A Privacy-Preserving Secure Decentralized Self-Sovereign Identity Authentication Protocol Method

Abstract

The invention discloses a privacy-protected, secure and decentralized self-sovereign identity authentication protocol method. Based on the characteristics of self-sovereignty, the invention uses the distributed identifier planned by W3C as a unified identifier to implement identity platforms in distributed domains and central domains. Common to each other to meet portability. Using the policy control signature scheme that supports policy hiding and the verifiable claim standard to assert user identity information to achieve fine-grained authorization and privacy protection of identity data. The verifiable statement that does not expose privacy is stored in the underlying blockchain as a trust endorsement to realize data access without the same identity domain, and to satisfy security and decentralized verification. The present invention satisfies and realizes the concept of self-sovereignty, and also enriches the development of self-sovereign identity authentication methods.

Description

technical field [0001] The invention belongs to the technical field of identity management in information security, and in particular relates to a privacy protection security decentralization self-sovereign identity authentication protocol method. Background technique [0002] A secure identity authentication protocol is a necessary prerequisite for the secure and stable development of cyberspace. In today's Internet environment such as big data search, face recognition, cloud computing and centralized authentication, huge data and intelligent algorithms bring convenience to the society, but also bring huge hidden dangers to the leakage of users' digital identity privacy. [0003] The early identity information management developed from a single sign-on identity model to a federated identity authentication model, and then evolved into a user-centric authentication model based on OpenID. None of these schemes can get rid of the privacy leakage caused by the authentication pr...

AI Technical Summary

Problems solved by technology

[0005] The current SSI identity authentication protocol not only does not support the fine-grained control of identity information authorization, but also does not consider the privacy protection of identity information

The traditional policy control signature can achieve fine-grained sharing, but the public access policy will be subject to different degrees of privacy disclosure during authentication.

Images