Privacy preservation with X.509 standard certificates

Information Sciences

Volumn 181, Issue 13, 2011, Pages 2906-2921

  Kwon, Taekyoung ^a  

^a Sejong University   (South Korea)

Author keywords

Formal analysis; Information and knowledge; Intelligent systems; Privacy preservation; Security algorithm

Indexed keywords

ATTRIBUTE CERTIFICATE; CERTIFICATE AUTHORITY; COMPUTING ENVIRONMENTS; CONCRETE METHOD; FORMAL ANALYSIS; INFORMATION AND KNOWLEDGE; LEGACY INFORMATION SYSTEMS; PRACTICAL METHOD; PRIVACY PRESERVATION; SECURITY ALGORITHM; TRUSTED THIRD PARTIES;

ALGORITHMS; INTELLIGENT SYSTEMS; STANDARDS;

LEGACY SYSTEMS;

EID: 79953837784     PISSN: 00200255     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ins.2011.02.016     Document Type: Article

References (37)

1. K. Aberer, A. Datta, and M. Hauswirth Efficient, self-contained handling of identity in peer-to-peer systems IEEE Trans. Knowl. Data Eng. 16 7 2004 858 869
2. C. Adams, M. Just, PKI: Ten Years Later, in: Proceedings of the 3rd Annual PKI R&D Workshop, NIST, 2004. Available from .
3. G. Ateniese, J. Camenisch, M. Joye, and G. Tsudik A practical and provably secure coalition-resistant group signature scheme Proceedings of Crypto 2000 - Advances in Cryptology Lecture Notes in Computer Science vol. 1880 2000 Springer-verlag 255 270
4. M. Bellare, P. Rogaway, Random oracles are practical: a paradigm for designing efficient protocols, in: Proc. ACM Conference on Computers and Communication Security, 1993, pp. 62-73.
5. V. Benjumea, J. Lopez, J. Montegegro, and J. Troya A first approach to provide anonymity in attribute certificates Proceedings of PKC 2004 Lecture Notes in Computer Science vol. 2947 2004 Springer-Verlag 402 415
6. V. Benjumea, J. Lopez, J. Montegegro, and J. Troya Anonymous attribute certificates based on traceable signatures J. Int. Res. 16 2 2006 120 139 (Pubitemid 43665934)
7. V. Benjumea, S. Choi, J. Lopez, and M. Yung Anonymity 2.0 X.509 extensions supporting privacy-friendly authentication Proceedings of CANS 2007 Lecture Notes in Computer Science vol. 2947 2007 Springer-Verlag 402 415
8. V. Benjumea, S. Choi, J. Lopez, and M. Yung Fair traceable multi-group signatures Proceedings of FC 2008 Lecture Notes in Computer Science vol. 5143 2008 Springer-Verlag 231 246
9. S. Brands, Rethinking Public Key Infrastructures and Digital Certificates - Building in Privacy, Ph.D. thesis, Eindhoven Institute of Technology, Eindhoven, The Netherlands, 1999.
10. J. Camenisch, and E. Herreweghen Design and implementation of the idemix anonymous credential system Proceedings of ACM Conference on Computers and Communication Security 2002 21 30
11. J. Camenisch, and A. Lysyanskaya Efficient non-transferable anonymous multi-show credential system with optional anonymity revocation Proceedings of Eurocrypt 2001 - Advances in Cryptology Lecture Notes in Computer Science vol. 2045 2001 Springer-Verlag 93 118 (Pubitemid 33275827)
12. D. Chaum Untraceable electronic mail, return addresses, and digital pseudonyms Commun. ACM 4 2 1981 84 88 (Pubitemid 11480996)
13. D. Chaum Blind signatures for untraceable system Proceedings of Crypto'82 - Advances in Cryptology Lecture Notes in Computer Science 1983 Plenum Press 100 203
14. D. Chaum Security without identification: transactions systems to make big brother obsolete Commun. ACM 28 10 1985 1035 1044 Revised version, Security Without Identification: Card Computers to Make Big Brother Obsolete, available at
15. D. Chaum, and J. Evertse A secure and privacy-protecting protocol for transmitting personal information between organizations Proceedings of Crypto'86 - Advances in Cryptology Lecture Notes in Computer Science vol. 263 1987 Springer-Verlag 118 167
16. J. Coron On the exact security of full domain hash Proceedings of Crypto 2000 - Advances in Cryptology Lecture Notes in Computer Science vol. 1880 2000 Springer-Verlag 229 235
17. I. Damgrd Payment systems and credential mechanism with provable security against abuse by individuals Proceedings Crypto'88 - Advances in Cryptology Lecture Notes in Computer Science vol. 403 1988 Springer-Verlag 328 335
18. E. Friedman, and P. Resnick The social cost of cheap pseudonyms J. Econ. Manage. Strat. 10 1 2001 173 199 (Pubitemid 33580600)
19. D. Goldschlag, M. Reed, and P. Syverson Onion routing for anonymous and private internet connections Commun. ACM 42 2 1999 84 88
20. S. Goldwasser, and S. Micali Probabilistic encryption J. Comput. Syst. Sci. 28 1984 270 299
21. S. Goldwasser, S. Micali, and R. Rivest A digital signature scheme secure against adaptive chosen-message attacks SIAM J. Comput. 17 2 1988 281 308
22. J. Graaf, O. Carvalho, Reflecting on X.509 and LDAP, or how separating identity and attributes could simplify A PKI, in: Proceedings of WSEG 2004, 2004, pp. 37-48.
23. R. Housley, W. Polk, W. Ford, D. Solo, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, IETF Request for Comments 3280, 2002.
24. A. Kiayias, Y. Tsiounis, and M. Yung Traceable signatures Proceedings of Eurocrypt 2004 - Advances in Cryptology Lecture Notes in Computer Science vol. 3027 1999 Springer-Verlag 571 589
25. T. Kwon, J. Cheon, Y. Kim, and J. Lee Privacy protection in pkis: a separation-of-authority approach Proceedings of WISA 2006 Lecture Notes in Computer Science vol. 4298 2007 Springer-Verlag 297 311
26. R. Lu, X. Lin, Z. Cao, J. Shao, and X. Liang New (t, n) threshold directed signature scheme with provable security Information Sciences vol. 178 2008 Elsevier 756 765 (Pubitemid 350050957)
27. A. Lysyanskaya, R. Rivest, A. Sahai, and S. Wolf Pseudonym systems Proceedings of selected areas in cryptography Lecture Notes in Computer Science vol. 1758 1999 Springer-Verlag
28. P. MacKenzie, M. Reiter, Networked cryptographic devices resilient to capture, in: Proceedings of IEEE Symposium on Security and Privacy 2001, a full and updated version is DIMACS Technical Report 2001-19, 2001.
29. M. Myers, R. Ankney, A. Malpani, S. Galperin, C. Adams, X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP, IETF Request for Comments 2560, 1999.
30. S. Rafaeli, M. Rennhard, L. Mathy, B. Plattner, D. Hutchison, An architecture for Pseudonymous e-commerce, in: Proceedings of AISB'01 Symposium on Information Agents for Electronic Commerce, 2001, pp. 33-41.
31. M. Reiter, and A. Rubin Crowds: anonymity for web transactions ACM Trans. Inform. Syst. Secur. 1 1 1998 66 92
32. R. Rivest, A. Shamir, and L. Adleman A method for obtaining digital signature and public-key cryptosystems Commun. ACM 21 2 1978 120 126 (Pubitemid 8591219)
33. M. Stadler, J. Piveteau, and J. Camenisch Fair blind signatures Proceedings of Eurocrypt'95 - Advances in Cryptology Lecture Notes in Computer Science vol. 921 1995 Springer-Verlag 209 219
34. Y. Sun, B. Gong, X. Meng, Z. Lin, and E. Bertino Specification and enforcement of flexible security policy for active cooperation Information Sciences vol. 179 2009 Elsevier 2629 2642
35. E. Verheul Self-blindable credential certificates from the weil pairing Proceedings of Asiacrypt 2001 - Advances in Cryptology Lecture Notes in Computer Science vol. 2248 2001 Springer-Verlag 533 551
36. ITU-T X.509, Information technology - Open Systems Interconnection - The Directory: Public-Key and Attribute Certificate Frameworks, ITU-T Recommendation X.509, March 2000. Also available from ISO/IEC 9594-8, 2001.
37. J. Yu, R. Hao, F. Kong, X. Cheng, J. Fan, and Y. Chen Forward-secure identity-based signature: security notions and construction Information Sciences vol. 181 2011 Elsevier 648 660