基于网络电子身份证的隐私保护技术研究

项目名称： 基于网络电子身份证的隐私保护技术研究

项目编号： No.61303247

项目类型： 青年科学基金项目

立项/批准年度： 2014

项目学科： 自动化技术、计算机技术

项目作者： 高志刚

作者单位： 中国科学院软件研究所

项目金额： 26万元

中文摘要： 增强网络电子身份证（eID）系统的隐私保护能力是保护网民隐私和网络安全、保障eID成功应用和推广的关键。然而目前正在应用和正在研究的隐私保护方案在效率、隐私保护能力、国产化等方面还不能满足日益增长的eID隐私保护需求：应用中的方案隐私保护能力较弱，属性出示用户无法控制；当前研究热点匿名认证和属性认证隐私保护能力强，但计算复杂度太高；匿名用户访问限制和追踪技术研究相对滞后；缺乏基于国产密码算法的隐私保护方案。因此本课题研究eID载体和主机协同计算技术，实现高效的隐私保护认证和属性出示方案，支持部分属性和模糊属性出示，具有不可链接性；研究利用追踪因子实现大规模用户环境下的高效匿名用户追踪和访问限制技术，实现应用级的细粒度访问限制，支持部分属性撤销；研究基于国密算法的隐私保护认证和属性出示协议，实现高效的国产化eID隐私保护方案，增强eID隐私保护能力和性能，促进基于eID隐私保护研究和应用

中文关键词： eID；身份管理；隐私保护；属性证明；

英文摘要： Enhancing the privacy protection ability of the electronic Identity (eID) system is the key method to protect the privacy of netizens and the security of network resources, and it is also the critical way to safeguard the successful application and popularization of eID. However, the privacy protection technologies that are being applied and are being studied could not meet the growing needs of eID in the aspects of efficiency, privacy protection capabilities and localization. It includes: 1). the applied privacy protection methods are weak and the attributes presenting are not under users' control; 2). the currently researched technologies include anonymous authentication and attribute-based authentication have strong privacy protection ability, but their computational complexity is too high; 3). the researches on the anonymous user access restrictions and tracking technology are lagging behind; 4). lack of privacy protection schemes based on domestic cryptographic algorithms. In order to protect the privacy of netizens and security of network resources, we study the eID-based privacy protection schemes. Firstly, we study the methods to enhance computational efficiency of current schemes by using the collaborative computing method between eID vectors and hosts, and support partial attributes presenting and f

英文关键词： electonic identity；identity management；privacy protection；attribute proving；