Enforcing Email Addresses Privacy Using Tokens

Schlegel, Roman; Vaudenay, Serge

doi:10.1007/11599548_8

Cited by 2 publications

(1 citation statement)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Apart from the mentioned technologies in section 2.1 and section 2.2, there are several other proposals on how to prevent spam. Such proposals include use of tokens (Schlegel, 2005), challenge-response schemes (Spamarrest), pre-challenge schemes (Roman, 2005), graylisting (Harris, 2004), domain-based email authentication (Delany, 2005) and encapsulation of policy in email addresses (Ioannidis, 2003). Password-based systems (Cranor, 1998) and micropayment systems (Abadi, 2003) have also been proposed.…”

Section: Filtering Techniquesmentioning

confidence: 99%

On Use of Identity-Based Encryption for Secure Emailing

Veigner¹,

Rong²

2006

Proceedings of the International Conference on Security and Cryptography

View full text Add to dashboard Cite

In 1984 Adi Shamir requested a solution for a novel public-key encryption scheme, called identity-based encryption. The original motivation for identity-based encryption was to help the deployment of a publickey infrastructure. The idea of an identity-based encryption scheme is that the public key can be any arbitrary string, for example, an email address, a name or a role. Several solutions were proposed in the following years. In 2001 the first practical and efficient scheme was proposed by Boneh and Franklin. Their encryption scheme was based on the Weil pairing on elliptic curves and proved secure in the random oracle model. In 2005, a new promising suggestion due to Waters was proposed, this time as an efficient solution without random oracles. An identity-based encryption (IBE) scheme does not need to download certificates to authenticate public keys as in a public-key infrastructure (PKI). A public key in an identity-based cryptosystem is simply the receiver's identity, e.g. an email address. As often, when new technology occurs, the focus is on the functionality of the technology and not on its security. In this paper we briefly review about identity-based encryption and decryption, particularly, the Boneh-Franklin algorithms. Later on we show that IBE schemes used for secure emailing render spamming far easier for spammers compared to if a PKI certificate approach is used. With the IBE approach, viruses may also be spread out more efficiently.

show abstract