Pseudonymous Identity Management with Ledger-Based Privacy Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicle-to-everything systems face significant challenges due to node heterogeneity, high density, and mobility, leading to communication safety issues and inadequate privacy protection in identity management.
Innovation Solution
Implement a pseudonymous identity management system using a distributed ledger technology, such as a blockchain, to securely manage and verify identities while protecting privacy, employing a sparse Merkle tree structure and conditional privacy protection mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If a pseudonymous identity management system is implemented to protect privacy, then privacy protection is improved, but the ability to verify real identity when needed deteriorates
Solution Approach 1:
The identity management system segments identity information into pseudonymous identifiers for routine operations and real identity data stored securely in the distributed ledger. This segmentation allows privacy protection during normal communication while enabling real identity verification when needed by querying the distributed ledger.
Solution Approach 2:
The distributed ledger acts as an intermediary between pseudonymous identities and real identities. It stores the mapping relationship without exposing it during normal operations, allowing verification of real identity when needed while maintaining privacy protection during routine communication.
2Reliability
If a distributed ledger technology is used to store identity information, then security and decentralization are improved, but system complexity and storage requirements worsen
Solution Approach 1:
The system extracts only essential identity verification data to the distributed ledger, keeping the bulk of identity management logic and processing in local devices. This reduces the storage burden and complexity on the distributed ledger while maintaining security benefits.
Solution Approach 2:
The distributed ledger serves multiple functions: storing pseudonymous identity mappings, maintaining revocation status, and providing verification capability. This multi-functionality reduces the need for separate systems and reduces overall system complexity despite the added security layer.
3Object-affected harmful factors
If pseudonymous identities are used for communication, then privacy protection is improved, but the ability to revoke malicious identities deteriorates
Solution Approach 1:
The system implements a feedback mechanism where malicious behavior is detected and reported to the distributed ledger, which then updates the revocation status of the corresponding pseudonymous identity. This feedback loop enables effective revocation of malicious identities while maintaining privacy protection for legitimate users.
Solution Approach 2:
The system preliminarily establishes the mapping between pseudonymous identities and real identities in the distributed ledger before any malicious activity occurs. This preliminary action enables rapid revocation of malicious identities by simply updating the revocation status in the ledger without needing to trace or discover the real identity during the incident response.
Data Source
AI summary
An identity management method, wherein the method includes: A trusted authority (TA) device determines a pseudonymous identity (PID) of a terminal device i, and sends a first parameter to the terminal device i, where the first parameter indicates the PID of the terminal device i, and the PID of the terminal device i is determined based on a real identity (RID) of the terminal device i. Based on this, the TA device may determine the PID for the terminal device, to protect the RID of the terminal device. In addition, the PID of the terminal device is associated with the RID of the terminal device, so that the TA device can determine the RID of the terminal device based on the PID of the terminal device, and can determine the real identity of the terminal device when the terminal device performs a malicious operation or an unauthorized operation.