System and method for network identity service based on open ID

Abstract

The invention provides a network identity service system and method based on an Open ID. Identity information sharing can be performed through an identity encoding server, and the problem of Open ID account sharing and identity authentication sharing are effectively solved. The system comprises a network application server RP, a public identity identification server OP and an identity encoding server, the RP is used for receiving a login request sent by a user, sending an authentication request to the OP, receiving an identity code B from the OP, and establishing a mapping relationship betweenthe identity code B and the Open ID; the OP is used for obtaining the OP account information input by the user, sending a personal identity encoding request to the identity encoding server, and obtaining the identity code B from the identity encoding server; and the identity encoding server is used for obtaining an identity code A according to the personal identity encoding request, and generating the identity code B according to the identity code A.

Description

technical field [0001] The present application relates to the field of information security, and more specifically, relates to a system and method of an Open ID-based network identity service. Background technique [0002] With the rapid development of Internet technology, the network services handled by users are becoming more and more diversified. In order to ensure network security, the Ministry of Public Security has decided to fully implement the real-name registration system for network accounts. In order to simplify the real-name registration procedure of users' online accounts, a number of public identity service providers (open Identity Providers, OPs) provide public identity (open Identity, open ID) account sharing processes to realize the sharing of online accounts. However, this kind of network account sharing does not solve the problem of real-name authentication of shared accounts; the network application server (Relying Party, RP) must complete the open ID aut...

AI Technical Summary

Problems solved by technology

However, this kind of network account sharing does not solve the real-name authentication problem of shared accounts; the network application server (Relying Party, RP) must complete the open ID authentication and authentication, and also needs to let the user complete the real-name authentication, and the RP uses the open ID function. Did not fundamentally improve the user experience and simplify the registration and login process

[0003] In addition, even after the real-name authentication, the RP stores a large amount of user identity information, which poses a great threat to the security of the user's personal information.

It is mainly reflected in, on the one hand, hacker attacks, stealing user information in batches, resulting in large-scale information leakage incidents; on the other hand, the lack of data management within Internet applications, internal employees illegally use user personal identity data, resulting in user information leakage

Images