Device authentication method, service access control method, device, and non-transitory computer-readable recording medium

A device authentication method comprising:

• receiving, by a second device, an authentication request message sent by a first device, the authentication request message including authentication request information and device channel information identifying a first device channel on a distributed ledger;
• reading, by the second device, an authentication request transaction on the first device channel based on the device channel information of the first device channel on the distributed ledger, the authentication request transaction including a public key of the first device and a first hash value of the authentication request information;
• verifying, by the second device, a digital signature of the authentication request message using the public key of the first device;
• performing, by the second device, an authentication test on the first device based on at least the first hash value;
• obtaining an authentication result in response to verification of the digital signature succeeding;
• recording, by the second device, an authentication status of the first device based on the authentication result;
• and
• sending an authentication response message to the first device, the authentication response message indicating whether authentication succeeds.

A first device comprising:

• at least one memory coupled to at least one processor, at least one processor configured to:
• generate authentication request information;
• generate an authentication request transaction;
• send the authentication request transaction to a first device channel, the authentication request transaction including a public key of the first device and a first hash value of the authentication request information, and the first device channel being established on a distributed ledger;
• generate an authentication request message including the authentication request information and device channel information identifying the first device channel on the distributed ledger;
• produce a digital signature of the authentication request message using a private key of the first device;
• send the digital signature to a second device;
• and
• receive an authentication response message returned by the second device, the authentication response message indicating whether authentication of the first device succeeds.