Research on cross-domain trustable blockchain based decentralized DNS architecture

Kai LEI; Fangxing SHU; Lei HUANG; Qichao ZHANG

doi:10.11959/j.issn.2096-109x.2020024

您当前的位置：

首页 >

文章列表页 >

Research on cross-domain trustable blockchain based decentralized DNS architecture

Special Column:Blockchain Technology | 更新时间：2024-06-03

- Research on cross-domain trustable blockchain based decentralized DNS architecture
- Chinese Journal of Network and Information Security Vol. 6, Issue 2, Pages: 19-34(2020)
- 作者机构：
  
  1. 北京大学深圳市内容中心网络与区块链重点实验室，广东深圳 518055
  2. 北京大学互联网研究院（深圳），广东深圳 518055
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020024
  CLC： TP311.1
- Online First：2020-04，
  
  Published：15 April 2020
- 稿件说明：
移动端阅览
Kai LEI, Fangxing SHU, Lei HUANG, et al. Research on cross-domain trustable blockchain based decentralized DNS architecture[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 19-34.
DOI：

Kai LEI, Fangxing SHU, Lei HUANG, et al. Research on cross-domain trustable blockchain based decentralized DNS architecture[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 19-34. DOI： 10.11959/j.issn.2096-109x.2020024.

摘要

DNS 系统是重要的互联网基础设施，采用中心化层级式结构，在根区存在中心化现象，导致单点故障风险、中心权利滥用风险等缺陷。设计新的泛中心化 DNS 架构将使域名系统从依赖中心的单一信任域，变为多个以顶级域名为根相互平行的信任域，存在跨域可信的研究挑战。围绕跨域可信架构的设计，在架构设计层面采用控制与解析分离的思想，提出双区块链 DNS 架构；在数据层面的跨域验证方面设计了基于单向累加器的验证方案，将传统验证过程 O(N)的时间复杂度降为接近 O(1)；在关键技术的性能层面，结合DPoS机制与BFT算法提出CDBFT算法，平均吞吐量可以达到736 TPS（transaction per second）。并用理论推导和实验验证了架构在安全、性能及可扩展性方面具有优势。

Abstract

The domain name system (DNS) is an important internet infrastructure.However

current DNS utilizes centralized hierarchical structure with severe dependence on root server

which causes defects such as the risk of single-point failure and the abuse of central rights.Designing new decentralized DNS mainly focuses on transforming the domain name system from a single trust domain which relies on the center to multiple trust domains with the top-level domain name as the root parallel to each other

but also faces cross-domain credible challenges.To design a cross-domain trusted architecture

the concept of separating control and analysis was adopted

and a dual-blockchain DNS architecture was proposed.At data layer

a novel cross-domain verification was designed based on a one-way accumulator verification scheme

with the time complexity of the verification process O(N) reducing to O(1) nearly.The CDBFT algorithm was proposed by combining the DPoS mechanism and the BFT algorithm

whose average throughput reaches 736 TPS.The theoretical derivation and experimental results have demonstrated the advantages of this new DNS architecture on security

performance

and scalability.

关键词

Keywords

references

延志伟 , 耿光刚 , 李洪涛 , 等 . DNS 根服务体系的发展研究 [J ] . 网络与信息安全学报 , 2017 , 3 ( 3 ): 1 - 12 .

YAN Z W , GENG G G , LI H T . Study on the development of the DNS root system [J ] . Chinese Journal of Network and Information Security , 2017 , 3 ( 3 ): 1 - 12 .

方滨兴 . 从“国家网络主权”谈基于国家联盟的自治根域名解析体系 [J ] . 信息安全与通信保密 , 2014 ( 12 ): 35 - 38 .

FANG B X . Country autonomous root domain name resolution architecture from the perfective of country cyber sovereignty [J ] . Information Security and Communication Privacy , 2014 ( 12 ): 35 - 38 .

KAMINSKY D . Spelunking the triangle:exploring Aaron Swartzs take on Zooko’s triangle [EB ] . 2011 .

RAMASUBRAMANIAN V , SIRER E G . The design and implementation of a next generation name service for the Internet [C ] // ACM Sigcomm . 2004 .

NAKAMOTO S . Bitcoin:a peer-to-peer electronic cash system [R ] . 2008 .

BARNABY C , AWAIS R . Trust beyond computation alone:human aspects of trust in blockchain technologies [C ] // ACM 41st ICSE 2019 . 2019 : 21 - 30 .

ABRAHAM I , CHAN T H , DOLEV D , et al . Communication complexity of Byzantine agreement,revisited [C ] // Proceedings of the 2019 ACM Symposium on Principles of Distributed Computing (PODC 2019) . 2019 : 317 - 326 .

DONG X L , AMAL A , JIANBING N , et al . Anonymous reputation system for IIoT-enabled retail marketing atop PoS blockchain [J ] . IEEE Transactions on Industrial Informatics , 2019 , 15 ( 6 ):35273537

Namecoin [EB ] .

LI C , LI P , XU W , et al . Scaling Nakamoto consensus to thousands of transactions per second [EB ] .

CHAN T H , PASS R , SHI E . PaLa:a simple partially synchronous Blockchain [J ] . IACR Cryptology ePrint Archive , 2018

PASS R , SHI E . Rethinking large-scale consensus [C ] // Proceedings of 30th IEEE Computer Security Foundations Symposium (CSF 2017) . 2017 : 115 - 129 .

章峰 , 史博轩 , 蒋文保 . 区块链关键技术及应用研究综述 [J ] . 网络与信息安全学报 , 2018 , 4 ( 4 ): 22 - 29 .

ZHANG F , SHI B X , JIANG W B . Review of key technology and its application of blockchain [J ] . Chinese Journal of Network and In-formation Security , 2018 , 4 ( 4 ): 22 - 29 .

ANDROULAKI E , BARGER A , BORTNIKOV V , et al . Hyperledger fabric:a distributed operating system for permissioned Block-chains [C ] // Proceedings of the Thirteenth EuroSys Conference (EuroSys 2018) . 2018 : 1 - 15 .

NKN Lab . NKN:a scalable self-evolving and self-incentivized decentralized network [EB ] .

FROMKNECHT C , VELICANU D , YAKOUBOV S . Certcoin:a namecoin based decentralized authentication system 6.857 class project [EB ] . 2014 :

HU W H , AO M , SHI L , et al . Review of blockchain-based DNS alternatives [J ] . Chinese Journal of Network and Information Security , 2017 , 3 ( 3 ): 71 - 77 .

ALI M , JUDE N , et al . Blockstack:design and implementation of a global naming system with Blockchains [C ] // USENIX Annual Technical Conference . 2016 : 181 - 194

刘井强 . 基于私有根域名的 DNS 解析实验系统设计与实现 [D ] . 哈尔滨：哈尔滨工业大学 , 2017 .

LIU J Q . Design and implementation of DNS resolution test system based on private root domain [D ] . Harbin:Harbin Institute of Technology , 2017 .

张宇 , 夏重达 , 方滨兴 , 等 . 一个自主开放的互联网根域名解析体系 [J ] . 信息安全学报 , 2017 , 2 ( 4 ): 57 - 69 .

ZHANG Y , XIA C D , FANG B X , et al . An autonomous open root resolution architecture for domain name system in the internet [J ] . Journal of Cyber Security , 2017 , 2 ( 4 ): 57 - 69 .

庄天舒 , 刘文峰 , 李东 . 基于区块链的 DNS 根域名解析体系 [J ] . 电信科学 , 2018 ( 3 ): 17 - 22 .

ZHUANG T S , LIU W F , LI D . DNS root domain name analysis system based on blockchain [J ] . Telecommunications Science , 2018 ( 3 ): 17 - 22 .

PASS R , SHI E . Hybrid consensus:efficient consensus in the permission less model [C ] // Proceedings of 31st International Symposium on Distributed Computing (ISDC 2017) . 2017 : 1 - 16 .

ABRAHAM I , MALKHI D , SPIEGELMAN A . Validated asynchronous Byzantine agreement with optimal resilience and asymptotically optimal time and word communication [EB ] .

BENALOH J , DE-MARE M , . One-way accumulators:a decentralized alternative to digital signatures [C ] // Advances in Cryptology-EUROCRYPT’93.Berlin,Heidelberg:Springer . 1993 : 274 - 285 .

NIKO B , PFITZMANN B . Collision-free accumulators and fail-stop signature schemes without trees [C ] // International Conference on the Theory and Applications of Cryptographic Techniques.Berlin,Heidelberg:Springer . 1997 .

KOKORIS-KOGIAS E , JOVANOVIC P , GASSER L , et al . OmniLedger:a secure,scale-out,decentralized ledger via sharding [C ] // Proceedings of 2018 IEEE Symposium on Security and Privacy (S＆P 2018) . 2018 : 583 - 598 .

LUU L , NARAYANAN V , ZHENG C , et al . A secure sharding protocol for open blockchains [C ] // Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security . 2016 : 17 - 30 .

New Kind of Network [EB ] .

GARAY J A , KIAYIAS A . SoK:a consensus taxonomy in the Blockchain era [J ] . ACR Cryptology ePrint Archive , 2018 ( 5 ): 26 - 37 .

ABRAHAM I , MALKHI D , SPIEGELMAN A . Validated asynchronous Byzantine agreement with optimal resilience and asymptotically optimal time and word communication [EB ] .

SAPIRSHTEIN A , SOMPOLINSKY Y , ZOHAR A . Optimal selfish mining strategies in Bitcoin [C ] // Financial Cryptography and Data Security 2016 . 2016 : 515 - 532 .

MATHIEU B , SERGE P , PIERRE P , et al . STewARD:SDN and blockchain-based trust evaluation for automated risk management on IoT devices [C ] // IEEE Infocom 2019-WKSHPS . 2019 .

Views

634

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Lightweight mobile Ad Hoc network authentication scheme based on blockchain

Ring adaptor signature scheme based on SM2 digital signature algorithm

Survey of decentralized public key infrastructure

Chameleon hash function based on SM3 and its applications

Blockchain smart contract vulnerability detection based on GR algorithm

Related Author

Xu ZHANG

Xin MA

Xu Xinyue

Xu Shujiang

Wang Lianhai

Zhang Shuhui

Shao Wei

Wang Qizheng

Related Institution

School of Cyberspace Security, Beijing University of Posts and Telecommunications

National Engineering Lab for Mobile Network Security

School of Network Education,Beijing University of Posts and Telecommunications

Shandong Provincial Key Laboratory of Industrial Network and Information System Security, Shandong Fundamental Research Center for Computer Science

Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan), Qilu University of Technology (Shandong Academy of Sciences)

⁰