关键词: 数字身份, 安全治理, 身份模型, 身份核验, 登记, 鉴别, 联合, 保障框架, 凭证, 鉴别器

Abstract: In the era of Internet of things, the scale of entity identities in cyberspace is expanding rapidly, and the security risks are increasing, which challenges the implementation of digital identity secure governance. Firstly, the basic concept of digital identity is described, the meaning of identity, credential and authenticator is defined, and the classification of digital identity is proposed. Then the architecture of digital identity model and the life cycle of digital identity are described, and the activities, roles and functions around digital identity are elaborated. Then, according to the security risks existing in the activities of the digital identity model, the security assurance framework is proposed, and three different security levels of assurance with the security framework are elaborated: identity assurance level, authenticator assurance level and federation assurance level. Finally, the ideas of digital identity secure governance are proposed, including making strategy, establishing rules and regulations, utilizing technologies, building the ecosystem and strengthening supervision.

Key words: digital identity, secure governance, identity model, identity proofing, enrolment, authentication, federation, assurance framework, credential, authenticator