Existing information service entities (ISE) in various domains (PKI domain and IBC domain) interact more frequent. To solve the obstacle to the development of services caused by unsafe and inefficient cross-domain authentication

a novel blockchain-based cross-domain authentication scheme is proposed. A blockchain domain agent server is set in IBC to participate in SM9 key generation and build up the consortium blockchain model along with the blockchain certificate server (PKI). Based on the high credible model with the advantages of blockchain technology

a cross-domain authentication protocol and re-authentication protocol are proposed

and are proved by SOV logic. Compared with the related schemes

our scheme reduces the computation and communication on user side and simplifies the heavy authentication process. Therefore

the scheme has good practicability in domain authentication.