Abstract: Existing cross-domain authentication schemes do not consider whether the device attributes meet the access control requirements of the domain, which may cause non-compliant devices to access sensitive information of the domain or perform high-risk operations. Therefore, a cross-domain authentication scheme based on blockchain and certificateless attribute signature is proposed. This scheme used blockchain technology to realize authentication information sharing between different trust domains, and proposed a certificateless attribute signature algorithm to realize authentication of device identity and fine-grained access control of device attributes, and avoided the risk that the key generation center completely controlled the private key. The analysis results show that, compared with the existing schemes, this scheme has higher security while reducing the computation overhead and communication overhead.