关键词: 跨域认证, 区块链, 公钥基础设施, 数字证书, 数字签名

Abstract: To solve the efficiency problem of the existing public key infrastructure (PKI) cross-domain authentication scheme, by using of the advantages of Blockchain technology such as distributed multi-center, collective maintenance and the feature of not easy to tamper, the effective cross-domain authentication scheme was proposed, the Blockchain CA trust model and system architecture was designed, the Blockchain certificate format was provided, the user cross-domain authentication protocol was described, and the security and efficiency was analyzed. The results show that in terms of security, the scheme has mutual entity authentication security attributes; in terms of efficiency, compared with the existing cross domain authentication scheme, this scheme takes advantage of the Blockchain mechanism of not easy to tamper, using the hash algorithm to reduce the number of signature and verification by using public key algorithm to verify certificates, which enhance the efficiency of cross domain authentication.

Key words: cross domain authentication, blockchain, Public Key Infrastructure (PKI) , digital certificate, digital signature