• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

计算机工程与科学 ›› 2025, Vol. 47 ›› Issue (06): 1008-1017.

• 计算机网络与信息安全 • 上一篇    下一篇

基于中继链的跨链分布式身份认证方案

邓淏天,吴桐,张川,祝烈煌   

  1. (北京理工大学网络空间安全学院,北京  100081)

  • 收稿日期:2023-10-12 修回日期:2023-11-22 出版日期:2025-06-25 发布日期:2025-06-26
  • 基金资助:
    国家自然科学基金(62232002,62202051,62102027);国家重点研发计划(2021YFB2700500,2021YFB2700503);中国博士后科学基金(2021M700435,2021TQ0042);广东省新型安全智能技术重点实验室项目(2022B1212010005);广东省重点研发计划(2021B0101400003);北京理工大学科研创新促进计划(2022YCXZ031)

A cross-chain decentralized identity authentication scheme based on relay chain

DENG Haotian,WU Tong,ZHANG Chuan,ZHU Liehuang   

  1. (School of Cyberspace Science and Technology,Beijing Institute of Technology,Beijing 100081,China)
  • Received:2023-10-12 Revised:2023-11-22 Online:2025-06-25 Published:2025-06-26

摘要: 随着区块链技术的快速发展,已涌现出了数百个不同的区块链平台。不同区块链平台的异构特性带来了新的挑战:如何在异构区块链系统之间进行跨链身份认证,从而保障跨链交互的安全?由于不同区块链平台所使用的底层技术、密码体制等的异构性,现有的身份认证技术难以适应跨链身份认证,并且大都存在单点故障风险、隐私保护不足、验证效率低等问题。针对以上问题,提出了一种基于中继链的分布式跨链身份认证方案,其创新性体现在3方面:首先,结合中继链技术和分布式身份认证技术DID,构建去中心化的自主身份管理体系,实现去中心化跨链身份认证;其次,提出基于零知识证明的身份凭证隐私保护验证技术,有效防范了跨链交互中的隐私溯源风险;最后,设计中继链动态分片协议,通过并行化验证任务处理提升系统吞吐量。实验评估表明,所提方案具有完善的功能和较高的效率,为跨链生态的安全互操作提供了可行路径。

关键词: 分布式身份认证, 跨链, 中继链, 区块链分片, 零知识证明

Abstract: With the rapid development of blockchain technology, hundreds of different blockchain platforms have emerged. The heterogeneous characteristics of different blockchain platforms have brought new challenges:how to perform cross-chain identity authentication between heterogeneous blockchain systems to ensure the security of cross-chain interactions? Due to the heterogeneity of the underlying technologies and cryptographic systems used by different blockchain platforms, existing identity authentication technologies struggle to adapt to cross-chain identity authentication and mostly suffer from issues such as single-point failure risks, insufficient privacy protection, and low verification efficiency. In response to the above problems, this paper proposes a decentralized cross-chain identity authentication scheme based on a relay chain, which innovation is reflected in three aspects:firstly, by combining relay chain technology with decentralized identity authentication technology, a decentralized identity management system is constructed to achieve decentralized cross-chain identity authentication; secondly, privacy protection verification of identity credentials is realized based on zero-knowledge proof, effectively guarding against privacy tracing risks in cross-chain interactions; finally, a relay chain dynamic sharding protocol is designed to improve system throughput by processing verification tasks in parallel. Experimental evaluation shows that this scheme has complete functions and high efficiency, providing a feasible path for the secure interoperability of the cross-chain ecosystem.

Key words: decentralized identity authentication, cross-chain, relay chain, blockchain sharding, zero-knowledge proof