基于秘密共享的多因素区块链私钥保护方案  

Multi-factor Blockchain Private Key Protection Scheme Based on Secret Sharing

作　　者：肖健[1,2] 杨敏[1,2] XIAO Jian;YANG Min(Key Laboratory of Aerospace Information Security,Trusted Computing,Ministry of Education,School of Cyber Science,Engineering,Wuhan University,Wuhan 430072,China;School of Cyber Science and Engineering,Wuhan University,Wuhan 430072,China)

机构地区：[1]武汉大学国家网络安全学院空天信息安全与可信计算教育部重点实验室,武汉430072 [2]武汉大学国家网络安全学院,武汉430072

出　　处：《计算机科学》2023年第6期307-312,共6页Computer Science

基　　金：国家自然科学基金(62172308);国家重点研发计划(2021YFB2700200)。

摘　　要：针对区块链缺少恢复机制导致用户私钥一旦丢失就难以找回的问题,提出了一种基于口令、秘密问题和指纹的多因素区块链私钥保护方案。该方案无需用户存储额外信息且可以完全在线上实施,并采用了抗遗忘的因素访问策略。在注册阶段,用户需要提供所有因素信息(包括口令、秘密问题和指纹)以及区块链私钥,并使用秘密共享方案为一组服务器分配秘密份额。在恢复阶段,用户仅需要提供部分因素并向多个服务器发送恢复申请,即可获得其秘密份额的信息并以此重构出区块链私钥。实验结果和启发式安全分析表明,该方案中客户端和服务端的计算开销都在毫秒级,可以抵抗已知攻击且通过支持多因素提供了更好的安全性。Aiming at the problem that the user's private key is difficult to retrieve once lost due to the lack of a recovery mechanism in the blockchain,a multi-factor blockchain private key protection scheme based on passwords,secret questions and fingerprints is proposed.The scheme does not require users to store additional information and can be implemented completely online,and adopts an anti-forgetting factor access strategy.During the registration phase,users need to provide all factor information(including password,secret question and fingerprint)and blockchain private key,and use a secret sharing scheme to assign a secret share to a group of servers.In the recovery phase,users only need to provide some factors and send recovery applications to multiple servers to obtain the information of their secret shares and reconstruct the private key of the blockchain.Experimental results and heuristic security analysis show that the computing cost of both client and server in this scheme is in milliseconds,and it can resist known attacks and provide better security by supporting multiple factors.

关 键 词：多因素区块链私钥保护 秘密共享 口令保护秘密共享 模糊提取 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]