基于无证书签密的跨链身份认证方案  

Cross-chain identity authentication scheme based on certificate-less signcryption

作　　者：刘德渊 张金全 张鑫[1,2,3] 万武南 张仕斌 秦智[1,2,3] LIU Deyuan;ZHANG Jingquan;ZHANG Xing;WAN Wunan;ZHANG Shibin;QIN Zhi(School of Cybersecurity,Chengdu University of Information Technology,Chengdu Sichuan 610225,China;Advanced Cryptography System Security Key Laboratory of Sichuan Province(Chengdu University of Information Technology),Chengdu Sichuan 610225,China;Industrial College of Cyberspace Security,Chengdu University of Information Technology,Chengdu Sichuan 610203,China)

机构地区：[1]成都信息工程大学网络空间安全学院,成都610225 [2]先进密码技术与系统安全四川省重点实验室(成都信息工程大学),成都610225 [3]成都信息工程大学网络空间安全产业学院,成都610203

出　　处：《计算机应用》2024年第12期3731-3740,共10页journal of Computer Applications

基　　金：国家重点研发计划“网络空间安全治理”重点专项(2022YFB3103103);四川省重点研发计划项目(2022YFS0571,2021YFSY0012);成都市科技局重点研发支撑计划项目(2023-XT00-00002-GX,2022-YF05-00115-SN)。

摘　　要：针对现有的区块链跨链身份认证方案存在去中心化程度低、可扩展性较差、资源消耗较大的问题,提出一种基于无证书签密的跨链身份认证方案(CIA-CLSC)。首先,采用无证书签密(CLSC)生成各跨链实体密钥并实现通信加密以及身份认证;其次,采用秘密共享实现分布式系统的密钥管理;最后,采用去中心化身份实现各实体密钥与跨链身份的关联。在保障身份隐私和安全的前提下,CIA-CLSC实现了不同区块链系统间的跨链交互身份认证。理论分析与实验结果表明,CIA-CLSC无需依赖中心化证书机构和第三方密钥管理机构,保证了去中心化特性;CIA-CLSC生成的数字身份符合万维网联盟(W3C)标准,保证了可扩展性;在保持去中心化的前提下实现跨链交互身份认证这一情况下,CIA-CLSC比椭圆曲线密码(ECC)与高级加密标准(AES)的组合减少约34%的时间开销、比RSA与AES的组合减少约38%的时间开销。可见,CIA-CLSC在实际应用中能够有效提高跨链系统的去中心化特性、可扩展性以及交互效率。In response to the issues of low decentralization,poor scalability,and high resource consumption in the current blockchain cross-chain identity authentication schemes,a Cross-chain Identity Authentication scheme based on Certificate-Less SignCryption(CIA-CLSC)was proposed.Firstly,Certificate-Less SignCryption(CLSC)was utilized to generate keys for cross-chain entities,realize communication encryption,and perform identity authentication.Secondly,secret sharing was employed for key management in the distributed system.Finally,decentralized identities were used to establish the association between entity keys and cross-chain identities.Under the premise of ensuring identity privacy and security,CIA-CLSC achieved cross-chain interactive identity authentication among different blockchain systems.Theoretical analysis and experimental results demonstrate that CIA-CLSC does not rely on centralized certificate authorities or third-party key management organizations,ensuring decentralization;the CIA-CLSC generated digital identities comply with the World Wide Web Consortium(W3C)standards,ensuring scalability.Furthermore,compared to the combination of ECC(Elliptic Curve Cryptography)and AES(Advanced Encryption Standard),CIA-CLSC achieves approximately 34%reduction in time overhead;compared to the combination of RSA(Rivest-Shamir-Adleman algorithm)and AES,CIA-CLSC achieves approximately 38%reduction in time overhead while maintaining decentralization for cross-chain interactive identity authentication.It can be seen that CIA-CLSC can enhance the decentralization,scalability,and interaction efficiency of cross-chain systems in practical applications effectively.

关 键 词：区块链 跨链 身份认证 无证书签密 去中心化 数字身份 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]