Real-world Deployment of Privacy-Enhancing Authentication System using Attribute-based Credentials

Dzurenda, Petr; Casanova-Marqués, Raúl; Malina, Lukáš

doi:10.1145/3538969.3543803

Cited by 2 publications

(1 citation statement)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Indeed, different devices bring different pros and cons, especially considering the security, time efficiency, and acquisition cost. Some works such as, for example [28], point out the problematic implementation of attribute-based credentials into real-world applications due to privacy and security risks. For instance, the identity disclosing risk allows a dishonest participant to start the conversation by requesting the entire set of attributes, resulting in a total loss of privacy and anonymity.…”

Section: Discussionmentioning

confidence: 99%

Privacy-Preserving Solution for European Union Digital Vaccine Certificates

Dzurenda,

Ricci,

Ilgner

et al. 2023

Applied Sciences

Self Cite

View full text Add to dashboard Cite

The recent COVID-19 pandemic situation highlights the importance of digital vaccine certificates. In response, the European Union (EU) developed EU Digital Vaccine Certificates to enable proof of non-infectivity and completed vaccinations. However, these solutions suffer from several shortcomings, such as ineffective certificate holder identification and a high violation of user privacy with the disclosure of sensitive information. In this work, we present a novel solution for privacy-preserving EU Digital Vaccine Certificates. Our solution solves the aforementioned privacy and security shortcomings and is in line with current EU legislation, i.e., the General Data Protection Regulation (GDPR), the upcoming revision of the electronic IDentification, Authentication, and trust Services (eIDAS), called regulation eIDAS 2.0, and the new tools that it envisages to be led by European digital identity. This identity is intended to allow citizens to prove their identity to access online services, share digital documents, or simply prove specific personal characteristics such as age without revealing their identity or other personal information. The core of our proposal is built on our novel attribute-based credential scheme, which can be easily implemented on various handheld devices, especially on Android smartphones and smartwatches. However, due to the lightweight nature of our scheme, it can also be implemented on constrained devices such as smart cards. In order to demonstrate the security, privacy, and practicality inherent in our proposal, we provide the security analysis of the cryptographic core along with a set of experimental results conducted on smartphones and smart cards.

show abstract

Section: Discussionmentioning

confidence: 99%

Privacy-Preserving Solution for European Union Digital Vaccine Certificates

Dzurenda,

Ricci,

Ilgner

et al. 2023

Applied Sciences

Self Cite

View full text Add to dashboard Cite

show abstract

Transforming Industry 4.0 Security: Analysis of ABE and ABA Technologies

Saleem,

Raza,

Holderbaum

2024

IECE Transactions on Intelligent Systematics

View full text Add to dashboard Cite

The sharing of data and private information has been greatly improved by Industry 4.0's broad usage of cloud technologies. In their quest to improve their services, many firms have made automation and effective authentication a priority. As a result, in Industry 4.0, Attribute-Based Encryption (ABE) and Attribute-Based Authentication (ABA) have established themselves as dependable models for data sharing across cloud environments. For difficult situations like fine-grained access control and secure authentication, these models offer practical answers. Organizations can utilize ABA to specifically authenticate people based on their attributes, ensuring appropriate and safe access to critical data. Despite the significance of ABE and ABA within Industry 4.0 and the wide range of applications that they have, systematic and thorough studies that include all variations of these models, as well as their historical and present condition, are lacking in the literature. This paper offers a complete and organized evaluation of works on Industry 4.0 by ABE and ABA. Our study's methodology, findings, and suggested follow-up work will advance the field of ABE and ABA research and improve the safety of data sharing in Industry 4.0. Organizations working within Industry 4.0 can improve the security of their cloud-based systems by integrating attribute-based authentication mechanisms and machine learning, making sure that only vetted individuals have access to sensitive data. ABE and ABA architectures in safe data-sharing situations within Industry 4.0, as well as the potential of ABE and ABA deployment in the context of the most recent technical breakthroughs, will also be better understood by researchers and practitioners with the aid of this study.

show abstract

Real-world Deployment of Privacy-Enhancing Authentication System using Attribute-based Credentials

Cited by 2 publications

References 27 publications

Privacy-Preserving Solution for European Union Digital Vaccine Certificates

Privacy-Preserving Solution for European Union Digital Vaccine Certificates

Transforming Industry 4.0 Security: Analysis of ABE and ABA Technologies

Contact Info

Product

Resources

About