Developing Efficient Blinded Attribute Certificates on Smart Cards via Pairings

Batina, Lejla; Hoepman, Jaap-Henk; Jacobs, Bart; Mostowski, Wojciech; Vullers, Pim

doi:10.1007/978-3-642-12510-2_15

Cited by 32 publications

(21 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The chip therefore, reduces the number of cards, making one card the access key to many accounts. The smart card as a payment instrument has processing power that allows the smart card payment system to be used for multiple functions and/or applications [3]. This of course, reduces the overall number of cards in the consumer's wallet, though there are many arguments and issues about whether or not smart card is secured and safe enough to store such information.…”

Section: Smart Card Payment Systemmentioning

confidence: 99%

Analysis of Security Issues in Electronic Payment Systems

Aigbe¹,

Akpojaro²

2014

IJCA

View full text Add to dashboard Cite

The emergence of e-commerce has created new financial needs that in many cases cannot be effectively fulfilled by the traditional payment systems. Recognizing this, virtually all interested parties are exploring various types of electronic payment systems, issues surrounding electronic payment system and digital currency. Broadly, electronic payment systems can be classified into four categories: online electronic cash system, electronic cheque system, online credit card payment system, and smart cards based electronic payment system. Each payment system has its advantages and disadvantages for the customers and merchants. We highlight the analysis of the security levels in relationship with fraud vulnerability, and determine how this relationship affects or boosts the confidence of the users. General TermsElectronic payment system, e-commerce Keywords eCash, credit card payment system, vulnerability, digital signature, biometric finger print, merchant

show abstract

Section: Smart Card Payment Systemmentioning

confidence: 99%

Analysis of Security Issues in Electronic Payment Systems

Aigbe¹,

Akpojaro²

2014

IJCA

View full text Add to dashboard Cite

show abstract

“…They consider a hybrid system with two kinds of tickets: passive RFID transponders and embedded systems such as cell phones. E-cash Implementations Implementations of anonymous credentials on Java cards have been presented in [8] and [6]. Hinterwälder et al presented an implementation of Brands' e-cash scheme for a computational RFID tag [24].…”

Section: Related Workmentioning

confidence: 99%

“…The underlying prime field of this curve Z p is based on a generalized Mersenne prime p = 2 160 −2 31 −1, which allows for an efficient implementation of the curve arithmetic. On the terminal side we use the Bouncy Castle Crypto Library version 1.5 6 . This library provides a general elliptic curve framework supporting the use of many different curves.…”

Section: Cryptographic Frameworkmentioning

confidence: 99%

Efficient E-Cash in Practice: NFC-Based Payments for Public Transportation Systems

Hinterwälder

Zenger

Baldimtsi

et al. 2013

Privacy Enhancing Technologies

View full text Add to dashboard Cite

Abstract. Near field communication (NFC) is a recent popular technology that will facilitate many aspects of payments with mobile tokens. In the domain of public transportation payment systems electronic payments have many benefits, including improved throughput, new capabilities (congestion-based pricing etc.) and user convenience. A common concern when using electronic payments is that a user's privacy is sacrificed. However, cryptographic e-cash schemes provide provable guarantees for both security and user privacy. Even though e-cash protocols have been proposed three decades ago, there are relatively few actual implementations, since their computation complexity makes an execution on lightweight devices rather difficult. This paper presents an efficient implementation of Brands [11] and ACL [4] e-cash schemes on an NFC smartphone: the BlackBerry Bold 9900. Due to their efficiency during the spending phase, when compared to other schemes, and the fact that payments can be verified offline, these schemes are especially suited for, but not limited to, use in public transport. Additionally, the encoding of validated attributes (e.g. a user's age range, zip code etc.) is possible in the coins being withdrawn, which allows for additional features such as variable pricing (e.g. reduced fare for senior customers) and privacy-preserving data collection. We present a subtle technique to make use of the ECDHKeyAgreement class that is available in the BlackBerry API (and in the API of other systems) and show how the schemes can be implemented efficiently to satisfy the tight timing imposed by the transportation setting.

show abstract

“…The benefit of this approach is that the use of such credentials is untraceable. Furthermore they can be efficiently implemented on a smart card [2,17] using elliptic curve cryptography (ECC), providing the best performance results thus far.…”

Section: Self-blindable Credentialsmentioning

confidence: 99%

“…One way to achieve this is to use attributes instead of identities. A number of technologies [2,6,9] have been developed based on this idea, but the main focus has been on the cryptography and less on (efficient) implementations. The implementations which have been made are mainly for ordinary computers.…”

Section: Introductionmentioning

confidence: 99%

Efficient U-Prove Implementation for Anonymous Credentials on Smart Cards

Mostowski

Vullers

2012

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

Self Cite

View full text Add to dashboard Cite

Summary. In this paper we discuss an efficient implementation of anonymous credentials on smart cards. In general, privacy-preserving protocols are computationally intensive and require the use of advanced cryptography. Implementing such protocols for smart cards involves a trade-off between the requirements of the protocol and the capabilities of the smart card. In this context we concentrate on the implementation of Microsoft's U-Prove technology on the MULTOS smart card platform. Our implementation aims at making the smart card independent of any other resources, either computational or storage. In contrast, Microsoft suggests an alternative approach based on device-protected tokens which only uses the smart card as a security add-on. Given our very good performance results we argue that our approach should be considered in favour of Microsoft's one. Furthermore we provide a brief comparison between Java Card and MULTOS which illustrates our choice to implement this technology on the latter more flexible and low-level platform rather than the former.

show abstract

Developing Efficient Blinded Attribute Certificates on Smart Cards via Pairings

Cited by 32 publications

References 21 publications

Analysis of Security Issues in Electronic Payment Systems

Analysis of Security Issues in Electronic Payment Systems

Efficient E-Cash in Practice: NFC-Based Payments for Public Transportation Systems

Efficient U-Prove Implementation for Anonymous Credentials on Smart Cards

Contact Info

Product

Resources

About