信息网络安全 ›› 2016, Vol. 16 ›› Issue (9): 124-129.doi: 10.3969/j.issn.1671-1122.2016.09.025

• • 上一篇    下一篇

基于实体行为的身份可信等级评估机制研究

彭佳(), 高能   

  1. 中国科学院数据与通信保护研究教育中心,北京 100093
  • 收稿日期:2016-07-25 出版日期:2016-09-20 发布日期:2020-05-13
  • 作者简介:

    作者简介: 彭佳(1988—),女,天津,助理工程师,硕士,主要研究方向为信息安全;高能(1976—),女,北京,研究员,博士,主要研究方向为信息安全。

  • 基金资助:
    国家重点研发计划 [2016YFB0800504];国家高技术研究发展计划(国家863计划)[2013AA01A214]

Research on Identity Trusted Level Evaluation Mechanism Based on User Behavior Analysis

Jia PENG(), Neng GAO   

  1. Data Assurance and Communication Security Research Center, Chinese Academy of Sciences, Beijing 100093, China
  • Received:2016-07-25 Online:2016-09-20 Published:2020-05-13

摘要:

随着互联网应用种类越来越多,用户参与互联网活动的形式越来越丰富。对网络实体身份进行可信分级并建立规范的可信测评体系是构建安全、科学与规范的网络可信体系的基础。文章提出了一种基于用户行为的身份可信等级评估模型。身份服务提供方根据实体的身份信息和行为信息确定实体的最高可信等级,当依赖方需要鉴别实体身份时,身份服务提供方结合最高可信等级提供给依赖方该实体登录环境下的动态可信等级,依赖方可根据动态可信等级对实体进行权限管理。该模型利用分级的思想,满足应用对用户身份的不同可信需求,实现适度安全,提高身份管理效率与易用性。

关键词: 可信等级, 行为特征, 用户行为动态鉴别, 多因素鉴别

Abstract:

With the development of Internet technology, there have been more kinds of Internet applications, and the ways of users participated in the Internet become richer. It is the basis of network trusted system to grating trusted level of network identity. This paper proposed an evaluation model of the identity trusted level based on user behavior. Identity provider (IDP) according to the entity's identity information and behavior determines the highest trusted level of entities. When relying party (RP) needs to identify the entity identity, IDP combines the login environment with the highest confidence level to provide RP a dynamic trusted level. RP may manage the rights according to the dynamic trust level. The model using the ideas of classification, can meet the demand of application to the different trusted level of user identity, achieve reasonable security, and improve the efficiency of identity management and ease of use.

Key words: trusted level, behavior features, dynamic authentication, multiple factors to identify

中图分类号: