A warning on how to implement anonymous credential protocols into the information card framework

被引：3

作者：

Ates, Mikael ^{[2
]}

Buccafurri, Francesco ^{[1
]}

Fayolle, Jacques ^{[3
]}

Lax, Gianluca ^{[1
]}

机构：

[1] Univ Reggio Calabria, DIMET, I-89122 Reggio Di Calabria, Italy

[2] Entrouvert, F-75014 Paris, France

[3] Univ Lyon, DIOM, F-42023 St Etienne, France

来源：

INTERNATIONAL JOURNAL OF INFORMATION SECURITY | 2012年 / 11卷 / 01期

关键词：

Unlinkability; Attribute certificates; Privacy; U-Prove;

D O I：

10.1007/s10207-011-0150-5

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

Unlinkability is a privacy feature supported by those multi-party security protocols allowing anonymous users' credential exchanges among different organizations. Proper signature schemes, based on discrete logarithms, must be used in order to guarantee the above requirements as well as selective disclosure of information. In this paper, we highlight that whenever a concrete architecture based on the above protocols is implemented, some aspects concerning how to manage the association between bases of discrete logarithms and attributes used in attribute certificates should be carefully considered, in order to guarantee that unlinkability really holds. We show that the problem is concrete by testing that the state-of-the-art implementation suffers from the above problem. A general solution is also proposed.

引用

页码：33 / 40

页数：8