| With the prevalence of the internet,people engage in various activities online,including shopping,socializing,and learning.However,in this digital world,personal privacy and data security also face significant challenges.For example,some malicious individuals may use hacking techniques to attack personal devices and steal sensitive information,including personal identity and financial information.To address these challenges,an increasing number of researchers and businesses are focusing on the development of security technologies,especially identity authentication and privacy protection technologies.Identity authentication refers to the process of verifying user identity information in a network environment to confirm their real identity and permissions and ensure that the identity information they use on the network is legal and valid.A typical method of identity authentication is to use digital certificates.Currently,X.509 is adopted as the universal standard for digital certificates.The standard requires users to disclose all attribute information on the certificate during identity authentication,which leads to excessive exposure of their attribute information and results in privacy leaks.Therefore,to minimize the exposure of user attribute information,users need to use anonymous authentication technology for identity authentication.Existing anonymous authentication schemes can protect users’ identity privacy while completing identity authentication.However,most schemes do not implement supervision of users’ anonymous identity,leading to the threat of anonymous abuse in the system.Therefore,the research on supervised anonymous authentication schemes has far-reaching significance.However,existing supervised anonymous authentication schemes still have problems such as low efficiency in handling concurrent requests by a single Certificate Authority(CA),low efficiency of identity authentication,high certificate storage overhead,and inability to quickly revoke certificates.This paper proposes corresponding solutions to these problems,and the main work done of this paper is as follows:(1)To address the problems of low identity authentication efficiency and low efficiency in processing concurrent requests by a single CA in existing supervised anonymous authentication schemes,this paper proposes an efficient anonymous authentication and supervision system based on blockchain,which reduces the calculation cost of users in presenting anonymous certificates and verifying anonymous certificates,thereby improving authentication efficiency.The proposed double-layer CA architecture improves the efficiency of handling concurrent requests by CAs in a short time.The system also uses blockchain to store evidence and achieve tamper-proof and irrefutable evidence.Performance analysis and experimental analysis show that the proposed scheme has good practicality.(2)To solve the problems of high certificate storage costs and inability to quickly revoke certificates in existing supervisable anonymous authentication schemes,this paper proposes an efficient revocable anonymous authentication system based on blockchain.In this system,a guarantor applies for registration with their real identity to the registration agency and then generates guarantee values for multiple anonymous users using polynomials,allowing anonymous users to authenticate their identity using the guarantor’s generated guarantee without registration,thereby reducing the storage costs of certificates.The system uses a dynamic accumulator to achieve fast revocation of anonymous certificates,preventing malicious users from engaging in malicious behavior again.At the same time,the system uses group signatures for authorization,which can improve the efficiency of processing concurrent requests in the system.Performance analysis and experimental analysis show that the proposed scheme has good practicality. |
