两层架构的可信身份服务平台研究与设计  

RESEARCH AND DESIGN OF A PLATFORM FOR TRUSTED IDENTITY SERVICE WITH TWO-TIER ARCHITECTURE

作　　者：朱玉涛[1,2] 王雅哲[1,3] 武传坤[1] 

机构地区：[1]中国科学院软件研究所信息安全国家重点实验室,北京100190 [2]中国科学院研究生院,北京100190 [3]信息安全共性技术国家工程研究中心,北京100190

出　　处：《计算机应用与软件》2012年第3期1-4,8,共5页Computer Applications and Software

基　　金：国家自然科学基金项目(60803129);中国科学院知识创新工程重要方向项目(YYYJ-1013)

摘　　要：针对当前网络环境中基于用户真实身份安全管控需求与用户隐私保护需求之间的矛盾,引入主管机构作为可信方,将用户的真实身份管理与虚拟业务账号管理独立开来,建立两层架构的可信身份服务平台。平台通过身份绑定机制,建立用户业务账号与其真实身份之间的映射关系,实现基于真实身份的信任保障;并根据业务的应用场景配置策略为其提供用户属性,以保障用户隐私安全。In view of the contradiction in current cyberspace field between the need of safety management and control based on users real identity and the need of users＇ privacy protections,this paper proposes the establishment of a trusted identity service platform with two-tier architecture which provides users real identity management capabilities completely independent to virtual business account management system by introducing the competent authorities as the trusted party.On the platform,a mapping relationship between user＇s real identity and his business account is established through the identity binding mechanism to achieve real identity-based trust guarantee.On the other hand,users＇ attributes can be released to the platform according to configuration policy of the application scenario of business for protecting users＇ privacy safety.

关 键 词：身份管理服务 身份绑定 属性保护 隐私安全 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]