快速身份认证系统CFCA FIDO+  

The system of fast identity online CFCA FIDO+

作　　者：高峰 张翼 赵烨昕 Gao Feng;Zhang Yi;Zhao Yexin(China Financial Certification Authority,Beijing 100054)

机构地区：[1]中国金融认证中心

出　　处：《网络空间安全》2019年第2期101-107,共7页Cyberspace Security

摘　　要：随着移动互联网的飞速发展,互联网的发展趋势已经逐渐从PC端转移到移动端,而移动端安全也受到前所未有的关注。面对复杂的互联网环境和大量繁琐的密码口令,迫切需要一种安全、可靠、合规和便捷的认证手段。文章提出了一种将在线快速身份识别FIDO技术与电子认证技术完美结合的方案CFCA FIDO+。用户不仅可以通过人脸识别、指纹识别等生物识别方式实现客户端的免密登录和免密交易,并且由于结合了数字证书,可以对用户的真实身份进行认证。在拥有便捷性的同时,实现了高安全性,保障司法取证,并满足监管要求。With the rapid development of mobile Internet,to gradually transform from PCs to mobile terminals becomes the trend of Internet and mobile security has received unprecedented attention.Facing with complicated cyberspace environment and large quantities of complex passwords,there comes an urgent need for a secure,reliable,compliant and convenient authentication tool.This paper proposes a CFCA FIDO+system that perfectly combines FIDO and electronic authentication technologies.Users can realize the password-free login and transactions by means of biometric recognition such as face recognition and fingerprint recognition.As a result of the combination of digital certificates,user identity can be defined by high secure and convenient methods,and it also can be as a judicial evidence and satisfy the requirements of compliance.

关 键 词：FIDO 快速身份认证 UAF 证书 移动安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]