基于区块技术的权重标识的跨域认证方案  

A CROSS-DOMAIN AUTHENTICATION SCHEME BASED ON WEIGHT IDENTIFICATION OF BLOCK TECHNOLOGY

作　　者：宋玉龙 马文平[1] 刘小雪 Song Yulong;Ma Wenping;Liu Xiaoxue(State Key Laboratory of Integrated Business Network,Xidian University,Xi an 710071,Shaanxi,China)

机构地区：[1]西安电子科技大学综合业务网国家重点实验室,陕西西安710071

出　　处：《计算机应用与软件》2022年第1期308-312,共5页Computer Applications and Software

基　　金：国家自然科学基金项目(61373171);国家重点研发计划重点专项(2017YFB0802400);西安电子科技大学研究生创新基金支撑项目(5001-20109195456);高等学校创新引智计划项目(B08038)。

摘　　要：在分布式的网络环境中,多个企业机构之间有在某种共识下的共享资源。为预防未经授权的用户访问这些资源,将改进的基于权重的秘密共享签名方案用于联盟链中的共识过程,提出基于区块技术的权重标识的跨域认证模型。模型中不同CA机构作为联盟链中共识机制的验证节点,系统基于验证节点的权重采用改进的秘密共享方案生成拥有不同权重的私钥分配给相应的验证节点。在该方案基础上,共识阶段验证节点结合PBFT机制特点对区块中消息进行签名生成权重标识并发送给用户。分析表明,与目前方案相比,该方案在降低用户终端计算量和通信量的同时有较高的安全性,能够实现域间安全通信,有良好的实用性。In the distributed network environment,there are some shared resources among multiple enterprises.To prevent unauthorized users from accessing these resources,a cross-domain authentication model based on weight identification of block technology is proposed,applying an improved weight-based secret shared signature scheme to the consensus process in the alliance chain.In the model,different CA institutions were used as verification nodes of consensus mechanism in the alliance chain.Based on the weight of verification nodes,the system used an improved secret sharing scheme to generate private keys with different weights and distributed them to the corresponding verification nodes.Based on this scheme,verification nodes combined the characteristics of PBFT mechanism to generate signature weights for messages in blocks and sent them to users between consensus stage.The analysis shows that,compared with the current schemes,this scheme has higher security while reducing the computation and communication of user terminals,and realizes secure inter-domain communication,which has good practicability.

关 键 词：联盟链 秘密共享 权重标识 跨域认证 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]