Identity attribute certification system and method for privacy protection

Abstract

The invention provides an identity attribute certification system and method for privacy protection. The system comprises a service-provider server, a service-provider client, a system server and a system client, wherein the service-provider server generates an access strategy of a service, sends the access strategy to the service-provider client, and performs verification on an evidence; the service-provider client sends a service request to the service-provider server, redirects the service request to the system client and forwards the access strategy to the system client; the system serverrequests a certificate of an attribute, re-signs the attribute in the certificate, generates a voucher of the attribute and issues the voucher to the system client; the system client retrieves an attribute label in the access strategy; if the voucher of the attribute is not stored in the system client, the system client applies to the system server for the voucher of the attribute; and the evidence for attribute certification is generated via an aggregate signature and is sent to the service-provider server. A service provider cannot obtain real attribute information of a user, so a privacy ofthe user is protected.

Description

technical field [0001] The invention belongs to the field of security and privacy protection, and in particular relates to a privacy-protected identity attribute certification system and method. Background technique [0002] Identity authentication is the basic technical means for online service providers to verify the validity of user identities. The current identity authentication process requires users to submit sensitive information such as name, mobile phone number, ID number, bank card number, password, etc. to the service provider for verification. Due to the lack of an effective privacy protection mechanism, service providers excessively collect user identity information, and these sensitive identity information are used to analyze user behavior habits and preferences, and are even distributed to third parties such as direct marketing without the user's knowledge application. [0003] In recent years, identity theft and fraud problems caused by privacy leaks have em...

AI Technical Summary

Problems solved by technology

[0003] In recent years, identity theft and fraud problems caused by privacy leaks have emerged in an endless stream. From the perspective of individual user privacy rights, users lose control over their own private information, and it is very likely that attackers will use their legal identities to carry out illegal activities, giving users property and Hazards to life safety; from the service provider’s point of view, because a large amount of user sensitive information is retained, it is very easy to become the target of attackers. Once the database is leaked, it will not only threaten the core business, but also damage the reputation and user compensation. greatly affected by

Images