Anonymous authentication method and system

Abstract

The invention discloses an anonymous authentication method and an anonymous authentication system. The method comprises the following steps that: a client generates blind identity information according to the identity information of the client per se and sends the blind identity information to a service provider; the client receives first authentication information generated after the service provider signs the blind identity information; the client generates blind service request information according to the service request information of the client to the service provider and sends the blind service request information to an authentication institution; the client receives second authentication information generated after the authentication institution signs the blind service request; and the client sends the service request information and the second authentication information to the service provider, and receives service content information provided according to the service request information after the service provider authenticates and passes the second authentication information. The scheme can realize authentication with a privacy protection function and anonymous authentication is controllable.

Description

technical field [0001] The present invention relates to the field of information security, in particular to an anonymous authentication method and system. Background technique [0002] In the real world and in cyberspace, everyone needs and owns a large amount of accounts and data, which may contain sensitive personal data, such as patient health data, employee data, credit card data, and information generated by users using the Internet, such as in newsgroups Posts in the website, e-mails sent, web pages visited, account information of online payments, etc. These sensitive data will play an increasingly important role in future network services and public security. However, such important information may be monitored, recorded or stolen by unauthorized third parties. For example, phishing attacks appearing on the Internet, that is, using fake financial websites or spyware to trick users into providing personal information such as personal accounts and passwords, credit ca...

AI Technical Summary

Problems solved by technology

However, traditional authentication techniques cannot meet the need to protect the authenticator's private information

For example, when a user performs security authentication, the verifier often obtains the user's identity information; the verifier has the ability to pass the user's authentication information to a third party, resulting in leakage of user privacy; the user's authentication information is recorded and tracked, etc.

If only from the perspective of privacy protection, allowing users to access completely anonymously will lead to many illegal problems

Images