摘要
在当前物联网(IoT)环境中,分布式身份(DID)管理方法面临链接攻击、隐私泄露和监管冲突等多重挑战,亟须一种能保护用户隐私,同时兼顾监管需求的新方案。针对上述问题,提出一种DID方案。该方案采用主标识符和多个假名标识符相结合的身份体系,设计双凭证模型,以结合明文凭证与加密凭证,并利用承诺和零知识证明(ZKP)技术确保敏感属性和身份数据的安全性。此外,通过假名机制实现身份信息的非链接性,并有效地防御Sybil攻击。实验结果表明,与WeIdentity等方案相比,所提方案在凭证生成时间和证明生成时间上分别缩短了23%和19%,在性能方面具有显著优势。可见,所提DID方案提升了用户身份隐私保护水平,减轻了身份泄露风险,并在隐私保护与监管需求之间实现了平衡,为IoT环境中的DID管理提供了一种解决方案。
In the current Internet of Things(IoT)environment,Decentralized IDentifier(DID)management methods face multiple challenges,including linkage attacks,privacy leakage,and regulatory conflicts.There is an urgent need for a new scheme that can protect user privacy while meeting regulatory requirements.A DID scheme was proposed to address these issues.In the scheme,an identity system combining a main identifier and multiple pseudonymous identifiers was adopted,a dual-credential model was designed,thereby integrating plaintext credentials and encrypted credentials,and commitment and Zero-Knowledge Proof(ZKP)technologies were utilized to ensure the security of sensitive attributes and identity data.Furthermore,pseudonym mechanisms were applied to achieve unlinkability of identity information and defend against Sybil attacks effectively.Experimental results show that compared to the schemes such as WeIdentity,the proposed scheme reduces the credential generation time and proof generation time by 23%and 19%,respectively,demonstrating significant advantages in performance.It can be seen that the proposed DID scheme enhances user identity privacy protection,reduces identity leakage risks,and balances privacy protection with regulatory requirements,providing a solution for DID management in IoT environment.
作者
翟社平
朱鹏举
杨锐
刘佳一腾
ZHAI Sheping;ZHU Pengju;YANG Rui;LIU Jiayiteng(School of Computer Science and Technology,Xi’an University of Posts and Telecommunications,Xi’an Shaanxi 710121,China;Shaanxi Key Laboratory of Network Data Analysis and Intelligent Processing(Xi’an University of Posts and Telecommunications),Xi’an Shaanxi 710121,China)
出处
《计算机应用》
北大核心
2025年第9期2873-2881,共9页
journal of Computer Applications
基金
国家自然科学基金资助项目(61373116)
工业和信息化部通信软科学项目(2018-R-26)
陕西省教育厅科学研究计划项目(18JK0697)
陕西省重点研发计划项目(2022GY-038)
陕西省社会科学基金资助项目(2016N008)
陕西省大学生创新创业训练计划项目(202211664016)
西安市社会科学规划基金资助项目(17X63)
西安邮电大学研究生创新基金资助项目(CXJJYL2022049)~。
关键词
区块链
隐私保护
零知识证明
身份管理
物联网
blockchain
privacy protection
Zero-Knowledge Proof(ZKP)
identity management
Internet of Things(IoT)
