A secure and private system for subscription-based remote services

ACM Transactions on Information and System Security

Volumn 6, Issue 4, 2003, Pages 472-500

  Persiano, Pino ^a   Visconti, Ivan ^a  

^a UNIVERSITY OF SALERNO   (Italy)

Author keywords

Access control; Anonymity; Cryptographic algorithms and protocols; Privacy; World wide web

Indexed keywords

ACCESS CONTROL; ANONYMITY; CRYPTOGRAPHIC ALGORITHMS AND PROTOCOLS; PRIVACY;

ALGORITHMS; CRYPTOGRAPHY; DATA PRIVACY; DATABASE SYSTEMS; INFORMATION MANAGEMENT; NETWORK PROTOCOLS; WORLD WIDE WEB;

SECURITY OF DATA;

EID: 3142585395     PISSN: 10949224     EISSN: None     Source Type: Journal    
DOI: 10.1145/950191.950193     Document Type: Article

References (32)

1. Apache 2002. The Apache web server project. http://www.apache.org.
2. ATENIESE, G., CAMENISCH, J., JOYE, M., AND TSUDIK, G. 2000. A practical and provably secure coalition-resistant group signature scheme. In Proceedings of Advances in Cryptology - CRYPTO 2000, M. Bellare, Bd. Lecture Notes in Computer Science, vol. 1880. Springer Verlag, Berlin, 255-270.
3. ATENIESE, G. AND TSUDIK, G. 1999. Some open issues and new directions in group signatures. In Financial Cryptography. Lecture Notes in Computer Science, vol. 1648. Springer Verlag, Berlin, 196-211.
4. BRANDS, S. 2000. Rethinking Public Key Infrastructures and Digital Certificates-Building in Privacy. MIT Press, Cambridge, MA.
5. CAMENISCH, J. L. 1997. Efficient and generalized group signatures. In Proceedings of Advances in Cryptology - Eurocrypt '97. Lecture Notes in Computer Science, vol. 1233. Springer Verlag, Berlin, 465-479.
6. CHAUM, D. 1981. Untraceable electronic mail, return addresses, and digital pseudonyms. Communications of the Association for Computing Machinery 24, 2 (Feb.), 84-88.
7. CHAUM, D. 1983. Blind signatures for untraceable payments. In Advances in Cryptology: Proceedings of Crypto'82. D. Chaum, R. L. Rivest, and A. T. Sherman, Eds. Plenum Press, New York, 199-203.
8. CHAUM, D. 1985. Security without identification: transaction systems to make big brother obsolete. Communications of the Association for Computing Machinery 28, 10, 1030-1044.
9. CHAUM, D. AND VAN HEYST, E. 1991. Group signatures. In Proceedings of Advances in Cryptology (EUROCRYPT '91), D. W. Davies, Ed. LNCS, vol. 547. Springer, Berlin, 257-265.
10. DE SANTIS, A., DI CRESCENZO, G., AND PERSIANO, G. 1998. Communication-efficient anonymous group identification. In Proceedings of the 5th ACM Conference on Computer and Communications Security. ACM Press, San Francisco, CA, 73-82.
11. DE SANTIS, A., DI CRESCENZO, G., PERSIANO, G., AND YUNG, M. 1994. On monotone formula closure of SZK. In Proceedings of 35th Annual Symposium on Foundations of Computer Science (Santa Fe, NM, Nov. 20-22, 1994), S. Goldwasser, Ed. IEEE Computer Society Press, Los Alamitos, CA, 454-465.
12. DIERKS, T. AND ALLEN, C. 1999. RFC 2246: The TLS protocol version 1.
13. DUBUISSON, O. 2000. ASN.1 - Communication Between Heterogeneous Systems. Morgan Kaufmann Publisher, San Mateo, CA.
14. EASTLAKE, D. AND JONES, P. 2001. US secure hash algorithm 1. RFC 3174.
15. FEIGE, U., FIAT, A., AND SHAMIR, A. 1988. Zero-knowledge proofs of identity. Journal of Cryptology 1, 2, 77-94.
16. FEIGE, U. AND SHAMIR, A. 1990. Witness indistinguishable and witness hiding protocols. In Proceedings of the 22nd Annual ACM Symposium on the Theory of Computing. B. Awerbuch, Ed. ACM Press, Baltimore, MD, 416-426.
17. FREIER, A. O., KARLTON, P., AND KOCHER, P. C. 1996. The SSL protocol - version 3.0.
18. GOLDWASSER, S., MICALI, S., AND RACKOFF, C. 1989. The knowledge complexity of interactive systems. SIAM Journal of Computing 18, 1, 186-208.
19. GÜLCÜ, C. AND TSUDIK, G. 1996. Mixing e-mail with BABEL. In Proceedings of the Symposium on Network and Distributed Systems Security (NDSS '96). Internet Society, IEEE Computer Society Press, San Diego, CA.
20. HOUSLEY, R., POLK, W., FORD, W., AND SOLO, D. 2002. Internet X509 public key infrastructure: Certificate and certificate revocation List (CRL) profile. Network Working Group, RFC 3280.
21. ModSSL. The ModSSL home page. http://www.modssl.org.
22. Moz2I 2000. The Moz2I home page. http://www.security.unisa.it/spsl/moz2i. html.
23. OpenSSL. The OpenSSL home page. http://www.openssl.org.
24. PERSIANO, P. AND VISCONTI, I. 2000. User privacy issues regarding certificates and the TLS protocol: The design and implementation of the SPSL protocol. In Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS-00), S. Jajodia and P. Samarati, Eds. ACM Press, New York, 53-62.
25. REED, M. G., SYVERSON, P. F., AND GOLDSCHLAG, D. M. 1998. Anonymous connections and onion routing. IEEE Journal on Special Areas in Communications 16, 4 (May), 482-494.
26. REITER,M.K. AND RUBIN,A.D. 1998. CROWDS: Anonymity for web transactions. ACM Transaction on Information and System Security 1, 1, 66-92.
27. RIVEST, L., SHAMIR, A., AND TAUMAN, Y. 2001. How to leak a secret. In ASIACRYPT: Advances in Cryptology - ASIACRYPT: International Conference on the Theory and Application of Cryptology, C. Boyd, Ed. Lecture Notes in Computer Science, vol. 2248. Springer Verlag, Berlin, 552-565.
28. RIVEST, R. L. 1992. RFC 1321: The MD5 message-digest Algorithm
29. SCHECHTER, S., PARNELL, T., AND HARTEMINK, A. 1999. Anonymous authentication of membership in dynamic groups. In Proceedings of the 3rd International Conference on Financial Cryptography 99, M. Franklin, Ed. Lecture Notes in Computer Science, vol. 1648. Springer Verlag, Berlin, 184-195.
30. SPSL. The SPSL home page. http://www.security.unisa.it/spsl.
31. STUBBLEBINE, S. G., SYVERSON, P. F., AND GOLDSCHLAG, D. M. 1999. Unlinkable serial transactions: protocols and applications. ACM Transactions on Information and System Security 2, 4, 354-389.
32. W3C. 1999. Resource description framework (RDF) model and syntax speficitation. REC-rdf-syntax-19990222.