面向能源电力区块链的跨域身份控制模型

A Cross-Domain Identity Control Model for Electric Blockchain

针对各类场景业务终端访问不同信任域节点时的跨域身份认证问题,结合区块链与身份认证技术,提出一种面向能源电力场景支持终端灵活跨域认证的区块链可监管可信身份管理模型。首先,建立基于区块链的新型可信身份认证基础架构,电力场景下首次采用哈希值校验的方式完成认证,解决外域终端的可信高效接入问题。其次,为避免恶意终端接入同步节点数据,基于对证书体系的分级分类和能源电力区块链网络,设计终端的认证机制与交易策略,实现终端的可信动态接入与读写交易的权限分离管理。最后,在保证安全性与证书有效性的同时,与已有区块链跨域认证方案相比的结果表明,所提模型能够提升能源电力场景下的终端跨域认证效率。

There would be serious cross-domain authentication issue when business terminals access different trust domain nodes in various scenarios.In this regard,a supervisable and trusted identity management blockchain model is proposed in this paper,so as to support flexible cross-domain authentication of terminals by combining blockchain and identity authentication technology.Firstly,a novel blockchain-based trusted identity authentication infrastructure is established,and the authentication is completed by means of hash value verification,where the problem of trusted and efficient access to terminals in the outer domain could be solved.Secondly,to avoid malicious terminals accessing synchronous node data,the authentication mechanism and transaction strategy of terminals are designed based on the hierarchical classification of the certificate the energy and electricity blockchain network.Then credible and dynamic access of terminals and the separation of authority management of read and write transactions could be accomplished.Finally,while ensuring security and certificate validity,the efficiency of terminal cross-domain authentication could be improved compared with existing blockchain cross-domain authentication solutions.