BTCAS: A Blockchain-Based Thoroughly Cross-Domain Authentication Scheme

Zhang, Hongxia; Chen, Xingshu; Lan, Xiao; Jin, Hongjian; Cao, Qi

doi:10.1016/j.jisa.2020.102538

Cited by 34 publications

(16 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The decentralization, the anonymity, the mobility of devices are ensured in their work. The work [13] solved the problem of "incomplete crossdomain" based on the blockchain. The participants from different domains enables to adopt completely different settings.…”

Section: B Blockchain-based Cross-domain Security Mechanismsmentioning

confidence: 99%

Efficient and Privacy-Preserving Blockchain-Based Multifactor Device Authentication Protocol for Cross-Domain IIoT

Zhang

et al. 2022

IEEE Internet Things J.

View full text Add to dashboard Cite

Industrial Internet of Things (IIoT) has emerged as a prospective technology that improves the productivity and automation level for industrial applications. Devices from cooperative IIoT domains will communicate and collaborate on the increasingly complicated manufacturing tasks. To secure cross-domain device collaborations, we propose combining the blockchain with multi-factor authentication. Because the multifactor authentication conforms to IIoT devices' operation modes and brings higher security levels, and the blockchain technology contributes to building trust among different domains. However, this combined usage still has limitations in terms of the potential loss of factor attack, the storage overhead on the blockchain, and the contradiction between efficiency and privacy preservation. Motivated by these facts, in this paper, we develop a privacypreserving blockchain-based multi-factor device authentication protocol for cross-domain IIoT. Specifically, multiple factors are additionally encoded by the hardware fingerprint into random numbers, before being transformed into key materials. The blockchain only stores each domain's dynamic accumulator, which accumulates derived key materials for devices, thereby reducing the overhead. Moreover, the on-chain accumulator is leveraged to efficiently verify the unlinkable identities of crossdomain IIoT devices. The security of our protocol is formally proved, and the security features and functionalities are respectively discussed. A proof-of-concept prototype was implemented to prove the efficiency and reliability. The comparison results indicate that the on-chain storage is greatly reduced. Finally, the smart contract's performance was evaluated to show scalability.

show abstract

Section: B Blockchain-based Cross-domain Security Mechanismsmentioning

confidence: 99%

Efficient and Privacy-Preserving Blockchain-Based Multifactor Device Authentication Protocol for Cross-Domain IIoT

Zhang

et al. 2022

IEEE Internet Things J.

View full text Add to dashboard Cite

show abstract

“…It provides a virtual environment where multiple live nodes are deployed to create a blockchain network. Smart contracts are written in Turing complete language known as Solidity which is executed in the Ethereum virtual machine 42 . The smart contract code is publicly available to all participating nodes present in the blockchain network.…”

Section: Preliminariesmentioning

confidence: 99%

“…Smart contracts are written in Turing complete language known as Solidity which is executed in the Ethereum virtual machine. 42 The smart contract code is publicly available to all participating nodes present in the blockchain network. In the current research work, multiple nodes are deployed with some initial cost and gas using GETH.…”

Section: Ethereummentioning

confidence: 99%

Smart contract assisted blockchain based public key infrastructure system

Panigrahi

Nayak

Paul

2022

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Public key infrastructure (PKI) is a reliable solution for Internet communication. PKI finds applications in secure email, virtual private network (VPN), e‐commerce, e‐governance, and so on. It provides a secure mechanism to authenticate users and communications. The conventional PKI system is centralized, which exposes the infrastructure to many security issues. The digital certificate generation and validation processes in PKI suffer from high latency and inadequate authentication processes. Moreover, it needs enormous time and effort to mitigate the malfeasance of the certificate authority (CA). The complexity of employing the traditional key and certificate management increases by enforcing the centralized CA$$ CA $$, which can compromise the transaction security. To overcome the aforementioned issues of PKI, three different solutions have been reported in the literature: Log based PKI (LBPKI), Web of Trust (WoT), and blockchain based PKI. The blockchain based PKI achieves more attention as it is the combination of LBPKI and WoT, which serves distributed trust, log of transactions, and constant sized data to verify the identity of users. Motivated by these facts, this article reports a blockchain‐based PKI system which has a lighter smart contract and less storage capacity and is also suitable for lightweight applications. The lighter smart contract in our infrastructure uses a threshold0.3emvalue$$ threshold\kern0.3em value $$, which validates the limit of one participating node for becoming the CA$$ CA $$ of any transaction inside the network. This approach can prevent distributed denial of service (DDoS) attacks. This smart contract also checks the signer node address. The proposed smart contract can prevent seven cyber attacks, such as Denial of Service (DoS), Man in the Middle Attack (MITM), Distributed Denial of Service (DDoS), 51%, Injection attacks, Routing Attack, and Eclipse attack. The Delegated Proof of Stake (DPoS) consensus algorithm used in this model reduces the number of validators for each transaction which makes it suitable for lightweight applications. The timing complexity of key/certificate validation and signature/certificate revocation processes do not depend on the number of transactions. The comparisons of various timing parameters with existing solutions show that the proposed PKI is competitively better.

show abstract

“…It provides a virtual environment where multiple live nodes are deployed to create a blockchain network. Smart contracts are written in Turing complete language known as Solidity which is executed in the Ethereum virtual machine 43 . The smart contract code is publicly available to all participating nodes present in the blockchain network.…”

Section: Ethereummentioning

confidence: 99%

Smart Contract Assisted Blockchain based PKI System

Panigrahi¹,

Nayak²,

Paul³

2022

Preprint

View full text Add to dashboard Cite

Public Key Infrastructure (PKI) is a reliable solution for Internet communication. PKI finds applications in secure email, virtual private network (VPN), e-commerce, e-governance, etc. It provides a secure mechanism to authenticate users and communications. The conventional PKI system is centralized, which exposes the infrastructure to many security issues. The digital certificate generation and validation processes in PKI suffer from high latency and inadequate authentication processes. Moreover, it needs enormous time and effort to mitigate the malfeasance of the Certificate Authority (CA). The complexity of employing the traditional key and certificate management increases by enforcing the centralized , which can compromise the transaction security. To overcome the aforementioned issues of PKI, three different solutions have been reported in the literature: Log based PKI (LBPKI),Web of Trust (WoT), and blockchain based PKI. The blockchain based PKI achieves more attention as it is the combination of LBPKI and WoT, which serves distributed trust, log of transactions, and constant sized data to verify the identity of users. Motivated by these facts, this article reports a blockchain-based PKI system which has a lighter smart contract and less storage capacity and is also suitable for lightweight applications. The lighter smart contract in our infrastructure uses a ℎ ℎ , which validates the limit of one participating node for becoming the of any transaction inside the network. This approach can prevent distributed denial of service (DDoS) attacks. This smart contract also checks the signer node address. The proposed smart contract can prevent seven cyber attacks, such as Denial of Service (DoS), Man in the Middle Attack (MITM), Distributed Denial of Service (DDoS), 51%, Injection attacks, Routing Attack, and Eclipse attack. The Delegated Proof of Stake (DPoS) consensus algorithm used in this model reduces the number of validators for each transaction which makes it suitable for lightweight applications. The timing complexity of key/certificate validation and signature/certificate revocation processes do not depend on the number of transactions. The comparisons of various timing parameters with existing solutions show that the proposed PKI is competitively better.

show abstract

BTCAS: A Blockchain-Based Thoroughly Cross-Domain Authentication Scheme

Cited by 34 publications

References 10 publications

Efficient and Privacy-Preserving Blockchain-Based Multifactor Device Authentication Protocol for Cross-Domain IIoT

Efficient and Privacy-Preserving Blockchain-Based Multifactor Device Authentication Protocol for Cross-Domain IIoT

Smart contract assisted blockchain based public key infrastructure system

Smart Contract Assisted Blockchain based PKI System

Contact Info

Product

Resources

About