基于改进PBFT算法的PKI跨域认证方案

钱思杰; 陈立全; 王诗卉

doi:10.11959/j.issn.2096-109x.2020042

您当前的位置：

首页 >

文章列表页 >

基于改进PBFT算法的PKI跨域认证方案

专栏：基于区块链的多方可信协作应用探索 | 更新时间：2024-06-03

- 基于改进PBFT算法的PKI跨域认证方案
- PKI cross-domain authentication scheme based on advanced PBFT algorithm
- 网络与信息安全学报 2020年6卷第4期页码：37-44
- 作者机构：
  
  1. 东南大学信息科学与工程学院，江苏南京 210096
  2. 东南大学网络空间安全学院，江苏南京 210096
  3. 紫金山实验室，江苏南京 211100
- 作者简介：
  
  [ "钱思杰（1995– ），男，浙江嵊州人，东南大学硕士生，主要研究方向为区块链和公钥密码学" ]
  [ "陈立全（1976– ），男，广西玉林人，博士，东南大学教授、博士生导师，主要研究方向为信息系统安全、移动安全、区块链安全" ]
  [ "王诗卉（1995– ），女，江苏如皋人，东南大学硕士生，主要研究方向为隐私保护和密码学" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(61571110)
- DOI：10.11959/j.issn.2096-109x.2020042
  中图分类号： TP309
- 网络首发：2020-08，
  
  纸质出版：2020-08-15
- 稿件说明：
移动端阅览
钱思杰, 陈立全, 王诗卉. 基于改进PBFT算法的PKI跨域认证方案[J]. 网络与信息安全学报, 2020,6(4):37-44.

Sijie QIAN, Liquan CHEN, Shihui WANG. PKI cross-domain authentication scheme based on advanced PBFT algorithm[J]. Chinese Journal of Network and Information Security, 2020, 6(4): 37-44.
钱思杰, 陈立全, 王诗卉. 基于改进PBFT算法的PKI跨域认证方案[J]. 网络与信息安全学报, 2020,6(4):37-44. DOI： 10.11959/j.issn.2096-109x.2020042.

Sijie QIAN, Liquan CHEN, Shihui WANG. PKI cross-domain authentication scheme based on advanced PBFT algorithm[J]. Chinese Journal of Network and Information Security, 2020, 6(4): 37-44. DOI： 10.11959/j.issn.2096-109x.2020042.

摘要

为解决现有公钥基础设施跨域认证方案的效率问题，利用具有分布式和不易被篡改优点的区块链技术，提出基于联盟区块链的跨域认证方案。一方面，该方案对联盟链在传统实用拜占庭共识算法（PBFT）的基础上加入了节点动态增减功能；改进了主节点选举方式；将三阶段广播缩减为两阶段广播，减少了通信开销。另一方面，该方案设计了联盟链跨域认证协议，给出了区块链证书格式，描述了跨域认证协议，并进行了安全和效率分析。分析表明，在安全方面，该方案具有抵抗分布式攻击等安全属性；在效率方面，与已有跨域认证方案相比，该方案在计算开销上、通信开销上都有优势。

Abstract

In order to solve the efficiency problem of the existing public key infrastructure cross-domain authentication scheme

a cross-domain authentication model based on the consortium blockchain which has the advantages of distributed and difficult to be tamperd with was proposed.On the one hand

the dynamic join and exit function was added to the practical Byzantine fault tolerant (PBFT) algorithm

the primary node election mode was improved

and the three-stage broadcast was reduced to two-stage broadcast for the reducation of communication overhead.On the other hand

the cross-domain authentication system architecture based on consortium chain was designed

the blockchain certificate format and the cross-domain authentication protocol were presented

the security and efficiency were analyzed.The results shows that in term of security

the proposed model has security attributes such as resisting distributed attacks.In terms of performance

the proposed model has advantages in both computational overhead and communication overhead when it was compared with the existing cross-domain authentication schemes.

关键词

Keywords

references

郭锐 . 匿名通信系统流量伪装技术研究 [D ] . 北京:北京邮电大学 , 2018 .

GUO R . Traffic camouflaging in anonymous communication system [D ] . Beijing:Beijing University of Posts and Telecommunications , 2018 .

张琰 , 王瑾璠 , 齐竹云 , 等 . 基于动态累加器的去中心化加密搜索方案 [J ] . 网络与信息安全学报 , 2019 , 5 ( 2 ): 23 - 29 .

ZHANG Y , WANG J F , QI Z Y , et al . Decentralized searchable en cryption scheme based on dynamic accumulator [J ] . Chinese Journal of Network and Information Security , 2019 , 5 ( 2 ): 23 - 29 .

VACCA J R . Computer and information security handbook [M ] . Boston : ElsevierPress , 2009 .

彭博 , 刘进 , 龚智 , 等 . 一种树型桥CA跨域信任传递方案研究 [J ] . 舰船电子工程 , 2017 , 37 ( 3 ): 66 - 69 ,113.

PENG B , LIU J , GONG Z , et al . Cross-domain trust model based on bridge CA [J ] . Ship Electronic Engineering , 2017 , 37 ( 3 ): 66 - 69 ,113.

PERLMAN R . An overview of PKI trust model [J ] . IEEE Network , 1999 , 13 ( 6 ): 38 - 43 .

ROUIBAH K , OULD-ALI S . Dynamic data sharing and security in a collaborative product definition management system [J ] . Robotics and Computer Integrated Manufacturing , 2006 , 23 ( 2 ).

杨斌 , 陈国庆 , 孙永红 . 一种新的基于身份的多信任域认证方案研究 [J ] . 计算机安全 , 2010 ( 8 ): 15 - 18 .

YANG B , CHEN G Q , SUN Y H . Research of a new identity-based authentication model for multi-domain [J ] . Computer Security , 2010 ( 8 ): 15 - 18 .

CHAN Y Y , FLEISSNER S , LIU J K , et al . Single sign-on and key establishment for ubiquitous smart environments [C ] // International Conference on Computational Science and Its Applications . Berlin:Springer , 2006 : 406 - 415 .

戴千一 , 徐开勇 , 郭松 , 等 . 分布式网络环境下基于区块链的密钥管理方案 [J ] . 网络与信息安全学报 , 2018 , 4 ( 9 ): 23 - 35 .

DAI Q Y , XUN K Y , GUO S , et al . Blockchain-based key management scheme for distributed networks [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 9 ): 23 - 35 .

刘亚辉 . 基于区块链的可信电子券系统的设计与实现 [D ] . 北京:北京邮电大学 , 2018 .

LIU Y H . Design and implementation of trusted electronic coupons system based on block-chain [D ] . Beijing:Beijing University of Posts and Telecommunications , 2018 .

SUN Y , YU Y , LI X , et al . Batch verifiable computation with public verifiability for outsourcing polynomials and matrix computations [C ] // Australasian Conference on Information Security and Privacy . 2016 : 293 - 309 .

GARG S , GENTRY C , HALEVI S . Candidate multilinear maps from ideal lattices [C ] // Annual International Conference on the Theory and Applications of Cryptographic Techniques . 2013 : 1 - 17 .

BONEH D , GOH E J , NISSIM K . Evaluating 2-DNF formulas on ciphertexts [C ] // Theory of Cryptography Conference . 2005 : 325 - 341 .

LAMPORT S , PEASE M . The byzantine generals problem [M ] . IEEE Computer Society Press , 1995 .

王娜 . 无线传感网节点信任检测量化方案与方法研究 [D ] . 上海:华东师范大学 , 2015 .

WANG N . Research on quantitative trust detecting method and model for nodes in WSNs [D ] . Shanghai:East China Normal University , 2015 .

CASTRO M , LISKOV B . Practical Byzantine fault tolerance and proactive recovery [J ] . ACM Transactions on Computer Systems (TOCS) , 2002 , 20 ( 4 ): 398 - 461 .

沈鑫 , 裴庆祺 , 刘雪峰 . 区块链技术综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 11 ): 11 - 20 .

SHEN X , PEI Q Q , LIU X F . Survey of block chain [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 11 ): 11 - 20 .

蔡维德 , 郁莲 , 王荣 , 等 . 基于区块链的应用系统开发方法研究 [J ] . 软件学报 , 2017 , 28 ( 6 ): 1474 - 1487 .

CAI W D , YU L , WANG R , et al . Blockchain application development techniques [J ] . Journal of Software , 2017 , 28 ( 6 ): 1474 - 1487 .

张文芳 , 王小敏 , 郭伟 , 等 . 基于椭圆曲线密码体制的高效虚拟企业跨域认证方案 [J ] . 电子学报 , 2014 , 42 ( 6 ): 1095 - 1102 .

ZHANG W F , WANG X M , GUO W , et al . An efficient inter-enterprise authentication scheme for VE based on the elliptic curve cryptosystem [J ] . Acta Electronica Sinica , 2014 , 42 ( 6 ): 1095 - 1102 .

罗长远 , 霍士伟 , 邢洪智 . 普适环境中基于身份的跨域认证方案 [J ] . 通信学报 , 2011 , 32 ( 9 ): 111 - 115 ,122.

LUO C Y , HUO S W , XING H Z . Identity-based cross-domain authentication scheme in pervasive computing environments [J ] . Journal on Communications , 2011 , 32 ( 9 ): 111 - 115 ,122.

浏览量

1182

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于区块链的高透明度PKI认证协议

自动化证书管理国际标准和前沿研究综述

基于SM2数字签名算法的环适配器签名方案

去中心化公钥基础设施综述

基于SM3的变色龙哈希函数及其应用