A virtual bridge certificate authority‐based cross‐domain authentication mechanism for distributed collaborative manufacturing systems

Abstract

The virtual enterprise (VE) is a new collaborative intelligent manufacturing paradigm that pools the core competencies of its member enterprises through computer networks to exploit transient market opportunities. The successful operation of such an organization is strongly dependent on its information securities, in which cross‐domain authentication among entities of different member enterprises is a crucial issue. This problem is particularly difficult in VEs because of their collaborative nature in terms of agility, market dynamics, low cost, and diversity of collaboration modes. In this paper, we put forward a novel virtual bridge certificate authority (BCA) trust model, based on which an efficient cross‐domain authentication scheme is further presented. The proposed scheme is implemented by the distributed verifiable secret sharing protocol and the threshold elliptic curve cryptosystem signature algorithm. It has the same advantages of simple construction and short length of inter‐enterprise certification paths as the BCA model but does not need to create and maintain a dedicated physical BCA. In addition, the proposed scheme has the merits of high bit security, high efficiency, low cost, conspiracy attack resistance, and adaptability to diverse collaboration modes of VE. Therefore, the scheme is suitable for cross‐domain authentications in VEs, especially for resource‐limited applications. Copyright © 2014 John Wiley & Sons, Ltd.

Cross-heterogeneous Domain Authentication Scheme Based on Blockchain

“…On the same configuration machine, the computing time of the 1024 RSA was approximately half that of the 192 that of the 256-bit Sha was approximately 1 Therefore, the hash algorithm is more than a dozen times faster than the public key algorithm. Compared to the method of [25], our scheme reduced the number of digital signatures and verifications by 8 times and reduced the hash algorithm twice each time. In the authentication stage, the new scheme performed better than that of [24] and provided higher throughput.…”

IRBA: An Identity-Based Cross-Domain Authentication Scheme for the Internet of Things

“…Each CA shares one or two cross certificates with BCA, thus establishing a trust relationship between CAs through BCA, a trusted independent node. Zhang et al proposed a non-trusted center elliptic curve threshold signature to propose a virtual bridge CA-based virtual enterprise cross-domain authentication scheme, but due to the relatively large overhead cost, the scalability was not strong [24]. Yao et al implemented the mutual authentication between PKI and Kerberos heterogeneous domains by using the bridge CA authentication model, but the certificate maintenance is complex, and the bridge CA management is difficult [25].…”

“…Among these three methods, EIMAKP adopts centralized authentication scheme, BCCA uses Blockchain storage certificate for cross domain authentication and CHDA uses Blockchain to build a heterogeneous trust alliance between PKI and IBC domains. We will compare the performance of some cryptographic operations in the related protocols given by Ma et al [24]. The experiment results are listed in Table 7.…”

Multidomain security authentication for the Internet of things

“…A cross‐domain authentication method using blind signature technology is proposed in References 17 and 18 , which uses the features of blind signature to support user's authentication of the registration provider, protect the identity of the user, and resolve known vulnerabilities in these systems. A cross‐domain authentication scheme is proposed in Reference 19 , which is implemented using a distributed verifiable secret sharing protocol and a threshold elliptic curve cryptosystem signature algorithm. The scheme has the advantages of high security, low cost, anticollusion attack, and strong adaptability to multiple cooperation modes of virtual enterprisers.…”