PKI cross-domain authentication scheme based on advanced PBFT algorithm

Sijie QIAN; Liquan CHEN; Shihui WANG

doi:10.11959/j.issn.2096-109x.2020042

您当前的位置：

首页 >

文章列表页 >

PKI cross-domain authentication scheme based on advanced PBFT algorithm

Special Column: Application Exploration on Multi-party Trusted Cooperation based on Blockchain | 更新时间：2024-06-03

- PKI cross-domain authentication scheme based on advanced PBFT algorithm
- Chinese Journal of Network and Information Security Vol. 6, Issue 4, Pages: 37-44(2020)
- 作者机构：
  
  1. 东南大学信息科学与工程学院，江苏南京 210096
  2. 东南大学网络空间安全学院，江苏南京 210096
  3. 紫金山实验室，江苏南京 211100
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020042
  CLC： TP309
- Online First：2020-08，
  
  Published：15 August 2020
- 稿件说明：
移动端阅览
Sijie QIAN, Liquan CHEN, Shihui WANG. PKI cross-domain authentication scheme based on advanced PBFT algorithm[J]. Chinese Journal of Network and Information Security, 2020, 6(4): 37-44.
DOI：

Sijie QIAN, Liquan CHEN, Shihui WANG. PKI cross-domain authentication scheme based on advanced PBFT algorithm[J]. Chinese Journal of Network and Information Security, 2020, 6(4): 37-44. DOI： 10.11959/j.issn.2096-109x.2020042.

摘要

为解决现有公钥基础设施跨域认证方案的效率问题，利用具有分布式和不易被篡改优点的区块链技术，提出基于联盟区块链的跨域认证方案。一方面，该方案对联盟链在传统实用拜占庭共识算法（PBFT）的基础上加入了节点动态增减功能；改进了主节点选举方式；将三阶段广播缩减为两阶段广播，减少了通信开销。另一方面，该方案设计了联盟链跨域认证协议，给出了区块链证书格式，描述了跨域认证协议，并进行了安全和效率分析。分析表明，在安全方面，该方案具有抵抗分布式攻击等安全属性；在效率方面，与已有跨域认证方案相比，该方案在计算开销上、通信开销上都有优势。

Abstract

In order to solve the efficiency problem of the existing public key infrastructure cross-domain authentication scheme

a cross-domain authentication model based on the consortium blockchain which has the advantages of distributed and difficult to be tamperd with was proposed.On the one hand

the dynamic join and exit function was added to the practical Byzantine fault tolerant (PBFT) algorithm

the primary node election mode was improved

and the three-stage broadcast was reduced to two-stage broadcast for the reducation of communication overhead.On the other hand

the cross-domain authentication system architecture based on consortium chain was designed

the blockchain certificate format and the cross-domain authentication protocol were presented

the security and efficiency were analyzed.The results shows that in term of security

the proposed model has security attributes such as resisting distributed attacks.In terms of performance

the proposed model has advantages in both computational overhead and communication overhead when it was compared with the existing cross-domain authentication schemes.

关键词

Keywords

references

郭锐 . 匿名通信系统流量伪装技术研究 [D ] . 北京:北京邮电大学 , 2018 .

GUO R . Traffic camouflaging in anonymous communication system [D ] . Beijing:Beijing University of Posts and Telecommunications , 2018 .

张琰 , 王瑾璠 , 齐竹云 , 等 . 基于动态累加器的去中心化加密搜索方案 [J ] . 网络与信息安全学报 , 2019 , 5 ( 2 ): 23 - 29 .

ZHANG Y , WANG J F , QI Z Y , et al . Decentralized searchable en cryption scheme based on dynamic accumulator [J ] . Chinese Journal of Network and Information Security , 2019 , 5 ( 2 ): 23 - 29 .

VACCA J R . Computer and information security handbook [M ] . Boston : ElsevierPress , 2009 .

彭博 , 刘进 , 龚智 , 等 . 一种树型桥CA跨域信任传递方案研究 [J ] . 舰船电子工程 , 2017 , 37 ( 3 ): 66 - 69 ,113.

PENG B , LIU J , GONG Z , et al . Cross-domain trust model based on bridge CA [J ] . Ship Electronic Engineering , 2017 , 37 ( 3 ): 66 - 69 ,113.

PERLMAN R . An overview of PKI trust model [J ] . IEEE Network , 1999 , 13 ( 6 ): 38 - 43 .

ROUIBAH K , OULD-ALI S . Dynamic data sharing and security in a collaborative product definition management system [J ] . Robotics and Computer Integrated Manufacturing , 2006 , 23 ( 2 ).

杨斌 , 陈国庆 , 孙永红 . 一种新的基于身份的多信任域认证方案研究 [J ] . 计算机安全 , 2010 ( 8 ): 15 - 18 .

YANG B , CHEN G Q , SUN Y H . Research of a new identity-based authentication model for multi-domain [J ] . Computer Security , 2010 ( 8 ): 15 - 18 .

CHAN Y Y , FLEISSNER S , LIU J K , et al . Single sign-on and key establishment for ubiquitous smart environments [C ] // International Conference on Computational Science and Its Applications . Berlin:Springer , 2006 : 406 - 415 .

戴千一 , 徐开勇 , 郭松 , 等 . 分布式网络环境下基于区块链的密钥管理方案 [J ] . 网络与信息安全学报 , 2018 , 4 ( 9 ): 23 - 35 .

DAI Q Y , XUN K Y , GUO S , et al . Blockchain-based key management scheme for distributed networks [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 9 ): 23 - 35 .

刘亚辉 . 基于区块链的可信电子券系统的设计与实现 [D ] . 北京:北京邮电大学 , 2018 .

LIU Y H . Design and implementation of trusted electronic coupons system based on block-chain [D ] . Beijing:Beijing University of Posts and Telecommunications , 2018 .

SUN Y , YU Y , LI X , et al . Batch verifiable computation with public verifiability for outsourcing polynomials and matrix computations [C ] // Australasian Conference on Information Security and Privacy . 2016 : 293 - 309 .

GARG S , GENTRY C , HALEVI S . Candidate multilinear maps from ideal lattices [C ] // Annual International Conference on the Theory and Applications of Cryptographic Techniques . 2013 : 1 - 17 .

BONEH D , GOH E J , NISSIM K . Evaluating 2-DNF formulas on ciphertexts [C ] // Theory of Cryptography Conference . 2005 : 325 - 341 .

LAMPORT S , PEASE M . The byzantine generals problem [M ] . IEEE Computer Society Press , 1995 .

王娜 . 无线传感网节点信任检测量化方案与方法研究 [D ] . 上海:华东师范大学 , 2015 .

WANG N . Research on quantitative trust detecting method and model for nodes in WSNs [D ] . Shanghai:East China Normal University , 2015 .

CASTRO M , LISKOV B . Practical Byzantine fault tolerance and proactive recovery [J ] . ACM Transactions on Computer Systems (TOCS) , 2002 , 20 ( 4 ): 398 - 461 .

沈鑫 , 裴庆祺 , 刘雪峰 . 区块链技术综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 11 ): 11 - 20 .

SHEN X , PEI Q Q , LIU X F . Survey of block chain [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 11 ): 11 - 20 .

蔡维德 , 郁莲 , 王荣 , 等 . 基于区块链的应用系统开发方法研究 [J ] . 软件学报 , 2017 , 28 ( 6 ): 1474 - 1487 .

CAI W D , YU L , WANG R , et al . Blockchain application development techniques [J ] . Journal of Software , 2017 , 28 ( 6 ): 1474 - 1487 .

张文芳 , 王小敏 , 郭伟 , 等 . 基于椭圆曲线密码体制的高效虚拟企业跨域认证方案 [J ] . 电子学报 , 2014 , 42 ( 6 ): 1095 - 1102 .

ZHANG W F , WANG X M , GUO W , et al . An efficient inter-enterprise authentication scheme for VE based on the elliptic curve cryptosystem [J ] . Acta Electronica Sinica , 2014 , 42 ( 6 ): 1095 - 1102 .

罗长远 , 霍士伟 , 邢洪智 . 普适环境中基于身份的跨域认证方案 [J ] . 通信学报 , 2011 , 32 ( 9 ): 111 - 115 ,122.

LUO C Y , HUO S W , XING H Z . Identity-based cross-domain authentication scheme in pervasive computing environments [J ] . Journal on Communications , 2011 , 32 ( 9 ): 111 - 115 ,122.

Views

1182

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Blockchain-based high transparent PKI authentication protocol

Overview of international standards and cutting-edge research on automated certificate management

Ring adaptor signature scheme based on SM2 digital signature algorithm

Survey of decentralized public key infrastructure

Chameleon hash function based on SM3 and its applications

Related Author

Liquan CHEN

Xiao LI

Zheyi YANG

Sijie QIAN

Li Longxin

Yan Zheng

Wang Haiguang

Li Tieyan

Related Institution

Purple Mountain Laboratories for Network and Communication Security

Shield Lab, Trustworthiness Lab, Huawei Technologies Co., Ltd.

School of Cyber Engineering, Xidian University

Guangzhou Institute of Technology, Xidian University

Shandong Provincial Key Laboratory of Industrial Network and Information System Security, Shandong Fundamental Research Center for Computer Science

⁰