| With the development of Internet technology and data sharing,information security has become more and more essential.In the large-scale Internet environment,various organizations and institutions form independent trust domains by introducing authentication servers.Users access different resources,which causes the problem of cross-domain authentication.In the process of cross-domain authentication,the certificate revocation model based on intermediate entity can ensure the real-time revocation of certificates,but there is the problem of single point failure;Meanwhile,the users’ information may be collected maliciously.The identity authentication using pseudonym can protect the users’ information,but it costs too much pseudonym resources.This paper intends to improve the security by introducing multiple intermediate entities and studying the batch pseudonym authentication mechanism.Firstly,aiming at the single point of failure of intermediate entities in the process of cross domain authentication,we propose an optimization method of cross domain authentication invalid user real-time authentication technology.By introducing multi-intermediate entities and cross-domain authentication of public key infrastructure,a real-time certificate revocation model based on multi-intermediate entities is proposed.By comparing the amount of computation,traffic and anti-single point attack with the certificate revocation model based on intermediate entity,it is verified that the proposed model can solve the problem of single point failure and improve the resistance to single point attack.Secondly,aiming at the problem that the process of cross-domain authentication based on pseudonym causes too much pseudonym resources and certificate storage,we propose an optimization method of cross-domain authentication user identity protection technology.We combine token authentication and SM9 encryption algorithm to study batch updating pseudonym,and propose a batch pseudonym authentication method based on periodic updating,which ensures the unlink-ability of pseudonym to a certain extent.By comparing the anonymous authentication model based on internet of vehicles,the proposed method can reduce the overhead of pseudonym and improve the efficiency of cross domain authentication. |
