我要投稿

信息安全研究 ›› 2022, Vol. 8 ›› Issue (10): 964-.

• 数据安全与隐私计算专题 • 上一篇    下一篇

工业互联网环境下高效分布式匿名异构跨域认证方案

邓淏天1彭洪涛2祝烈煌1安鹏2吴桐1,3张川1    

  1. 1(北京理工大学网络空间安全学院北京100081)
2(北京明朝万达科技股份有限公司安元实验室北京100142)
3(北京理工大学长三角研究院浙江嘉兴314019)
  • 出版日期:2022-10-25 发布日期:2022-10-24
  • 通讯作者: 邓淏天 博士研究生.主要研究方向为物联网安全、区块链技术. hdeng@bit.edu.cn
  • 作者简介:邓淏天 博士研究生.主要研究方向为物联网安全、区块链技术. hdeng@bit.edu.cn 彭洪涛 主要研究方向为密码学与应用、数据安全治理、联邦学习、恶意代码分析. penghongtao@wondersoft.cn 祝烈煌 博士，教授.主要研究方向为密码算法及安全协议、区块链技术、云计算安全. liehuangz@bit.edu.cn 安鹏 硕士，工程师.主要研究方向为密码学与应用、数据安全治理、联邦学习. anpeng@wondersoft.cn 吴桐 博士.主要研究方向为密码学与应用、云计算安全、区块链. tongw@bit.edu.cn 张川 博士，副研究员.主要研究方向为云计算安全、密码学与应用、机器学习、区块链技术. chuanz@bit.edu.cn

Efficient Distributed Anonymous Heterogeneous Cross-domain  Authentication Scheme for Industrial Internet of Things

  • Online:2022-10-25 Published:2022-10-24

PDF

摘要： 工业互联网被政府和企业认为是信息时代下半场竞争的主战场.随着工业互联网的功能日益强大，设备不仅需要在所在的安全域中相互连接和交换信息，还需要跨域协作来提高效率.跨域协作面临数据安全的问题，安全的身份认证技术是数据安全的保障、隐私计算的基础.然而传统的跨域认证存在诸多问题，如需要依赖可信第三方、普适性差、中心化管理、成本高、效率低、缺乏隐私保护等.针对以上问题，提出了基于无证书可链接环签名的分布式匿名异构跨域认证方案.该方案一方面创新性地将可链接环签名算法应用于跨域认证，既实现了异构跨域认证，又实现了设备的匿名认证与身份保护；另一方面，利用区块链构建跨域的分布式存储网络，通过IPFS(interplanetary file system)技术提高区块链数据存储和查询的效率.最后通过安全性分析、方案对比和基于以太坊的模拟实验证明了该方案的安全性和有效性.

关键词: 跨域认证, 环签名, 匿名认证, 异构认证, 区块链

Abstract: The Industrial Internet of Things (IIoT) is considered by governments and businesses as the main battlefield for competition by the government and enterprises in the second half of the information age. As the IIoT becomes more powerful and complex, devices in IIoT not only need to build a connection or exchange information in the security domain where they are located but also need to cooperate with the devices in other domains to improve production efficiency. Crossdomain collaboration faces the problem of data security, secure identity authentication technologies are the guarantee of data security and the basis of privacy computing. However, the traditional crossdomain authentication has many limitations, such as the need to rely on trusted third parties, poor universality, centralized management, high cost, low efficiency, lack of privacy preserving, etc. In this paper, a distributed anonymous heterogeneous crossdomain authentication scheme based on certificateless linkable ring signature is proposed to address the aforementioned issues. For one thing, the linkable ring signature algorithm is innovatively applied to crossdomain authentication, which not only realizes heterogeneous crossdomain authentication but also implements anonymity authentication and identity protection; for another, the blockchain is used to build a crossdomain distributed storage network. The efficiency of blockchain data storage and the query is improved through IPFS (Inter Planetary File System) technology. Finally, security analysis, schemes comparison, and simulation experiments based on Ethereum are given to prove the security and effectiveness of our proposed scheme.

Key words: crossdomain authentication, ring signature, anonymous authentication, heterogeneous authentication, blockchain

京ICP备19004174号
　 版权所有 © 《信息安全研究》杂志社有限公司
地址：北京市西城区三里河路58号 国家信息中心　邮编：100045　
电话：010-68558637　 Email：ris@cei.cn　监督举报电话：010-68558637
技术支持：北京玛格泰克科技发展有限公司