One-time capabilities for authorizations without trust

Bussard, Laurent;Molva, Refik
PERCOM 2004, 2nd IEEE International conference on Pervasive Computing and Communications Security, March 14-17, 2004, Orlando, USA

This paper introduces and solves a security problem of pervasive computing: how to define authorizations for offline interactions when trust relationships among entities do not exist. A new type of capability is proposed to ensure that user interactions are not traceable and that misbehaving users automatically lose some money they deposited as a guarantee of their loyalty. mechanism when there is no trust relationship. Protocols ensure that service providers can only cash the deposit in case of misbehavior and that users are not traceable. As stated in requirement 1, the verification of users’ rights can be performed without any communication with a third party system.


DOI
Type:
Conference
City:
Orlando
Date:
2004-03-14
Department:
Digital Security
Eurecom Ref:
1286
Copyright:
© 2004 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.

PERMALINK : https://www.eurecom.fr/publication/1286