Decentralized identity authentication and key management scheme

SM9 is an identity-based cryptography and constitutes an important part of Chinese commercial cryptography system. It can avoid the complicated PKI system certificate management problems and provides new solution for IoT (Internet of Things) security applications. But SM9 needs the trusted third party KGC (Key Generator Center) to generate and manage the key for the user. So, key update is very troublesome. In order to solve the problem of SM9 key update, this paper proposes a decentralized identity authentication and key management scheme using block chain technology. In the scenario, the user only needs the IGC (Identity Generator Center) to generate its identifier and the key for the first time. Then, the user can automatically update the key. In the process, identifier remains the same as public key and only the private key and parameters update, so it is quite convenient for identity authentication. This paper redefines data structure of the transaction and each key update process is recorded in the chain blocks in the form of transaction. The block chain can guarantee the security and reliability of key update process since it can't be tampered with. The research in this paper is quite valuable for the identity authentication and key management in decentralized IoT application scenarios.

I. Introduction

With the development of the IoT (Internet of Things) and 5G technology, the era of interconnectedness is coming. It predicts that networking equipment will reach 25 billion in 2020 and continue to grow. Large-scale IoT can bring much convenience in life, but it also puts forward higher safety requirements at the same time. Traditional PKI (Public Key Infrastructure) authentication mechanism does not fit for this massive equipment authentication, otherwise it will lead to extremely complex CA (Certificate Authority) Certificate management problem. Once received requests over the network exceed resources capacity, it is easy to cause the network collapse.