《计算机应用》唯一官方网站

• •    下一篇

基于无证书签密的跨链身份认证方案

刘德渊1,张金全2,张鑫3,万武南4,张仕斌5,秦智6   

  1. 1. 成都信息工程大学 网络空间安全学院
    2. 成都信息工程学院(航空港)
    3. 成都信息工程大学网络空间安全学院
    4. 成都信息工程学院 信息安全工程学院,成都 610225
    5. 成都信息工程学院
    6. 成都信息工程大学
  • 收稿日期:2023-12-29 修回日期:2024-02-15 发布日期:2024-03-11 出版日期:2024-03-11
  • 通讯作者: 刘德渊
  • 基金资助:
    国家重点研发计划“网络空间安全治理”重点专项课题;四川省科技计划项目;成都市科技局重点研发支撑计划

Cross-chain identity authentication scheme based on certificate-less signcryption

  • Received:2023-12-29 Revised:2024-02-15 Online:2024-03-11 Published:2024-03-11

摘要: 针对现有区块链跨链身份认证方案存在去中心化程度低、可扩展性较差、资源消耗较大的问题,提出了一种基于无证书签密的跨链身份认证方案(CLSC-CIA)。首先采用无证书签密(CLSC)实现生成各跨链实体密钥、通信加密以及身份认证,其次采用秘密共享实现分布式系统的密钥管理,最后采用去中心化身份实现各实体密钥与跨链身份的关联。在保障身份隐私和安全的前提下,实现不同区块链系统间的跨链交互身份认证。理论分析与实验结果表明,CLSC-CIA无需依赖中心化证书机构和第三方密钥管理机构,保证了去中心化特性;生成的数字身份符合万维网联盟(W3C)标准,保证了可扩展性;在保持去中心化的前提下实现跨链交互身份认证较ECC与AES的组合减少约34%的时间开销、比RSA与AES的组合减少约38%的时间开销。CLSC-CIA在实际应用当中能够有效提高跨链系统的去中心化特性、可扩展性以及交互效率。

关键词: 区块链, 跨链, 身份认证, 无证书签密, 去中心化, 数字身份

Abstract: In response to the issues of low decentralization, poor scalability, and high resource consumption in the current blockchain cross-chain identity authentication mechanisms, a new cross-chain identity authentication scheme based on certificate-less signcryption (CLSC-CIA) was proposed. First, which utilized certificate-less signcryption (CLSC) to generate keys for cross-chain entities, encrypt communication, and perform identity authentication. Second, secret sharing was employed for decentralized key management in the distributed system. Finally, decentralized identities were utilized to establish the association between entity keys and cross-chain identities. By ensuring identity privacy and security, CLSC-CIA achieved cross-chain interactive identity authentication among different blockchain systems. Theoretical analysis and experimental results demonstrate that CLSC-CIA does not rely on centralized certificate authorities or third-party key management organizations, ensuring decentralization. The generated digital identities comply with the World Wide Web Consortium (W3C) standards, ensuring scalability. Furthermore, compared to the combination of ECC (Elliptic Curve Cryptography) and AES (Advanced Encryption Standard), CLSC-CIA achieves approximately a 34% reduction in time overhead. Moreover, compared to the combination of RSA (Rivest-Shamir-Adleman) and AES, it achieves approximately a 38% reduction in time overhead while maintaining decentralization for cross-chain interactive identity authentication. CLSC-CIA effectively enhances the decentralization, scalability, and interaction efficiency of cross-chain systems in practical applications.

Key words: blockchain, cross-chain, identity authentication, certificate-less signcryption, decentralization, digital identity

中图分类号: