EID security control method and system based on eID

Abstract

The invention discloses an EID security control method and system based on eID. The system comprises a virtual identity management system VIMS and an EID management system EMS of a target application system AS, wherein the VIMS is used for authenticating a user; if authentication is passed, a binding request is generated, and sent to the EMS; when the user accesses the AS, a login request is generated, and sent to the EMS; the EMS is used for authenticating the user according to the binding request; if authentication is passed, the Ie of the eID identity of the user is returned; then, the Ie is bound with account numbers Iv and V included in the binding request; then, a binding result is sent to the VIMS; the user is authenticated according to the login request; if authentication is passed, authentication result information is generated according to a returned virtual account number set {I} and the identifier E of the EMS, and returned to the VIMS; and the VIMS obtains the virtual account number Iv included therein, and processes access of the user.

Description

technical field [0001] The invention relates to an eID-based real identity security control method and system thereof, belonging to the technical field of computers. Background technique [0002] With the development of network technology, network life is occupying an increasingly important position in people's life, involving all aspects of daily life. However, while network applications bring convenience to people's lives, security threats represented by network fraud and phishing attacks are also increasing, resulting in increasing losses year by year. The authentication of user identity is an important process to solve the above problems. Through the authentication of user network identity, the validity of entity identity can be ensured. However, the virtuality of network identity still cannot effectively trace the responsible party when security problems occur. Therefore, , Relying on the real identity of users to establish a real-name network identity has received mor...

AI Technical Summary

Problems solved by technology

[0006] Although the design of the eID system can solve the problem of user privacy protection to a certain extent, there are still some deficiencies in its application: First, due to the uniqueness of the eID identity, the application can still use this information to identify the same user's identity. Operations are associated across applications to create user behavior profiles

However, the upper-level network ID card system relied on in this invention patent must maintain the user's trusted digital identity information, business account system information and user binding information. However, in the electronic identity (eID) system that has been applied in my country, users are trusted The maintainer of digital identity information does not provide relevant binding functions, and in the current environment, it is unrealistic for the eID system manager to additionally provide these functions. Therefore, the technology proposed in this invention cannot be directly applied to the eID system , to solve the user privacy protection problem faced by the eID system

Images