摘要
身份认证是当前数字化世界中广泛应用的一项技术,对于流量至上的时代,安全而便捷的身份验证方案对于应用服务吸引用户是至关重要的.去中心化身份通过使用完全去中心化的技术如区块链,让用户完全控制自己的身份.为了进一步提高身份认证的安全性与便捷性,提出一种基于区块链和可信执行环境(TEE)的属性签名身份认证方案.现有的身份验证方法存在用户身份凭证管理繁重、安全性不足等问题.用户利用属性签名生成指向应用服务的持久性凭据,并且凭据是可扩充的.而用户反复扩充凭据的过程相比单次生成凭据保存更有被攻击者植入木马的风险,可信执行环境则可以在签名过程中提供硬件级别的保护,避免中间参数的泄露.同时还用较小的额外验证代价实现了对用户身份泄露、冒用的审计,进一步提高了方案的安全性.
Identity authentication is a technology widely used in the current digital world.In the era of traffic supremacy,a secure and convenient identity authentication solution is crucial for attracting users to application services.Decentralized identity gives users complete control over their identity by using a fully decentralized technology such as blockchain.In order to further improve the security and convenience of identity authentication,an attribute signature authentication scheme based on blockchain and trusted execution environment is proposed.Existing identity verification methods have problems such as heavy management of user identity certificates and insufficient security.Attribute signatures are used by users to generate persistent credentials pointing to application services,and credentials are extensible.In the process of repeatedly expanding credentials,the user is more likely to be implanted with a Trojan horse than a single generation of credentials.The trusted execution environment can provide hardwarelevel protection during the signing process to avoid the leakage of intermediate parameters.At the same time,the audit of user identity leakage and fraudulent use is realized with a small additional verification cost,which further improves the security of the scheme.
作者
冉津豪
蔡栋梁
Ran Jinhao;Cai Dongliang(School of Computer Science,Fudan University,Shanghai 200433;Shanghai Engineering Research Center of Blockchain(Fudan University),Shanghai 200433;Yiwu Research Institute,Fudan University,Yiwu,Zhejiang 322000)
出处
《计算机研究与发展》
EI
CSCD
北大核心
2023年第11期2555-2566,共12页
Journal of Computer Research and Development
基金
国家重点研发计划(2019YFB2101703)
国家自然科学基金项目(62272107,U19A2066)
上海市科技创新行动计划(21511102200)
广东省重点领域研发计划(2020B0101090001)。
关键词
区块链
可信执行环境
属性签名
去中心化身份
零知识证明
blockchain
trusted execution environment(TEE)
attribute signature
decentralized identity
zero-knowledge proof