Abstract

With the rising popularity of the Internet and the development of big data technology, an increasing number of organizations are opting to cooperate across domains to maximize their benefits. Most organizations use public key infrastructure to ensure security in accessing their data and applications. However, with the continuous development of identity-based encryption (IBE) technology, small- and medium-sized enterprises are increasingly using IBE to deploy internal authentication systems. To solve the problems that arise when crossing heterogeneous authentication domains and to guarantee the security of the certification process, we propose using blockchain technology to establish a reliable cross-domain authentication scheme. Using the distributed and tamper-resistant characteristics of the blockchain, we design a cross-domain authentication model based on blockchain to guarantee the security of the heterogeneous authentication process and present a cross-domain authentication protocol based on blockchain. This model does not change the internal trust structure of each authentication domain and is highly scalable. Furthermore, on the premise of ensuring security, the process of verifying the signature of the root certificate in the traditional cross-domain authentication protocol is improved to verify the hash value of the root certificate, thereby improving the authentication efficiency. The developed prototype exhibits generality and simplicity compared to previous methods.

Highlights

  • With the development of Internet technology, organizations or service providers have an increasing amount of applications and information

  • To address the shortcomings of the cooperation model of heterogeneous authentication domains and the existing crossheterogeneous domain authentication schemes, we propose an authentication scheme that is suitable for heterogeneous authentication domains across Public key infrastructure (PKI) and identity-based encryption (IBE) based on blockchain technology

  • The master node assembles the block to the transaction transmitted by the nonvalidating peers (NVPs) broadcast, initiates a proposal, works with other Validating peer (VP) to reach a consensus on the block through a consensus algorithm, and connects the new block to the zone blockchain

Read more

Summary

INTRODUCTION

With the development of Internet technology, organizations or service providers have an increasing amount of applications and information. With the development of identity-based encryption (IBE) technology [4,5], more small- and medium-sized enterprises are using IBE to deploy internal authentication systems This is mainly because the IBE system largely solves the problem of certificate authority (CA) center construction in PKI technology and does not need to manage a large number of certificates, thereby reducing the operating costs. The identifiers of the users serve as their public keys in the decryption process, and the corresponding private key only needs to be obtained once, which can achieve the purpose of offline authentication These organizations based on PKI and IBE systems are usually centralized, and the authentication structures and infrastructures in the PKI and IBE domains differ. (1) Use blockchain to securely and reliably manage trust relationships: We propose a blockchain certificate called BCert for building a cross-domain authentication based on blockchain network.

RELATED WORK
PROBLEM ANALYSIS
DESIGN GOALS
BLOCKCHAIN-RELATED DESIGN
PROTOCOL OF CROSS-DOMAIN AUTHENTICATION
MODEL FEATURES
SIMULATION EXPERIMENT AND RESULTS ANALYSIS
SECURITY ANALYSIS
CONCLUSIONS
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call