首页 | 本学科首页   官方微博 | 高级检索  
     检索      

双共识混合链跨异构域身份认证方案
引用本文:张利华,刘季,曹宇,陈世宏,郑琛,张赣哲.双共识混合链跨异构域身份认证方案[J].应用科学学报,2021,40(4):666-680.
作者姓名:张利华  刘季  曹宇  陈世宏  郑琛  张赣哲
作者单位:1. 华东交通大学 软件学院, 江西 南昌 330013;2. 华东交通大学 电气与自动化工程学院, 江西 南昌 330013
基金项目:国家自然科学基金(No.61563016);江西省教育厅科技项目基金(No.GJJ14371)资助
摘    要:针对目前基于区块链的身份认证方案存在节点性能损耗严重的问题,提出一种基于双共识混合链的跨异构域身份认证方案。采用多因子分析方法对基于综合性能的Raft共识算法进行优化,实现了对节点综合性能的合理评估;选出综合性能优异的节点作为跨域节点,可避免因跨域节点性能不佳而引起的系统故障。该方案结合实用拜占庭容错共识机制并引入监督节点,增强了认证系统的拜占庭容错能力,解决了因恶意节点导致的域内错误认证问题。利用SM9广播密码算法对认证过程中的通信数据进行加密,实现了系统的双向认证和保密通信,确保了系统的安全性。实验表明:该方案的双共识认证机制相较于单一共识认证机制,具有较强的拜占庭容错能力和较高的吞吐量,不但能使系统更加安全稳定,而且减少了单对单加解密计算操作,降低了系统的计算开销和时间开销。

关 键 词:区块链  跨异构域身份认证  共识机制  
收稿时间:2021-11-12

Dual Consensus Hybrid Blockchain Cross Heterogeneous Domain Identity Authentication Scheme
ZHANG Lihua,LIU Ji,CAO Yu,CHEN Shihong,ZHEN Chen,ZHANG Ganzhe.Dual Consensus Hybrid Blockchain Cross Heterogeneous Domain Identity Authentication Scheme[J].Journal of Applied Sciences,2021,40(4):666-680.
Authors:ZHANG Lihua  LIU Ji  CAO Yu  CHEN Shihong  ZHEN Chen  ZHANG Ganzhe
Institution:1. School of Software, East China Jiaotong University, Nanchang 330013, Jiangxi, China;2. School of Electrical and Automation Engineering, East China Jiaotong University, Nanchang 330013, Jiangxi, China
Abstract:Aiming at the serious loss of node performance in current blockchain-based identity authentication schemes, a cross heterogeneous domain identity authentication scheme based on double consensus hybrid chain is proposed. Multi-factor analysis method is used to optimize the Raft consensus algorithm based on comprehensive performance, realizing a reasonable evaluation of the comprehensive performance of nodes. System failures caused by poor performance of cross domain nodes are avoided by selecting nodes with excellent comprehensive performance as cross domain nodes. By working in combination with practical Byzantine fault tolerant (PBFT) consensus mechanism in supervisory nodes, the Byzantine fault tolerance of the authentication system is enhanced, and the problem of intra domain false authentication caused by malicious nodes is solved. In addition, SM9 broadcast cipher algorithm is used to encrypt communication data in the authentication process, so as to realize the two-way authentication and communication confidence of the system, and ensure the security of the system. Experiments show that the dual consensus authentication mechanism has better Byzantine fault tolerance and higher throughput than the single consensus authentication mechanism, and makes the system more secure and stable. Moreover, it reduces the calculation operation in single to single encryption and decryption, and saves calculation overhead and time overhead of the system.
Keywords:blockchain  cross heterogeneous domain identity authentication  consensus mechanism  
点击此处可从《应用科学学报》浏览原始摘要信息
点击此处可从《应用科学学报》下载免费的PDF全文
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司  京ICP备09084417号