新型网络环境下的身份相关安全问题研究

项目名称： 新型网络环境下的身份相关安全问题研究

项目编号： No.61272479

项目类型： 面上项目

立项/批准年度： 2013

项目学科： 自动化技术、计算机技术

项目作者： 朱文涛

作者单位： 中国科学院信息工程研究所

项目金额： 80万元

中文摘要： 我们研究新型网络环境下与身份相关的若干安全问题，包括但不局限于身份认证、身份保护、身份滥用检测。此工作的动机源于我们已经注意到，在新型网络环境下，网络身份并不仅仅是计算设备的标识符，而往往是密切关联到现实的物件，甚至是人本身。因此，随着信息技术的发展，与网络身份相关的安全问题将对我们生存的真实世界产生显著的影响。在这三个代表性问题当中，身份认证的目标是证实某个网络实体的身份，从而其消息被认为是可信的或者是让该网络实体获得特定的服务；身份保护是尽量隐藏网络用户的真实身份并保护用户的隐私；身份滥用检测则是识别网络身份被盗取并被用于恶意攻击的行为。这些问题既可以相对独立，也可能是以微妙甚至看似矛盾的形式交织在一起。我们将以面向具体场景的方式，为新型网络环境下的身份管理提供有针对性的、建设性的解决方案。

中文关键词： 网络与信息安全；身份认证；隐私保护；身份滥用检测；

英文摘要： We address in the context of emerging network environments several identity related security issues, which include but are not limited to identity authentication, identity protection, and detection of identity abuse. This work is partially motivated by the observation that in emerging network environments, network identities are no longer identifiers of computing devices only; they may often be closely associated with physical objects and even human beings. As a result, security problems related to network identities may impact the real world significantly as information technology advances. Among the three representative problems, authentication is to prove the identity of a network entity so that its messages are supposed to be authentic or it can be granted a certain service. Identity protection is to try to hide the identity of a network user and preserve the user's privacy. Detection of identity abuse is to identify behaviors where network identities are stolen and employed for malicious attacks. These problems can be either relatively independent, or intertwined in a subtle or even seemly contradictory manner. In a scenario oriented manner, we shall provide for identity management in emerging network environments specific and constructive security solutions.

英文关键词： Network and information security；Identity authentication；Privacy protection；Detection of identity abuse；