摘要
区块链上的身份体制是不健全的.如何在区块链上认证某个用户的身份、如何确保身份的背书机构是真实的一直是一个挑战.运行在区块链上的分布式公钥基础设施可以在某种程度上解决上述问题,但是属性密码结合区块链可以提供更贴近于真实社会的身份模型.提出一种基于区块链和去中心属性密码的访问控制身份方案,利用用户和组织之间相互授权、背书身份属性实现信任成本的链接,利用属性密码对链上数据进行访问控制和共享达到细粒度的访问控制和隐私保护.设计了可多用户协同的属性密码,为身份模型中的机构提供背书能力.通过实验仿真和对比分析,该方案在安全性和性能上都满足当前通用区块链的需求,为其提供了一种通用基础的身份模型.
The identity system on Blockchain is defective. There is a challenge of how to verify users’ identities and ensure the endorsements’ realities on Blockchain. The decentralized public key infrastructure running on Blockchain can solve the above problems to some extent, but we can provide an identity-model closer to the real society with the combination of the attribute-based algorithm and Blockchain. This paper proposes an access control scheme based on Blockchain and decentralized the attribute-based algorithm with the identity. It uses mutual authorization between users and organizations to get endorsements of identity’s attributes for trust-cost links, and uses the attribute-based algorithm to control and share data on the chain for fine-grained access control and privacy protection. By designing a multi-user collaborative attribute-based algorithm, it offers endorsement capabilities for organizations in the identity-model. Through experimental simulation and comparative analysis,the solution meets the requirements of the current universal Blockchain in terms of security and performance,and provides a universal identity-model.
作者
陈泽宁
张亮
张双俊
阚海斌
Zening CHEN;Liang ZHANG;Shuangjun ZHANG;Haibin KAN(Shanghai Key Laboratory of Intelligent Information Processing,School of Computer Science,Fudan University,Shanghai 200433,China;Fudan-Zhongan Joint Laboratory of Blockchain and Information Security,Shanghai Engineering Research Center of Blockchain,Shanghai 200433,China;Shanghai Institute for Advanced Communication and Data Science,Shanghai 200433,China)
出处
《中国科学：信息科学》
CSCD
北大核心
2021年第8期1345-1359,共15页
Scientia Sinica(Informationis)
基金
国家重点研发计划(批准号:2019YFB2101703)
国家自然科学基金(批准号:61672166,U19A2066)
上海科技创新行动计划(批准号:20222420800,20511102200)资助项目。
关键词
区块链
属性密码
访问控制
身份认证
隐私保护
blockchain
attributed-based encryption
access control
identity authentication
privacy protection
