A digital identity service method and system for attribute protection

Abstract

The invention discloses an attribute-oriented protection digital identity service method and a system thereof, which belong to the field of information safety. The method comprises the following steps: adopting an attribute supplier and a trust supplier to jointly form a trust domain, and supplying attribute service and trust certificate service to application systems in a management domain and a user; jointly deploying an identity service supplier and the application systems in a business domain, providing identity management service to the application systems, and meanwhile, calling service of the attribute supplier in the trust domain to replace a business system to finish demand service on the user attribute. The system comprises at least one trust domain and at least one business domain; the trust domain is respectively connected with the business domain through a network; each business domain comprises the identity service supplier and a plurality of application systems in data connection with the identity service supplier; each trust domain comprises the trust supplier and the attribute supplier in data connection with the trust supplier. According to the attribute-oriented protection digital identity service method and the system thereof, on the premise of guaranteeing privacy safety of a user, the user attribute demand of business is met.

Description

technical field [0001] The invention belongs to the field of computer technology and information security, relates to a user identity management service and a user attribute protection method in a cloud computing environment, and is embodied as an attribute protection-oriented digital identity service method and a system thereof. Background technique [0002] With the development of network technology, resources in the IT field are constantly concentrating on the Internet. The introduction of the concept of cloud computing has strengthened the trend of service-oriented resources such as software, hardware, data, and platforms. Similarly, providing security functions in the form of services is also an inevitable trend in the development of the application security field. On the one hand, the security service is established by a third party, which facilitates the implementation of a special security mechanism and is equipped with professional security personnel for management ...

AI Technical Summary

Problems solved by technology

However, to maintain a large amount of user attribute information, strong security protection measures need to be established, and the cost is high

If user privacy is leaked due to poor management, it will not only affect business operations and corporate reputation, but also need to bear economic and legal responsibilities for the losses caused

In addition, the business independently maintains the user's real attribute information, and it needs to spend a lot of money to audit and verify this information

Images