摘要：

点对点加密是一种应用于在线通信软件的加密方式,多数的点对点加密通过非对称加密实现,但公钥分发的方案需要依赖于中心化的服务器,如果中心化的服务器攻击或被攻击则可能造成中间人攻击,从而导致聊天信息被泄露的风险。 为此,提出采用区块链技术进行审计的方式,构建一个去中心化的公钥分发方案。该方案所有公钥修改记录的摘要通过智能合约被保存在由CA共同维护的区块链上,使得恶意的修改记录可被追踪和验证,同时采用基于实用拜占庭容错(PBFT)改进的共识算法,达到低能耗和高效的拜占庭容错。实验结果表明,与原PBFT算法相比,该方案安全性明显提高。

关键词: 区块链, 公钥分发, 实用拜占庭容错, 点对点加密, 分布式网络

Abstract:

Point-to-point encryption is an encryption method widely used in online communication software,and is mostly implemented by asymmetric encryption,but the public key distribution scheme relies on a centralized server.If the centralized server is attacked,there is a risk that chat information will be leaked due to a Man-in-the-Middle Attack(MITM).Therefore,this paper uses blockchain technology for auditing to build a decentralized public key distribution scheme.The scheme saves summary of all the public key modification records in the blockchain maintained by the CA through the smart contract,so that it can track and verify the maliciously modified records.The scheme also abopts the improved consensus algorithm based on Practical Byzantine Fault Tolerance(PBFT) to achieve low energy consymption,and efficient Byzantine fault tolerance.Experimental results show that compared with the algorithm,the scheme has high security.

Key words: blockchain, public key distribution, Practical Byzantine Fault Tolerance(PBFT), Point-to-Point encryption, distributed network

中图分类号: 

• TP391