紧急医疗事件下的匿名访问控制方案

An Anonymous Access Control for Emergency Health Events

摘要: 紧急医疗卫生事件的发生，使得各类公共场所成为了重点化防疫管控的对象，因此需要人们在出入公共场所时出示相应的防疫凭证。然而在防疫凭证验证过程中，伪造、冒充、篡改以及窃取个人隐私数据等恶意行为成为了公共医疗卫生事件溯源流调面临的最大挑战。针对这些挑战，本文提出了一种面向紧急医疗卫生事件的匿名认证方案：安全性方面，首先给出了该场景下所需的安全性需求；其次，结合密码学匿名凭证思想，利用区块链、生物特征验证等技术对方案进行了构建；性能方面，在解决了多源防疫凭证难以聚合的问题基础上，给出了方案的性能分析及在椭圆曲线下关键算法的性能测试，结果表明所提出的方案在安全性和性能两个方面都具有实际意义。综上，提出的方案可为紧急医疗事件下公共场所防疫提供一种隐私及安全的认证方案。

Abstract: The occurrence of emergency medical and health events has made all kinds of public places become the object of pandemic prevention and control (PPC), and people are required to show the corresponding epidemic prevention credentials when entering and leaving public places. However, in the process of PPC certificate verification, malicious behaviors such as forgery, impersonation, tampering and theft of personal privacy data have become the biggest challenges faced by the traceability of public medical and health events. To solve these challenges, this paper proposes an anonymous authentication scheme for emergency medical and health events. In terms of security, the security requirements required in this scenario are first presented; Secondly, combined with the idea of cryptography anonymous credential, the scheme is constructed by using block chain, biometric verification and other technologies. In terms of performance, based on solving the problem of difficult aggregation of multi-source PPC credentials, the performance analysis of the scheme and the performance test of key algorithms under elliptic curve are given. The results show that the proposed scheme has practical significance in both security and performance. In summary, the proposed scheme can provide a privacy and safety certification scheme for PPC in public places under medical emergencies.