Zero-Trust Single-Package Authorization Authentication Scheme Supporting Privacy Protection and Traceability

Single Packet Authorization (SPA) mechanism, as an essential component of the standard Software-Defined Perimeter in zero-trust architecture, has demonstrated significant advantages in achieving resource stealth access, authentication of access identities, and reduction of network attack surfaces. However, conventional SPA mechanisms employ a traditional centralized structure for storing and distributing keys, lacking privacy protection for user identity information and the ability to effectively trace and identify visitor information during the authentication process. In this paper, we propose a scheme that uses group signatures to anonymize user identity information and combines blockchain technology to supervise and authenticate the identities of anonymous users, thus achieving anonymous identity authentication and supervision. This forms a privacy-preserving and traceable zero-trust SPA authentication scheme, expanding and perfecting the functions of the software-defined perimeter in the zero-trust architecture.