Mutual Accountability Layer: Accountable Anonymity Within Accountable Trust

Daza, Vanesa; Haque, Abida; Scafuro, Alessandra; Zacharakis, Alexandros; Zapico, Arantxa

doi:10.1007/978-3-031-07689-3_24

Cited by 3 publications

(1 citation statement)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Concurrent Work which addresses a similar goal of authority accountability was proposed in [34]. However, this scheme does not achieve any notion of composability and cannot be easily proven UC secure.…”

Section: Related Workmentioning

confidence: 99%

PAPR: Publicly Auditable Privacy Revocation for Anonymous Credentials

Brorsson

David

Gentile

et al. 2023

Lecture Notes in Computer Science

View full text Add to dashboard Cite

We study the notion of anonymous credentials with Publicly Auditable Privacy Revocation (PAPR). PAPR credentials simultaneously provide conditional user privacy and auditable privacy revocation. The first property implies that users keep their identity private when authenticating unless and until an appointed authority requests to revoke this privacy, retroactively. The second property enforces that auditors can verify whether or not this authority has revoked privacy from an issued credential (i.e. learned the identity of the user who owns that credential), holding the authority accountable. In other words, the second property enriches conditionally anonymous credential systems with transparency by design, effectively discouraging such systems from being used for mass surveillance. In this work, we introduce the notion of a PAPR anonymous credential scheme, formalize it as an ideal functionality, and present constructions that are provably secure under standard assumptions in the Universal Composability framework. The core tool in our PAPR construction is a mechanism for randomly selecting an anonymous committee which users secret share their identity information towards, while hiding the identities of the committee members from the authority. As a consequence, in order to initiate the revocation process for a given credential, the authority is forced to post a request on a public bulletin board used as a broadcast channel to contact the anonymous committee that holds the keys needed to decrypt the identity connected to the credential. This mechanism makes the user de-anonymization publicly auditable.

show abstract

Section: Related Workmentioning

confidence: 99%