基于多层区块链的跨域认证方案

针对现有集中式身份认证方式在物联网应用场景下管理成本高、异构信任域之间的证书管理困难以及跨域认证场景下多信任域难以互相信任的问题,提出了一种基于多层区块链的跨域认证方案.使用本地区块链来进行物联网应用场景下分布式的节点管理,使用公共区块链来进行区块链之间的跨链身份认证,设计了跨域认证协议.针对跨域访问时存在的多个管理域相互信任问题,提出了基于信任度评价的委托权益证明(DPOS)来评估节点的可信度.最后对跨域认证方案进行了安全和效率分析,分析表明该方案在保证较好安全性和有效性的基础上,提升了跨域认证的效率.

Cross domain authentication scheme based on multi layer blockchain

In order to solve the problem of high management cost of centralized identity authentication in the application scenario of Internet of Things(IoT), and solve the problem of mutual trust and certificate management between heterogeneous trust domains, this paper proposed a cross-domain authentication scheme based on multi-layer blockchain. This scheme used local blockchain for distributed node management in IoT application scenarios, and used public blockchain for cross chain identity authentication between blockchains. This paper designed a protocol for cross domain authentication. In order to solve the problem of mutual trust among multiple management domains in cross-domain access, this paper proposed a DOPS consensus based on trust evaluation to evaluate the credibility of nodes. Finally, it analysed the security and efficiency of cross domain authentication scheme. The analysis shows that the scheme has good security and effectiveness, and improves the efficiency of cross domain authentication.