CertBA: A Decentralized Authentication Scheme via Blockchain and Dynamic Cryptographic Accumulator
摘要
With the rapid advancement of blockchain technology, numerous studies have explored its application in Public Key Infrastructure. However, existing blockchain-based PKI systems predominantly utilize blockchain for storing certificate information, relying on traversing the blockchain for certificate queries. Given that blockchain data can only be appended, the efficiency of identity authentication tends to degrade over time. To tackle these challenges, we propose CertBA, a novel certificate management scheme that integrates blockchain with dynamic cryptographic accumulators. In this framework, blockchain serves as a distributed and immutable ledger to record essential data for certificate verification. Distributed Certificate Authority nodes function as miners within the blockchain network, processing certificate operation requests, thereby enhancing the system’s scalability and robustness. Specifically, CertBA extends the certificate structure by introducing a witness field \(W_i\) and a smart contract account within the certificate extensions, both populated by the CA during certificate issuance. Upon certificate revocation, the CA employs the dynamic cryptographic accumulator to remove the user’s value, invalidating the witness \(W_i\) and signaling the certificate’s revocation. When a user needs to verify a certificate’s status, the CA computes the result based on the witness \(W_i\) and the current accumulator value on the blockchain, then returns the result to the user. Experimental results demonstrate that CertBA effectively addresses the misjudgment issues prevalent in existing blockchain-based certificate revocation schemes and significantly enhances the efficiency of querying certificate revocation information.