基于区块链和密码累加器的自我主权身份认证方案

Self-sovereign identity authentication scheme based on blockchain and cryptographic accumulator

针对现有基于区块链的身份认证方案中存在的认证流程复杂、需要多次区块链操作、链上数据不够精简、身份暴露后无法再次隐藏的问题,提出了一种基于区块链和密码累加器的自我主权认证方案。利用密码累加器成员验证高效性的特点,精简区块链数据存储,降低链上数据交互频率,提高系统性能和可扩展性;同时,提出了一种身份数据二次隐藏的方法,能够再次隐藏已披露的用户数据,进一步提高系统的安全性。经与现有身份认证方案进行对比分析和实验验证,表明该方案具有较低的存储、通信与计算成本和较高的可扩展性和安全性。

This paper proposed a self-sovereign identity authentication scheme based on blockchain and cryptographic accumulator to solve the problems of complex authentication process,multiple blockchain operations,diffuse data on the chain,and the inability to hide the identity again after exposure,which were common in the current authentication schemes.By taking advantage of the outstanding performance of a cryptographic accumulator in set-membership tests,the scheme could compact the blockchain storage,reduce the frequency of on-chain data interaction and improve system performance and scalability.In addition,this paper designed a method to hide identity data,thus hiding the disclosed user data again and further improving the security of the system.The results of experimental verification and comparison between the proposed scheme and current scheme show that the proposed scheme not only has lower storage and communication and calculation cost,but also has higher scalability and security.