面向元宇宙的数字公民身份认证方案  

A metaverse-oriented digital citizen authentication scheme

作　　者：吕秋云[1] 程绍鹏 杨满智 陈晓光 王震 LYU Qiuyun;CHENG Shaopeng;YANG Manzhi;CHEN Xiaoguang;WANG Zhen(School of Cyberspace,Hangzhou Dianzi University,Hangzhou 310018,China;Macao University of Science and Technology,Macao 999078,China;Eversec(Beijing)Technology Co.,Ltd.,Beijing 100086,China;ZhuoYue Honors College,Hangzhou Dianzi University,Hangzhou 310018,China)

机构地区：[1]杭州电子科技大学网络空间安全学院,浙江杭州310018 [2]澳门科技大学,中国澳门999078 [3]恒安嘉新(北京)科技股份公司,北京100086 [4]杭州电子科技大学卓越学院,浙江杭州310018

出　　处：《智能科学与技术学报》2022年第3期396-409,共14页Chinese Journal of Intelligent Science and Technology

基　　金：浙江省重点研发计划基金资助项目(No.2022C01018)。

摘　　要：元宇宙作为虚实融生的三元世界,为人们提供了海量多样化的网络服务,但由于缺乏现实世界的面对面交流且无法打破地理与时间的限制,现有方案无法在高效认证数字公民的同时实现隐私保护与监管。基于此,提出一种面向元宇宙的数字公民身份认证方案。依据身份时效性设计分层认证方案,基于Paillier同态加密和保持结构性签名等算法实现去中心化标识符与可验证凭证的双重不可链接,并借助代码嵌入技术保障公民的被遗忘权,保护公民隐私;而且在认证过程中嵌入监管因子,以供日后追责。最后,安全性分析证明了所提方案满足不可链接性、可追溯性;性能分析表明了所提方案具有较低计算成本和Gas开销,可满足实际应用需求。As a surreal ternary world,the metaverse provides people with massive and diverse network services.However,due to the lack of face-to-face communication in reality and the broken geographical and time constraints,the existing schemes cannot effectively authenticate digital citizens while realizing privacy protection and accountability.Therefore,a metaverse-oriented digital citizen authentication scheme was proposed.Firstly,a layered authentication scheme based on the time-sensitive identity was constructed.Secondly,for protecting citizens’privacy,the Paillier homomorphic encryp-tion algorithm and structure-preserving signature scheme were introduced to realize the double unlink ability of decentra-lized identifiers and verifiable credentials,in addition,the citizens’right to be forgotten was guaranteed by the code em-bedding technology.Thirdly,the regulatory factor during the authentication phase for accountability was designed.Final-ly,the security analysis proves that the proposed scheme satisfies the unlinkability and traceability.And,the performance analysis shows that the proposed scheme has lower computational cost and gas overhead,which can meet the needs of practical use.

关 键 词：元宇宙 数字公民 身份认证 不可链接性 可监管 被遗忘权 区块链 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]