A user-centric anonymous authorisation framework in e-commerce environment

  • Authors:
  • Richard Au;Harikrishna Vasanta;Kim-Kwang Raymond Choo;Mark Looi

  • Affiliations:
  • Queensland University of Technology, Brisbane, Australia;Queensland University of Technology, Brisbane, Australia;Queensland University of Technology, Brisbane, Australia;Queensland University of Technology, Brisbane, Australia

  • Venue:
  • ICEC '04 Proceedings of the 6th international conference on Electronic commerce
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

A novel user-centric authorisation framework suitable for e-commerce in an open environment is proposed. The credential-based approach allows a user to gain access rights anonymously from various service providers who may not have pre-existing relationships. Trust establishment is achieved by making use of referrals from external third parties in the form of Anonymous Attribute Certificates. The concepts of One-task Authorisation Key and Binding Signature are proposed to facilitate pseudonymity in authorisation service. These mechanisms enhance user privacy and tackle the problem of scalability in identity-based access control systems.