Granted Patent B2

US 12,489,639 · App. 18/259,518 · Granted Dec 2, 2025

Inventors: Junzhi Yan (Beijing, CN); Bo Yang (Beijing, CN); Li Su (Beijing, CN)

Assignees: China Mobile Communication Co., Ltd Research Institute; China Mobile Communications Group Co., Ltd.

H04L9/3242H04L9/14H04L9/50

Abstract

Claims (74)

1 . An access control method, applied to a first network side device, wherein the method comprises:

receiving relevant information to be verified that is sent by a terminal and corresponds to an access request, wherein the relevant information to be verified comprises private key signature information of the terminal and position information of preset information in the blockchain ledger;

acquiring the preset information from the blockchain ledger according to the position information;

verifying the terminal according to the private key signature information and the preset information;

acquiring, in a case that verification is passed, attribute information of the terminal from a blockchain ledger according to the preset information;

feedbacking a request response for access control to the terminal according to the attribute information,

wherein the preset information comprises public key information of the terminal, or first terminal identification information obtained according to the public key of the terminal, or second terminal identification information irrelevant to the public key of the terminal and the public key information of the terminal, or the second terminal identification information and a hash value of the public key of the terminal.

2 . The access control method according to claim 1 , wherein the receiving relevant information to be verified corresponding to the access request sent by the terminal comprises:

receiving the access request sent by the terminal, wherein relevant information to be verified is carried in the access request; or,

receiving the access request sent by the terminal;

feedbacking, according to the access request, a random number to the terminal;

receiving relevant information to be verified sent by the terminal according to the random number.

3 . The access control method according to claim 1 , wherein the verifying, in the case that the preset information comprises public key information of the terminal, the terminal according to the private key signature information and the preset information, comprises:

using the public key information to verify the private key signature information;

the obtaining, in the case that verification is passed, attribute information of the terminal from the blockchain ledger according to the preset information comprises:

obtaining, in a case that the verification is passed, corresponding third terminal identification information from the blockchain ledger according to the public key information;

obtaining, in a case that the third terminal identification information is obtained, attribute information corresponding to the third terminal identification information from the blockchain ledger as attribute information of the terminal.

4 . The access control method according to claim 1 , wherein the verifying, in the case that the preset information comprises the first terminal identification information, the terminal according to the private key signature information and the preset information, comprises:

obtaining, according to the first terminal identification information, the public key information to be verified and the stored public key information of the terminal from the blockchain ledger;

verifying, according to the public key information of the terminal, the public key information to be verified and the private key signature information;

obtaining, in the case that verification is passed, attribute information of the terminal from the blockchain ledger according to the preset information comprises:

obtaining, in the case that the verification is passed, attribute information of the terminal from the blockchain ledger according to the first terminal identification information.

5 . The access control method according to claim 1 , wherein the verifying, in the case that the preset information comprises the second terminal identification information and the public key information, the terminal according to the private key signature information and the preset information, comprises:

using the public key information in the preset information to verify the private key signature information; acquiring, according to the second terminal identification information, the stored public key information of the terminal from the blockchain ledger; and verifying, according to the acquired public key information of the terminal, the public key information in the preset information;

or,

using the public key information in the preset information to verify the private key signature information; acquiring, according to the second terminal identification information, the stored hash value of the public key of the terminal from the blockchain ledger; obtaining, according to the public key information in the preset information, the hash value to be verified; and verifying, according to the obtained hash value of the public key of the terminal, the hash value to be verified.

6 . The access control method according to claim 1 , wherein the verifying, in the case that the preset information comprises the second terminal identification information and the hash value of the public key, the terminal according to the private key signature information and the preset information, comprises:

acquiring, according to the second terminal identification information, the stored public key information of the terminal from the blockchain ledger;

obtaining, according to the hash value of the public key in the preset information, the public key information to be verified;

verifying, according to the public key information to be verified, the private key signature information; and verifying, according to the acquired public key information of the terminal, the public key information to be verified.

7 . The access control method according to claim 1 , wherein the private key signature information comprises first signature information on a timestamp using the private key of the terminal, or second signature information of the random number on the first network side device in response to the access request sent by using the private key of the terminal;

in a case that the private key signature information comprises the first signature information, the relevant information to be verified further comprises the timestamp;

the verifying the terminal according to the private key signature information and the preset information comprises:

confirming whether the timestamp is within a validity period;

verifying, in a case that the timestamp is within the validity period, the terminal according to the private key signature information and the preset information.

8 . The access control method according to claim 1 , wherein the preset information further comprises validity period information of the first information; the first information comprises at least one of the attribute information, the first terminal identification information and the second terminal identification information;

the verifying the terminal according to the private key signature information and the preset information comprises:

confirming, according to the validity period information, whether the first information is within the validity period;

verifying, in a case that the first information is within the validity period, the terminal according to the private key signature information and other information except the validity period information in the preset information.

9 . The access control method according to claim 1 , wherein at least one authentication information related to the terminal is stored in the blockchain ledger as encrypted information encrypted with a first key; the relevant information to be verified further comprises the first key encrypted with the public key of the first network side device;

prior to the feeding back, according to the attribute information, the request response for access control to the terminal, the method further comprises:

using the private key of the first network side device to decrypt the first key encrypted by the public key to obtain the first key;

decrypting, according to the first key, the encrypted information obtained from the blockchain ledger to obtain the at least one authentication information,

wherein the at least one authentication information comprises at least one of the attribute information of the terminal, the first terminal identification information obtained according to the public key of the terminal or the second terminal identification information irrelevant to the public key of the terminal or the third terminal identification information corresponding to the public key of the terminal, and the public key information of the terminal or the hash value of the public key of the terminal.

10 . A network side device, comprising a memory, a processor, and a program stored on the memory and operable on the processor; wherein when the program is executed by the processor, the access control method according to claim 1 is implemented.

11 . An access control method, applied to a terminal, wherein the method comprises:

sending relevant information to be verified corresponding to an access request to a first network side device, wherein the relevant information to be verified comprises private key signature information of the terminal and position information of preset information in the blockchain;

receiving a request response for access control feedback by the first network side device,

wherein the preset information comprises public key information of the terminal, or first terminal identification information obtained according to the public key of the terminal, or second terminal identification information irrelevant to the public key of the terminal and the public key information of the terminal, or the second terminal identification information and a hash value of the public key of the terminal.

12 . The access control method according to claim 11 , wherein the sending the relevant information to be verified corresponding to the access request to the first network side device comprises:

sending the access request to the first network side device, wherein the relevant information to be verified is carried in the access request; or,

sending the access request to the first network side device;

receiving a random number feedback by the first network side device according to the access request;

sending, according to the random number, relevant information to be verified to the first network side device.

13 . The access control method according to claim 11 , wherein the private key signature information comprises first signature information on a timestamp using the private key of the terminal, or second signature information of the random number on the first network side device in response to the access request sent by using the private key of the terminal;

in a case that the private key signature information comprises the first signature information, the relevant information to be verified further comprises the timestamp.

14 . The access control method according to claim 11 , wherein the preset information further comprises validity period information of the first information; the first information comprises at least one of the attribute information of the terminal, the first terminal identification information and the second terminal identification information.

15 . The access control method according to claim 11 , wherein at least one authentication information related to the terminal is stored in the blockchain ledger as encrypted information encrypted with a first key; the relevant information to be verified further comprises the first key encrypted with the public key of the first network side device;

wherein the at least one authentication information comprises at least one of the attribute information of the terminal, the first terminal identification information obtained according to the public key of the terminal or the second terminal identification information irrelevant to the public key of the terminal or the third terminal identification information corresponding to the public key of the terminal, and the public key information of the terminal or the hash value of the public key of the terminal.

16 . A terminal, comprising a memory, a processor, and a program stored on the memory and operable on the processor; wherein when the program is executed by the processor, the access control method according to claim 11 is implemented.

17 . An access control method, applied to a first blockchain node, wherein the method comprises:

receiving information to be authenticated sent by a terminal;

authenticating the information to be authenticated;

storing, in a case that authentication is passed, at least one authentication information corresponding to the information to be authenticated in a blockchain ledger,

wherein the information to be authenticated comprises user credential information and/or attribute information; the user credential information comprises terminal identification information;

the at least one authentication information comprises at least one of attribute information of the terminal, the first terminal identification information obtained according to the public key of the terminal or the second terminal identification information irrelevant to the public key of the terminal or the third terminal identification information corresponding to the public key of the terminal, and the public key information of the terminal or the hash value of the public key of the terminal.

18 . The access control method according to claim 17 , wherein the at least one authentication information further comprises: a timestamp corresponding to the terminal; and/or,

validity period information of a second information,

wherein the timestamp is a timestamp of the first signature information obtained by signing with the private key of the terminal;

the second information comprises at least one of the attribute information, first terminal identification information, second terminal identification information, and third terminal identification information.

19 . The access control method according to claim 17 , wherein the storing, in the case that the authentication is passed, at least one authentication information corresponding to the information to be authenticated in the blockchain ledger comprises:

generating randomly a first key for encryption;

using the first key to encrypt the at least one authentication information for storing in the blockchain ledger.

20 . A blockchain node, comprising a memory, a processor, and a program stored on the memory and operable on the processor; wherein when the program is executed by the processor, the access control method according to claim 17 is implemented.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (23)