基于智能合约的身份管理及认证模型  

Identity management and authentication model based on smart contract

作　　者：潘维 黄晓芳[1] PAN Wei;HUANG Xiao-fang(School of Computer Science and Technology,Southwest University of Science and Technology,Mianyang 621010,China)

机构地区：[1]西南科技大学计算机科学与技术学院,四川绵阳621010

出　　处：《计算机工程与设计》2020年第4期915-919,共5页Computer Engineering and Design

基　　金：国家自然科学基金青年基金项目(61702429);四川省组织部基金项目(17sjjg02);四川省教育厅基金项目(17zd1119);四川省军民融合研究院基金项目(18sxb022)。

摘　　要：由于传统公钥基础设施(public key infrastructure,PKI)技术中心化的存储管理方式以及证书颁发、撤销不透明的特点存在着安全性问题,且多个CA机构之间互不可信,实现交叉认证具有一定难度,提出一种基于智能合约的去中心化身份管理及认证模型。通过基于区块链的智能合约实现用户多类型身份数据的发布、认证以及撤销,达到管理用户身份数据及在不同场景中根据不同的认证需求进行身份认证的目的。对模型的安全性进行了分析。The centralized storage management method and non-transparent nature of certificate issuance and revocation in the traditional PKI(public key infrastructure)technology result in security problems and mistrust exists among certificate authorities,hence it is difficult to achieve cross-certification.To resolve these problems,a decentralized identity management and authentication model based on smart contract was proposed.Through the blockchain-based smart contract,the user’s multi-type identity data were distributed,authenticated,and revoked,and the purposes of managing user identity data and identity authentication according to different authentication requirements in different scenarios were achieved.The security of the model was analyzed.

关 键 词：公钥基础设施 身份管理 身份认证 区块链 智能合约 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]