基于区块链和PKI的身份认证技术研究  

Research on Identity Authentication Technology Based on Block Chain and PKI

作　　者：李铭堃 马利民 王佳慧 张伟[2] Li Mingkun;Ma Limin;Wang Jiahui;Zhang Wei(Beijing Key Laboratory of Intermet Culture and Digital Dissemination Research(Beijing Information Science&Technology University),Beijing 100101;School of Computer,Beijing Information Science&.Technology University,Beijing 100101;Department of Information and Security,State Information Center,Beijing 100045)

机构地区：[1]网络文化与数字传播北京市重点实验室(北京信息科技大学),北京100101 [2]北京信息科技大学计算机学院,北京100101 [3]国家信息中心信息与网络安全部,北京100045

出　　处：《信息安全研究》2024年第2期148-155,共8页Journal of Information Security Research

基　　金：国家重点研发计划项目(2022YFC3320900)。

摘　　要：PKI是基于非对称密码算法和数字证书来实现身份认证和加密通信的安全体系,原理是基于信任锚的信任传递.该技术存在以下问题:CA中心唯一,存在单点故障;认证过程存在大量证书解析、签名验签、证书链校验等操作,认证流程繁琐.针对上述问题,基于长安链构建身份认证模型,提出基于长安链数字证书和公钥基础设施的身份认证方案,理论分析和实验数据表明,该方案减少了证书解析、签名验签等操作,简化认证流程,提高了认证效率.Public key infrastructure(PKI)is a secure system based on asymmetric cryptographic algorithm and digital certificate to realize identity authentication and encrypted communication,operating on the principle of trust transmission based on trust anchor.However,this technology has the following problems:The CA center is unique and there is a single point of failure;The authentication process involves a large number of operations,such as certificate resolution,signature verification,and certificate chain verification.To solve the above problems,this paper builds an identity authentication model based on Changan Chain,and proposes an identity authentication scheme based on Changan Chain digital certificate and public key infrastructure.Theoretical analysis and experimental data demonstrate that this scheme reduces certificate parsing,signature verification and other operations,simplifies the authentication process,and improves the authentication efficiency.

关 键 词：长安链数字证书 长安链 证书解析 数字签名 签名值验证 身份认证 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]