Shulou(Shulou.com)11/24 Report--

On the morning of September 8, at the forum "Digital identity Authentication system in the Web3 era" held at the 2023 Inclusion Bund Conference, IIFAA Internet trusted Authentication Alliance announced that it would jointly build a "IIFAA distributed trusted authentication system" with terminal security technology and password technology as the core. Under the premise of protecting the privacy of user data, the system can realize many innovations such as cross-platform mutual recognition of identity information, user self-control, credential traceability and so on, and provide organizations with more convenient and efficient user identity access and verification methods. reduce access costs.

The reporter learned that this is a user (end) as the center, software and hardware combined with authentication of the distributed authentication system. Under the support of this system, users have the ownership and use rights of their own digital identity and digital assets, and under the condition of independent authorization, selectively minimize the disclosure of personal information in form, and complete cross-platform identity and qualification authentication. The certificate issuer does not need to send the user data to any platform, but sends the identity verification certificate to the user and stores it in the security area of the user terminal equipment; the application side of the certificate is directly verified by the verification certificate presented by the user. there is no need to connect with different issuers to reduce access costs.

In the digital wave, more and more work and interaction are moved to the online virtual space, digital identity as the unique identity of users in the online virtual space, its security and credibility become particularly important. However, there are some problems in the traditional way of identity authentication, such as identity theft, information forgery, personal privacy disclosure, cross-platform identity communication and so on, which seriously weaken people's trust in identity authentication and hinder the pace of scientific and technological innovation and digital transformation.

In recent years, China attaches great importance to the construction of digital identity authentication, and the "network trust system" based on digital identity was incorporated into the outline of the national medium-and long-term scientific and technological development plan as early as 2006. The relevant person in charge of the national password management department pointed out at the conference that IIFAA and industrial units work together to explore a new generation of trusted digital identity authentication system, comprehensively consider the construction and management of trust sources, and promote the integration and innovation of cryptographic technology, distributed network technology and terminal security technology, which is a useful exploration of trusted identity authentication system, and hopes to continue to strengthen password application innovation and standardized management. Actively empower the network trust system and capacity building.

Shao Xiaodong, chairman of the IIFAA Alliance, said that the distributed trusted authentication system provides a guarantee for the secure flow of digital information and has the main characteristics of user data trust and user privacy protection. There are mainly three major technological innovations. One is the credential grading technology, which classifies different types of identity credentials and attribute credentials of users, and helps users to complete identity authentication with the principle of minimum necessity under the condition of protecting privacy through selective authorization, zero-knowledge disclosure, cryptography and other technologies. Second, based on the key asset guard capability of end security, user characteristics, models, keys and other key assets are stored in the terminal security area to ensure that they will not be accessed and stolen by unauthorized third parties. Third, through the distributed public key infrastructure, all the identity information of users will be signed and linked by the private key, and the cross-chain identity recognition can be realized, and the data can be traced and stored.

Shao Xiaodong said that IIFAA is committed to the joint industry, promote the development of trusted certification technology and industry application, formulate industry technical standards, and work together to create a trusted certification ecology. IIFAA distributed trusted authentication system can be widely used in digital finance, education, logistics and other business scenarios, providing a credible authentication basis for industrial digitization. For special or vulnerable groups, convenient digital services can also be obtained through this authentication system, such as combining barrier-free verification technology to support visually impaired users to achieve multi-platform identity association verification. You can experience barrier-free cinemas on platforms such as Youku at home.

According to public data, the IIFAA Internet trusted Certification Alliance is jointly launched by China ICT Institute, Huawei, Ant Group, Samsung, Alibaba and ZTE, with more than 300 member units, covering the industry's leading application manufacturers, mobile terminal manufacturers, IoT manufacturers, chip manufacturers, security solution manufacturers, artificial intelligence manufacturers, national testing institutions and other "whole industry chain roles". The technical specification of IIFAA has been connected to more than 1.6 billion mobile devices, 43 mobile phone brands and more than 900mobile phone models, and has been applied to more than 3.5 million IoT devices in the field of the Internet of things.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.