Research On Multifactor Identity Verification Method For Digital Identity Management System

Multifactor identity verification is an effective method for preventing identity theft.In this thesis,using multifactor verification method in digital identity management system,improve the security of identity management systems effectively.Prevent inside attacks effectively by using Pedersen commitment and zero-knowledge proof of knowledge.The main work and achievements are as follows:We research the existing digital identity management systems,and propose a multifactor verification method for digital identity management system to solve Multifactor identity theft problem.And we propose an effective method for preventing against internal attacks by semi-trusted identity provider.We show a method for identity registration by using the technology which based on verification by commitments to verify commitments and signatures with hidden the true value of identity attributes.Improve system security by using dupli cate detection and local consistency detection.A series of protocols are designed for different business types,including authentication with hidden attribute values,indirect public property values,hidden commitments and anonymous authentication.And we give the details of these protocols and security proof.Finally,the system performance analysis shows that our protocols have advantages in computation cost,and verification time is independent of the number of property to verify.Security analysis shows that this method has better security with follow three cases:dishonest user,dishonest identity provider and dishonest service provider.