Cross-heterogeneous Domain Authentication Scheme Based on Blockchain

Abstract

With the rising popularity of the Internet and the development of big data technology, an increasing number of organizations are opting to cooperate across domains to maximize their benefits. Most organizations use public key infrastructure to ensure security in accessing their data and applications. However, with the continuous development of identity-based encryption (IBE) technology, small- and medium-sized enterprises are increasingly using IBE to deploy internal authentication systems. To solve the problems that arise when crossing heterogeneous authentication domains and to guarantee the security of the certification process, we propose using blockchain technology to establish a reliable cross-domain authentication scheme. Using the distributed and tamper-resistant characteristics of the blockchain, we design a cross-domain authentication model based on blockchain to guarantee the security of the heterogeneous authentication process and present a cross-domain authentication protocol based on blockchain. This model does not change the internal trust structure of each authentication domain and is highly scalable. Furthermore, on the premise of ensuring security, the process of verifying the signature of the root certificate in the traditional cross-domain authentication protocol is improved to verify the hash value of the root certificate, thereby improving the authentication efficiency. The developed prototype exhibits generality and simplicity compared to previous methods.

A Lightweight Cross-Domain Authentication Protocol for Trusted Access to Industrial Internet

“…proposed a multi-Certificate Authority (CA)-based authentication architecture to establish distributed trust among multiple domains and share cross-domain certificate information. Liu et al (2021) designed an efficient cross-domain anonymous authentication scheme based on blockchain and proposed an authentication protocol that combines PKI environment and blockchain. In summary, traditional Internet authentication schemes are deficient in security, scalability, and performance, and lack authentication of devices.…”