Journal Article

A security algorithm based on SM9 for interdomain communication

Li, Yang, Cheng, Huayang, Wang, Dan, Dong, Liangyu, Gu, Junjie, Yan, Jing

2024

Overview

In interdomain communication, confirming member identity and ensuring security is critical, yet identity forgery remains a challenge. Traditional solutions rely on a Certification Authority (CA) to issue authentication certificates and create a trust chain for identity verification. However, different security domains often have incompatible signature mechanisms, complicating certificate management and authentication. We propose a novel ring signature algorithm based on SM9 to address these issues. This algorithm enables member authentication across different domains, ensuring security irrespective of signature mechanisms and certificate versions. With ring signatures, members can authenticate their identities without revealing them to the CA, reducing certificate management burdens and enhancing system flexibility and compatibility. We provide algorithm correctness proofs and conduct security analyses to support practical implementation for identity authentication and communication security.

• Publisher: IOP Publishing
• Subject: Algorithms / Authentication / Security