BCPPAS : Blockchain-Based Cross-Domain Identity Authentication Scheme for IoT with Privacy Protection

In Internet of Things(IoT) systems, ensuring the secure exchange of information between devices from different domains is crucial. Current cross-domain authentication schemes based on a single blockchain struggle to meet the confidentiality requirements for data and information exchange in large-scale IoT systems. This paper proposes a blockchain-based identity authentication scheme (BCPPAS) for IoT, featuring dual-chain collaboration, and designs a novel certificateless aggregate signature algorithm to address complex certificate management and key escrow issues. The edge server is capable of aggregating different signatures to achieve batch authentication, markedly improving authentication efficiency and reducing computational and storage overhead. Also, BCPPAS is designed to avoid costly bilinear pairing operations, providing less computational overhead for IoT devices with limited resources. To protect the privacy of IoT devices, BCPPAS uses the pseudonym instead of the real identity. Finally, efficiency of BCPPAS are demonstrated through theoretical analysis and experiments.