基于区块链的跨数据中心匿名可监管身份认证方案

徐淑奖; 张朝阳; 王连海; 张淑慧; 邵蔚

doi:10.11959/j.issn.2096-109x.2024031

您当前的位置：

首页 >

文章列表页 >

基于区块链的跨数据中心匿名可监管身份认证方案

学术论文 | 更新时间：2024-08-14

- 基于区块链的跨数据中心匿名可监管身份认证方案
- Blockchain-based cross-data center anonymous and verifiable identity authentication scheme
- 网络与信息安全学报 2024年10卷第2期页码：47-58
- 作者机构：
  
  1.齐鲁工业大学（山东省科学院）山东省计算中心（国家超级计算济南中心）算力互联网与信息安全教育部重点实验室，山东济南 250014
  2.山东省基础科学研究中心（计算机科学）山东省计算机网络重点实验室，山东济南 250014
- 作者简介：
  
  [ "徐淑奖（1979- ），男，山东临沂人，齐鲁工业大学（山东省科学院）/山东省计算中心（国家超级计算济南中心）研究员，主要研究方向为数据安全、区块链。" ]
  [ "张朝阳（1997- ），男，山东菏泽人，齐鲁工业大学（山东省科学院）/山东省计算中心（国家超级计算济南中心）硕士生，主要研究方向为数据安全、区块链。" ]
  [ "王连海（1969- ），男，山东潍坊人，齐鲁工业大学（山东省科学院）/山东省计算中心（国家超级计算济南中心）研究员，主要研究方向为数据安全、区块链、计算机取证。" ]
  [ "张淑慧（1981- ），女，山东济宁人，齐鲁工业大学（山东省科学院）/山东省计算中心（国家超级计算济南中心）研究员，主要研究方向为数据安全、区块链、计算机取证。" ]
  [ "邵蔚（1994- ），女，山东济南人，齐鲁工业大学（山东省科学院）/山东省计算中心（国家超级计算济南中心）研究员，主要研究方向为区块链、隐私保护。" ]
- 基金信息：
  
  山东省重点研发计划(2021CXGC010107);泰山学者项目(tsqn202312231);济南市新高校二十条项目(202228017)
- DOI：10.11959/j.issn.2096-109x.2024031
  中图分类号： TP393
- 收稿：2023-03-16，
  
  修回：2024-04-10，
  
  纸质出版：2024-04-15
- 稿件说明：
移动端阅览
徐淑奖, 张朝阳, 王连海, 等. 基于区块链的跨数据中心匿名可监管身份认证方案[J]. 网络与信息安全学报, 2024, 10(02): 47-58.

Format: XU S J, ZHANG C Y, WANG L H, et al. Blockchain-based cross-data center anonymous and verifiable identity authentication scheme[J]. Chinese Journal of Network and Information Security, 2024, 10(02): 47-58.
徐淑奖, 张朝阳, 王连海, 等. 基于区块链的跨数据中心匿名可监管身份认证方案[J]. 网络与信息安全学报, 2024, 10(02): 47-58. DOI： 10.11959/j.issn.2096-109x.2024031.

Format: XU S J, ZHANG C Y, WANG L H, et al. Blockchain-based cross-data center anonymous and verifiable identity authentication scheme[J]. Chinese Journal of Network and Information Security, 2024, 10(02): 47-58. DOI： 10.11959/j.issn.2096-109x.2024031.

摘要

随着大数据和云计算技术的发展，金融机构之间跨机构数据共享交互日益增多。由于隐私泄露事件的频繁发生，数据安全保护面临着严峻的挑战，也对跨数据中心的身份认证等数据安全管理技术提出了更高的要求。传统的中心化身份认证方案在安全性和可扩展性方面存在缺陷，难以满足高频跨中心数据共享的应用需求。区块链具有分布式、难以篡改、可追溯、多方共识等优异特性，为跨数据中心身份认证提供了崭新的思路。在实际应用场景中，不仅要对用户的身份隐私进行保护，还需要对用户的匿名身份进行有效的监管。提出了一种基于区块链的匿名可监管的跨数据中心身份认证方案，不改变各数据中心原有架构，以各数据中心的管理节点为中心建立分布式多中心的联盟链；利用区块链技术，保障身份认证过程的透明性和可信性；采用属性签名保护用户身份隐私，并建立身份映射表追踪用户真实身份，实现用户身份隐私保护和监管兼顾的跨数据中心身份认证。安全性分析和仿真实验结果表明，该方案无须用户再次注册，具有不可伪造性和可追踪等特性，能够抵御重放攻击、拒绝服务攻击、篡改攻击、中间人攻击等网络攻击。

Abstract

With the progression of big data and cloud computing technologies

there has been an escalating trend in cross-institutional data sharing and interaction within the financial sector. However

the frequent occurrence of privacy breaches poses significant challenges to ensuring data security protection. This necessitates the elevation of requirements for identity authentication across data centers and other technologies related to data security management. The traditional centralized identity authentication schemes are inherently flawed in security and scalability

which hampers their ability to meet the demands of high-frequency cross-center data sharing applications. The blockchain technology has emerged as a potential solution

offering exceptional characteristics such as a distributed nature

tamper-proof properties

traceability

and the ability to achieve multi-party consensus. In practical application scenarios

it is essential to not only protect the privacy of user identities but also to effectively regulate anonymous identities. An anonymous and supervisable cross-data center identity authentication scheme based on blockchain was proposed. This scheme did not necessitate alterations to the original architecture of each data center. Instead

a distributed multi-center consortium blockchain was formed by leveraging more than one server from each data center to establish a data center union. Blockchain technology was utilized to ensure the transparency and reliability of the identity authentication process. Additionally

attribute signatures were employed to safeguard user identity privacy while simultaneously creating an identity mapping table that facilitated the tracking of real user identities. Consequently

the scheme was designed to protect user privacy during cross-data center identity authentication and to enable effective supervision over anonymous identities. A thorough security analysis and the results of experiments demonstrate that the proposed scheme possesses the following attributes: it does not require users to re-register

it exhibits characteristics of unforgeability and traceability

and it is capable of withstanding various network attacks

including replay attacks

denial of service attacks

tampering attacks

and man-in-the-middle attacks.

关键词

Keywords

references

李连朋 , 罗宏 . 国内外金融业信息安全综述 [J ] . 网络与信息安全学报 , 2017 , 3 ( 2 ): 13 - 23 .

LI L P , LUO H . Review of domestic and international financial security [J ] . Chinese Journal of Network and Information Security , 2017 , 3 ( 2 ): 13 - 23 .

彭华熹 . 一种基于身份的多信任域认证模型 [J ] . 计算机学报 , 2006 , 29 ( 8 ): 1271 - 1281 .

PENG H X . An identity-based authentication model for multi-domain [J ] . Chinese Journal of Computers , 2006 , 29 ( 8 ): 1271 - 1281 .

CHEN R B , SHU F X , HUANG S K , et al . BIdM: a blockchain-enabled cross-domain identity management system [J ] . Journal of Communications and Information Networks , 2021 , 6 ( 1 ): 44 - 58 .

LEE Y K , JEONG J . Securing biometric authentication system using blockchain [J ] . ICT Express , 2021 , 7 ( 3 ): 322 - 326 .

ZHANG H X , CHEN X S , LAN X , et al . BTCAS: a blockchain-based thoroughly cross-domain authentication scheme [J ] . Journal of Information Security and Applications , 2020 , 55 : 102538 .

WANG M M , RUI L L , YANG Y , et al . A blockchain-based multi-CA cross-domain authentication scheme in decentralized autonomous network [J ] . IEEE Transactions on Network and Service Management , 2022 , 19 ( 3 ): 2664 - 2676 .

CHEN J , ZHAN Z Y , HE K , et al . XAuth: efficient privacy-preserving cross-domain authentication [J ] . IEEE Transactions on Dependable and Secure Computing , 2022 , 19 ( 5 ): 3301 - 3311 .

牛建林 , 任志宇 , 杜学绘 . 基于联盟链的跨域认证方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 3 ): 123 - 133 .

NIU J L , REN Z Y , DU X H . Cross-domain authentication scheme based on consortium blockchain [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 3 ): 123 - 133 .

MAJI H K , PRABHAKARAN M , ROSULEK M . Attribute-based signatures: achieving attribute-privacy and collusion-resistance [R ] . Cryptology ePrint Archive , 2008 .

CAO D , ZHAO B K , WANG X F , et al . Multi-authority attribute-based signature [C ] // Proceedings of the 2011 Third International Conference on Intelligent Networking and Collaborative Systems . Piscataway : IEEE Press , 2011 : 668 - 672 .

SUN J M , QIN J , MA J X . Securely outsourcing decentralized multi-authority attribute based signature [M ] . Cyberspace Safety and Security . Cham : Springer International Publishing , 2017 : 86 - 102 .

LIU X J , CHEN W , XIA Y J , et al . TRAMS: a secure vehicular crowdsensing scheme based on multi-authority attribute-based signature [J ] . IEEE Transactions on Intelligent Transportation Systems , 2022 , 23 ( 8 ): 12790 - 12800 .

唐飞 , 包佳立 , 黄永洪 , 等 . 基于属性的多授权中心身份认证方案 [J ] . 通信学报 , 2021 , 42 ( 3 ): 220 - 228 .

TANG F , BAO J L , HUANG Y H , et al . Multi-authority attribute-based identification scheme [J ] . Journal on Communications , 2021 , 42 ( 3 ): 220 - 228 .

LU A R , LI W H , YAO Y Z , et al . TCABRS: an efficient traceable constant-size attribute-based ring signature scheme for electronic health record system [C ] // Proceedings of the 2021 IEEE Sixth International Conference on Data Science in Cyberspace (DSC) . Piscataway : IEEE Press , 2021 : 106 - 113 .

Yuan Distributed public key infrastructure scheme based on blockchain and decentralized undeniable attribute-based signature [J ] . Scientia Sinica Informationis , 2022 , 52 ( 6 ): 1135 .

LI X Q , JIANG P , CHEN T , et al . A survey on the security of blockchain systems [J ] . Future Generation Computer Systems , 2020 , 107 : 841 - 853 .

刘峰 , 杨杰 , 齐佳音 . 区块链密码学隐私保护技术综述 [J ] . 网络与信息安全学报 , 2022 , 8 ( 4 ): 29 - 44 .

LIU F , YANG J , QI J Y . Survey on blockchain privacy protection techniques in cryptography [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 4 ): 29 - 44 .

ANDROULAKI E , BARGER A , BORTNIKOV V , et al . Hyperledger fabric: a distributed operating system for permissioned blockchains [C ] // Proceedings of the Proceedings of the Thirteenth EuroSys Conference . New York : ACM , 2018 : 1 - 15 .

MAJI H K , PRABHAKARAN M , ROSULEK M . Attribute-based signatures [M ] . Topics in Cryptology - CT-RSA 2011 . Berlin, Heidelberg : Springer Berlin Heidelberg , 2011 : 376 - 392 .

魏亮 , 黄振杰 , 陈群山 . 去中心基于属性不可否认签名 [J ] . 计算机工程与科学 , 2020 , 42 ( 6 ): 1003 - 1011 .

WEI L , HUANG Z J , CHEN Q S . Decentralized attribute-based undeniable signature [J ] . Computer Engineering & Science , 2020 , 42 ( 6 ): 1003 - 1011 .

浏览量

141

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向智能物联网的双层级联邦安全学习架构

基于区块链的多权限属性隐藏电子病历共享方案

区块链密码学隐私保护技术综述

基于区块链的访问控制技术研究进展

联邦学习研究综述