文献类型：期刊文献

中文题名：基于双区块链的PKI模型

英文题名：PKI Model Based on Dual Blockchain

作者：王诚[1];郑红[1];黄建华[1];钱诗慧[1]

机构：[1]华东理工大学信息科学与工程学院,上海200237

年份：2022

卷号：40

期号：3

起止页码：528

中文期刊名：应用科学学报

外文期刊名：Journal of Applied Sciences

收录：CSTPCD;;Scopus;北大核心:【北大核心2020】；CSCD:【CSCD_E2021_2022】；

基金：上海市信息化发展(大数据发展)专项(No.201901043)资助

语种：中文

中文关键词：公钥基础设施;证书颁发机构;区块链;智能合约

外文关键词：public key infrastructure(PKI);certificate authority(CA);blockchain;smart contract

摘要：公钥基础设施(public key infrastructure,PKI)体系为实施电子商务、电子政务、办公自动化等提供了非常重要的安全服务。该文以区块链和智能合约为基础构建了证书颁发机构(certificate authority,CA),提出基于双区块链的分布式PKI模型,以医疗PKI为应用场景,用区块链和智能合约技术管理证书和病人信息,保证了证书发布和撤销的透明性,实现了病人信息的隐私保护和访问控制,解决了传统的PKI中存在的单点故障、多CA互信、证书发放不安全、证书透明性以及快速验证等问题。安全性分析和实验表明该模型可以解决传统PKI和现有单链PKI模型中存在的多种问题,有效保护了病人的隐私,并显著提高了证书发放和验证的效率。
Public key infrastructure(PKI)system provides very important security services for the implementation of e-commerce,e-government and office automation.This paper builds a certificate authority(CA)based on blockchain and smart contract and proposes a dual blockchain-based distributed PKI model.As used in medical application scenarios,the PKI model can manage certificates and patient information with blockchain and smart contract technology,realize the privacy protection and access control of patient information,and solve the problems of single point of failure,multi-CA mutual trust,insecure certificate issuance,certificate transparency and rapid verification in traditional PKI.Security analysis and experiments show that the proposed model can solve a variety of problems existing in traditional and existing single-chain PKI models,effectively protect patient privacy,and significantly improve the efficiency of certificate issuance and validation.