Ecole d'ingénieur et centre de recherche en Sciences du numérique

Untraceable secret credentials: trust establishment with privacy

Bussard, Laurent;Roudier, Yves;Molva, Refik

PERSEC 2004, worshop at PerCom'04, 2nd IEEE International conference on Pervasive Computing and Communications Security, March 14-17, 2004, Orlando, USA

There is generally no a priori trust relationship among entities interacting in pervasive computing environments which makes it necessary to establish trust from scratch. This task becomes extremely challenging when it is simultaneously necessary to protect the privacy of the actors involved. This paper shows how trust can be based on previous interactions yet remain unlinkable to any previous event or any specific entity. A solution based on group blind signatures is proposed that relies on credentials both secret, meaning that they contain an encrypted description of previous interactions, and untraceable, meaning that they cannot be recognized when presented to their issuer. can prove that he was previously certified as a reliable partner by the entity he is interacting with again. After any interaction, a credential is provided in order to subsequently assert what happened in a previous relationship. When two entities interact, they can exchange one or more credentials that enable trust establishment. To ensure that a credential holder will show negative as well as positive statements, we propose to encrypt credentials so that only the issuer and some trusted relatives can open it.

Document Doi Bibtex

Titre:Untraceable secret credentials: trust establishment with privacy
Département:Sécurité numérique
Eurecom ref:1285
Copyright: © 2004 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
Bibtex: @inproceedings{EURECOM+1285, doi = {}, year = {2004}, title = {{U}ntraceable secret credentials: trust establishment with privacy}, author = {{B}ussard, {L}aurent and {R}oudier, {Y}ves and {M}olva, {R}efik}, booktitle = {{PERSEC} 2004, worshop at {P}er{C}om'04, 2nd {IEEE} {I}nternational conference on {P}ervasive {C}omputing and {C}ommunications {S}ecurity, {M}arch 14-17, 2004, {O}rlando, {USA}}, address = {{O}rlando, {\'{E}}{TATS}-{UNIS}}, month = {03}, url = {} }
Voir aussi: