Abstract:With an increasing demand for authenticated data exchange between jurisdictions, ensuring the privacy and security of data interactions is crucial for national security, public health, and economic vitality, becoming a fundamental national infrastructure. Current solutions can be categorized into two types: fully decentralized autonomous systems based on blockchains or centralized solutions that rely on authoritative centers such as certification authorities (CAs). In reality, a balance needs to be struck between guaranteed authority and privacy independence. A certain authority is needed as an authorization guarantee, and decentralization is required to ensure privacy and the independence of the authority. This paper proposes a novel scheme, CT-MA-ABE (Cross-Trust Multiple Authorization Attribute-Based Encryption), to address these issues by implementing MA-ABE for cross-border institutional authorization interactions, utilize blockchain certification authority (BCA) for credibility and encryption-based authorization to protect attribute data privacy. This solution integrates the role of 'notary' in cross-border interactions, addressing the supervision problem in fully decentralized approaches while also considering the trust issue in centralized systems. This paper also introduces the Universal Certificate Authority Pool (UCAP), an innovative hybrid federated authorization method, creatively utilizing the implied authorization conditions of attributes to create a flexible and transitive authorization mechanism based on attribute relationships and extensions, enhancing privacy protection and improving the speed of authorization matrix calculation. The successful deployment of the system between the legal jurisdictions in South China, Zhuhai and Macau as a critical infrastructure component for securing data interactions further demonstrates its effectiveness as a reliable and secure solution.

A Certificate Authority Domain-based Cross-domain Authentication Scheme for Virtual Enterprise Using Identity Based Encryption

Inter-domain authentication scheme for Pervasive Computing Environments

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Authentication scheme based on biometric encryption for pervasive computing environments

Virtual certificate authority for virtual enterprises

A New Approach to Provide Global Certificate Service in Virtual Enterprise

Cross-Domain Authentication Scheme for Vehicles Based on Given Virtual Identities

A Virtual Enterprise Oriented Access Control Mechanism

A Virtual Private Network for Virtual Enterprise Information Systems

An authentication server for a virtual enterprise

Blockchain-based Certificate-free Cross-domain Authentication Mechanism for Industrial Internet

Cross trust: A decentralized MA-ABE mechanism for cross-border identity authentication

Design and Implementation of Self-certification of Digital Certificate Within the Enterprise

CABC: A Cross-Domain Authentication Method Combining Blockchain with Certificateless Signature for IIoT

Multi-domainsecurity Authentication Protocol Based on ID

A strategy of dynamic authentication and authorization in B3G/4G

Cross-domain Authentication Alliance Protocol Based on Isomorphic Groups

Design and Implementation of Multi-Domain and Multi-System Identity Authentication Based on Certificate

A V2V Identity Authentication and Key Agreement Scheme Based on Identity-Based Cryptograph

A Secure Cross-Domain Access Control Scheme in Social Networks.

An Authentication Scheme Using Identity-based Encryption & Blockchain