CroAuth: A Cross-domain Authentication Scheme based on Blockchain and Decentralized Identity
Zinuo Zhang, Ruoting Xiong, Xinyu Di, Wei Zhong Ren · 2024
Current solutions on cross-domain access authentication based on blockchain are largely using digital certificate authentication, where users cannot control their identity, and some operations, such as certificate authentication and update, are inefficient. In this paper, we propose a Self-Sovereign Identity (SSI) based cross-domain authentication scheme implemented on a consortium chain. SSI is introduced as a decentralized digital identity solution to enable user-controlled identity management. Besides, blockchain, as an infrastructure for distributed digital identity, provides a storage place for decentralized identity identifiers and related data. In our scheme, users only need to register in one domain, and can use verifiable credentials (VC) to access other domains in the same consortium chain, without repeated registration. We also propose key method for quickly changing accounts in case of account loss. The logic, performance and security analysis justified that our scheme can protect the privacy of users and can remain feasible in case of a large scale of users.