Privacy preserving identity attribute verification in windows cardspace

Authors:
Kevin Steuer, Jr.;Ruchith Fernando;Elisa Bertino
Affiliations:
Purdue University, West Lafayette, IN, USA;Purdue University, West Lafayette, IN, USA;Purdue University, West Lafayette, IN, USA
Venue:
Proceedings of the 6th ACM workshop on Digital identity management
Year:
2010

Citing 5
Cited 2

Efficient Identification and Signatures for Smart Cards

CRYPTO '89 Proceedings of the 9th Annual International Cryptology Conference on Advances in Cryptology
Non-Interactive and Information-Theoretic Secure Verifiable Secret Sharing

CRYPTO '91 Proceedings of the 11th Annual International Cryptology Conference on Advances in Cryptology
OACerts: Oblivious Attribute Certificates

IEEE Transactions on Dependable and Secure Computing
VeryIDX - A Digital Identity Management System for Pervasive Computing Environments

SEUS '08 Proceedings of the 6th IFIP WG 10.2 international workshop on Software Technologies for Embedded and Ubiquitous Systems
Privacy-preserving management of transactions' receipts for mobile environments

Proceedings of the 8th Symposium on Identity and Trust on the Internet

A comparison of users' perceptions of and willingness to use Google, Facebook, and Google+ single-sign-on functionality

Proceedings of the 2013 ACM workshop on Digital identity management
The di.me user interface: concepts for sharing personal information via multiple identities in a decentralized social network

HCI'13 Proceedings of the 15th international conference on Human-Computer Interaction: users and contexts of use - Volume Part III

Quantified Score

Hi-index	0.00

Visualization

Abstract

There are various identity management systems in place today. The way these share information about entities that interact with them gives rise to various privacy issues. This paper addresses two main such issues in Windows CardSpace, regarding the trust users' have to place on the system with respect to their personal information and to protect them against being exploited by means such as profiling. The protocol extensions proposed were implemented with a prototype as a proof of concept.