本项目希望建立一种新的隐私增强身份管理技术架构。该架构包括匿名度量方法、可证明匿名性形式化方法、直接匿名证明协议和匿名路由协议的可证明安全设计和分析方法。项目试图扩展L1 相似度量法，确定匿名攻击的自适应威胁模型，建立既面向网络又面向数据的匿名性度量理论并验证新的匿名性度量方法；以关系匿名框架为可证明匿名性的概念框架参考模型，提出基于符号操作的匿名性验证自动化分析技术和方法；简化现有DAA方案"理想函数"定义，提出DAA方案和扩展方案安全性的可证明安全评价体系，设计新的具有前向匿名性的DAA方案；讨论基于DAA方案的匿名路由协议安全属性标准，提出匿名路由协议的安全定义和新的匿名路由协议设计与分析方法。通过研究希望在匿名性通信和隐私增强身份管理的基础理论、方法和技术方面有一定的突破，为高效、可靠和可证安全的隐私增强身份管理提供比较完整和系统的理论支持和技术支撑。

We will seek to found up a new privacy enhance identity management technical architecture, this framework including anonymous metrics, provably anonymity formalizing method, Anonymous Routing Protocols (ARP) and Direct Anonymous Attestation (DAA) provable security design and analysis approach. First of all, the network data anonymity of metrics will be find by expand L1 similar metric method; Second, the using secure multiparty computation theory ascertain the adaptive threat model for anonymous communication network;Third, the provable anonymity formal methods will be establish by Logic of Secure Systems(LS2); Fourth, based on universally composable (UC) security model and the compute indistinguishability "protocl simulation" method define the security and anonymous for ARP and DAA, and propose the provable security design and analysis method for ARP and DAA. Fifth, design new anonymous routing protocols, forward-anonymous DDA and DDA-based key exchange protocol to achieve privacy enhance identity management. We wish to a certain extent breakthrough in the communication network anonymity and privacy enhances identity management theory, method and technology. Provided more complete and systematic theory support and technical support for efficient, reliable, verifiable and provable security privacy enhance identity management.