is discarded. Nodes that receive a specific request and request authentication from the system are collectively referred to as system nodes. System nodes are all nodes in the Handle system that can provide identity resolution services.

(3) After the system node successfully finds the corresponding {ID, identity information hash value} from the blockchain ledger, the system node requests the access node to read the off-chain distributed database, and the request information sent includes its own node ID, public key, and user node ID.

(4) When the access node receives the verification request message from the system node, it first verifies the identity of the system node. The verification process is to read the hash value of the system node identity information from the alliance chain ledger, and then read the specific identity information from the distributed storage based on the system node ID. After the two are calculated and compared and verified to be correct, the access node searches the database from the storage node based on the user node ID in the request message, and finally returns the identity information to the system node.

(5) After receiving the message from the access node, the system node calculates the identity information hash value and compares it with the identity information hash value taken from the alliance chain ledger. If the comparison is consistent, the identity authentication of the user node is completed and a successful authentication message is returned to the user node.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although detailed description is given with reference to the embodiments of the present invention, those skilled in the art should understand that modifications or equivalent substitutions of the technical solutions of the present invention do not depart from the spirit and scope of the technical solutions of the present invention, and should be covered by the protection scope of the claims of the present invention.

Claims (4)

1. An industrial Internet Handle identification system analysis and authentication method based on a alliance chain is characterized by comprising the following steps of: the method comprises the following steps:

step one, constructing a alliance chain authentication architecture;

the alliance chain authentication architecture consists of four modules of an admission mechanism, an under-chain distributed storage system, an alliance chain and a Handle system; the admission mechanism authenticates the qualification of a specific industry or enterprise to enter a alliance chain, and the industrial Internet identification analysis admission mechanism sets an admission node; the under-chain distributed storage system stores specific identity authentication information, and is maintained by a storage node; the alliance chain stores the hash value of the identity authentication information of the user and is maintained by the consensus node; the Handle system is responsible for industrial Internet data identification analysis service and initiates an authentication or registration request to the system;

The access node has credit endorsement to realize the first authentication in the alliance chain; the consensus node is a server group provided by each industry or enterprise when accessing the alliance chain, and builds and maintains an alliance chain account book together;

Step two, the constructed alliance chain authentication architecture realizes the registration and authentication request of the user node;

Before the authentication request of the user node, the user needs to register in the system in advance, and the registration method is as follows:

(1) The user node sends a registration request to the admission node and attaches identity information; the access node checks identity information of the user node and decides whether the alliance chain can be accessed;

The user node comprises an access node, a consensus node, nodes in a Handle system and a client for requesting identification analysis service, and when the user node applies for registration to the access node, qualification information for proving self identity is required to be attached;

(2) The access node approves the user node to access the alliance chain network, generates a user ID and public and private key pair, and forwards the user identity information hash value and the user ID to the consensus node as a transaction;

Identity information of user nodes admitted to the federation chain is generated by the admitted node as: { ID, public key, address, timestamp, identity information };

(3) The consensus node verifies the received transaction to achieve consensus, and the hash value of the user ID and the user identity information is written into a alliance chain; the consensus node responsible for the packaging block returns a writing success message to the admission node;

the consensus method among the consensus nodes is as follows:

a. in the alliance chain consensus process, an access node monitors an alliance chain network, and a log for recording scores of all consensus nodes is locally maintained, wherein the scoring method is as follows: initially, all consensus nodes score 0, during the consensus process: the admission node receives replies of which the total number is less than 2/3 of the total number of all the consensus nodes, the score of the elected main node is reduced by 2, and the scores of other nodes are increased by 1; accounting node that successfully generated the block adds 1; the newly added node score is 0; after a new round of consensus begins, the admission node selects a consensus node with the highest score as an accounting node according to a local scoring log, sends a consensus request to the accounting node, and broadcasts a user identity information hash value and a user ID as a transaction to the whole network consensus node;

b. All the consensus nodes independently monitor the whole network transaction, and store the monitored transaction into a memory after checking the validity; the accounting node receiving the consensus request packs the collected transaction data according to time sequence and packs the transaction data into blocks, and forwards the blocks to other consensus nodes;

c. After receiving the block, the other consensus nodes verify the transaction in the block and the block, and return a verification success message to the admission node after the verification is correct, and discard the block and not return information if the verification is unsuccessful; firstly, verifying the validity of the block: whether the format of the block accords with the rule, whether the time stamp of the block is in a legal range, whether the hash value in the head of the block is the same as the hash value of the previous block, and whether the transaction in the block is legal; and verifying the legitimacy of the transaction in the block: whether the format of the transaction accords with the rule or not, and whether the transaction exists in the alliance chain account book or not;

d. the admission node receives 2/3 of the replies exceeding the total number of all the consensus nodes, namely the generation of new area blocks is indicated, the consensus is completed, otherwise, the failure of the consensus is indicated, and the round of consensus is ended; finally, the access node updates the local scoring log according to the consensus result;

(4) After receiving the information, the admission node forwards the user identity information to the storage node, the storage node writes the information into the under-chain database, and the admission node returns the user node ID, the public key and the private key to the user node.

2. The industrial internet Handle identification system analysis and authentication method based on the alliance chain according to claim 1, wherein the method is characterized in that: in the above registration process, the public-private key pair is used as a means for communicating between the user node and the node in the system, that is, the communication between the nodes in the system is implemented through the public-private key pair, the sender encrypts the request by using the public key of the receiver, and appends the request hash encrypted by using the private key of the receiver, and the receiver decrypts the information by using the private key of the receiver, decrypts the request hash by using the public key of the sender, and performs verification.

3. The industrial internet Handle identification system analysis and authentication method based on the alliance chain according to claim 1, wherein the method is characterized in that: in the second step, the user node requests the identity authentication method from the system as follows:

(1) The user node requests service from the Handle system and attaches the self ID and the public key;

(2) The Handle system node receiving the request reads { ID, identity information hash value } from the alliance chain account book; the nodes which receive the request and request authentication to the system are collectively called system nodes, and the system nodes are all nodes which can provide identification analysis service in the Handle system;

(3) The system node requests access nodes to read the database under the chain;

(4) The admission node verifies the identity of the system node, reads the database from the storage node after verification, and returns the identity information;

(5) And comparing the received information by the system node, and returning the information.

4. The industrial internet Handle identification system analysis and authentication method based on the alliance chain according to claim 3, wherein the method comprises the following steps: in the step (4), the method for verifying the system node by the access node is that the identity information hash value is read from the alliance chain account book and the database identity information under the chain is searched and the hash value is calculated for comparison;

in step (5), after receiving the return information, the system node calculates a hash value and compares the hash value with the hash value read on the alliance chain account book, if the hash value and the hash value are consistent, an authentication success message is returned, and otherwise, the request is discarded.