CAJ | 학술논문

针对终端用户身份管理难题和现有的身份管理技术的不足，为了满足终端用户在任何情况下访问网络资源的客观需求，文章提出了以用户为中心的可信终端域内、跨域和开放网络环境下的身份管理系统模型，在此基础上设计了包括终端用户身份安全保护机制、身份管理流程、终端用户身份管理协议的终端用户身份安全保护方案，对协议进行了安全性分析和形式化分析，并与其他身份管理模型的安全性进行了比较，结果表明该模型能够安全地管理用户身份和实现各种环境下的访问控制。
침대종단용호신빈관리난제화현유적신빈관리기술적불족，위료만족종단용호재임하정황하방문망락자원적객관수구，문장제출료이용호위중심적가신종단역내、과역화개방망락배경하적신빈관리계통모형，재차기출상설계료포괄종단용호신빈안전보호궤제、신빈관리류정、종단용호신빈관리협의적종단용호신빈안전보호방안，대협의진행료안전성분석화형식화분석，병여기타신빈관리모형적안전성진행료비교，결과표명해모형능구안전지관리용호신빈화실현각충배경하적방문공제。
For end-user identity management challenges and weakness of current identity management, in order to satisfy the need which users access network resources in any conditions, the model of user-centric identity management system is proposed which based on trusted terminal for inner-domain, cross-domain and open network environment, the security protection program is designed which includes the protection mechanism of end-user identity and the procedure of end-user identity management and the protocol of identity management, security analysis and formal analysis of the end-user identity management protocol are carried out, the security of the model and other models are compared. The result shows that the model can implement the safe of managing user identity and access control under a variety of environment.