Point-based trust: define how much privacy is worth

Authors:
Danfeng Yao;Keith B. Frikken;Mikhail J. Atallah;Roberto Tamassia
Affiliations:
Department of Computer Science, Brown University, Providence, RI;Department of Computer Science and Systems Analysis, Miami University, Oxford, OH;Department of Computer Science, Purdue University, West Lafayette, IN;Department of Computer Science, Brown University, Providence, RI
Venue:
ICICS'06 Proceedings of the 8th international conference on Information and Communications Security
Year:
2006

Citing 35
Cited 9

Security without identification: transaction systems to make big brother obsolete

Communications of the ACM
Identity-based cryptosystems and signature schemes

Proceedings of CRYPTO 84 on Advances in cryptology
The knowledge complexity of interactive proof-systems

STOC '85 Proceedings of the seventeenth annual ACM symposium on Theory of computing
How to play ANY mental game

STOC '87 Proceedings of the nineteenth annual ACM symposium on Theory of computing
A secure and privacy-protecting protocol for transmitting personal information between organizations

Proceedings on Advances in cryptology---CRYPTO '86
Completeness theorems for non-cryptographic fault-tolerant distributed computation

STOC '88 Proceedings of the twentieth annual ACM symposium on Theory of computing
Multiparty unconditionally secure protocols

STOC '88 Proceedings of the twentieth annual ACM symposium on Theory of computing
PRUNES: an efficient and complete strategy for automated trust negotiation over the Internet

Proceedings of the 7th ACM conference on Computer and communications security
Interoperable strategies in automated trust negotiation

CCS '01 Proceedings of the 8th ACM conference on Computer and Communications Security
Introduction to Algorithms

Introduction to Algorithms
Design and implementation of the idemix anonymous credential system

Proceedings of the 9th ACM conference on Computer and communications security
A reputation-based approach for choosing reliable resources in peer-to-peer networks

Proceedings of the 9th ACM conference on Computer and communications security
A uniform framework for regulating service access and information release on the web

Journal of Computer Security
Valuation of Trust in Open Networks

ESORICS '94 Proceedings of the Third European Symposium on Research in Computer Security
Identity-Based Encryption from the Weil Pairing

CRYPTO '01 Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology
An Identity Based Encryption Scheme Based on Quadratic Residues

Proceedings of the 8th IMA International Conference on Cryptography and Coding
A Generalisation, a Simplification and Some Applications of Paillier's Probabilistic Public-Key System

PKC '01 Proceedings of the 4th International Workshop on Practice and Theory in Public Key Cryptography: Public Key Cryptography
Secure Multi-party Computational Geometry

WADS '01 Proceedings of the 7th International Workshop on Algorithms and Data Structures
A Unified Scheme for Resource Protection in Automated Trust Negotiation

SP '03 Proceedings of the 2003 IEEE Symposium on Security and Privacy
A study of several specific secure two-party computation problems

A study of several specific secure two-party computation problems
Foundations of Cryptography: Volume 2, Basic Applications

Foundations of Cryptography: Volume 2, Basic Applications
Hidden Credentials

Proceedings of the 2003 ACM workshop on Privacy in the electronic society
Privacy preserving route planning

Proceedings of the 2004 ACM workshop on Privacy in the electronic society
Hidden access control policies with hidden credentials

Proceedings of the 2004 ACM workshop on Privacy in the electronic society
Concealing complex policies with hidden credentials

Proceedings of the 11th ACM conference on Computer and communications security
Meeting central: making distributed meetings more effective

CSCW '04 Proceedings of the 2004 ACM conference on Computer supported cooperative work
A Trust based Access Control Framework for P2P File-Sharing Systems

HICSS '05 Proceedings of the Proceedings of the 38th Annual Hawaii International Conference on System Sciences - Volume 09
Privacy-preserving distributed k-means clustering over arbitrarily partitioned data

Proceedings of the eleventh ACM SIGKDD international conference on Knowledge discovery in data mining
Automated trust negotiation using cryptographic credentials

Proceedings of the 12th ACM conference on Computer and communications security
Applications of secure electronic voting to automated privacy-preserving troubleshooting

Proceedings of the 12th ACM conference on Computer and communications security
A quantitative trust establishment framework for reliable data packet delivery in MANETs

Proceedings of the 3rd ACM workshop on Security of ad hoc and sensor networks
Anonymous Usage of Location-Based Services Through Spatial and Temporal Cloaking

Proceedings of the 1st international conference on Mobile systems, applications and services
How to generate and exchange secrets

SFCS '86 Proceedings of the 27th Annual Symposium on Foundations of Computer Science
Public-key cryptosystems based on composite degree residuosity classes

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
Secure outsourcing of sequence comparisons

PET'04 Proceedings of the 4th international conference on Privacy Enhancing Technologies

Decentralized authorization and data security in web content delivery

Proceedings of the 2007 ACM symposium on Applied computing
Towards an efficient and language-agnostic compliance checker for trust negotiation systems

Proceedings of the 2008 ACM symposium on Information, computer and communications security
Notarized federated ID management and authentication

Journal of Computer Security - 20th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec'06)
Private Information: To Reveal or not to Reveal

ACM Transactions on Information and System Security (TISSEC)
PBS: Private Bartering Systems

Financial Cryptography and Data Security
Exploiting Preferences for Minimal Credential Disclosure in Policy-Driven Trust Negotiations

SDM '08 Proceedings of the 5th VLDB workshop on Secure Data Management
Privacy-aware identity management for client-side mashup applications

Proceedings of the 5th ACM workshop on Digital identity management
Privacy-preserving trust verification

Proceedings of the 15th ACM symposium on Access control models and technologies
Evaluating peer behaviour in distributed participatory sensing

WSEAS Transactions on Computers

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper studies the notion of point-based policies for trust management, and gives protocols for realizing them in a disclosure-minimizing fashion. Specifically, Bob values each credential with a certain number of points, and requires a minimum total threshold of points before granting Alice access to a resource. In turn, Alice values each of her credentials with a privacy score that indicates her reluctance to reveal that credential. Bob's valuation of credentials and his threshold are private. Alice's privacy-valuation of her credentials is also private. Alice wants to find a subset of her credentials that achieves Bob's required threshold for access, yet is of as small a value to her as possible. We give protocols for computing such a subset of Alice's credentials without revealing any of the two parties' above-mentioned private information.