CN115442804B - Authentication method, apparatus, and computer-readable medium - Google Patents

Abstract

The present invention discloses an authentication method, device and computer-readable medium, which belongs to the field of computer technology and solves the potential safety hazard problem of data transmission in a virtual system. The method includes: receiving a data transmission request of a data interface of a second virtual node through a data interface of a first virtual node, and sending an authentication information acquisition request to the data interface of the second virtual node; receiving authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request through the data interface of the first virtual node; sending a first broadcast message to an authentication management system, receiving a second broadcast message sent by an operator node to the authentication management system, obtaining a credit evaluation result for a second terminal from the second broadcast message, and determining a response result to the data transmission request through the first virtual node according to the credit evaluation result. The method can realize identity authentication for file transmission between nodes in a virtual system.

Description

Authentication method, device and computer readable medium

Technical Field

The present invention relates to the field of computer technology, and in particular to an authentication method, device and computer-readable medium.

Background technique

The Metaverse is a virtual world that is linked and created using technological means, mapped and interacted with the real world, and is a digital living space with a new social system.

In the virtual world, if data needs to be transmitted between interacting objects, such as users or nodes, it is necessary to verify the reliability of the other party's identity before accepting the data packets transmitted by the other party to avoid files transmitted by illegal hackers containing viruses, which will bring security risks to the user's terminal.

Summary of the invention

To this end, the present invention provides an authentication method, device and computer-readable medium to solve the potential security problem of data transmission in a virtual system in the related art.

In order to achieve the above object, the first aspect of the present invention provides an authentication method, which is applied to a first terminal in an authentication management system, wherein the first terminal corresponds to a first virtual node in a virtual system; the authentication management system further includes at least one authentication node and a second terminal, wherein the second terminal corresponds to a second virtual node in the virtual system; the method comprises:

In a case where it is determined that a data transmission request from the data interface of the second virtual node is received through the data interface of the first virtual node, sending an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node;

Receiving, through the data interface of the first virtual node, authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request; wherein the authentication information at least includes encrypted information of the real number of the second terminal;

Generate and send a first broadcast message to the authentication management system, where the first broadcast message is used to broadcast the encrypted information of the real number;

In response to receiving a second broadcast message sent by the authentication node to the authentication management system, a credit evaluation result for the second terminal is obtained from the second broadcast message, so as to determine a response result to the data transmission request through the first virtual node according to the credit evaluation result; wherein the credit evaluation result is a result obtained by the authentication node performing number decryption and credit evaluation processing on the encrypted information of the real number.

The type of the authentication node corresponding to the real number of the first terminal is different from the type of the authentication node corresponding to the real number of the second terminal;

The encrypted information of the real number of the second terminal is the encrypted information obtained after the number encryption processing and stored in the second virtual node in advance; wherein the encryption processing includes: using the public key of the authentication node corresponding to the real number of the second terminal, encrypting the real number of the second terminal according to a predetermined encryption algorithm;

The authentication information also includes: an identifier of the operator corresponding to the real number of the second terminal;

The generating and sending the first broadcast message to the authentication management system comprises:

Generate a first broadcast message, where the first broadcast message carries an identifier of the operator corresponding to the real number of the second terminal and encrypted information of the real number of the second terminal;

The first broadcast message is signed using the blockchain private key of the first terminal, and the signed first broadcast message is sent to the authentication management system.

The authentication node is a node belonging to an operator. If the category of the operator to which the authentication node belongs is the same as the category of the operator corresponding to the real number of the second terminal, the number decryption and credit evaluation processing performed by the authentication node on the encrypted information of the real number includes:

In the case where the first broadcast message carries the signature of the first terminal, using the blockchain private key of the first terminal to verify the signature of the first terminal;

If the signature verification of the first terminal succeeds, the public key of the authentication node corresponding to the real number of the second terminal is used to decrypt the real number of the second terminal according to a predetermined encryption algorithm to obtain the decrypted real number of the second terminal;

The decrypted real number of the second terminal is used as the number to be evaluated, and the value of the credit evaluation item of the number to be evaluated is queried in the database belonging to the authentication node. Credit evaluation processing is performed according to the value of the credit evaluation item to obtain a credit evaluation result.

The credit evaluation item includes at least one of the credit rating and online time of the number to be evaluated; and the credit evaluation process includes:

If the credit rating of the number to be evaluated exceeds a preset rating threshold, and/or the online time of the number to be evaluated exceeds a preset online time threshold, the credit of the number to be evaluated is determined to be qualified, and a credit evaluation result including the credit qualification information is generated;

The credit level and the online time are processed according to a preset comprehensive credit scoring model to obtain a comprehensive credit evaluation score. If the comprehensive credit evaluation score exceeds a score threshold, it is determined that the number to be evaluated is credit qualified, and a credit evaluation result including the comprehensive credit evaluation score is generated.

Wherein, after determining the response result to the data transmission request according to the credit evaluation result, the method further includes at least one of the following processes:

Recording first authentication process information in a new block of the authentication management system, so as to record the first authentication process information in the blockchain account book of the first terminal; wherein the first authentication process information involves relevant information of the following process: receiving a data transmission request from a data interface of the first virtual node from a data interface of the second virtual node, to determining, by the first virtual node, a processing process for the data transmission request according to the credit evaluation result;

When the credit evaluation result of the second terminal is that the second terminal is credit qualified, the node identifier of the second virtual node is added to the white list locally stored in the first terminal to update the white list locally stored in the first virtual node.

A second aspect of the present invention provides an authentication method, which is applied to a second terminal in an authentication management system, wherein the second terminal corresponds to a second virtual node in a virtual system; the authentication management system further includes an authentication node and a first terminal, wherein the first terminal corresponds to a first virtual node in the virtual system; the method comprises:

After sending a data transmission request to the data interface of the first virtual node through the data interface of the second virtual node, receiving, through the data interface of the second virtual node, an authentication information acquisition request sent by the data interface of the first virtual node in response to the data transmission request;

Responding to the authentication information acquisition request through the data interface of the second virtual node and returning authentication information to the first virtual node; wherein the authentication information at least includes encrypted information of the real number of the second terminal;

The encryption information of the real number is used to generate a first broadcast message at the first terminal; after the first broadcast message is sent to the authentication management system, the authentication node performs number decryption and credit evaluation processing to obtain a credit evaluation result of the second terminal, so as to determine a response result to the data transmission request according to the credit evaluation result through the first virtual node;

The data transmission result corresponding to the credit evaluation result is received from the data interface of the first virtual node through the data interface of the second virtual node.

The encryption information of the real number is the encryption information obtained after the number is encrypted and stored in the second virtual node in advance; before sending the data transmission request to the data interface of the first virtual node through the data interface of the second virtual node, the method further includes:

At the second virtual node, the real number of the second terminal is encrypted using the public key of the authentication node corresponding to the real number of the second terminal according to a predetermined encryption algorithm to obtain encrypted information of the real number of the second terminal.

After receiving, through the data interface of the second virtual node, a data transmission result corresponding to the credit evaluation result and sent by the data interface of the first virtual node, the method further includes at least one of the following processes:

Recording the second authentication process information in a new block of the authentication management system, so as to record the second authentication process information in the blockchain account book of the second terminal; wherein the second authentication process information involves relevant information of the following process: a process from sending a data transmission request to the data interface of the first virtual node through the data interface of the second virtual node to receiving, through the data interface of the second virtual node, a data transmission result corresponding to the credit evaluation result sent by the data interface of the first virtual node;

When the credit evaluation result of the second terminal is that the credit is qualified, the node identifier of the first virtual node is added to the whitelist list locally stored by the second virtual node through the second virtual node to update the whitelist list locally stored by the second virtual node.

A third aspect of the present invention provides an authentication method, which is applied to an authentication node in an authentication management system, wherein the authentication management system further includes a first terminal and a second terminal, wherein the first terminal corresponds to a first virtual node in a virtual system, and the second terminal corresponds to a second virtual node in the virtual system; the method comprises:

receiving a first broadcast message sent by the first terminal to the authentication management system, and acquiring authentication information broadcast by the first broadcast message; wherein the authentication information is used for the first virtual node to authenticate the identity of the second virtual node, and the authentication information at least includes encrypted information of the real number of the second terminal;

The first broadcast message is a broadcast message generated and sent after the first terminal receives a data transmission request from the data interface of the second virtual node through the data interface of the first virtual node, sends an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node, and receives authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request through the data interface of the first virtual node;

Performing number decryption and credit evaluation processing on the encrypted information of the real number to obtain a credit evaluation result of the second terminal;

Generate and send a second broadcast message to the authentication management system, wherein the second broadcast message carries the credit evaluation result of the second terminal, the encryption information of the real number and the terminal identification of the first terminal, so that the first virtual node determines whether to receive the file transmitted through the second virtual node according to the credit evaluation result.

The step of performing number decryption and credit evaluation processing on the encrypted information of the real number to obtain the credit evaluation result of the second terminal includes:

Decrypting the real number of the second terminal using the private key of the current authentication node according to a predetermined decryption algorithm; if the current authentication node is a node belonging to an operator and the type of the operator to which it belongs is the same as the type of the operator corresponding to the real number of the second terminal, the decryption is successful and the real number of the second terminal is obtained;

A credit evaluation process is performed on the encrypted information of the real number to obtain a credit evaluation result of the second terminal.

The step of performing credit evaluation processing on the encrypted information of the real number to obtain a credit evaluation result of the second terminal includes:

Taking the real number of the second terminal as the number to be evaluated, querying the value of the credit evaluation item of the number to be evaluated in the database belonging to the authentication node;

Performing credit evaluation processing according to the value of the credit evaluation item to obtain a credit evaluation result; wherein the credit evaluation processing includes:

If the credit rating of the number to be evaluated exceeds a preset rating threshold, and/or the online time of the number to be evaluated exceeds a preset online time threshold, the credit of the number to be evaluated is determined to be qualified, and a credit evaluation result including the credit qualification information is generated;

The credit level and the online time are processed according to a preset comprehensive credit scoring model to obtain a comprehensive credit evaluation score. If the comprehensive credit evaluation score exceeds a score threshold, it is determined that the number to be evaluated is credit qualified, and a credit evaluation result including the comprehensive credit evaluation score is generated.

A fourth aspect of the present invention provides an authentication device, which is applied to a first terminal in an authentication management system, wherein the first terminal corresponds to a first virtual node in a virtual system; the authentication management system further includes at least one authentication node and a second terminal, wherein the second terminal corresponds to a second virtual node in the virtual system; the device comprises:

A first sending module, configured to send an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node when it is determined that a data transmission request from the data interface of the second virtual node is received through the data interface of the first virtual node;

A first receiving module, configured to receive, through the data interface of the first virtual node, authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request; wherein the authentication information at least includes encrypted information of the real number of the second terminal;

A generating module, used for generating and sending a first broadcast message to the authentication management system, wherein the first broadcast message is used for broadcasting the encrypted information of the real number;

A determination module is used to obtain a credit evaluation result of the second terminal from the second broadcast message in response to a second broadcast message received and sent by the authentication node to the authentication management system, so as to determine a response result to the data transmission request through the first virtual node according to the credit evaluation result; wherein the credit evaluation result is a result obtained by the authentication node performing number decryption and credit evaluation processing on the encrypted information of the real number.

A fifth aspect of the present invention provides an authentication device, which is applied to a second terminal in an authentication management system, wherein the second terminal corresponds to a second virtual node in a virtual system; the authentication management system further includes an authentication node and a first terminal, wherein the first terminal corresponds to a first virtual node in the virtual system; the device includes:

A second receiving module is used to receive, through the data interface of the second virtual node, an authentication information acquisition request sent by the data interface of the first virtual node in response to the data transmission request after sending the data transmission request to the data interface of the first virtual node through the data interface of the second virtual node;

A first sending module, configured to respond to the authentication information acquisition request through the data interface of the second virtual node and return authentication information to the first virtual node; wherein the authentication information at least includes encrypted information of the real number of the second terminal;

The encryption information of the real number is used to generate a first broadcast message at the first terminal; after the first broadcast message is sent to the authentication management system, the authentication node performs number decryption and credit evaluation processing to obtain a credit evaluation result of the second terminal, so as to determine a response result to the data transmission request according to the credit evaluation result through the first virtual node;

The second receiving module is further configured to receive, through the data interface of the second virtual node, a data transmission result corresponding to the credit evaluation result from the data interface of the first virtual node.

A sixth aspect of the present invention provides an authentication device, which is applied to an authentication node in an authentication management system, wherein the authentication management system further includes a first terminal and a second terminal, wherein the first terminal corresponds to a first virtual node in a virtual system, and the second terminal corresponds to a second virtual node in the virtual system; the device includes:

a third receiving module, configured to receive a first broadcast message sent by the first terminal to the authentication management system, and obtain authentication information of the second virtual node broadcast by the first broadcast message; wherein the authentication information is used by the first virtual node to authenticate the identity of the second virtual node, and the authentication information at least includes encrypted information of the real number of the second terminal;

The first broadcast message is a broadcast message generated and sent after the first terminal receives a data transmission request from the data interface of the second virtual node through the data interface of the first virtual node, sends an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node, and receives authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request through the data interface of the first virtual node;

A decryption and evaluation module, used to perform number decryption and credit evaluation processing on the encrypted information of the real number to obtain a credit evaluation result of the second terminal;

The third sending module is used to generate and send a second broadcast message to the authentication management system, wherein the second broadcast message carries the credit evaluation result of the second terminal, the encryption information of the real number and the terminal identification of the first terminal, so as to determine whether to receive the file transmitted through the second virtual node through the first virtual node according to the credit evaluation result.

The seventh aspect of the present invention provides an electronic device, comprising: one or more processors; a memory on which one or more programs are stored, and when the one or more programs are executed by the one or more processors, the one or more processors implement the authentication method of the present invention; one or more I/O interfaces, connected between the processor and the memory, configured to implement information interaction between the processor and the memory.

An eighth aspect of the present invention provides a computer-readable medium having a computer program stored thereon, which, when executed by a processor, implements the above-mentioned authentication method according to the present invention.

The present invention has the following advantages: the present invention proposes an authentication method for the reliability of the identity of a virtual node in a virtual system. By using this authentication method, the reliability of the identity between virtual nodes in the virtual system can be confirmed and the data of the authentication node in the real world can be combined to solve the potential safety hazard of data transmission in the virtual system; the security identity authentication of the nodes in the virtual system is realized so that the data transmitted by the other party can be received only after the approval is passed. With the further development of the virtual system, the simulation degree of the entire real world is strengthened, and a trustworthy authentication system is formed in the virtual world, which promotes the application and development of virtual technology.

BRIEF DESCRIPTION OF THE DRAWINGS

The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. Together with the following specific embodiments, they are used to explain the present invention, but do not constitute a limitation of the present invention.

FIG1 is a flow chart of an authentication method provided by an embodiment of the present invention;

FIG2 is a flow chart of an authentication method provided by an embodiment of the present invention;

FIG3 is a flow chart of an authentication method provided by an embodiment of the present invention;

FIG4 is a flow chart of an authentication method according to an exemplary embodiment of the present invention;

FIG5 is a structural diagram of an authentication device provided by an embodiment of the present invention;

FIG6 is a structural diagram of an authentication device provided by an embodiment of the present invention;

FIG7 is a structural diagram of an authentication device provided by an embodiment of the present invention;

FIG8 is a structural diagram of an electronic device provided by an embodiment of the present invention.

Detailed ways

The specific implementation of the present invention is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the present invention, and is not used to limit the present invention.

As used herein, the term "and/or" includes any and all combinations of one or more of the associated listed items.

The terms used in the present invention are only used to describe specific embodiments and are not intended to limit the present invention. As used in the present invention, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

When the terms “comprising” and/or “made of…” are used in the present invention, it specifies the existence of the stated features, integers, steps, operations, elements and/or components, but does not exclude the existence or addition of one or more other features, integers, steps, operations, elements, components and/or groups thereof.

The embodiments of the present invention may be described with reference to plan views and/or cross-sectional views by way of ideal schematic views of the present invention. Therefore, the exemplary illustrations may be modified according to manufacturing techniques and/or tolerances.

Unless otherwise defined, all terms (including technical and scientific terms) used in the present invention have the same meaning as those commonly understood by those of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and the present invention, and will not be interpreted as having an idealized or overly formal meaning unless the present invention clearly defines it as such.

In the embodiment of the present invention, the metaverse is essentially a virtualization and digitization process of the real world, which requires a lot of transformation of content production, economic system, user experience and content in the physical world. However, the development of the metaverse is gradual. It is supported by shared infrastructure, standards and protocols, and is finally formed by the continuous integration and evolution of many tools and platforms. It provides an immersive experience based on extended reality technology, generates a mirror image of the real world based on digital twin technology, builds an economic system based on blockchain technology, and closely integrates the virtual world with the real world in the economic system, social system, and identity system, and allows each user to produce content and edit the world. From the perspective of time and space, the metaverse is a digital world that is virtual in the spatial dimension and real in the temporal dimension; from the perspective of authenticity, the metaverse contains both digital replicas of the real world and creations of the virtual world; from the perspective of independence, the metaverse is a parallel space that is closely connected to the external real world and highly independent; from the perspective of connectivity, the metaverse is a sustainable and wide-coverage virtual reality system that includes networks, hardware terminals and users.

According to the research of relevant scholars and records of technical data, the metaverse itself is not a technology, but an idea and concept. It needs to integrate different new technologies, such as the fifth generation mobile communication technology (5G), the sixth generation mobile communication technology (6G), artificial intelligence, big data, etc., emphasizing the integration of virtual and real.

The Metaverse mainly has the following core technologies: First, extended reality technology, including virtual reality (VR) and augmented reality (AR). Extended reality technology can provide an immersive experience and solve problems that mobile phones cannot solve. Second, digital twins can mirror the real world into the virtual world. This also means that in the Metaverse, we can see many of our own virtual avatars. The third is to use blockchain to build an economic system. As the Metaverse develops further and the degree of simulation of the entire real world is strengthened, we can also carry out a series of resource exchange processes in the Metaverse, such as resource acquisition and resource allocation, and for example, economic activities such as expense expenditure, expense income, spending money, making money, etc., thereby forming a resource system and economic system in the virtual world.

Since the specific conception of the Metaverse is still in the conceptual stage, there is a lack of specific technical implementation methods and core architecture. Moreover, in the virtual world of the Metaverse, since the two interacting parties, such as users and users or nodes and nodes, need to transmit data, they need to verify the reliability of the other party's identity before accepting the data packet transmitted by the other party to avoid the files transmitted by illegal hackers containing viruses and posing a security risk to the user's terminal. Based on this, the present invention can provide an authentication method, device and computer-readable medium to solve the problem of how to verify the security and reliability of the identity of nodes in the Metaverse.

The following describes in detail the authentication method, device and computer readable medium of the embodiments of the present invention in conjunction with the accompanying drawings. The following embodiments can be applied to the system architecture of the present embodiment. For the sake of brevity, the following embodiments can be referenced and quoted to each other.

The authentication method of the embodiment of the present invention involves two different systems, and there is a one-to-one correspondence between the nodes of the two systems. For example, the two different systems include an authentication management system and a virtual system; when data is transmitted between nodes in the virtual system, it is necessary to first verify the reliability of the other party's identity and then accept the data packet transmitted by the other party.

The authentication management system and virtual system of the embodiment of the present invention may involve two parallel worlds in time and space. Exemplarily, the authentication management system corresponds to the real world (also called the real scene, the real world, for example, the authentication management system may be a blockchain system), and the virtual system may correspond to the virtual world (for example, the virtual system may be a metaverse system).

For ease of understanding, in the description of the following embodiments, the first terminal in the authentication management system may be referred to as node B, and the second terminal in the authentication management system may be referred to as node A; the first virtual node in the virtual system may be referred to as node D, and the second virtual node may be referred to as node C; wherein node B in the virtual system corresponds to node D in the virtual system, and node A in the authentication management system corresponds to node C in the authentication management system.

In an embodiment of the present invention, when the authentication management system is a blockchain system and the virtual system is a metaverse system (referred to as Metaverse), node A in the blockchain system corresponds to node C in the Metaverse system, and node B in the blockchain system corresponds to node D in the Metaverse system.

In a first aspect, an embodiment of the present invention provides an authentication method; the authentication method can be applied to a first terminal in an authentication management system, and the first terminal corresponds to a first virtual node in a virtual system; the authentication management system also includes at least one authentication node and a second terminal, and the second terminal corresponds to a second virtual node in the virtual system.

Fig. 1 is a flow chart showing an authentication method according to an embodiment of the present invention. As shown in Fig. 1, the authentication method in the embodiment of the present invention includes the following steps.

Step S110: When it is determined that a data transmission request from a data interface of a second virtual node is received through the data interface of the first virtual node, an authentication information acquisition request is sent to the data interface of the second virtual node through the data interface of the first virtual node.

Exemplarily, the first virtual node in the virtual system (for example, node D) receives a data transmission request from the second virtual node (for example, node C), indicating that node C in the virtual system wants to transmit data to node D in the virtual system; without authenticating the identity of node C, if node D directly accepts files transmitted by unfamiliar nodes in the virtual system, there will be a security risk that the files contain viruses; therefore, node D initiates an authentication information acquisition request to node C, and the authentication information acquisition request may include challenge information, through which the challenge information is used to inquire: the identifier of the operator corresponding to the corresponding node in the real world to which node C belongs (for example, node A), and the encrypted file of the mobile phone number of the corresponding node in the real world to which node C belongs.

Step S120: receiving, via the data interface of the first virtual node, authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request; wherein the authentication information at least includes encrypted information of the real number of the second terminal.

Step S130: Generate and send a first broadcast message to the authentication management system, where the first broadcast message is used to broadcast the encrypted information of the real number.

Step S140, in response to the second broadcast message sent by the received authentication node to the authentication management system, obtain the credit evaluation result of the second terminal from the second broadcast message, so as to determine the response result of the data transmission request through the first virtual node according to the credit evaluation result; wherein the credit evaluation result is the result obtained by the authentication node performing number decryption and credit evaluation processing on the encrypted information of the real number.

According to the authentication method of the embodiment of the present invention, an authentication method based on the reliability of the identity of the virtual node in the virtual system is proposed. By using this authentication method, the reliability of the identity between the virtual nodes in the virtual system can be confirmed and the data of the authentication node in the real world can be combined to solve the potential security problems of data transmission in the virtual system; the security identity authentication of the nodes in the virtual system is realized so that the data transmitted by the other party can be received only after approval. With the further development of the virtual system, the simulation degree of the entire real world is strengthened, and a trustworthy authentication system is formed in the virtual world, which promotes the application and development of virtual technology.

In some embodiments, the type of authentication node corresponding to the real number of the first terminal is different from the type of authentication node corresponding to the real number of the second terminal.

As an example, the real number of the first terminal includes the telephone number of the first terminal in the real world; as an example, the operators in the embodiment of the present invention include different categories. Exemplarily, the category of the operator can also be determined by the operator name. For example, different categories of operators can include at least one of the following operators: China Unicom, China Mobile, and China Telecom.

As an example: When a blockchain system in the real world is used as an authentication management system, the middle nodes of the blockchain system include: at least two blockchain nodes, such as node A, node B, etc.; at least one type of operator node, such as operator Unicom node, operator mobile node, operator telecom node, etc., and multiple operator nodes can be used as the founder node of this blockchain together, and the public key and identity of each operator node are written into the genesis block. In the embodiment of the present invention, multiple means at least two.

As an example, node A and node B have their own corresponding identities and identifications in the real-world authentication management system (blockchain system) and the virtual system respectively; and the real-world mobile phone numbers of node A and node B are 186xxxxxxxx and 138xxxxxxxx respectively. The categories of operators of the two mobile phone numbers are different. Node A and node B are nodes whose real-world mobile phone number belongs to China Unicom operator and whose real-world mobile phone number belongs to China Mobile operator.

In the embodiment of the present invention, the operators corresponding to the two nodes (for example, node B and node D) corresponding to the two terminals may be two different operators; it should be understood that when the operators corresponding to the two nodes are the same operator, the authentication method is also used.

In some embodiments, the encryption information of the real number of the second terminal is the encrypted information obtained after the number encryption processing and stored in the second virtual node in advance; wherein, the encryption processing includes: using the public key of the authentication node corresponding to the real number of the second terminal, and encrypting the real number of the second terminal according to a predetermined encryption algorithm.

In some embodiments, a virtual node in a virtual system may store: an encrypted file of the mobile phone number of a real-world terminal corresponding to the node itself, which is encrypted using the public key of the operator node corresponding to the mobile phone number according to a pre-agreed algorithm.

In the embodiment of the present invention, the reason why the virtual nodes in the virtual system use the encrypted file is that the mobile phone number of the corresponding real-world terminal can be kept confidential. There is no need for other virtual nodes in the virtual system and other terminals in the real world to know the plain text of the mobile phone number, thereby improving the security of the verification process.

As an example, node C stores an encrypted file 1 corresponding to node A's mobile phone number 186xxxxxxxx, which is encrypted using the public key of the connected node corresponding to the corresponding real-world node A according to a pre-agreed algorithm; node C uses encrypted file 1 to keep node A's mobile phone number confidential, thereby eliminating the need for node D and node B to know the plaintext of the mobile phone number, thereby improving the security of the verification process.

The step of generating and sending the first broadcast message to the authentication management system in step S130 may specifically include the following steps.

S11, generate a first broadcast message, the first broadcast message carries the identifier of the operator corresponding to the real number of the second terminal, and the encrypted information of the real number of the second terminal; S12, use the blockchain private key of the first terminal to sign the first broadcast message, and send the signed first broadcast message to the authentication management system.

In this embodiment, the first terminal sends a broadcast message to the authentication management system, which carries an encrypted file of the first terminal's real-world telephone number instead of a specific mobile phone number. This allows other nodes to be unaware of the mobile phone number, and only the operator node corresponding to the mobile phone number can decrypt the encrypted file, greatly improving the security of the identity authentication process.

In some embodiments, the authentication node is a node belonging to an operator. If the category of the operator to which the authentication node belongs is the same as the category of the operator corresponding to the real number of the second terminal, the operator node decrypts and evaluates the encrypted information of the telephone number, including the following steps.

S21, when the first broadcast message carries the signature of the first terminal, use the blockchain private key of the first terminal to verify the signature of the first terminal.

S22, if the signature verification of the first terminal is successful, the public key of the authentication node corresponding to the real number of the second terminal is used to decrypt the real number of the second terminal according to a predetermined encryption algorithm to obtain the decrypted real number of the second terminal.

S23, taking the decrypted real number of the second terminal as the number to be evaluated, querying the value of the credit evaluation item of the number to be evaluated in the database belonging to the authentication node, performing credit evaluation processing according to the value of the credit evaluation item, and obtaining a credit evaluation result.

Through the above steps S21-S23, the operator node in the blockchain can perform credit evaluation processing based on the relevant information of the credit evaluation items of the mobile phone number queried in its own database, and generate a credit evaluation result based on the queried information.

In some embodiments, the authentication information also includes an identifier of the operator corresponding to the real number of the second terminal.

In this embodiment, if the authentication information in the above step S120 includes both: the identifier of the operator corresponding to the telephone number of the second terminal in the real world, and the encrypted file of the telephone number of the second terminal in the real world; the current operator node can extract the encrypted file and the operator identifier from the first broadcast message; at this time, if the operator identifier corresponding to the current operator node is different from the extracted operator identifier, the subsequent number decryption and credit assessment operations can be stopped, thereby improving data processing efficiency.

In other embodiments, the authentication information may include encrypted information of the phone number of the second terminal in the real world; at this time, the current operator node may extract the encrypted file from the first broadcast message, decrypt the encrypted file by number, and obtain the phone number of the second terminal in the real world; at this time, if the operator identifier corresponding to the current operator node is different from the operator identifier corresponding to the extracted phone number, the subsequent credit evaluation operation may be stopped. The above process can reduce the amount of information carried in the broadcast message, reduce the amount of data transmission in the network, and improve data transmission efficiency.

In actual application scenarios, the specific content carried in the authentication information carried in the first broadcast message may be determined according to actual needs, and the embodiment of the present invention does not make any specific limitation.

In some embodiments, the credit evaluation item includes at least one of the credit rating and online time of the number to be evaluated; the credit evaluation process in step S23 may include the following steps.

S31, if the grade value of the credit grade of the number to be evaluated exceeds the preset grade threshold, and/or the online time of the number to be evaluated exceeds the preset online time threshold, the credit of the number to be evaluated is determined to be qualified, and a credit evaluation result including credit qualification information is generated; S32, the credit grade and online time are processed according to the preset comprehensive credit scoring model to obtain a comprehensive credit evaluation score. If the comprehensive credit evaluation score exceeds the score threshold, the credit of the number to be evaluated is determined to be qualified, and a credit evaluation result including the comprehensive credit evaluation score is generated.

Through the above steps S31 and S32, the blockchain node can perform credit assessment processing based on at least one of the credit level and online time of the number to be assessed, and obtain an assessment result of whether the number to be assessed is credit qualified or unqualified (corresponding to a qualitative result) and/or obtain a comprehensive credit assessment score of the number to be assessed (corresponding to a quantitative result).

In some embodiments, after step S140, the authentication method also includes at least one of the following processes: S150, recording the first authentication process information in a new block of the authentication management system to record the first authentication process information in the blockchain ledger of the first terminal; wherein the first authentication process information involves relevant information of the following process: receiving a data transmission request from the data interface of the first virtual node from the data interface of the second virtual node, to determining the processing process of the data transmission request through the first virtual node according to the credit evaluation result.

In step S150, the relevant information of the above authentication process is recorded in a new block of the blockchain, and then recorded in the blockchain ledger, which can facilitate subsequent tracing and verification.

S160: When the credit evaluation result of the second terminal is that the credit is qualified, add the node identifier of the second virtual node to the white list stored locally in the first terminal to update the white list stored locally in the first virtual node.

As an example, when the virtual system is a metaverse system, the node identifier of the second virtual node may also be referred to as the node identifier of the second virtual node, which is used to identify the identity information of the second virtual node in the metaverse system.

In step S160, after the identity is confirmed, the first terminal can update its locally saved whitelist and add the identifier of the second virtual node in the virtual system to the list; for example, node B can also update its locally saved whitelist and add the identifier of node C in the virtual system to the list, so that in subsequent file transfers, the authenticated identity of the other node can be directly determined through the whitelist, thereby improving file transfer efficiency.

The authentication method according to the embodiment of the present invention involves a process of mutual identity authentication reliability of two nodes of the communicating parties in a virtual system. The nodes and users in the virtual system can correspond one-to-one with the nodes and users in real life. The authentication method is used to ensure the security of both parties transmitting data to each other.

In the second aspect, an embodiment of the present invention provides an authentication method; the authentication method can be applied to a second terminal in an authentication management system, and the second terminal corresponds to a second virtual node in the virtual system; the authentication management system also includes an authentication node and a first terminal, and the first terminal corresponds to a first virtual node in the virtual system; Figure 2 is a flowchart showing an authentication method according to an embodiment of the present invention.

As shown in FIG. 2 , the authentication method includes the following steps.

S210, after sending a data transmission request to the data interface of the first virtual node through the data interface of the second virtual node, receiving, through the data interface of the second virtual node, an authentication information acquisition request sent by the data interface of the first virtual node in response to the data transmission request.

S220, responding to the authentication information acquisition request through the data interface of the second virtual node and returning authentication information to the first virtual node; wherein the authentication information at least includes encrypted information of the real number of the second terminal.

The encryption information of the real number is used to generate a first broadcast message at the first terminal; after the first broadcast message is sent to the authentication management system, the authentication node performs number decryption and credit evaluation processing, and obtains the credit evaluation result of the second terminal, so as to determine the response result to the data transmission request according to the credit evaluation result through the first virtual node;

S230, receiving, through the data interface of the second virtual node, a data transmission result corresponding to the credit evaluation result from the data interface of the first virtual node.

In the embodiment of the present invention, the reliability of the identity between virtual nodes in the virtual system can be combined with the data of operators in the real world to achieve secure identity authentication of nodes in the virtual system, so that data transmitted by the other party can be received only after approval. As the virtual system strengthens the simulation of the entire real world, a trusted authentication system is formed in the virtual world, which promotes the application and development of virtual system technology.

In some embodiments, the encrypted information of the real number is the encrypted information obtained after the number encryption processing and stored in the second virtual node in advance; before step S210, the authentication method also includes: S41, in the second virtual node, using the public key of the authentication node corresponding to the real number of the second terminal, the real number of the second terminal is encrypting according to a predetermined encryption algorithm to obtain the encrypted information of the real number of the second terminal.

In this embodiment, the virtual nodes in the virtual system use the encrypted file because the mobile phone number of the corresponding real-world terminal can be kept confidential. Other virtual nodes in the virtual system and other terminals in the real world do not need to know the plain text of the mobile phone number, thereby improving the security of the verification process.

In some embodiments, after step S230, the authentication method of the embodiment of the present invention further includes at least one of the following processes.

S240, recording the second authentication process information in a new block of the authentication management system to record the second authentication process information in the blockchain account book of the second terminal; wherein the second authentication process information involves relevant information of the following process: from sending a data transmission request to the data interface of the first virtual node through the data interface of the second virtual node, to receiving the data transmission result corresponding to the credit assessment result sent by the data interface of the first virtual node through the data interface of the second virtual node.

In this step, the terminal can record the relevant information of the authentication process into a new block of the blockchain, and then record it into the blockchain ledger, which can facilitate subsequent tracing and verification.

S250, when the credit evaluation result of the second terminal is credit qualified, add the node identifier of the first virtual node to the white list locally stored in the second virtual node through the second virtual node to update the white list locally stored in the second virtual node.

In this step, after the identity is confirmed, the second terminal can update its locally saved whitelist and add the identifier of the first virtual node in the virtual system to the list; for example, node A can also update its locally saved whitelist and add the identifier of node D in the virtual system to the list, so that in subsequent file transfers, the authenticated identity of the other node can be directly determined through the whitelist, thereby improving file transfer efficiency.

The authentication method according to the embodiment of the present invention involves a process of mutual identity authentication reliability of two nodes of the communicating parties in a virtual system. The nodes and users in the virtual system can correspond one-to-one with the nodes and users in real life. The authentication method is used to ensure the security of both parties transmitting data to each other.

In a third aspect, an embodiment of the present invention provides an authentication method; the authentication method can be applied to an authentication node in an authentication management system, which also includes a first terminal and a second terminal, the first terminal corresponding to a first virtual node in the virtual system, and the second terminal corresponding to a second virtual node in the virtual system.

FIG3 shows a flow chart of an authentication method according to an embodiment of the present invention; as shown in FIG3 , in some embodiments, the authentication method includes the following steps.

S310, receiving a first broadcast message sent by a first terminal to an authentication management system, and obtaining authentication information broadcast by the first broadcast message; wherein the authentication information is used for the first virtual node to authenticate the identity of the second virtual node, and the authentication information includes at least encrypted information of the real number of the second terminal.

Among them, the first broadcast message is a broadcast message generated and sent after the first terminal receives a data transmission request from the data interface of the second virtual node through the data interface of the first virtual node, sends an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node, and receives the authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request through the data interface of the first virtual node.

S320, performing number decryption and credit evaluation processing on the encrypted information of the real number to obtain a credit evaluation result of the second terminal.

S330, generate and send a second broadcast message to the authentication management system, the second broadcast message carries the credit evaluation result of the second terminal, the encryption information of the real number and the terminal identification of the first terminal, so that the first virtual node determines whether to receive the file transmitted through the second virtual node according to the credit evaluation result.

In step S330, the encrypted information of the telephone number is carried in the second broadcast message, so that the first terminal can obtain the credit assessment result as the encrypted file corresponding to the reply result of the first broadcast message, thereby avoiding the situation where the first terminal simultaneously inquires about the encrypted files of two numbers and the first terminal cannot distinguish which number's encrypted file the credit assessment result in the reply result of the operator node is for, thereby facilitating the first terminal to accurately obtain the credit assessment result.

According to the authentication method of an embodiment of the present invention, the operator node can perform a credit assessment on the real number of the second terminal in response to the request of the first terminal, thereby obtaining a credit assessment result of the second terminal; based on the credit assessment result, the first virtual node in the virtual system corresponding to the first terminal can judge the security of the transmission file received from the second virtual node in the virtual system, thereby realizing the security identity authentication of the nodes within the virtual system, so that the data transmitted by the other party can be received only after approval.

In some embodiments, S320 may specifically include: S321, using the current authentication node's own private key to decrypt the real number of the second terminal according to a predetermined decryption algorithm. If the current authentication node is a node belonging to an operator and the category of the operator to which it belongs is the same as the category of the operator corresponding to the real number of the second terminal, the decryption is successful and the real number of the second terminal is obtained; S322, performing credit evaluation processing on the encrypted information of the real number to obtain the credit evaluation result of the second terminal.

In this embodiment, after decrypting the real number of the second terminal, the real number of the second terminal is obtained. If the category of the operator corresponding to the real number is the same as the category of the operator to which the current authentication node belongs, the decryption is determined to be successful, thereby continuing to perform credit evaluation on the real number of the second terminal. The credit evaluation result is used to determine at the first virtual node whether to receive the file transmitted by the second virtual node.

In some embodiments, step S322 may specifically include the following steps.

S51, taking the real number of the second terminal as the number to be evaluated, and querying the value of the credit evaluation item of the number to be evaluated in the database belonging to the authentication node; S52, performing credit evaluation processing according to the value of the credit evaluation item to obtain a credit evaluation result.

Among them, the credit assessment processing includes: S61, if the grade value of the credit grade of the number to be evaluated exceeds the preset grade threshold, and/or the online time of the number to be evaluated exceeds the preset online time threshold, then the credit of the number to be evaluated is determined to be qualified, and a credit assessment result including credit qualification information is generated; S62, the credit grade and online time are processed according to a preset comprehensive credit scoring model to obtain a comprehensive credit assessment score; if the comprehensive credit assessment score exceeds the score threshold, then the credit of the number to be evaluated is determined to be qualified, and a credit assessment result including the comprehensive credit assessment score is generated.

In an embodiment of the present invention, the authentication management system can be a blockchain system, and the virtual system can be a metaverse system; the blockchain node can perform credit evaluation processing based on at least one of the credit rating and online time of the number to be evaluated, and obtain the evaluation result of whether the number to be evaluated is qualified or unqualified and/or obtain the comprehensive credit evaluation score of the number to be evaluated; by evaluating the credit of the phone number of the terminal in the real-world blockchain system corresponding to the virtual node, the secure identity authentication of the virtual node in the metaverse is realized, so that the data transmitted by the other party can be received only after approval. With the further development of the metaverse, the simulation degree of the entire real world is strengthened, and a trustworthy authentication system is formed in the virtual world, which promotes the application and development of metaverse technology.

The step division of the above methods is only for clear description. When implemented, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent; adding insignificant modifications to the algorithm or process or introducing insignificant designs without changing the core design of the algorithm and process are all within the scope of protection of this patent.

The following describes the specific process of the authentication method of the embodiment of the present invention through a specific example. In this embodiment, two worlds parallel in time and space are involved, one is the real world, and the other is the virtual world of the metaverse. Node A and node B have their own corresponding identities and identifiers in the real world and the metaverse respectively, and the mobile phone numbers in the real world are 186xxxxxxxx and 138xxxxxxxx respectively, and these two mobile phone numbers are the user numbers of the first operator (for example, China Unicom operator) and the user numbers of the second operator (for example, China Mobile operator).

In this embodiment, the nodes in the authentication management system include: node A and node B. Specifically, the first terminal in the authentication management system is node B, and the second terminal in the authentication management system is node A; the first virtual node in the virtual system is node D, and the second virtual node in the virtual system is node C; wherein, node B in the authentication management system corresponds to node D in the virtual system, and node A in the authentication management system corresponds to node C in the virtual system.

When the authentication management system is a blockchain system and the virtual system is a metaverse system (metaverse for short), nodes A and B in the blockchain system correspond to nodes C and D in the metaverse system, respectively.

In this embodiment, the blockchain system includes at least one authentication node, which can be a node device belonging to an operator (referred to as an operator node); operator nodes include multiple categories, such as operator Unicom nodes, operator mobile nodes, and operator telecommunications nodes; and operator nodes of different categories can jointly serve as the founder nodes of this blockchain, and the public key and identity of each operator node can be pre-written into the genesis block.

Fig. 4 shows a flow chart of an authentication method according to an exemplary embodiment of the present invention. As shown in Fig. 4, the authentication method includes the following steps.

S401: Send a data transmission request to a data interface of a first virtual node through a second virtual node.

In this step, node C transmits data to node D in the virtual system in the virtual system. The data may be file material, or any information such as a request or a character string. The specific information may be determined according to actual conditions and is not specifically limited in the embodiment of the present invention.

S402: In response to the data transmission request, the data interface of the first virtual node sends an information acquisition request to the data interface of the second virtual node.

For example, since node D does not dare to accept files transmitted by unfamiliar nodes in the virtual system for fear that they may contain viruses, node D sends an identity authentication challenge message to node C through an information acquisition request, in order to inquire about the identifier of the operator corresponding to the corresponding node in the real world to which node C belongs, as well as the encrypted file of node C's mobile phone number.

In this embodiment, each virtual node in the virtual system stores an encrypted file of the mobile phone number of the terminal device corresponding to the real world, which is encrypted using the public key of the operator node corresponding to the mobile phone number according to a pre-agreed algorithm. That is to say, node C stores the encrypted file 1 corresponding to the mobile phone number 186xxxxxxxx of node A, which is encrypted using the public key of the first operator node (for example, China Unicom node) according to a pre-agreed algorithm.

In the embodiment of the present invention, the encrypted file 1 is used because the mobile phone number of node A can be kept confidential, and node D and node B do not need to know the plain text of the mobile phone number. In addition, the encrypted file 1 is subsequently sent in a broadcast message in the blockchain network instead of directly launching a specific mobile phone number. This allows other terminal devices in the blockchain network to not know the mobile phone number, and only the operator node corresponding to the mobile phone number can successfully decrypt the encrypted file, which greatly improves the security of the verification process in this article.

S403, responding to the information acquisition request through the data interface of the second virtual node and replying authentication information to the first virtual node.

As an example, node C receives a query in the virtual system through the IP network, which is sent to node C by node D through an authentication information acquisition request to inquire about the operator to which node C belongs and the encrypted file. Node C replies to node D through the original path, with the operator identifier of the first operator and encrypted file 1 (an encrypted file of node A's mobile phone number encrypted using the public key of the first operator node according to a pre-agreed encryption algorithm).

S404: The first terminal sends a first broadcast message to the blockchain network.

As an example, after node D receives the Unicom ID and encrypted file 1, node B in the real world corresponding to node D sends the encrypted file 1 and the Unicom ID to the blockchain network using a broadcast message signed by its own private key.

S405: The operator node performs number decryption and credit assessment processing to obtain a credit assessment result.

As an example, after receiving the first broadcast message, the Unicom node verifies the private key signature of the first broadcast message. If the verification passes, the encrypted file 1 is extracted, and then the Unicom node uses its own private key to decrypt the encrypted file 1 according to the pre-agreed algorithm to obtain the mobile phone number 186xxxxxxxx.

As an example, the Unicom node queries the credit registration and online time of the mobile phone number in its own database. If it is found that the credit level exceeds the credit level threshold and/or the online time exceeds the online time threshold (the credit level threshold and/or the online time threshold are pre-set credit thresholds), or the credit level and online time are processed according to a preset comprehensive credit scoring model to obtain a comprehensive credit assessment score, the credit assessment result (credit qualification information or comprehensive credit assessment score), encrypted file 1 and the identifier of node B are sent as a broadcast message signed by the Unicom node private key.

In this example, encrypted file 1 is sent to let node B know which encrypted file the credit qualification information or the comprehensive credit assessment score corresponds to, thereby avoiding the situation where node B simultaneously inquires about the encrypted files of two numbers and cannot tell which number's encrypted file the result replied by the operator corresponds to, thereby improving the accuracy of information acquisition and the efficiency of information processing.

S406: The first terminal determines, based on the credit evaluation result, whether to receive the file sent by the data interface of the second virtual node through the data interface of the first virtual node.

As an example, after receiving the broadcast message, node B verifies the private key signature of the broadcast message. If the verification is successful, the encrypted file 1 and the credit qualification information or the comprehensive credit assessment score are extracted. Node D can decide whether to accept the file sent by node C based on the credit assessment result sent by the operator node corresponding to the encrypted file given to it by node B. If the credit assessment result is that the credit is qualified, node D agrees to accept the file sent by node C; otherwise, node D refuses to accept the file sent by node C.

In an embodiment of the present invention, the above authentication process can be recorded in a new block of the blockchain through a first terminal such as node B, a second terminal such as node A and an operator node participating in the authentication process, and then recorded in a blockchain ledger to facilitate subsequent tracing and verification.

The authentication method of the embodiment of the present invention can use the credit rating of the mobile phone number in the real world to confirm whether two unknown nodes in the virtual system can accept the data transmitted by each other, so as to ensure the authenticity and reliability of the node identity. After this identity confirmation, node A can update its locally saved white list, thereby adding the identifier of node D in the virtual system to the list; correspondingly, node B can also update its locally saved white list, and can add the identifier of node C in the virtual system to the list.

According to the authentication method of the embodiment of the present invention, the confirmation of the reliability of the identities between virtual nodes in the virtual system can be combined with the data of operators in the real world to realize the secure identity authentication of the nodes in the virtual system, so that the data transmitted by the other party can be received only after approval, thereby forming a trusted authentication system in the virtual world and promoting the application and development of virtual system technology.

In a fourth aspect, an embodiment of the present invention provides an authentication device.

Fig. 5 shows a schematic diagram of the structure of an authentication device provided according to an embodiment of the present invention. In some embodiments, the device is applied to a first terminal in an authentication management system, and the first terminal corresponds to a first virtual node in a virtual system; the authentication management system also includes at least one authentication node and a second terminal, and the second terminal corresponds to a second virtual node in the virtual system; as shown in Fig. 5, the authentication device 500 includes the following modules.

A first sending module 510 is used to send an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node when it is determined that a data transmission request from the data interface of the second virtual node is received through the data interface of the first virtual node;

The first receiving module 520 is used to receive, through the data interface of the first virtual node, the authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request; wherein the authentication information at least includes the encrypted information of the real number of the second terminal;

A generating module 530, configured to generate and send a first broadcast message to the authentication management system, wherein the first broadcast message is used to broadcast encrypted information of a real number;

The determination module 540 is used to obtain a credit evaluation result of the second terminal from the second broadcast message in response to the second broadcast message sent by the authentication node to the authentication management system, so as to determine a response result to the data transmission request through the first virtual node according to the credit evaluation result; wherein the credit evaluation result is a result obtained by the authentication node performing number decryption and credit evaluation processing on the encrypted information of the real number.

In some embodiments, the type of authentication node corresponding to the real number of the first terminal is different from the type of authentication node corresponding to the real number of the second terminal; the encryption information of the real number of the second terminal is the encrypted information obtained after the number encryption processing and stored in the second virtual node in advance.

The encryption process includes: using the public key of the authentication node corresponding to the real number of the second terminal to encrypt the real number of the second terminal according to a predetermined encryption algorithm.

In some embodiments, the authentication information also includes: an identifier of an operator corresponding to the real number of the second terminal.

In some embodiments, the generation module 530, when used to generate and send a first broadcast message to an authentication management system, is specifically used to: generate a first broadcast message, the first broadcast message carrying an identifier of the operator corresponding to the real number of the second terminal, and encryption information of the real number of the second terminal; sign the first broadcast message using the blockchain private key of the first terminal, and send the signed first broadcast message to the authentication management system.

In some embodiments, the authentication node is a node belonging to an operator. If the category of the operator to which the authentication node belongs is the same as the category of the operator corresponding to the real number of the second terminal, the authentication node, when used for number decryption and credit evaluation processing of encrypted information of the real number, is specifically used to:

In the case where the first broadcast message carries the signature of the first terminal, the blockchain private key of the first terminal is used to verify the signature of the first terminal;

If the signature verification of the first terminal is successful, the public key of the authentication node corresponding to the real number of the second terminal is used to decrypt the real number of the second terminal according to a predetermined encryption algorithm to obtain the decrypted real number of the second terminal;

The decrypted real number of the second terminal is used as the number to be evaluated, and the value of the credit evaluation item of the number to be evaluated is queried in the database belonging to the authentication node. Credit evaluation processing is performed according to the value of the credit evaluation item to obtain a credit evaluation result.

In some embodiments, the credit evaluation item includes at least one of the credit rating and the network time of the number to be evaluated; the operator node, when used for credit evaluation processing, is specifically used to:

If the credit rating of the number to be evaluated exceeds the preset rating threshold, and/or the online time of the number to be evaluated exceeds the preset online time threshold, the number to be evaluated is determined to be credit qualified, and a credit evaluation result including credit qualified information is generated;

The credit rating and online time are processed according to the preset comprehensive credit scoring model to obtain a comprehensive credit assessment score. If the comprehensive credit assessment score exceeds the score threshold, the credit of the number to be assessed is determined to be qualified, and a credit assessment result including the comprehensive credit assessment score is generated.

In some embodiments, the authentication device 500 may further include the following modules.

A first recording module is used to record first authentication process information in a new block of the authentication management system after determining a response result to the data transmission request according to the credit evaluation result, so as to record the first authentication process information in the blockchain account book of the first terminal; wherein the first authentication process information involves relevant information of the following process: from the data interface of the first virtual node receiving a data transmission request from the data interface of the second virtual node to the first virtual node determining, according to the credit evaluation result, a processing process of the data transmission request;

The update module is used to add the node identifier of the second virtual node to the white list locally saved by the first terminal after determining the response result to the data transmission request according to the credit evaluation result, if the credit evaluation result of the second terminal is credit qualified, so as to update the white list locally saved by the first virtual node.

According to the authentication device of the embodiment of the present invention, the reliability of the identity confirmation between virtual nodes in the virtual system can be combined with the data of operators in the real world to realize the secure identity authentication of nodes in the virtual system, so that data transmitted by the other party can be received only after approval. With the further development of virtual systems, the simulation degree of the entire real world is strengthened, and a trustworthy authentication system is formed in the virtual world, which promotes the application and development of virtual system technology.

In a fifth aspect, an embodiment of the present invention provides an authentication device.

FIG6 shows a schematic diagram of the structure of an authentication device provided according to an embodiment of the present invention. In an embodiment of the present invention, the authentication device can be applied to a second terminal in an authentication management system, and the second terminal corresponds to a second virtual node in a virtual system; the authentication management system also includes an authentication node and a first terminal, and the first terminal corresponds to a first virtual node in the virtual system. As shown in FIG6, the authentication device 600 includes the following modules.

The second receiving module 610 is used to receive, through the data interface of the second virtual node, an authentication information acquisition request sent by the data interface of the first virtual node in response to the data transmission request after sending the data transmission request to the data interface of the first virtual node through the data interface of the second virtual node;

The first sending module 620 is used to respond to the authentication information acquisition request through the data interface of the second virtual node and return the authentication information to the first virtual node; wherein the authentication information at least includes the encrypted information of the real number of the second terminal;

The encrypted information of the real number is used to generate a first broadcast message at the first terminal; after the first broadcast message is sent to the authentication management system, the authentication node performs number decryption and credit evaluation processing, and obtains the credit evaluation result of the second terminal, so as to determine the response result of the data transmission request according to the credit evaluation result through the first virtual node;

The second receiving module 610 is further configured to receive, through the data interface of the second virtual node, a data transmission result corresponding to the credit evaluation result from the data interface of the first virtual node.

In some embodiments, the encryption information of the real number is the encrypted information obtained after the number encryption processing and stored in advance in the second virtual node; the authentication device 600 also includes: an encryption module, which is used to encrypt the real number of the second terminal in the second virtual node using the public key of the authentication node corresponding to the real number of the second terminal according to a predetermined encryption algorithm before sending a data transmission request to the data interface of the first virtual node through the data interface of the second virtual node, so as to obtain the encryption information of the real number of the second terminal.

In some embodiments, the authentication device 600 further includes: a second recording module, which is used, after receiving the data transmission result corresponding to the credit evaluation result sent by the data interface of the first virtual node through the data interface of the second virtual node, to:

Recording the second authentication process information in a new block of the authentication management system, so as to record the second authentication process information in the blockchain account book of the second terminal; wherein the second authentication process information involves relevant information of the following process: a process from sending a data transmission request to the data interface of the first virtual node through the data interface of the second virtual node to receiving, through the data interface of the second virtual node, a data transmission result corresponding to the credit assessment result sent by the data interface of the first virtual node;

When the credit evaluation result of the second terminal is that the credit is qualified, the node identifier of the first virtual node is added to the white list locally stored in the second virtual node through the second virtual node to update the white list locally stored in the second virtual node.

According to the authentication device of the embodiment of the present invention, the reliability of the identity confirmation between virtual nodes in the virtual system can be combined with the data of operators in the real world to realize the secure identity authentication of nodes in the virtual system, so that data transmitted by the other party can be received only after approval. As the virtual system strengthens the simulation of the entire real world, a trusted authentication system is formed in the virtual world, which promotes the application and development of virtual system technology.

In a sixth aspect, an embodiment of the present invention provides an authentication device. In some embodiments, the device can be applied to an authentication node in an authentication management system, wherein the authentication management system further includes a first terminal and a second terminal, wherein the first terminal corresponds to a first virtual node in a virtual system, and the second terminal corresponds to a second virtual node in the virtual system.

Fig. 7 shows a schematic diagram of the structure of an authentication device provided according to an embodiment of the present invention. As shown in Fig. 7, the authentication device 700 includes the following modules.

The third receiving module 710 is used to receive the first broadcast message sent by the first terminal to the authentication management system, and obtain the authentication information broadcast by the first broadcast message; wherein the authentication information is used for the first virtual node to authenticate the identity of the second virtual node, and the authentication information includes at least the encrypted information of the real number of the second terminal.

Among them, the first broadcast message is a broadcast message generated and sent after the first terminal receives a data transmission request from the data interface of the second virtual node through the data interface of the first virtual node, sends an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node, and receives the authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request through the data interface of the first virtual node.

The decryption and evaluation module 720 is used to perform number decryption and credit evaluation processing on the encrypted information of the real number to obtain the credit evaluation result of the second terminal.

The third sending module 730 is used to generate and send a second broadcast message to the authentication management system. The second broadcast message carries the credit evaluation result of the second terminal, the encryption information of the real number and the terminal identification of the first terminal, so as to determine whether to receive the file transmitted through the second virtual node through the first virtual node according to the credit evaluation result.

In some embodiments, the decryption and evaluation module 720 includes a decryption module and an evaluation module; the decryption module is used to use the current authentication node's own private key to decrypt the real number of the second terminal according to a predetermined decryption algorithm. If the current authentication node is a node belonging to an operator and the category of the operator to which it belongs is the same as the category of the operator corresponding to the real number of the second terminal, the decryption is successful and the real number of the second terminal is obtained; the evaluation module is used to perform credit evaluation processing on the encrypted information of the real number to obtain the credit evaluation result of the second terminal.

In some embodiments, the evaluation module may include the following units.

The value acquisition unit is used to use the real number of the second terminal as the number to be evaluated, and query the value of the credit evaluation item of the number to be evaluated in the database belonging to the authentication node.

The value processing unit is used to perform credit evaluation processing according to the value of the credit evaluation item to obtain a credit evaluation result; wherein the value processing unit, when used for credit evaluation processing, is specifically used to:

If the credit rating of the number to be evaluated exceeds the preset rating threshold, and/or the online time of the number to be evaluated exceeds the preset online time threshold, the number to be evaluated is determined to be credit qualified, and a credit evaluation result including credit qualified information is generated;

The credit rating and online time are processed according to the preset comprehensive credit scoring model to obtain a comprehensive credit assessment score. If the comprehensive credit assessment score exceeds the score threshold, the credit of the number to be assessed is determined to be qualified, and a credit assessment result including the comprehensive credit assessment score is generated.

According to the authentication device of the embodiment of the present invention, the operator node can respond to the request of the first terminal to perform a credit assessment on the telephone number of the second terminal in the real world, thereby obtaining a credit assessment result of the second terminal; based on the credit assessment result, the first virtual node in the virtual system corresponding to the first terminal can judge the security of the transmission file received from the second virtual node in the virtual system, thereby realizing the security identity authentication of the node within the virtual system, so that the data transmitted by the other party can be received only after approval.

It should be clear that the present invention is not limited to the specific configurations and processes described in the above embodiments and shown in the figures. For the convenience and brevity of description, a detailed description of the known methods is omitted here, and the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, which will not be repeated here.

8, an embodiment of the present invention provides an electronic device, comprising:

One or more processors 801;

A memory 802 having one or more programs stored thereon, which, when executed by one or more processors, enables the one or more processors to implement any one of the above authentication methods;

One or more I/O interfaces 803 are connected between the processor 801 and the memory 802 and are configured to implement information exchange between the processor 801 and the memory 802 .

Among them, the processor 801 is a device with data processing capabilities, including but not limited to a central processing unit (CPU), etc.; the memory 802 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory (FLASH); the I/O interface (read-write interface) 803 is connected between the processor 801 and the memory 802, and can realize information interaction between the processor 801 and the memory 802, including but not limited to a data bus (Bus), etc.

In some embodiments, the processor 801 , the memory 802 , and the I/O interface 803 are connected to each other through a bus, and further connected to other components of the computing device.

This embodiment further provides a computer-readable medium on which a computer program is stored. When the program is executed by a processor, the authentication method provided by this embodiment is implemented. To avoid repeated description, the specific steps of the authentication method of this embodiment are not repeated here.

It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules/units in the invented method described above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

Those skilled in the art will appreciate that although some embodiments described herein include certain features included in other embodiments but not other features, the combination of features from different embodiments is meant to be within the scope of the present embodiment and to form different embodiments.

It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present invention, but the present invention is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also considered to be within the scope of protection of the present invention.

Claims (16)

1. An authentication method, characterized in that it is applied to a first terminal in an authentication management system, the first terminal corresponds to a first virtual node in a virtual system; the authentication management system also includes at least one authentication node and a second terminal, the second terminal corresponds to a second virtual node in the virtual system; the method comprises: In a case where it is determined that a data transmission request from the data interface of the second virtual node is received through the data interface of the first virtual node, sending an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node; Receiving, through the data interface of the first virtual node, authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request; wherein the authentication information at least includes encrypted information of the real number of the second terminal; Generate and send a first broadcast message to the authentication management system, where the first broadcast message is used to broadcast the encrypted information of the real number; In response to receiving a second broadcast message sent by the authentication node to the authentication management system, a credit evaluation result for the second terminal is obtained from the second broadcast message, so as to determine a response result to the data transmission request through the first virtual node according to the credit evaluation result; wherein the credit evaluation result is a result obtained by the authentication node performing number decryption and credit evaluation processing on the encrypted information of the real number. 2. The method according to claim 1, characterized in that The type of the authentication node corresponding to the real number of the first terminal is different from the type of the authentication node corresponding to the real number of the second terminal; The encrypted information of the real number of the second terminal is the encrypted information obtained after the number encryption processing and stored in the second virtual node in advance; wherein the encryption processing includes: using the public key of the authentication node corresponding to the real number of the second terminal, encrypting the real number of the second terminal according to a predetermined encryption algorithm; The authentication information also includes: an identifier of the operator corresponding to the real number of the second terminal; The generating and sending the first broadcast message to the authentication management system comprises: Generate a first broadcast message, where the first broadcast message carries an identifier of the operator corresponding to the real number of the second terminal and encrypted information of the real number of the second terminal; The first broadcast message is signed using the blockchain private key of the first terminal, and the signed first broadcast message is sent to the authentication management system. 3. The method according to claim 1, characterized in that the authentication node is a node belonging to an operator, and if the category of the operator to which the authentication node belongs is the same as the category of the operator corresponding to the real number of the second terminal, then the number decryption and credit evaluation processing performed by the authentication node on the encrypted information of the real number includes: In a case where the first broadcast message carries the signature of the first terminal, using the blockchain private key of the first terminal to verify the signature of the first terminal; If the signature verification of the first terminal is successful, the public key of the authentication node corresponding to the real number of the second terminal is used to decrypt the real number of the second terminal according to a predetermined encryption algorithm to obtain the decrypted real number of the second terminal; The decrypted real number of the second terminal is used as the number to be evaluated, and the value of the credit evaluation item of the number to be evaluated is queried in the database belonging to the authentication node. Credit evaluation processing is performed according to the value of the credit evaluation item to obtain a credit evaluation result. 4. The method according to claim 3, characterized in that The credit evaluation item includes at least one of the credit rating and online time of the number to be evaluated; the credit evaluation process includes: If the credit rating of the number to be evaluated exceeds a preset rating threshold, and/or the online time of the number to be evaluated exceeds a preset online time threshold, the credit of the number to be evaluated is determined to be qualified, and a credit evaluation result including the credit qualification information is generated; The credit level and the online time are processed according to a preset comprehensive credit scoring model to obtain a comprehensive credit evaluation score. If the comprehensive credit evaluation score exceeds a score threshold, it is determined that the number to be evaluated is credit qualified, and a credit evaluation result including the comprehensive credit evaluation score is generated. 5. The method according to claim 1, characterized in that after determining the response result to the data transmission request according to the credit evaluation result, the method further comprises at least one of the following processes: Recording first authentication process information in a new block of the authentication management system, so as to record the first authentication process information in the blockchain account book of the first terminal; wherein the first authentication process information involves relevant information of the following process: receiving a data transmission request from a data interface of the first virtual node from a data interface of the second virtual node, to determining, by the first virtual node, a processing process for the data transmission request according to the credit evaluation result; When the credit evaluation result of the second terminal is that the second terminal is credit qualified, the node identifier of the second virtual node is added to the white list locally stored in the first terminal to update the white list locally stored in the first virtual node. 6. An authentication method, characterized in that it is applied to a second terminal in an authentication management system, the second terminal corresponds to a second virtual node in a virtual system; the authentication management system also includes an authentication node and a first terminal, the first terminal corresponds to a first virtual node in the virtual system; the method comprises: After sending a data transmission request to the data interface of the first virtual node through the data interface of the second virtual node, receiving, through the data interface of the second virtual node, an authentication information acquisition request sent by the data interface of the first virtual node in response to the data transmission request; Responding to the authentication information acquisition request through the data interface of the second virtual node and returning authentication information to the first virtual node; wherein the authentication information at least includes encrypted information of the real number of the second terminal; The encryption information of the real number is used to generate a first broadcast message at the first terminal; after the first broadcast message is sent to the authentication management system, the authentication node performs number decryption and credit evaluation processing to obtain a credit evaluation result of the second terminal, so as to determine a response result to the data transmission request according to the credit evaluation result through the first virtual node; The data transmission result corresponding to the credit evaluation result is received from the data interface of the first virtual node through the data interface of the second virtual node. 7. The method according to claim 6, characterized in that the encryption information of the real number is the encryption information obtained after the number is encrypted and stored in the second virtual node in advance; before sending the data transmission request to the data interface of the first virtual node through the data interface of the second virtual node, the method further comprises: At the second virtual node, the public key of the authentication node corresponding to the real number of the second terminal is used to encrypt the real number of the second terminal according to a predetermined encryption algorithm to obtain encrypted information of the real number of the second terminal. 8. The method according to claim 6, characterized in that after receiving the data transmission result corresponding to the credit evaluation result sent by the data interface of the first virtual node through the data interface of the second virtual node, the method further comprises at least one of the following processes: Recording the second authentication process information in a new block of the authentication management system, so as to record the second authentication process information in the blockchain account book of the second terminal; wherein the second authentication process information involves relevant information of the following process: a process from sending a data transmission request to the data interface of the first virtual node through the data interface of the second virtual node to receiving, through the data interface of the second virtual node, a data transmission result corresponding to the credit evaluation result sent by the data interface of the first virtual node; When the credit evaluation result of the second terminal is that the credit is qualified, the node identifier of the first virtual node is added to the whitelist list locally stored by the second virtual node through the second virtual node to update the whitelist list locally stored by the second virtual node. 9. An authentication method, characterized in that it is applied to an authentication node in an authentication management system, wherein the authentication management system further includes a first terminal and a second terminal, the first terminal corresponds to a first virtual node in a virtual system, and the second terminal corresponds to a second virtual node in the virtual system; the method comprises: receiving a first broadcast message sent by the first terminal to the authentication management system, and acquiring authentication information broadcast by the first broadcast message; wherein the authentication information is used for the first virtual node to authenticate the identity of the second virtual node, and the authentication information at least includes encrypted information of the real number of the second terminal; The first broadcast message is a broadcast message generated and sent after the first terminal receives a data transmission request from the data interface of the second virtual node through the data interface of the first virtual node, sends an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node, and receives authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request through the data interface of the first virtual node; Performing number decryption and credit evaluation processing on the encrypted information of the real number to obtain a credit evaluation result of the second terminal; Generate and send a second broadcast message to the authentication management system, wherein the second broadcast message carries the credit evaluation result of the second terminal, the encryption information of the real number and the terminal identification of the first terminal, so that the first virtual node determines whether to receive the file transmitted through the second virtual node according to the credit evaluation result. 10. The method according to claim 9, wherein the step of performing number decryption and credit evaluation processing on the encrypted information of the real number to obtain the credit evaluation result of the second terminal comprises: Decrypting the real number of the second terminal using the private key of the current authentication node according to a predetermined decryption algorithm; if the current authentication node is a node belonging to an operator and the type of the operator to which it belongs is the same as the type of the operator corresponding to the real number of the second terminal, the decryption is successful and the real number of the second terminal is obtained; A credit evaluation process is performed on the encrypted information of the real number to obtain a credit evaluation result of the second terminal. 11. The method according to claim 10, characterized in that the step of performing credit evaluation processing on the encrypted information of the real number to obtain the credit evaluation result of the second terminal comprises: Taking the real number of the second terminal as the number to be evaluated, querying the value of the credit evaluation item of the number to be evaluated in the database belonging to the authentication node; Performing credit evaluation processing according to the value of the credit evaluation item to obtain a credit evaluation result; wherein the credit evaluation processing includes: If the credit rating of the number to be evaluated exceeds a preset rating threshold, and/or the online time of the number to be evaluated exceeds a preset online time threshold, the credit of the number to be evaluated is determined to be qualified, and a credit evaluation result including the credit qualification information is generated; The credit level and the online time are processed according to a preset comprehensive credit scoring model to obtain a comprehensive credit evaluation score. If the comprehensive credit evaluation score exceeds a score threshold, it is determined that the number to be evaluated is credit qualified, and a credit evaluation result including the comprehensive credit evaluation score is generated. 12. An authentication device, characterized in that it is applied to a first terminal in an authentication management system, the first terminal corresponds to a first virtual node in a virtual system; the authentication management system also includes at least one authentication node and a second terminal, the second terminal corresponds to a second virtual node in the virtual system; the device comprises: A first sending module, configured to send an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node when it is determined that a data transmission request from the data interface of the second virtual node is received through the data interface of the first virtual node; A first receiving module, configured to receive, through the data interface of the first virtual node, authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request; wherein the authentication information at least includes encrypted information of the real number of the second terminal; A generating module, used for generating and sending a first broadcast message to the authentication management system, wherein the first broadcast message is used for broadcasting the encrypted information of the real number; A determination module is used to obtain a credit evaluation result of the second terminal from the second broadcast message in response to a second broadcast message received and sent by the authentication node to the authentication management system, so as to determine a response result to the data transmission request through the first virtual node according to the credit evaluation result; wherein the credit evaluation result is a result obtained by the authentication node performing number decryption and credit evaluation processing on the encrypted information of the real number. 13. An authentication device, characterized in that it is applied to a second terminal in an authentication management system, the second terminal corresponds to a second virtual node in a virtual system; the authentication management system also includes an authentication node and a first terminal, the first terminal corresponds to a first virtual node in the virtual system; the device comprises: A second receiving module is used to receive, through the data interface of the second virtual node, an authentication information acquisition request sent by the data interface of the first virtual node in response to the data transmission request after sending the data transmission request to the data interface of the first virtual node through the data interface of the second virtual node; A first sending module, configured to respond to the authentication information acquisition request through the data interface of the second virtual node and return authentication information to the first virtual node; wherein the authentication information at least includes encrypted information of the real number of the second terminal; The encryption information of the real number is used to generate a first broadcast message at the first terminal; after the first broadcast message is sent to the authentication management system, the authentication node performs number decryption and credit evaluation processing to obtain a credit evaluation result of the second terminal, so as to determine a response result to the data transmission request according to the credit evaluation result through the first virtual node; The second receiving module is further configured to receive, through the data interface of the second virtual node, a data transmission result corresponding to the credit evaluation result from the data interface of the first virtual node. 14. An authentication device, characterized in that it is applied to an authentication node in an authentication management system, the authentication management system further comprising a first terminal and a second terminal, the first terminal corresponding to a first virtual node in a virtual system, and the second terminal corresponding to a second virtual node in the virtual system; the device comprising: a third receiving module, configured to receive a first broadcast message sent by the first terminal to the authentication management system, and obtain authentication information of the second virtual node broadcast by the first broadcast message; wherein the authentication information is used by the first virtual node to authenticate the identity of the second virtual node, and the authentication information at least includes encrypted information of the real number of the second terminal; The first broadcast message is a broadcast message generated and sent after the first terminal receives a data transmission request from the data interface of the second virtual node through the data interface of the first virtual node, sends an authentication information acquisition request to the data interface of the second virtual node through the data interface of the first virtual node, and receives authentication information returned by the data interface of the second virtual node in response to the authentication information acquisition request through the data interface of the first virtual node; A decryption and evaluation module, used to perform number decryption and credit evaluation processing on the encrypted information of the real number to obtain a credit evaluation result of the second terminal; The third sending module is used to generate and send a second broadcast message to the authentication management system, wherein the second broadcast message carries the credit evaluation result of the second terminal, the encryption information of the real number and the terminal identification of the first terminal, so as to determine whether to receive the file transmitted through the second virtual node through the first virtual node according to the credit evaluation result. 15. An electronic device, comprising: one or more processors; A memory having one or more programs stored thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 5, any one of claims 6 to 8, or any one of claims 9 to 11; One or more I/O interfaces are connected between the processor and the memory and are configured to implement information interaction between the processor and the memory. 16. A computer readable medium having a computer program stored thereon, wherein when the program is executed by a processor, the method according to any one of claims 1 to 5, any one of claims 6 to 8, or any one of claims 9 to 11 is implemented.