边缘计算环境下基于区块链的双因子跨域认证

Two-Factor Cross-Domain Authentication Based on Blockchain in Edge Computing Environment

摘要: 本文针对边缘计算环境下用户间跨域认证与密钥协商问题，基于区块链技术，利用口令的简便性及生物特征的唯一性设计跨域协议。该协议融入了模糊提取技术，提高了用户在认证密钥协商阶段的安全性和便捷性。协议中用户端选取性能高的边缘设备完成注册及认证过程，实现了用户在边缘认证服务器和区块链处的双重认证，在保障用户之间安全通信的同时减轻了云端的网络负担。此外，本文分析了协议满足的安全属性，且本文方案通信消耗较低。

Abstract: Aiming at the problem of user-to-user authentication and key agreement of cross-domain in edge computing environment, a cross-domain is proposed under the blockchain technology with the simplicity of password and the unique identification of biometric features. The protocol enhances the security and convenience of user-to-user authentication and key agreement phase by using fuzzy extraction technology. The edge devices with high performance are selected to complete the registration and authentication process. And the authentications of the user in the edge server and the blockchain are realized, which ensures the security communication of user-to-user and reduces the network burden of the cloud. In addition, the security of the protocol satisfies is analyzed and lower communication cost is required in the proposed scheme.