Efficient Selective Disclosure on Smart Cards Using Idemix

Vullers, Pim; Alpár, Gergely

doi:10.1007/978-3-642-37282-7_5

Cited by 48 publications

(53 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We estimate the efficiency of this scheme based on the work by Vullers and Alpár [29] in the IRMA project. To assess the performance of the implementation, we compare it to its version without revocation.…”

Section: Fast Smart Card Implementationmentioning

confidence: 99%

“…As group G, we use the quadratic residues modulo a 1024-bit safe prime (this is somewhat small, but matches the security level used in the implementation of Vullers and Alpár [29]). This group is cyclic and the DDH problem is hard.…”

Section: Fast Smart Card Implementationmentioning

confidence: 99%

“…These eID cards can be used both offline and online for secure authentication with the government and sometimes with other parties, like shops. Attributebased credentials (ABCs) [9] are an emerging technology for implementing eID cards because of their flexibility and strong privacy guarantees, and because they can be fully implemented on smart cards [29]. Every credential contains attributes that the user can either reveal or keep hidden.…”

Section: Introductionmentioning

confidence: 99%

“…2 The goal of this project is to demonstrate the practicality of attribute-based credentials. We implemented the entire user-side of the credentials on a smart card [29]. In this paper we focus on this setting.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Fast Revocation of Attribute-Based Credentials for Both Users and Verifiers

Lueks¹,

Alpár²,

Hoepman³

et al. 2015

ICT Systems Security and Privacy Protection

Self Cite

View full text Add to dashboard Cite

Abstract. Attribute-based credentials allow a user to prove properties about herself anonymously. Revoking such credentials, which requires singling them out, is hard because it is at odds with anonymity. All revocation schemes proposed to date either sacrifice anonymity altogether, require the parties to be online, or put high load on the user or the verifier. As a result, these schemes are either too complicated for low-powered devices like smart cards or they do not scale. We propose a new revocation scheme that has a very low computational cost for users and verifiers, and does not require users to process updates. We trade only a limited, but well-defined, amount of anonymity to make the first practical revocation scheme that is efficient at large scales and fast enough for smart cards.

show abstract

Section: Fast Smart Card Implementationmentioning

confidence: 99%

Section: Fast Smart Card Implementationmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Fast Revocation of Attribute-Based Credentials for Both Users and Verifiers

Lueks¹,

Alpár²,

Hoepman³

et al. 2015

ICT Systems Security and Privacy Protection

Self Cite

View full text Add to dashboard Cite

show abstract

“…This approach, however, requires partial trust on the host. Recently, Vullers and Alpár [38] also implemented the CL-based prover protocol on a MULTOS card. The computation of the proof only takes about 1.1s (for a 1024-bit modulus) for a simple credential proof.…”

Section: Related Workmentioning

confidence: 99%

Dedicated Hardware for Attribute-Based Credential Verification

Ottoy

Lapon

Naessens

et al. 2013

Communications and Multimedia Security

View full text Add to dashboard Cite

Abstract. Attribute-based credentials systems offer a privacy-friendly solution to access electronic services. In this field, most research has been directed into optimizing the prover operations and exploring the usability boundaries on mobile platforms like smart cards and mobile phones. This research assumes that the verification of credential proofs occur at a powerful back end. However, a broad range of (embedded) applications lack this powerful back end.This article shows that hardware accelerators for modular exponentiations, greatly reduce the run time of applications that require credential verification in an embedded context. In addition, when verification requires a considerable amount of the total run time (i.e., communication included), the use of dual-base (simultaneous) exponentiation hardware further increases the overall performance.All tests have been performed in a practical setup between a smartphone and an embedded terminal using NFC communication.

show abstract

Attribute‐based credentials with cryptographic collusion prevention

Hajný

Dzurenda

Malina

2015

Security Comm Networks

View full text Add to dashboard Cite

Cryptographic attribute-based credentials (ABCs) allow users to prove their personal attributes remotely and in a privacyfriendly way. While staying anonymous and untraceable, the users are able to prove their attributes, such as age, membership, or nationality, before using a network service. Unfortunately, there are very few practical cryptographic ABC schemes available today. Furthermore, some existing schemes rely on the hardware tamper-resistance of smart cards to avoid collusion attacks. The trust in hardware limits the usage of such schemes on poorly protected cards and on smart phones. In this paper, we present the full cryptographic specification of an ABC scheme, which makes the collusion attacks impossible even on insecure hardware like mobile phones. Furthermore, the scheme provides features, which are difficult to achieve using existing schemes, namely the practical revocation of users, the de-anonymization of malicious users, and the unlinkability of verification sessions. Besides the cryptographic architecture, we also present our practical implementation on a smart phone and embedded platforms.

show abstract

Efficient Selective Disclosure on Smart Cards Using Idemix

Cited by 48 publications

References 9 publications

Fast Revocation of Attribute-Based Credentials for Both Users and Verifiers

Fast Revocation of Attribute-Based Credentials for Both Users and Verifiers

Dedicated Hardware for Attribute-Based Credential Verification

Attribute‐based credentials with cryptographic collusion prevention

Contact Info

Product

Resources

About