The invention relates to a bilinear-group-based cross-domain union
authentication method, which comprises the following steps of: 1, the initialization of a
system, namely, randomly selecting different mutually isomorphic subgroups Gk as key generating parameters of corresponding domains by using each domain, wherein k is more than or equal to 1 and less than or equal to R; 2, the generation of keys of each domain, constructing an
authentication center private key / public key pair by mapping the generating parameters and a
Hash function; 3, the
key distribution of
a domain authentication center (DAC) to members in the domains; and 4, cross-domain key
verification, namely, the member UD1 in the union domain D1 is supposed to be required to access the member UD2 in the union domain D2, performing the cross-domain key
verification between UD1 and UD2, and if the UD1 and UD2 pass the cross-domain key
verification, determining that UD1 is an internal member with the union domain public key of PD1 so as to achieve the authentication effect of crossing a plurality of domains. By the method, multi-domain resource sharing is realized, simultaneously, the security and entity anonymous properties of resources of each domain can be ensured, the bidirectional entity
anonymous authentication of resource access among the plurality of domains is supported, and the privacy of each entity is relatively better protected; and the method is relatively more flexible, secure and practicable.