A privacy-protected identity attribute certification system and method

Abstract

The present invention provides a privacy-protected identity attribute certification system and method. The system includes: the server of the service provider generates an access strategy for the service, sends the access strategy to the client of the service provider, and the server of the service provider verifies the evidence; the client of the service provider The client sends a service request to the server of the service provider, redirects to the system client, and forwards the access policy to it; the system server requests the certificate of the attribute; re-signs the attribute in the certificate, generates a certificate of the attribute, and issues it to the system client ;The system client retrieves the attribute label in the access policy: if the certificate of the attribute is not saved in the system client, the system client applies for the certificate of the attribute from the system server; And send it to the service provider server. The service provider cannot obtain the real attribute information of the user, and the privacy of the user is protected.

Description

technical field [0001] The invention belongs to the field of security and privacy protection, and in particular relates to a privacy-protected identity attribute certification system and method. Background technique [0002] Identity authentication is the basic technical means for online service providers to verify the validity of user identities. The current identity authentication process requires users to submit sensitive information such as name, mobile phone number, ID number, bank card number, password, etc. to the service provider for verification. Due to the lack of an effective privacy protection mechanism, service providers excessively collect user identity information, and these sensitive identity information are used to analyze user behavior habits and preferences, and are even distributed to third parties such as direct marketing without the user's knowledge application. [0003] In recent years, identity theft and fraud problems caused by privacy leaks have em...

AI Technical Summary

Problems solved by technology

[0003] In recent years, identity theft and fraud problems caused by privacy leaks have emerged in an endless stream. From the perspective of individual user privacy rights, users lose control over their own private information, and it is very likely that attackers will use their legal identities to carry out illegal activities, giving users property and Hazards to life safety; from the service provider’s point of view, because a large amount of user sensitive information is retained, it is very easy to become the target of attackers. Once the database is leaked, it will not only threaten the core business, but also damage the reputation and user compensation. greatly affected by

Images