A controllable cross-domain anonymous authentication system based on blockchain

There are often multiple independent information systems within an enterprise or between different enterprises. However, due to the differences in security policies and data management methods among different management domains, they often do not trust each other. They are reluctant to share sensitive data, which forms information silos. In order to better solve these challenges and break down these information silos, we propose a blockchain-based controllable cross-domain authentication scheme. The system uses a three-tier CA-RA-user structure and leverages blockchain to establish distributed trust between multiple CA domains. In the process of cross-domain authentication, we combine pseudonym technology and PS signature technology to realize user anonymous authentication and identification. At the same time, users are allowed to selectively disclose some attribute information according to their own needs to ensure that their identity information will not be overexposed. In addition, we also use group signature technology to achieve controllable regulation. When malicious behavior is detected, the CA of the domain where the malicious user resides can monitor the anonymous certificate and identify the malicious user.