基于区块链的PKI和IBC组合身份认证方案

doi:10.16180/j.cnki.issn1007-7820.2025.08.003

电子科技 ›› 2025, Vol. 38 ›› Issue (8): 19-26.doi: 10.16180/j.cnki.issn1007-7820.2025.08.003

基于区块链的PKI和IBC组合身份认证方案

王艳春, 谢诗港(), 袁琪

齐齐哈尔大学通信与电子工程学院,黑龙江齐齐哈尔 161006

收稿日期:2024-01-23 修回日期:2024-02-08 出版日期:2025-08-15 发布日期:2025-07-10
通讯作者: 谢诗港(1997-),男,E-mail:717540505@qq.com,硕士研究生。研究方向:电子信息与区块链。
作者简介:王艳春(1972-),女,教授。研究方向:机器人室内定位与导航、嵌入式系统。
基金资助:
黑龙江省教育厅基本科研业务专项(145209150);齐齐哈尔大学研究生创新科研项目(QUZLTS_CX2023015)

Research on Combined PKI and IBC Authentication Scheme Based on Blockchain

WANG Yanchun, XIE Shigang(), YUAN Qi

School of Telecommunication and Electronic Engineering,Qiqihar University,Qiqihar 161000,China

Received:2024-01-23 Revised:2024-02-08 Online:2025-08-15 Published:2025-07-10
Supported by:
Heilongjiang Provincial Department of Education Basic Scientific Research Business Special(145209150);Qiqihar University Graduate Student Innovative Research Program(QUZLTS_CX2023015)

摘要/Abstract

摘要：

文中提出了基于区块链的PKI(Public Key Infrastructure)和IBC(Identity-Based Cryptography)组合身份认证方案,利用区块链去中心化和防篡改特点解决了传统基于PKI技术中存在的单点故障问题以及多CA(Certificate Authority)互信难问题,从而简化了CA的证书管理以及系统开销。实验结果表明,所提方案中PKI技术既解决了安全域间的信任关系,也解决了IBC无法在大环境使用的问题。IBC技术替代传统数字证书,有效减少了通信开销,提升了认证速度。在有效提高身份认证效率的同时解决了传统身份认证与区块链的单点故障问题,具有更好的安全性。

关键词: 区块链, 身份认证, PKI, IBC, 安全域, 证书管理, CA, 通信开销, 单点故障

Abstract:

This study proposes a combination of PKI(Public Key Infrastructure) and IBC(Identity-Based Cryptography) authentication scheme based on blockchain. The decentralized and tamper-proof features of blockchain solve the single point of failure problem and the difficulty of multi-CA(Certificate Authority) mutual trust problem existing in traditional PKI technology, thus simplifying the certificate management and system overhead of CA. The experimental results show that the PKI technology in the proposed scheme not only solves the trust relationship between security domains, but also solves the problem that IBC cannot be used in the environment. IBC technology replaces the traditional digital certificate, effectively reduces the communication cost, and improves the authentication speed. While effectively improving the efficiency of identity authentication, it solves the single point of failure problem between traditional identity authentication and blockchain, and has better security.

Key words: blockchain, identity authentication, PKI, IBC, security domain, certificate management, CA, communications overhead, single point of failure

中图分类号:

TN929.5

王艳春, 谢诗港, 袁琪. 基于区块链的PKI和IBC组合身份认证方案[J]. 电子科技, 2025, 38(8): 19-26.

WANG Yanchun, XIE Shigang, YUAN Qi. Research on Combined PKI and IBC Authentication Scheme Based on Blockchain[J]. Electronic Science and Technology, 2025, 38(8): 19-26.

图/表 15

图1

图2

图3

图4

图5

图6

图7

表1

符号说明"

符号	含义
E_RSA	RSA加密
S_RSA	RSA签名
D_RSA	RSA解密
V_server	客户端对服务器的证书验证
V_client	服务器对客户端的证书验证
$E H I B A$	分层的基于身份的加密
$D H I B A$	分层的基于身份的解密

表1

表2

表3

表4

图8

图9

图10

表5

参考文献 20

[1]	Ahmed A, Olov S, Karl A, et al. A survey of blockchain from the perspectives of applications, challenges, and opportunities[J]. IEEE Access, 2019, 7(2):117134-117151.
[2]	Dattani J, Sheth H. Overview of blockchain technology[J]. Asian Journal of Convergence in Technology, 2019, 5(1):1-3.
[3]	Kubilay M Y, Kiraz M S, Mantar H A. CertLedger:A new PKI model with certificate transparency based on blockchain[J]. Computers and Security, 2019, 85(4):333-352.
[4]	Schilling L, Uhlig H. Some simple bitcoin economics[J]. Journal of Monetary Economics, 2019, 10(6):16-26.
[5]	Wang W, Hu N, Liu X. Block CAM:A blockchain-based cross-domain authentication model[C]. Guangzhou: IEEE the Third International Conference on Data Science in Cyberspace, 2018:1-20.
[6]	马晓婷, 马文平, 刘小雪. 基于区块链技术的跨域认证方案[J]. 电子学报, 2018, 46(11):2571-2579. doi: 10.3969/j.issn.0372-2112.2018.11.002
	Ma Xiaoting, Ma Wenping, Liu Xiaoxue. A cross domain authentication scheme based on blockchain technology[J]. Acta Electronica Sinica, 2018, 46(11):2571-2579. doi: 10.3969/j.issn.0372-2112.2018.11.002
[7]	Hap H B U, Irfan M, Saqlain M. The concept of blockchain and its application: a review[J]. Theoretical and Applied Computational Intelligence, 2013, 13(1):49-57.
[8]	王丽华, 程翔, 杨宁彬, 等. 基于分布式存储框架的无中心联邦学习[J]. 电子科技, 2023, 36(8):29-34.
	Wang Lihua, Cheng Xiang, Yang Ningbin, et al. Distributed-based decentralized federated machine learning[J]. Electronic Science and Technology, 2023, 36(8): 29-34.
[9]	Bhowmik A, Sarkar A, Karforma S, et al. A symmetric key based secret data sharing scheme[J]. International Journal of Computer Sciences and Engineering, 2019, 7(1):188-192.
[10]	Yakubov A, Shbair W, Wallbom A, et al. A blockchain-based pki management framework[C]. Tapei: Network Operations and Management Symposium, 2018:23-27.
[11]	Jiang W, Li H, Xu G, et al. PTAS:Privacy-preserving thin-client authentication scheme in blockchain based PKI[J]. Future Generation Computer Systems, 2019, 96(7):185-195.
[12]	Hughes A, Park A, Kietzmann J, et al. Beyond bitcoin:What blockchain and distributed ledger technologies mean for firms[J]. Business Horizons, 2019, 62(3):273-281. doi: 10.1016/j.bushor.2019.01.002
[13]	Han K, Hwang S O. A PKI without TTP based on conditional trust in blockchain[J]. Neural Computing & Applications, 2020, 32(17):13097-13106.
[14]	Anwar S, Shukla V K, Rao S S, et al. Framework for financial auditing process through blockchain technology, using identity based cryptography[C]. Ras Al Khaimah: HCT Information Technology Trends, 2019:99-103.
[15]	Aas J, Barnes R, Case B, et al. Let's encrypt:An automated certificate authority to encrypt the entire web[C]. Chicago: Proceedings of the ACM SIGSAC Conference on Computer & Communications Security, 2019:2473-2487.
[16]	Heinl M P, Giehl A, Wiedermann N, et al. MERCAT:A metric for the evaluation and reconsideration of certificate authority trustworthiness[C]. Chicago: Proceedings of the ACM SIGSAC Conference on Computer & Communications Security, 2019:1-15.
[17]	Gentry C, Silverberg A. Hierarchical ID-based cryptography[C]. Queenstown: The Eighth International Conference on the Theory and Application of Cryptology and Information Security, 2002:548-566.
[18]	Panda S S, Satapathy U, Mohanta B K, et al. A blockchain based decentralized authentication framework for resource constrained IoT devices[C]. Kanpur: The Tenth International Conference on Computing,Communication and Networking Technologies, 2019:1785-1790.
[19]	Chen J, Yao S, Yuan Q, et al. Certchain:Public and efficient certificate audit based on blockchain for TLS connections[C]. Honolulu: IEEE Conference on Computer Communications, 2018:2060-2068.
[20]	Yuval Y, Daniel G, Nadia H. CacheBleed:A timing attack on OpenSSL constant time RSA[J]. Journal of Cryptographic Engineering, 2017, 7(2):99-112.

计算花费	SAP	HIBA
客户端	1次E_RSA、1次S_RSA、1次Vserver	2次E_HIBA、1次D_HIBC
服务器	1次D_RSA、1次S_RSA、1次Vclient	2次D_HIBA、1次E_HIBC

方案	防止盗取身份	中间人攻击	女巫攻击
文献[3]	√	√	√
文献[10]	√	×	×
文献[18]	√	√	×
文献[19]	√	×	√
本文方案	√	√	√

方案	用户隐私保护	撤销透明度
文献[3]	×	√
文献[10]	×	√
文献[18]	×	√
文献[19]	×	√
本文方案	√	√

系统功能	响应时间/s
用户注册	10.52
证书颁发	12.28
证书更新	9.53
证书撤销	8.56

基于区块链的PKI和IBC组合身份认证方案

Research on Combined PKI and IBC Authentication Scheme Based on Blockchain

RichHTML

PDF (PC)

赞

可视化

摘要/Abstract

引用本文

使用本文

图/表 15

参考文献 20

相关文章 15

Metrics

本文评价

推荐阅读 0

[1]	洪宇琪, 李清都, 牟海明, 刘常义. 分布式EtherCAT转CAN高速控制模块[J]. 电子科技, 2025, 38(8): 49-56.
[2]	谢益峰, 邹健, 刘艾旺, 朱能飞, 方李明, 步林炎, 施云辉. 基于区块链的微网群双层能量交易模型[J]. 电子科技, 2025, 38(6): 1-8.
[3]	王勇, 杨义龙, 范晓晖, 周雷, 孔祥勇. 基于迁移学习和改进EfficientNet-B0的脑肿瘤分类算法[J]. 电子科技, 2025, 38(4): 46-51.
[4]	吕海玉, 罗广, 朱嘉炜, 张凤登. 多核处理器共享Cache的划分算法[J]. 电子科技, 2024, 37(9): 27-33.
[5]	朱勇, 黄永明, 何幸. 基于雷达和视频融合的目标检测[J]. 电子科技, 2024, 37(8): 1-7.
[6]	孔小爽, 袁健. 基于鸟群人工鱼群算法的区块链移动边缘计算卸载模型[J]. 电子科技, 2024, 37(8): 26-33.
[7]	张地, 李运发. 基于区块链的物联网多域数据共享机制[J]. 电子科技, 2024, 37(10): 55-63.
[8]	黄子璇,李桥兴. 基于随机森林模型的城市非法营运车辆识别[J]. 电子科技, 2024, 37(1): 66-71.
[9]	曾祥义,刘伟,肖昊. 一种嵌入式设备固件安全更新方案[J]. 电子科技, 2023, 36(8): 14-18.
[10]	王丽华,程翔,杨宁彬,宫碧瑶,黄泽宇,陈美燕. 基于分布式存储框架的无中心联邦学习[J]. 电子科技, 2023, 36(8): 29-34.
[11]	李珂然,陈胜,柯盼盼. 一种基于CA-Net的面部口罩分割方法[J]. 电子科技, 2023, 36(6): 64-71.
[12]	管银凤,张凤登,张海涛,张宇辉. 最早截止期优先算法在CAN FD网络中的改进[J]. 电子科技, 2023, 36(2): 29-36.
[13]	杨莹莹,刘翔,石蕴玉. 一种改进的AGV障碍物检测方法[J]. 电子科技, 2022, 35(9): 1-6.
[14]	程晓雅,张雷. 基于深度学习的有遮挡人脸识别方法研究[J]. 电子科技, 2022, 35(1): 35-39.
[15]	魏星. 基于改进DNS协议的移动网络支付安全通信协议模型[J]. 电子科技, 2021, 34(9): 54-57.