Supervisable Anonymous Management of Digital Certificates for Blockchain PKI

Abstract

Aiming at the requirement of anonymous supervision of digital certificates in blockchain public key infrastructure (PKI), this paper proposes a ring signature with multiple indirect verifications (RS-MIV). This mechanism can ensure multiple and indirect verification of certificate signer identity while preserving its anonymity. On this basis, a supervisable anonymous management scheme was designed based on smart contracts, which realizes the anonymity of certificate authority nodes, the anonymous issuance of digital certificates, the anonymous verification of digital certificates, and the traceability of illegal certificate issuers in the blockchain PKI. It is proved that the scheme can guarantee the anonymity and traceability of the certificate issuer’s identity at an acceptable cost.