An anonymous authentication protocol with single-database PIR

Authors:
Toru Nakamura;Shunsuke Inenaga;Kensuke Baba;Daisuke Ikeda;Hiroto Yasuura
Affiliations:
Kyushu University, Moto'oka, Nishi-ku, Fukuoka, Japan;Kyushu University, Moto'oka, Nishi-ku, Fukuoka, Japan;Kyushu University Library, Higashi-ku, Fukuoka, Japan;Kyushu University, Moto'oka, Nishi-ku, Fukuoka, Japan;Kyushu University, Moto'oka, Nishi-ku, Fukuoka, Japan
Venue:
AISC '11 Proceedings of the Ninth Australasian Information Security Conference - Volume 116
Year:
2011

Citing 5
Cited 0

Private information retrieval

Journal of the ACM (JACM)
Foundations of Cryptography: Basic Tools

Foundations of Cryptography: Basic Tools
Dynamic Accumulators and Application to Efficient Revocation of Anonymous Credentials

CRYPTO '02 Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology
Replication is not needed: single database, computationally-private information retrieval

FOCS '97 Proceedings of the 38th Annual Symposium on Foundations of Computer Science
A secure dynamic ID based remote user authentication scheme for multi-server environment

Computer Standards & Interfaces

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper focuses on anonymous authentication systems in multi-service environment, in which service providers communicate with the central manager in every authentication. Such systems have a merit that the central manager can easily update the database of user information by comparison to the existing anonymous authentication systems without communications between service providers and the central manager. The purpose of this paper is to realize a practical authentication protocol for such systems which satisfies four requirements for security and privacy protection, that is, correctness, impersonation resistance against passive insider, anonymity against central manager, and anonymity against service providers. The existing protocol consists of a multi-database PIR scheme, in which there are copies of the same database and none of these copies are allowed to communicate with each other. This paper proposes an authentication protocol which consists of the single-database PIR scheme proposed by Kushilevitz and Ostrovsky. This protocol also realizes all these requirements in the random oracle model. This protocol is more practical since using a single database implies the above-mentioned assumptions for multi-database PIR schemes are not required any more.