OpenID身份认证系统的认证等级模型研究

Research on Authentication Levels Mode of OpenID Authentication System

以OpenID为现有的切入点,分析了现代分布式认证体系中,依赖站点和用户对认证协议安全性方面的需求,提出了对OpenID协议的扩展,根据不同的认证需求定义了4种不同的认证等级,从匿名性、完整性和不可伪造性3个特性上对认证等级进行了研究,并给出了解决方法和密码学算法。同时,协议能够通过满足完整性和不可伪造性,提高用户对依赖站点的信任度。这一认证等级的提出,可以为各类网络服务的定位提供参考,也为用户在选择依赖站点的判断上,提供了安全性方面的衡量标准。

Based on OpenID authentication system,the article analyzes the functional and security requirement of both end users and relying partiesof today s distributed authentication system,proposes an extension to OpenID protocol by defining 4 different authentication levels according to different authentication requirement.Characteristics such as anonymity,completeness and unforgeablily are shown on each level of authentication with cryptographic protocols.The security achieved on some authentication levels increa...