去中心化的身份标识与认证方案

Decentralized Identity Identification and Authentication Scheme

摘要: 传统身份认证中私钥重复使用及中心化密钥管理带来一定的安全隐患。本文引入物理不可克隆函数(Physical Unclonable Functions, PUF)技术，代替传统公钥基础设施(PKI)分发密钥，通过利用PUF的高度随机性和唯一性，实现同一用户在不同系统或应用场景中动态生成独立且唯一的私钥，避免了私钥重复使用导致的撞库攻击风险以及私钥静态存储带来的内存泄漏攻击风险。该方法不仅增强了身份认证过程的安全性和隐私保护，还提升了多场景身份隔离能力，为构建去中心化、可信赖的身份认证体系提供了新的技术路径。安全分析表明，该方案能有效抵御撞库、身份伪造、内存泄漏等攻击，适用于隐私保护要求高的身份认证场景。实验结果表明，在具体的应用场景中验证了方案的可行性和有效性。

Abstract: In traditional authentication systems, the reuse of private keys and centralized key management introduce certain security risks. This paper introduces Physical Unclonable Function (PUF) technology to replace the traditional Public Key Infrastructure (PKI) for key distribution. By leveraging the high randomness and uniqueness of PUFs, the method enables the dynamic generation of independent and unique private keys for the same user across different systems or application scenarios, thereby preventing credential-stuffing attacks caused by private-key reuse and memory-leakage attacks arising from static private-key storage. This approach not only enhances the security and privacy protection of the authentication process but also improves identity isolation across multiple scenarios, offering a new technical pathway for building decentralized and trustworthy authentication systems. Security analysis shows that the proposed scheme can effectively resist credential-stuffing, identity forgery, memory-leakage, and other attacks, making it suitable for authentication scenarios with high privacy-protection requirements. Experimental results demonstrate the feasibility and effectiveness of the scheme in specific application contexts.