Dynamic Time-Bound Anonymous Complete Cross-Domain Authentication Scheme for IoT

Abstract

The rapid proliferation of the Internet of Things (IoT) has made resource exchange and collaboration across diverse IoT domains commonplace, necessitating secure and privacy-preserving cross-domain authentication. However, existing schemes suffer from critical limitations: they lack time-bound access control, leading to persistent unauthorized access and heightened security risks, and most are incomplete, requiring resource-intensive redeployment of cryptographic mechanisms and increasing management overhead. To address these challenges, we propose a dynamic time-bound anonymous complete cross-domain authentication scheme that leverages consortium blockchain for decentralized trust, embeds dual temporal constraints, expiration time and permissible authentication periods, into credentials for fine-grained access control and automatic natural revocation, and employs accumulators and non-interactive zero-knowledge proofs (NIZKs) to enable anonymous authentication while ensuring strong privacy protection. Crucially, the proposed scheme achieves complete cross-domain authentication without modifying existing cryptographic mechanisms, significantly reducing overhead in computational, communication, and storage. Security and performance analyses confirm that the proposed scheme not only guarantees robust security and privacy but also outperforms existing schemes in efficiency.