基于区块链和密码累加器的自我主权身份认证方案  

Self-sovereign identity authentication scheme based on blockchain and cryptographic accumulator

作　　者：赵一霈 谭海波[1,2] 张中贤[1] 程昊天 周桐 赵赫[1] 吕波[1] Zhao Yipei;Tan Haibo;Zhang Zhongxian;Cheng Haotian;Zhou Tong;Zhao He;Lyu Bo(Hefei Institutes of Physical Science,Chinese Academy of Sciences,Hefei 230031,China;University of Science&Technology of China,Hefei 230026,China;Institutes of Physical Science&Information Technology,Anhui University,Hefei 230601,China;CAS(Hefei)Institute of Technology Innovation,Hefei 230088,China)

机构地区：[1]中国科学院合肥物质科学研究院,合肥230031 [2]中国科学技术大学,合肥230026 [3]安徽大学物质科学与信息技术研究院,合肥230601 [4]中国科学院合肥技术创新工程院,合肥230088

出　　处：《计算机应用研究》2022年第6期1633-1637,1644,共6页Application Research of Computers

基　　金：国家自然科学基金资助项目(61602435)。

摘　　要：针对现有基于区块链的身份认证方案中存在的认证流程复杂、需要多次区块链操作、链上数据不够精简、身份暴露后无法再次隐藏的问题,提出了一种基于区块链和密码累加器的自我主权认证方案。利用密码累加器成员验证高效性的特点,精简区块链数据存储,降低链上数据交互频率,提高系统性能和可扩展性;同时,提出了一种身份数据二次隐藏的方法,能够再次隐藏已披露的用户数据,进一步提高系统的安全性。经与现有身份认证方案进行对比分析和实验验证,表明该方案具有较低的存储、通信与计算成本和较高的可扩展性和安全性。This paper proposed a self-sovereign identity authentication scheme based on blockchain and cryptographic accumulator to solve the problems of complex authentication process,multiple blockchain operations,diffuse data on the chain,and the inability to hide the identity again after exposure,which were common in the current authentication schemes.By taking advantage of the outstanding performance of a cryptographic accumulator in set-membership tests,the scheme could compact the blockchain storage,reduce the frequency of on-chain data interaction and improve system performance and scalability.In addition,this paper designed a method to hide identity data,thus hiding the disclosed user data again and further improving the security of the system.The results of experimental verification and comparison between the proposed scheme and current scheme show that the proposed scheme not only has lower storage and communication and calculation cost,but also has higher scalability and security.

关 键 词：区块链 密码累加器 去中心化 我主权身份 身份认证 身份隐藏 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]