An attribute-based anonymous authentication method and system

Abstract

The invention discloses an attribute-based anonymous authentication method which contains the following steps: 1) a trusted party TP generates a master key x and system public parameters according to set safety parameters; 2) a user U registers with the TP to submit attributes and initiates an attribute certificate issue request; 3) the TP verifies the attributes of the user U and issues an attribute certificate for the user U according to the attributes of the U, the master key x and the system public parameters; 4) the user U initiates an access request to a service provider SP; 5) the SP looks up an access strategy corresponding to the access request and returns the access strategy to the user U; 6) the user U selects an attributes that the U wants to use according to the access strategy, and an anonymous certificate is calculated by the use of the attribute certificate and a private key r and is sent to the SP; and 7) the SP verifies the anonymous certificate, and accepts the access request and provides corresponding service to the user if verification is passed and the access strategy is satisfied. According to the invention, privacy of a user is guaranteed, and a more flexible threshold attribute selective showing scheme is supported.

Description

technical field [0001] The invention belongs to the field of computer technology and information security, and relates to a method for protecting the privacy of user access service behaviors in a cloud computing environment and preventing privacy leakage, and is specifically embodied as an attribute-based anonymous authentication method and system. Background technique [0002] With the development of the Internet and mobile Internet, people's daily life is increasingly dependent on network services, and network services have begun to involve all aspects of basic necessities of life. Especially in recent years, the concept of cloud computing has brought together network services on the Internet, e-government, e-commerce, e-medicine, and various enterprise-level application management systems are widely used, and personal consumption behaviors such as online browsing, shopping, social networking, and games And more and more. Many activities in real life do not require identi...

AI Technical Summary

Problems solved by technology

[0005] At present, there are already some research projects that focus on technologies related to anonymous authentication, including the shibboleth project organized by Oasis and the Liberty project of Liberty Alliance, etc., but the core technology of these projects is to use pseudonyms in the communication process so that third parties Obtain the user's personal information, but the service provider can still obtain the user's real identity and associate user behavior, thus destroying the user's personal privacy

, in the present invention, the service provider can only obtain the attributes required by the service, but cannot obtain other attributes, so that the activity association cannot be performed, and the real identity of the user cannot be obtained

Images