【作者】 张慧；

【导师】 沈苏彬；

【作者基本信息】 南京邮电大学 ， 计算机科学与技术， 2023， 硕士

【摘要】 越来越多有关智能家居、智能医疗、智能电网、智能移动的应用程序对用户的身份数据进行收集、存储与管理。目前,大多数互联网应用程序仍然采用集中式身份管理系统,存在身份数据被篡改和滥用等问题,严重威胁用户隐私。针对上述问题,基于区块链的身份管理方法有效解决了身份数据篡改问题,但用户的身份数据存储到区块链上使其变的公开透明,仍然存在隐私泄露的风险。基于此,本文以自我主权身份原则为指导,研究了基于区块链的身份管理与隐私保护方法。论文主要工作如下:(1)将区块链与自我主权身份管理结合,提出一种基于区块链的赋予用户自主权、具有隐私保护能力的身份管理方案。针对区块链存储数据透明问题,提出将链上凭证与链下凭证相分离的方法,避免链上公开数据暴露隐私。针对用户身份数据共享过程中过度暴露问题,提出一种基于签名的选择性披露方法,赋予用户在身份数据共享过程中的控制权与选择权,实现身份信息的最小化披露,以达到隐私保护的目的。(2)为了验证用户身份的真实性,研究了基于区块链的身份数据可信管理方法,包括身份数据的可信发布、可信验证等方法。根据去中心化身份管理需求,从数据管理的角度,对身份数据的参与方、信任操作进行定义,通过对身份数据的真实性表示方法、块与链结构的构造方法以及真实性验证方法进行研究,设计了基于区块链的数据可信发布、可信验证的身份可信管理方案。(3)为了验证提出方案的可行性和实用性,本文基于以太坊区块链平台,并利用其支持的智能合约技术,仿真设计和实现了基于区块链的自我主权身份管理系统,仿真测试结果说明了研究和设计的方法的正确性和有效性。更多还原

【Abstract】 More and more applications related to smart home,smart medical,smart power grid and smart mobile collect,store,and manage user identity data.At present,most Internet applications still adopt the centralized identity management system,and identity data is tampered and abused,which seriously threatens users’ privacy.In view of the above issues,the identity management method based on blockchain effectively solves the issue of identity data tampering,but the user’s identity data stored on the blockchain makes it open and transparent,and there is still the risk of privacy disclosure.Based on this,guided by the principle of self-sovereign identity,this thesis studies the identity management and privacy protection methods based on blockchain.The main work is as follows:(1)Combining blockchain with self-sovereign identity management,this thesis proposes an identity management scheme based on blockchain that endows users with autonomy and privacy protection ability.To solve the issue of transparency of blockchain data storage,a method is proposed to separate on-chain credentials from off-chain credentials,to avoid exposing privacy of on-chain public data.Aiming at the issue of over-exposure in the process of user identity data sharing,a signature-based selective disclosure method is proposed to give users the right of control and choice in the process of identity data sharing,minimize the disclosure of identity information,achieve the purpose of privacy protection.(2)In order to verify the authenticity of user identity,the thesis studies the method of identity data trust management based on blockchain,including the trusted release of identity data,trusted verification and other methods.According to the needs of decentralized identity management and from the perspective of data management,the participants and trust operations of identity data are defined.By studying the authenticity representation method of identity data,the construction method of block and chain structure and the authenticity verification method,an identity trust management scheme based on blockchain is designed.(3)In order to verify the feasibility and practicability of the proposed scheme,this thesis designs and implements a self-sovereign identity management system based on the blockchain platform of Ethereum and uses the smart contract technology supported by it.The simulation test results demonstrate the correctness and effectiveness of the research and design method.更多还原