| With the rapid development of the Internet,Internet services have penetrated into every aspect of people's lives.Before people access the network service,the identity authentication server confirms the identity information of the access requester.In the previous identity authentication,each identity server independently maintained identity information and authenticated,which made its storage and management costs very expensive.Moreover,the user has different identity information in each identity authentication server,which brings difficulties for the user to use the system.Identity confederation enable multiple systems to share identity information and manage identity,becoming the trend of identity management in large-scale heterogeneous networks in the future.How to realize credible and secure authentication is an important research issue in identity confederation.Nowadays,although there are some studies on the credibility of identity information and the way of identity authentication,their study is scattered and can not meet the system's credibility requirements for identity authentication and the availability of user identity information.Moreover,there are problems in the authentication process that there are too many attributes and the authentication efficiency is low.This thesis has studied the above two problems separately and obtained the research results.The specific research contents are as follows:1.A multi-granular joint authentication scheme for identity-oriented confederation is proposed.Firstly,the credibility calculation of identity information in identity authentication is studied,and the formula for calculating the credibility of identity information is obtained.And secondly,according to the demand of user information access,the scheme selection in the authentication process was given.Finally,according to the information storage characteristics of the identity confederation,the selected authentication information is combined to use the decision information fusion method to complete the final authentication.For the overall process of the identity authentication scheme,this thesis illustrates it with an example.2.An attribute reduction algorithm for identity data is proposed.To solve the problem of too many attributes of identity data in the authentication process,an attribute reduction algorithm for identity information data is proposed in thesis.The algorithm is based on the characteristics of data distribution storage,and according to the semantics ofidentity confederation,the pessimistic multi-granularity rough set theory is used to reduce the corresponding attributes.Firstly,the positive domain of the system under the identity confederation is given.Then the attribute reduction of the distributed environment is discussed.Finally,an attribute reduction algorithm based on pessimistic multi-granularity rough set is proposed.The reduction process of the proposed algorithm is demonstrated by an example in this thesis,and the effectiveness of the algorithm is verified. |
