Based on proxy resignature, the signature transformation between trust domains of different cryptographic systems is realized with the help of the cloud authentication center, so as to achieve cross-domain access between users and cloud service providers in heterogeneous environment. Hierarchical ID tree realizes the uniqueness of identity in communication, and the security of heterogeneous cross-domain identity authentication is enhanced by the two-factor authentication of “password + key” and temporary identity replacing real identity. The security of the scheme is proved under the CK model, which can anonymously trace entity identity, resist replay attacks, replacement attacks, and man-in-the-middle attacks, and the simulation experiment is carried out. By searching it in related fields, no paper on heterogeneous cross-domain identity authentication based on proxy resignature has been published yet. The results of this paper show that the proposed scheme has better computing performance and higher security.

/pdf/heterogeneous-cross-domain-identity-authentication-scheme-1zmutgr4v5.pdf

Heterogeneous Cross-Domain Identity Authentication Scheme Based on Proxy Resignature in Cloud Environment

In the cloud computing, different cloud service providers are often in different trust domains. As the traditional identity authentication mode cannot be applied to the cloud computing, the cross-domain identity authentication mechanism is needed to solve the identity authentication problem in the cloud computing. In view of the security problems in cloud computing, a cross-domain identity authentication scheme based on group signature is proposed. This scheme introduces a group of cloud service providers and users who are located in different trust domains. Any member of the group can generate the signature on behalf of the whole group, making the user access the cloud service provider in the case of privacy security. At the same time, with traceability it can track illegal operation of illegal users. In addition, the scheme uses the Chinese Remainder Theorem to integrate the message, and it can control the length of the data in the calculation process, simplifying the calculation process. It also realizes the join and revocation of group members without changing the key of other legitimate group members, and the maintenance cost of authentication schemes is low. The results show that the scheme has the advantages of anonymity, anti-counterfeit, traceability, anti- joint attack and so on. It can not only realize tracking function under the condition of guaranteeing user’s privacy, but can also simplify the authentication calculation process to improve the efficiency of the cross domain identity authentication, and its performance is more suitable for large-scale cloud computing environment.

Scheme on Cross-Domain Identity Authentication Based on Group Signature for Cloud Computing

The power information network is a significant part of national key information infrastructure, as well as the core promoting force to guarantee the strategic development of energy internet. Due to its correlative characteristics in industrial control network, the internet and IoT, superadd a large of nodes and data sensitivity, the evolving network attack technology has put forward new requirements and challenges to its security protection system, which also hinders the overall interconnecting and interworking of energy internet to a certain extent. In order to improve the network security capability of full-service power network under the energy internet environment, a power information security framework based on cloud service was proposed to improve the safety and reliability, build an end-to-end electronic authentication mechanism and security management mode of strong data interworking, finally realize the life cycle data protection, trusted identity management and reliable electronic voucher application, meet the rapid development of the energy internet and escort the new digital economic of the power industry.

Sun Kehui

Papers

Trust-Distributed-Based Authentication Mechanism Using Hierarchical Identity-Based Cryptography