Privacy protection attribute authentication system and method based on verifiable declaration

Abstract

The invention provides a privacy protection attribute authentication system and method based on a verifiable declaration, and relates to the technical field of privacy protection in identity authentication. The method comprises the following steps: firstly, designing a data structure of a voucher by adopting a verifiable declaration of W3C, and verifying a signature of the data structure to confirm whether the declarated content is valid or not, thereby standardizing an identity verification standard; for the privacy problem existing in the verifiable declaration, expanding the structure of the verifiable declaration, and adding corresponding fields, so that the verifiable declaration has anonymity. Interval certification, non-relation certification and or relation certification of attribute values are realized by adopting a BB short signature scheme and a non-interactive zero-knowledge certification technology; detailed designs of protocols are given, including initialization, a certificate issuing protocol, a certificate showing protocol and an attribute proving protocol, and a verifiable declaration is applied to the protocols; and privacy protection authentication of the user is realized.

Description

technical field [0001] The present invention relates to the technical field of privacy protection in identity authentication, in particular to a verifiable statement-based privacy protection attribute authentication system and method. Background technique [0002] In recent years, the development of the Internet and computer technology has brought great changes to our lives. We can use different network identities to participate in online movie watching, online shopping, online education, e-medicine, e-government and other activities. While these activities greatly facilitate our lives, they also bring many problems that cannot be ignored. Usually, the online service provider will verify the identity of the user, require the user to provide some private and sensitive attribute information, and store this sensitive information on the server. This can easily lead to the leakage of users' private information. On the one hand, this may be due to service providers selling user i...

AI Technical Summary

Problems solved by technology

In addition, eID also supports citizens' self-identification, which makes citizens' identities undergo different conversions in different applications. Therefore, the use of eID can effectively protect the privacy of citizens' identities, but there is still a lack of protection of attribute privacy, and users still cannot Control the usage of your own identity attribute information

Images