基于区块链的去中心化动态身份认证系统

DECENTRALIZED DYNAMIC IDENTITY AUTHENTICATION SYSTEM BASED ON BLOCKCHAIN

  • 摘要: 身份认证是信息安全理论中非常重要的方面,通常身份认证容易出现的问题是用户名和口令都以明文的方式在网络中传输,安全性不高,极易遭受重放攻击和字典攻击,动态口令认证虽然安全性较高,但是如果服务器与客户端的时间同步出现问题,用户将长期无法登录。而且多数动态口令在一个时间段内的口令是相同的,也容易遭受重放攻击。所以提出一种基于区块链的去中心化动态身份认证系统,通过使用公钥+nonce(从0开始只增不减的整型数)签名的登录方式,既解决了身份认证中心化的问题,又解决了重放攻击,提高了身份认证过程的安全性。

     

    Abstract: Identity authentication is a very important aspect of information security theory. Usually, the common problem with identity authentication is that the user's name and password are transmitted in the network in plaintext, which is not safe, and vulnerable to replay attacks and dictionary attacks. Although dynamic passwords authentication is more secure, if there is a problem with the time synchronization between the server and the client, the user will not be able to login for a long time. Moreover, most password of the dynamic password is the same within a period of time, and it is also vulnerable to replay attacks. Therefore, a decentralized dynamic identity authentication system based on blockchain is proposed. By using a public key+nonce (integer number that increases from 0) to sign in, it not only solves the problem of over-centralized identity authentication, but also solves the replay attack. The proposed system improves the security of the identity authentication process.

     

/

返回文章
返回