基于区块链和CP-ABE的跨域认证方案  

Cross-domain authentication scheme based on blockchain and CP-ABE(ciphertext policy attribute based encryption)

作　　者：左娇 张龙[1,2] 张可佳[1,2] ZUO Jiao;ZHANG Long;ZHANG Ke-jia(School of Mathematical Sciences,Heilongjiang University,Harbin 150080,China;Institute for Cryptology and Network Security,Heilongjiang University,Harbin 150080,China)

机构地区：[1]黑龙江大学数学科学学院,黑龙江哈尔滨150080 [2]黑龙江大学密码与网络安全研究院,黑龙江哈尔滨150080

出　　处：《计算机工程与设计》2025年第4期1056-1063,共8页Computer Engineering and Design

基　　金：国家自然科学基金面上基金项目(62271234);黑龙江省自然科学基金优秀青年基金项目(YQ2020F013);公共大数据国家重点实验室开放课题基金项目(贵州大学)(PBD2022-16);黑龙江省“双一流”学科协同创新成果建设基金项目(LJGXCG2022-054)。

摘　　要：为保护不同域用户身份信息的隐私性和信息传输的安全性,提出一种基于区块链和密文策略属性基加密(CP-ABE)的跨域认证方案。利用模糊提取技术对用户生物特征进行处理,将其转换成公开信息与随机生物密钥后参与认证,保护用户身份信息不被泄露;利用区块链技术独有的数据难以篡改和信息全网公开等特性,完成用户身份信息一致性的跨域认证;利用CP-ABE,实现跨域认证过程中密文数据交互的隐私性保护。经安全性与性能分析,方案可抵抗重放攻击、口令猜测攻击、内部攻击和消息篡改攻击,有较高的安全性,与现有的跨域认证方案相比有较低的计算开销。To protect the privacy of user identity information and the security of information transmission in different domains,a cross-domain authentication scheme based on blockchain and ciphertext policy attribute based encryption(CP-ABE)was proposed.The fuzzy extraction technology was used to process the user’s biometrics,which were converted into public information and random biometrics key to participate in authentication,so as to prevent the user’s identity information from being leaked.The unique characteristics of blockchain technology were used,such as tamper resistance and open information across the network,to complete cross-domain authentication of user identity information consistency.CP-ABE was used to protect the privacy of ciphertext data interaction in the process of cross-domain authentication.After security and performance analysis,the scheme can resist replay attacks,password guessing attacks,internal attacks and message tampering attacks,and has higher security and lower computing overhead than the existing cross-domain authentication schemes.

关 键 词：跨域认证 生物认证 区块链 模糊提取 属性加密 密钥协商 隐私保护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]