基于FIDO协议双因素eID实名认证方案  

Two-Factor Real-name Authentication Solution of eID Based on FIDO Protocol

作　　者：吴淼[1] 严则明[1] 黄俊[1] WU Miao;YAN Zeming;HUANG Jun(EID Department, 3rd Research Institute, Ministry of Public Security, Shanghai 201204)

机构地区：[1]公安部第三研究所网络身份技术事业部

出　　处：《微型电脑应用》2020年第3期126-129,共4页Microcomputer Applications

摘　　要：为解决当前传统在线认证方案的缺陷,提出一种基于FIDO协议的双因素eID(公民网络电子身份标识)实名认证方案。对当前传统认证方案进行分析,结合移动终端特点,设计了一种基于移动终端的高效可靠的eID双因素实名认证方案,研究FIDO协议特点,设计了一种改进的FIDO U2F协议,将FIDO协议与公民网络电子身份标识eID相结合,实现本地生物特征和eID双因素认证。实验结果表明,该认证方案更加安全便捷,同时能有效保护用户隐私。In order to resolve the problems of traditional online authentication,a two-factor real-name authentication solution of eID based on FIDO protocol is proposed.The traditional authentication solution is analyzed.An effective and reliable two-factor real-name authentication solution based on eID and FIDO is designed.FIDO protocol is researched and an improved FIDO U2F protocol is designed.A solution which is integrated FIDO protocol and eID is proposed by using the two-factor real-name authentication,biometric technique and eID.The results show that the solution is safer and more convenient than the traditional system.The user privacy can be protected by using the solution.

关 键 词：公民网络电子身份标识 FIDO协议 在线实名认证 双因素认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]