基于区块链的去中心化动态身份认证系统  

DECENTRALIZED DYNAMIC IDENTITY AUTHENTICATION SYSTEM BASED ON BLOCKCHAIN

作　　者：朱金涛 魏银珍 尚晓晓 Zhu Jintao;Wei Yinzhen;Shang Xiaoxiao(School of Computer Science and Artificial Intelligence,Wuhan Textile University,Wuhan 430000,Hubei,China;School of Computer,Huanggang Normal University,Huanggang 438000,Hubei,China)

机构地区：[1]武汉纺织大学计算机与人工智能学院,湖北武汉430000 [2]黄冈师范学院计算机学院,湖北黄冈438000

出　　处：《计算机应用与软件》2025年第1期333-337,共5页Computer Applications and Software

基　　金：教育部社会科学基金规划项目(20YJA870017)。

摘　　要：身份认证是信息安全理论中非常重要的方面,通常身份认证容易出现的问题是用户名和口令都以明文的方式在网络中传输,安全性不高,极易遭受重放攻击和字典攻击,动态口令认证虽然安全性较高,但是如果服务器与客户端的时间同步出现问题,用户将长期无法登录。而且多数动态口令在一个时间段内的口令是相同的,也容易遭受重放攻击。所以提出一种基于区块链的去中心化动态身份认证系统,通过使用公钥+nonce(从0开始只增不减的整型数)签名的登录方式,既解决了身份认证中心化的问题,又解决了重放攻击,提高了身份认证过程的安全性。Identity authentication is a very important aspect of information security theory.Usually,the common problem with identity authentication is that the user's name and password are transmitted in the network in plaintext,which is not safe,and vulnerable to replay attacks and dictionary attacks.Although dynamic passwords authentication is more secure,if there is a problem with the time synchronization between the server and the client,the user will not be able to login for a long time.Moreover,most password of the dynamic password is the same within a period of time,and it is also vulnerable to replay attacks.Therefore,a decentralized dynamic identity authentication system based on blockchain is proposed.By using a public key+nonce(integer number that increases from 0)to sign in,it not only solves the problem of over-centralized identity authentication,but also solves the replay attack.The proposed system improves the security of the identity authentication process.

关 键 词：区块链 动态口令 身份认证 数字签名 网络安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]