| 以用户为中心的可信终端身份管理模型 |
| |
| 引用本文： | 李建,周化钢,彭越,任其达.以用户为中心的可信终端身份管理模型[J].信息网络安全,2014(4):1-6. |
| |
| 作者姓名： | 李建 周化钢 彭越 任其达 |
| |
| 作者单位： | [1]北京交通大学信息安全体系结构研究中心,北京100044 [2]南宁学院信息工程学院,广西南宁530200 |
| |
| 基金项目： | 教育部新世纪优秀人才支持计划[NCET-11-0565]、广西高等学校科研项目[201204LX668、2012JGA422] |
| |
| 摘 要： | 针对终端用户身份管理难题和现有的身份管理技术的不足，为了满足终端用户在任何情况下访问网络资源的客观需求，文章提出了以用户为中心的可信终端域内、跨域和开放网络环境下的身份管理系统模型，在此基础上设计了包括终端用户身份安全保护机制、身份管理流程、终端用户身份管理协议的终端用户身份安全保护方案，对协议进行了安全性分析和形式化分析，并与其他身份管理模型的安全性进行了比较，结果表明该模型能够安全地管理用户身份和实现各种环境下的访问控制。
|
| 关 键 词： | 身份管理 以用户为中心 可信终端 模型 协议 |
The Model of User-Centric Identity Management based on Trusted Terminal |
| |
| LI Jian,ZHOU Hua-gang,PENG Yue,REN Qi-da.The Model of User-Centric Identity Management based on Trusted Terminal[J].Netinfo Security,2014(4):1-6. |
| |
| Authors: | LI Jian ZHOU Hua-gang PENG Yue REN Qi-da |
| |
| Affiliation: | 1. The research center of information security architecture of Beijing Jiao Tong University, Beijing 100044, China; 2.The school of information engineering of Nanning College, Nanning Guangxi 530200, China) |
| |
| Abstract: | For end-user identity management challenges and weakness of current identity management, in order to satisfy the need which users access network resources in any conditions, the model of user-centric identity management system is proposed which based on trusted terminal for inner-domain, cross-domain and open network environment, the security protection program is designed which includes the protection mechanism of end-user identity and the procedure of end-user identity management and the protocol of identity management, security analysis and formal analysis of the end-user identity management protocol are carried out, the security of the model and other models are compared. The result shows that the model can implement the safe of managing user identity and access control under a variety of environment. |
| |
| Keywords: | identity management user-centric trusted terminal model protocol |
| 本文献已被 CNKI 维普 等数据库收录！ |
