| In order to improve the security of the cross-domain identity authentication technology and the efficiency of authentication services in the data security mechanism,this paper designs a master-slave blockchain structure combined with a hierarchical Byzantine fault-tolerant algorithm for the authentication scheme.The identity authentication scheme carries out structural and process improvements.Without changing the internal structure of the original trust domain,the use of a fault-tolerant hierarchical blockchain structure can effectively resist centralized trust attacks,reduce the amount of data,and improve the data security and feasibility of identity authentication services,The specific research content of this article is as follows:First of all,this article designs a master-slave blockchain structure for the crossdomain authentication scheme,in which the master and slave chain nodes perform their duties.The nodes in each trust domain form a slave chain,and the representative node that performs the timeout rotation mechanism is selected to perform identity authentication,consensus transfer and data storage functions;the main chain node corresponding to each representative node constitutes the main chain,through the issuance,consensus and verification area Trust is transferred in the form of a blockchain certificate.Design a hierarchical Byzantine fault-tolerant algorithm that matches the master-slave chain.It only participates in chain consensus instead of all chain consensus.Each consensus executes different algorithms in stages according to the situation of system error nodes,reducing the number of consensus participating nodes and improving algorithm fault tolerance.Analysis of the attack model of the consensus scheme and calculation of message complexity show that the algorithm can better balance security and efficiency.Furthermore,on the basis of the master-slave chain structure and the hierarchical Byzantine fault-tolerant algorithm,a homogeneous cross-domain identity authentication scheme based on a certificate-free cryptosystem and a heterogeneous cross-domain authentication scheme based on a public key infrastructure and a certificate-free cryptosystem are designed respectively.plan.Using the method of storing hash values on the chain and storing the corresponding data off the chain reduces the storage pressure on the chain and improves the speed of data retrieval;uses temporary identities and hierarchical ID trees to construct identities;uses blockchain certificates to transfer trust,which is effective The identity authentication process is simplified;the combined private key,hybrid encryption algorithm and signature algorithm are used to ensure the security of the scheme.The innovation of this paper is that the consensus algorithm is optimized.The existing consensus algorithms are hierarchically combined and fault-tolerant at the two levels of the overall consensus number and the consensus cost per time,so as to reduce the redundancy of consensus data;the design is based on master-slave blocks.The hierarchical cross-domain identity authentication structure of the chain simplifies the authentication process,and uses the blockchain certificate hash value to replace the traditional certificate for efficient query,which fundamentally avoids the risk of centralization;and assigns new tasks to the original functional nodes in the trust domain,To avoid major changes to the trust domain,and improve the program’s enforceability.The simulation verification of the AVISPA security protocol and the comparison of the security attributes and computational costs of different documents show that the scheme uses lower computational costs,achieves a variety of security goals,and has strong confidentiality,availability and data consistency.A dynamic balance is sought between sex and efficiency. |