基于区块链的生物特征和口令双因子跨域认证与密钥协商方案  

Biometric and Password Two-factor Cross-domain Authentication and Key Agreement Scheme Based on Blockchain

作　　者：李广 范冰冰[1] LI Guang;FAN Bing-Bing(School of Computer Science,South China Normal University,Guangzhou 510631,China)

机构地区：[1]华南师范大学计算机学院,广州510631

出　　处：《计算机系统应用》2022年第3期38-47,共10页Computer Systems & Applications

基　　金：广东省重大科技专项(2016B030305003)。

摘　　要：针对用户跨域访问数据资源的数据共享场景,为了保证用户的身份合法性以及安全通信,提出了一种基于区块链的生物特征和口令双因子跨域认证与密钥协商方案.用户生物特征通过模糊提取技术转换为生物密钥和生物公开信息参与认证,避免生物特征被泄露.包含生物密钥和生物公开信息的用户身份信息存储在区块链账本中,保证身份信息一致以及不被篡改.认证域的认证服务器在跨域认证时无须与用户注册域的认证服务器交互,而是直接通过查询区块链账本获取用户身份信息,完成对跨域访问用户的认证.安全性和性能分析表明,方案所提协议能够以更少的计算开销,提供更强的安全性.In data sharing scenarios where users access data resources across domains,their identity legitimacy and secure communication need to be ensured.To this end,this study proposes a two-factor,i.e.,biometrics and passwords,crossdomain authentication and key agreement scheme based on blockchain.Fuzzy extraction technology is used to extract the key and public information of users’biometrics for authentication participation,avoiding biometric information leakage.The blockchain ledger is used to store users’identity information including biometric keys and biometric public information,ensuring the consistency of users’identity information without any tampering.In cross-domain authentication,the authentication server in the authentication domain does not need to communicate with the authentication server in the user registration domain.Instead,it is completed by directly querying the blockchain ledger to obtain users’identity information.Security and performance analysis show that the proposed scheme can provide stronger security with less computational overhead.

关 键 词：跨域认证 生物认证 区块链 模糊提取 密钥协商 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] TN918.4[自动化与计算机技术—计算机科学与技术]