数据与计算发展前沿 ›› 2024, Vol. 6 ›› Issue (5): 13-23.

CSTR: 32002.14.jfdc.CN10-1649/TP.2024.05.002

doi: 10.11871/jfdc.issn.2096-742X.2024.05.002

• • 上一篇    下一篇

一种基于分布式密钥与BLS签名的跨域认证方案

郑起鼎1,2,3(),王贺祥1,2,3,张洪玮1,3,*()   

  1. 1.天津理工大学，计算机科学与工程学院，天津 300384
    2.智能计算机及软件新技术天津市重点实验室，天津 300384
    3.计算机病毒防治技术国家工程实验室，天津 300457
  • 收稿日期:2024-08-07 出版日期:2024-10-20 发布日期:2024-10-21
  • 通讯作者: * 张洪玮（E-mail: harvoe@live.com）
  • 作者简介:郑起鼎，天津理工大学，计算机科学与工程学院，硕士研究生，主要研究方向为区块链、跨域溯源。
    文中负责论文初稿撰写与方案实现开发。
    ZHENG Qiding is a postgraduate student at the School of Computer Science and Engineering, Tianjin University of Technology. His main research interests include blockchain and cross domain traceability.
    In this paper, he is responsible for the paper drafting and developing the scheme.
    E-mail: zqd@stud.tjut.edu.cn|张洪玮，中国计算机学会会员，天津理工大学计算机科学与工程学院，网络空间安全系主任，现任天津理工大学副教授，博士，主要研究领域为区块链、隐私保护和数据安全共享。
    文中负责制方案设计与论证，论文修订校稿。
    ZHANG Hongwei, Ph.D., is a member of the China Computer Federation (CCF) with a membership number of c8243m. He is the director of the Department of Cyberspace Security, School of Computer Science and Engineering, Tianjin University of Technology. He is currently an associate professor at the Tianjin University of Technology. His main research interests include blockchain, privacy protection, and data security sharing.
    In this paper, he is responsible for the design and demonstration of the scheme, and the revision and proofreading of the paper.
    E-mail: harvoe@live.com
  • 基金资助:
    国家重点研发计划“大规模制造产业可信溯源理论与方法研究”(2021YFB3300900)

A Cross Domain Authentication Scheme Based on Distributed Key and BLS Signature

ZHENG Qiding1,2,3(),WANG Hexiang1,2,3,ZHANG Hongwei1,3,*()   

  1. 1. School of Computer Science and Engineering, Tianjin University of technology, Tianjin 300384, China
    2. Tianjin Key Laboratory of Intelligent Computer and Novel Software Technology, Tianjin 300384, China
    3. National Engineering Laboratory of Computer Virus Prevention and Control Technology,Tianjin 300457, China
  • Received:2024-08-07 Online:2024-10-20 Published:2024-10-21

RichHTML

17

PDF

364

摘要：

【目的】为解决工业互联网跨域溯源体系中节点身份认证的问题，本文提出基于分布式密钥的Dion跨域认证方案，该方案旨在克服当前跨域认证方案中存在的证书机构中心化及扩展性不足等问题。【方法】本研究以DID去中心化身份技术为基础，采用分布式密钥生成技术与BLS签名算法构建证书颁发模型，通过合约建立用户身份证书的撤销与更新机制，利用证书实现跨域溯源的身份认证。【结果】在以太坊平台上进行的实验模拟了该方案在跨域溯源认证流程中的应用。结果表明，该方案在满足工业互联网跨域溯源的认证需求前提下，实现了证书颁发机构的去中心化，同时增强了系统对单点故障的抵御能力。【结论】基于DID的身份认证模型在区块技术领域展现出显著的潜力与应用前景，为各节点间的交互提供有效的身份证明。然而，在验证效率以及身份更新与撤销方面还需要进一步研究。

关键词: 区块链, 跨域认证, 分布式密钥, 跨域溯源

Abstract:

[Objective] In order to solve the problem of node identity authentication in the cross domain traceability system of industrial Internet, this paper proposes Dion, a cross domain authentication scheme based on the distributed key, which aims to overcome the centralization and scalability problems of the certificate authority in the current cross domain authentication scheme. [Methods] Based on the DID decentralized identity technology, this study uses the distributed key generation technology and BLS signature algorithm to build a certificate issuance model, establishes the revocation and update mechanism of user identity certificate through the contract, and uses the certificate to realize cross domain traceability identity authentication. [Results] Experiments on the Ethereum platform simulated the application of the scheme in the cross-domain traceability authentication process. The results show that the scheme realizes the decentralization of the certification authority on the premise of meeting the authentication requirements of cross domain traceability of the industrial Internet, and enhances the system's resistance to the single point of failure. [Conclusions] The DID-based authentication model shows significant potential and application prospects in the field of blockchain technology and provides effective authentication for the interaction between nodes. However, further research is needed in the aspects of authentication efficiency, identity update, and revocation.

Key words: blockchain, cross domain authentication, distributed key, cross domain traceability