基于隐私保护的分布式数字身份认证技术研究及实践探索  

Research and practice of decentralized digital identity authenticationtechnology based on privacy protection

作　　者：焦志伟 吴正豪 徐亦佳 魏凡星 JIAO Zhiwei;WU Zhenghao;XU Yijia;WEI Fanxing(Ant Group,Hangzhou 310020,China;IIFAA,Hangzhou 310020,China;CTTL Terminal Labs,China Academy of Information and Communications Technology,Beijing 100191,China)

机构地区：[1]蚂蚁科技集团股份有限公司,杭州310020 [2]互联网可信认证联盟,杭州310020 [3]中国信息通信研究院泰尔终端实验室,北京100191

出　　处：《信息通信技术与政策》2024年第1期59-66,共8页Information and Communications Technology and Policy

摘　　要：随着Web 3.0的发展,分布式数字身份应运而生。分布式数字身份面向分布式网络,能够把用户、机构、设备和数字资产统一接入网络,具备去中心化、互通互认、隐私安全等特点。首先研究了基于隐私保护的分布式数字身份认证体系,概述了其技术架构、认证流程、技术特点;其次阐述了基于终端的安全防护机制和基于密码学的隐私保护方案,其中隐私保护安全方案包括基于密码学的分布式身份认证和身份属性认证;最后介绍了视障用户场景实现案例,为分布式数字身份应用场景提供思路,助力用户隐私保护。With the development of Web3.0,decentralized digital identity comes into being.Decentralized identity is oriented to decentralized networks,allowing users,institutions,devices and digital assets to access the network,with the characteristics of decentralization,mutual recognition,privacy and security.This paper studies the decentralized digital identity authentication system based on privacy protection,and firstly summarizes its technical architecture,authentication process and technical characteristics.Then,it presents the security protection mechanism based on terminal and the privacy protection scheme based on cryptography.The privacy protection security scheme includes DID authentication based on cryptography and identity attribute authentication.Finally,it introduces the implementation case of the visually impaired user scenario to provide ideas for decentralized digital identity application scenarios and help protect user privacy.

关 键 词：分布式数字身份 终端安全 隐私安全 零知识证明 

分 类 号：D630[政治法律—政治学] F49[政治法律—中外政治制度]