基于区块链技术的高效跨域认证方案

为解决现有公钥基础设施（PKI）跨域认证方案的效率问题，利用具有分布式多中心、集体维护和不易篡改优点的区块链技术，提出基于区块链技术的高效跨域认证方案，设计了区块链证书授权中心（BCCA）的信任模型和系统架构，给出了区块链证书格式，描述了用户跨域认证协议，并进行了安全性和效率分析。结果表明，在安全性方面，该方案具有双向实体认证等安全属性；在效率方面，与已有跨域认证方案相比，利用区块链不可篡改机制，使用哈希算法验证证书，能减少公钥算法签名与验证的次数、提升跨域认证效率。

Efficient cross-domain authentication scheme based on blockchain technology

To solve the efficiency problem of the existing Public Key Infrastructure (PKI) cross-domain authentication scheme, by using blockchain technology with the advantages of distributed multi-center, collective maintenance and not being easy to tamper, an effective cross-domain authentication scheme was proposed, including BlockChain Certificate Authority (BCCA) trust model and system architecture, blockchain certificate format and user cross-domain authentication protocol, as well as the security and efficiency. The results show that in terms of security, the scheme has security attributes such as mutual entity authentication; in terms of efficiency, compared with the existing cross-domain authentication scheme, by taking advantage of blockchain mechanism such as not being easy to tamper, and hash algorithm, the number of signature and verification of public key algorithm is reduced, which enhances the efficiency of cross-domain authentication.