首页 | 本学科首页   官方微博 | 高级检索  
     

两层架构的可信身份服务平台研究与设计
引用本文:朱玉涛,王雅哲,武传坤.两层架构的可信身份服务平台研究与设计[J].计算机应用与软件,2012(3):1-4,8.
作者姓名:朱玉涛  王雅哲  武传坤
作者单位:中国科学院软件研究所信息安全国家重点实验室;中国科学院研究生院;信息安全共性技术国家工程研究中心
基金项目:国家自然科学基金项目(60803129);中国科学院知识创新工程重要方向项目(YYYJ-1013)
摘    要:针对当前网络环境中基于用户真实身份安全管控需求与用户隐私保护需求之间的矛盾,引入主管机构作为可信方,将用户的真实身份管理与虚拟业务账号管理独立开来,建立两层架构的可信身份服务平台。平台通过身份绑定机制,建立用户业务账号与其真实身份之间的映射关系,实现基于真实身份的信任保障;并根据业务的应用场景配置策略为其提供用户属性,以保障用户隐私安全。

关 键 词:身份管理服务  身份绑定  属性保护  隐私安全

RESEARCH AND DESIGN OF A PLATFORM FOR TRUSTED IDENTITY SERVICE WITH TWO-TIER ARCHITECTURE
Zhu Yutao,Wang Yazhe,Wu Chuankun.RESEARCH AND DESIGN OF A PLATFORM FOR TRUSTED IDENTITY SERVICE WITH TWO-TIER ARCHITECTURE[J].Computer Applications and Software,2012(3):1-4,8.
Authors:Zhu Yutao  Wang Yazhe  Wu Chuankun
Affiliation:1(SKLOIS,Institute of Software,Chinese Academy of Sciences,Beijing 100190,China) 2(National Engineering Research Center of Information Security,Beijing 100190,China) 3(Graduate University of Chinese Academy of Sciences,Beijing 100190,China)
Abstract:In view of the contradiction in current cyberspace field between the need of safety management and control based on users real identity and the need of users’ privacy protections,this paper proposes the establishment of a trusted identity service platform with two-tier architecture which provides users real identity management capabilities completely independent to virtual business account management system by introducing the competent authorities as the trusted party.On the platform,a mapping relationship between user’s real identity and his business account is established through the identity binding mechanism to achieve real identity-based trust guarantee.On the other hand,users’ attributes can be released to the platform according to configuration policy of the application scenario of business for protecting users’ privacy safety.
Keywords:Identity management service Identity binding Attributes protection Privacy safety
本文献已被 CNKI 等数据库收录!
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司  京ICP备09084417号