基于双区块链的PKI模型

公钥基础设施（public key infrastructure,PKI）体系为实施电子商务、电子政务、办公自动化等提供了非常重要的安全服务。该文以区块链和智能合约为基础构建了证书颁发机构（certificate authority,CA），提出基于双区块链的分布式PKI模型，以医疗PKI为应用场景，用区块链和智能合约技术管理证书和病人信息，保证了证书发布和撤销的透明性，实现了病人信息的隐私保护和访问控制，解决了传统的PKI中存在的单点故障、多CA互信、证书发放不安全、证书透明性以及快速验证等问题。安全性分析和实验表明该模型可以解决传统PKI和现有单链PKI模型中存在的多种问题，有效保护了病人的隐私，并显著提高了证书发放和验证的效率。

PKI Model Based on Dual Blockchain

Public key infrastructure (PKI) system provides very important security services for the implementation of e-commerce, e-government and office automation. This paper builds a certificate authority (CA) based on blockchain and smart contract and proposes a dual blockchain-based distributed PKI model. As used in medical application scenarios, the PKI model can manage certificates and patient information with blockchain and smart contract technology, realize the privacy protection and access control of patient information, and solve the problems of single point of failure, multi-CA mutual trust, insecure certificate issuance, certificate transparency and rapid verification in traditional PKI. Security analysis and experiments show that the proposed model can solve a variety of problems existing in traditional and existing single-chain PKI models, effectively protect patient privacy, and significantly improve the efficiency of certificate issuance and validation.