权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Network of Excellence in Future of Identity

未来身份卓越网络

基本信息

批准号：
EP/K00333X/1
负责人：
M Rajarajan
金额：
$ 12.8万
依托单位：
City, University of London
依托单位国家：
英国
项目类别：
Research Grant
财政年份：
2012
资助国家：
英国
起止时间：
2012 至无数据
项目状态：
已结题

来源：
https://gtr.ukri.org/projects?ref=EP%2FK00333X%2F1
关键词：
Network Excellence Future Identity

项目摘要

Identity has both static, biological as well dynamic, social and psychological components. At a basic and biological level, our identity is unique to us and it is revealed by numerous biometric indicators such as fingerprint and iris patterns. This identity is fixed. All of these indicators track back to a single person, and one of our challenges is to develop systems and infrastructures capable of linking those multiple indicators so that the right people have access to the right services, systems, or information at the right times. Identity management is key in this regard, and it is dependent on robust controls designed to verify that users are who they say they are, across both real and online contexts. Improvements will enable the capability to verify identity, providing access to those who require it whilst ensuring the safety and security of often sensitive information by minimising false positive access of fraudsters. Such verification systems need to be able to operate across the various systems or applications that a single user might use. At another level, i.e., the social and psychological level, our identity is dynamic and relative. It is defined by the social group we are in and/or the task that we are undertaking, and so we develop and reveal our self-image accordingly. Our identify affords us certain rights and privileges, which may change over time and place. This makes identity a much more challenging concept, and raises an entirely new set of questions which require an entirely new set of methodologies. In this regard, the definition of our identity according to our social group becomes important because it affords a single individual quite different rights and privileges across the many identities that they may hold. In essence, the challenge of identity is then even more complex because each individual can now be understood to hold many roles, and to display many indicators of identity within each of these roles. For instance, if we merely take the name as an indicator of identity, I may have a name that I use in the workplace, a name that I use amongst friends, another within an online social network, and another as a unique email ID. All of these are 'me' across the different roles that I occupy, and all would need to be tracked back to me for a complete understanding of who I am both at psychological level and at an identity management level.An interdisciplinary perspective is now needed to address the diversity of user and system needs suggested above. Given the complexities introduced by the volume of e-providers, and the demands to comply with the provisions of the Data Protection Act, these are far from trivial problems. Expertise in psychology and human factors is needed to understand the barriers to robust authentication systems, and to explore how best to counteract phishing and other human engineering attacks. Legal expertise is also necessary given that the use of federated identity management (FIM) systems introduces the notion of trust between service providers but also necessitates the introduction of liabilities and warranties against breaches. This network in identity will bring these expertise under one forum to discuss some of the future challenges in the area of establishing identity. In addition to this it will act as a 'one-stop-shop' where industries, government agencies and the academic community can interact and seek the necessary expertise to resolve issues around establishing the identity.

身份既有静态的生物成分，也有动态的社会和心理成分。在基本和生物层面上，我们的身份是独一无二的，它是由许多生物特征指标，如指纹和虹膜图案揭示的。这个身份是固定的。所有这些指标都可以追溯到一个人，我们面临的挑战之一是开发能够将这些多个指标联系起来的系统和基础设施，以便正确的人能够在正确的时间获得正确的服务，系统或信息。身份管理是这方面的关键，它依赖于强有力的控制，这些控制旨在核实用户在真实的和在线环境中的身份。改进将使能够验证身份，向需要的人提供访问权限，同时通过最大限度地减少欺诈者的误报访问来确保通常敏感信息的安全性。这种验证系统需要能够在单个用户可能使用的各种系统或应用程序中运行。在另一个层面上，即，在社会和心理层面，我们的身份是动态的和相对的。它是由我们所处的社会群体和/或我们正在承担的任务定义的，因此我们相应地发展和揭示我们的自我形象。我们的身份为我们提供了某些权利和特权，这些权利和特权可能会随着时间和地点而改变。这使得身份成为一个更具挑战性的概念，并提出了一系列全新的问题，需要一套全新的方法。在这方面，根据我们的社会群体来定义我们的身份变得很重要，因为它为一个人提供了在他们可能拥有的许多身份中完全不同的权利和特权。从本质上讲，身份的挑战更加复杂，因为现在可以理解每个人都扮演着许多角色，并在每个角色中表现出许多身份指标。例如，如果我们仅仅把名字作为身份的指示器，我可能有一个我在工作场所使用的名字，一个我在朋友之间使用的名字，另一个在在线社交网络中使用的名字，另一个作为唯一的电子邮件ID。所有这些都是我所扮演的不同角色中的“我”，所有这些都需要追溯到我身上，以便在心理层面和身份管理层面上完全了解我是谁。现在需要一个跨学科的视角来解决我的多样性。用户和系统需求如上所述。考虑到电子供应商的数量带来的复杂性，以及遵守《数据保护法》规定的要求，这些问题远非微不足道。需要心理学和人为因素方面的专业知识来了解强大的身份验证系统的障碍，并探索如何最好地抵御网络钓鱼和其他人为工程攻击。法律的专门知识也是必要的，因为联合身份管理系统的使用引入了服务提供商之间信任的概念，但也需要引入对违规行为的赔偿责任和保证。这个身份网络将把这些专门知识集中在一个论坛上，讨论在建立身份方面的一些未来挑战。除此之外，它将作为一个“一站式商店”，行业，政府机构和学术界可以互动，并寻求必要的专业知识，以解决围绕建立身份的问题。