Journal of Computer Applications ›› 2024, Vol. 44 ›› Issue (12): 3731-3740.DOI: 10.11772/j.issn.1001-9081.2023121824

• 2023 CCF China Blockchain Conference (CCF CBCC 2023) • Previous Articles     Next Articles

Cross-chain identity authentication scheme based on certificate-less signcryption

Deyuan LIU1,2,3, Jingquan ZHANG1,2,3(), Xing ZHANG1,2,3, Wunan WAN1,2,3, Shibin ZHANG1,2,3, Zhi QIN1,2,3   

  1. 1.School of Cybersecurity,Chengdu University of Information Technology,Chengdu Sichuan 610225,China
    2.Advanced Cryptography System Security Key Laboratory of Sichuan Province (Chengdu University of Information Technology),Chengdu Sichuan 610225,China
    3.Industrial College of Cyberspace Security,Chengdu University of Information Technology,Chengdu Sichuan 610203,China
  • Received:2023-12-29 Revised:2024-02-15 Accepted:2024-02-26 Online:2024-03-11 Published:2024-12-10
  • Contact: Jingquan ZHANG
  • About author:LIU Deyuan, born in 1997, M. S. candidate. His research interests include blockchain.
    ZHANG Xin, born in 1997, M. S. candidate. His research interests include blockchain.
    WAN Wunnan, born in 1978, Ph. D., associate professor. Her research interests include blockchain, cryptographic algorithm analysis.
    ZHANG Shibin, born in 1971, Ph. D., professor. His research interests include network and information security, blockchain, artificial intelligence security.
    QIN Zhi, born in 1977, M. S., associate professor. His research interests include network and information security, blockchain, internet of things.
  • Supported by:
    National Key Research and Development Program on Cyberspace Security Governance(2022YFB3103103);Key Research and Development Program of Sichuan Province(2022YFS0571);Key Research and Development Program of Chengdu(2023-XT00-00002-GX)

基于无证书签密的跨链身份认证方案

刘德渊1,2,3, 张金全1,2,3(), 张鑫1,2,3, 万武南1,2,3, 张仕斌1,2,3, 秦智1,2,3   

  1. 1.成都信息工程大学 网络空间安全学院,成都 610225
    2.先进密码技术与系统安全四川省重点实验室(成都信息工程大学),成都 610225
    3.成都信息工程大学 网络空间安全产业学院,成都 610203
  • 通讯作者: 张金全
  • 作者简介:刘德渊(1997—),男,四川旺苍人,硕士研究生,CCF会员,主要研究方向:区块链
    张鑫(1997—),男,四川遂宁人,硕士研究生,CCF会员,主要研究方向:区块链
    万武南(1978—),女,江西樟树人,副教授,博士,CCF会员,主要研究方向:区块链、密码算法分析
    张仕斌(1971—),男,重庆人,教授,博士,CCF高级会员,主要研究方向:网络与信息安全、区块链、人工智能安全
    秦智(1977—),男,四川资阳人,副教授,硕士,主要研究方向:网络与信息安全、区块链、物联网。
  • 基金资助:
    国家重点研发计划“网络空间安全治理”重点专项(2022YFB3103103);四川省重点研发计划项目(2022YFS0571);成都市科技局重点研发支撑计划项目(2023?XT00?00002?GX)

Abstract:

In response to the issues of low decentralization, poor scalability, and high resource consumption in the current blockchain cross-chain identity authentication schemes, a Cross-chain Identity Authentication scheme based on Certificate-Less SignCryption (CIA-CLSC) was proposed. Firstly, Certificate-Less SignCryption (CLSC) was utilized to generate keys for cross-chain entities, realize communication encryption, and perform identity authentication. Secondly, secret sharing was employed for key management in the distributed system. Finally, decentralized identities were used to establish the association between entity keys and cross-chain identities. Under the premise of ensuring identity privacy and security, CIA-CLSC achieved cross-chain interactive identity authentication among different blockchain systems. Theoretical analysis and experimental results demonstrate that CIA-CLSC does not rely on centralized certificate authorities or third-party key management organizations, ensuring decentralization; the CIA-CLSC generated digital identities comply with the World Wide Web Consortium (W3C) standards, ensuring scalability. Furthermore, compared to the combination of ECC (Elliptic Curve Cryptography) and AES (Advanced Encryption Standard), CIA-CLSC achieves approximately 34% reduction in time overhead; compared to the combination of RSA (Rivest-Shamir-Adleman algorithm) and AES, CIA-CLSC achieves approximately 38% reduction in time overhead while maintaining decentralization for cross-chain interactive identity authentication. It can be seen that CIA-CLSC can enhance the decentralization, scalability, and interaction efficiency of cross-chain systems in practical applications effectively.

Key words: blockchain, cross-chain, identity authentication, Certificate-Less SignCryption (CLSC), decentralization, digital identity

摘要:

针对现有的区块链跨链身份认证方案存在去中心化程度低、可扩展性较差、资源消耗较大的问题,提出一种基于无证书签密的跨链身份认证方案(CIA-CLSC)。首先,采用无证书签密(CLSC)生成各跨链实体密钥并实现通信加密以及身份认证;其次,采用秘密共享实现分布式系统的密钥管理;最后,采用去中心化身份实现各实体密钥与跨链身份的关联。在保障身份隐私和安全的前提下,CIA-CLSC实现了不同区块链系统间的跨链交互身份认证。理论分析与实验结果表明,CIA-CLSC无需依赖中心化证书机构和第三方密钥管理机构,保证了去中心化特性;CIA-CLSC生成的数字身份符合万维网联盟(W3C)标准,保证了可扩展性;在保持去中心化的前提下实现跨链交互身份认证这一情况下,CIA-CLSC比椭圆曲线密码(ECC)与高级加密标准(AES)的组合减少约34%的时间开销、比RSA与AES的组合减少约38%的时间开销。可见,CIA-CLSC在实际应用中能够有效提高跨链系统的去中心化特性、可扩展性以及交互效率。

关键词: 区块链, 跨链, 身份认证, 无证书签密, 去中心化, 数字身份

CLC Number: