Sensitive data anonymous access method based on knowledge signatures

Abstract

The invention provides a sensitive data anonymous access method based on knowledge signatures. The method comprises the steps of: generating the knowledge signatures corresponding to sensitive data access clients based on secret values; and acquiring a data access request with a knowledge signature and an identity identifier sent by a sensitive data access client, generating a reply ciphertext sent to the sensitive data access client based on the secret value and the timestamp, and adding the identity identifier to an access information list, wherein the sensitive data access client encrypts the proxy signature by using a public key of the sensitive data server to generate a ciphertext, and the sensitive data server identifies the access authority based on the ciphertext of the sensitive data access client and the knowledge signature. The sensitive data access client and the sensitive data server can complete identity verification and authorization processes without intervention of a management platform, are flexible and efficient, and are suitable for cross-domain multi-party sensitive data access scenes. In the authorization process, the sensitive data access client can perform anonymous access, and the privacy of the sensitive data access client is also protected.

Description

technical field [0001] This application relates to the field of data access, in particular to an anonymous access method for sensitive data based on knowledge signatures. Background technique [0002] The primary security goal of sensitive data sharing is data security and privacy protection, including preventing unauthorized users from illegally accessing and using data, data sharing platforms maliciously leaking user privacy information, and untrustworthy data sharing platforms obtaining user privacy by collecting and analyzing user behavior information. Sensitive data security and privacy protection not only involves data security protection issues at all stages of sensitive data life cycle, such as creation, storage, sharing, use, archiving, and destruction, but also involves personal privacy protection issues when users access sensitive data. The existing sensitive data protection mainly considers the security protection of sensitive data, but there are not many effect...

AI Technical Summary

Problems solved by technology

[0003] In the scenario of anonymous access to sensitive data, scholars at home and abroad have proposed some anonymous access schemes. Liu et al. proposed a method based on direct anonymous authentication in the document "A TPM authentication scheme for mobile IP" (DOI: 10.1109 / CISW.2007.4425596). An anonymous identity authentication scheme based on mechanism authentication, but the certificate authority of the direct anonymous authentication mechanism in this scheme is the security bottleneck of the entire system, so the overall performance of the scheme is poor

In the literature "A novel Direct Anonymous Attestation protocol based on zeroknowledge proof for different trusted domains" (DOI: 10.1007 / s12243-010-0178-y), Yang et al. proposed a direct anonymous authentication scheme based on knowledge proof, which implements Anonymous authentication and privacy information protection between devices, but the authentication interaction of this scheme is complicated, and it is not suitable for cross-domain multi-party sensitive data access scenarios

Images