关键词: 区块链, 容错算法, 跨域身份认证, AVISPA工具

Abstract: Heterogeneous cross-domain identity authentication is a technology that performs identity confirmation and security information exchange for nodes in different institutional trust domains. The existing authentication schemes mainly have issues such as single-point attack risk, complex authentication. This paper designs a master-slave blockchain identity authentication model and a hierarchical Byzantine fault-tolerant algorithm for matching. Through the step-by-step and phase-by-phase consensus of the master-slave chain, the number of nodes participating in the consensus is reduced. The unique function nodes of the PKI system and the CL-PKC system correspond to the master-slave chain nodes. On the premise of not changing the function of the original trusted domain node, the hash value of the blockchain certificate is used to efficiently transmit trust, and the authentication is optimized. The process realizes two-way heterogeneous cross-domain identity authentication. In the end, through the simulation experiment and the analysis of security and performance, the result shows that compared the mentioned scheme with others, consensus efficiency and fault tolerance are improved, and communication overhead is reduced while ensuring secure communication.

Key words: blockchain, fault-tolerant algorithm, cross-domain authentication, AVISPA tool