Towards a Full-Featured Implementation of Attribute Based Credentials on Smart Cards

Piedra, Antonio de la; Hoepman, Jaap-Henk; Vullers, Pim

doi:10.1007/978-3-319-12280-9_18

Cited by 11 publications

(7 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Calculating a 256-bit hash takes about 10 milliseconds. We estimate a total extra time of 390 milliseconds for including the revocation value as an attribute, generating the revocation token and adding the equality proof [33]. This is very practical.…”

Section: Methodsmentioning

confidence: 95%

Fast revocation of attribute-based credentials for both users and verifiers

Lueks

Alpár

Hoepman

et al. 2017

Computers & Security

Self Cite

View full text Add to dashboard Cite

Abstract. Attribute-based credentials allow a user to prove properties about herself anonymously. Revoking such credentials, which requires singling them out, is hard because it is at odds with anonymity. All revocation schemes proposed to date either sacrifice anonymity altogether, require the parties to be online, or put high load on the user or the verifier. As a result, these schemes are either too complicated for low-powered devices like smart cards or they do not scale. We propose a new revocation scheme that has a very low computational cost for users and verifiers, and does not require users to process updates. We trade only a limited, but well-defined, amount of anonymity to make the first practical revocation scheme that is efficient at large scales and fast enough for smart cards.

show abstract

Section: Methodsmentioning

confidence: 95%

Fast revocation of attribute-based credentials for both users and verifiers

Lueks

Alpár

Hoepman

et al. 2017

Computers & Security

Self Cite

View full text Add to dashboard Cite

show abstract

“…Related Work on using Anonymous Credentials: Anonymous Credential systems (aka Privacy ABCs) are a valuable mechanism for ensuring privacy in identity management and have been discussed in context of eID systems, e.g, their integration in the German eID architecture [33]. While early implementations of anonymous credential systems, e.g., idemix [48] on a Java Card [49], however, were too expensive from the user's (client's) perspective, state-of-the-art implementations [50,51,52] already achieve reasonable efficiency. While anonymous credentials are a valuable means for ensuring privacy in identity management, performance is typically still much slower than when using proxy re-encryption.…”

Section: Related Work Discussionmentioning

confidence: 99%

The Austrian eID ecosystem in the public cloud: How to obtain privacy while preserving practicality

Zwattendorfer

Slamanig

2016

Journal of Information Security and Applications

View full text Add to dashboard Cite

The Austrian eID system constitutes a main pillar within the Austrian e-Government strategy. The eID system ensures unique identification and secure authentication for citizens protecting access to applications where sensitive and personal data is involved. In particular, the Austrian eID system supports three main use cases: Identification and authentication of Austrian citizens, electronic representation, and foreign citizen authentication at Austrian public sector applications. For supporting all these use cases, several components -either locally deployed in the applications' domain or centrally deployed -need to communicate with each other. While local deployments have some advantages in terms of scalability, still a central deployment of all involved components would be advantageous, e.g. due to less maintenance efforts. However, a central deployment can easily lead to load bottlenecks because theoretically the whole Austrian population as well as -for foreign citizens -the whole EU population could use the provided services. To mitigate the issue on scalability, in this paper we propose the migration of main components of the ecosystem into a public cloud. However, a move of trusted services into a public cloud brings up new obstacles, particular with respect to privacy. To bypass the issue on privacy, in this paper we propose an approach on how the complete Austrian eID ecosystem can be moved into a public cloud in a privacy-preserving manner by applying selected cryptographic technologies (in particular using proxy

show abstract

“…However, the privacyenhancing technologies for managing user identity and/or personal attributes, are not yet available on platforms with limited resources. There are very promising results from the smart card area [10], [23], [24], but generally, full-fledged user-centric authentication schemes are not yet ready for the implementation on existing constrained devices, in particular devices with restricted cryptographic support and strong requirements on low verification times. This paper provides solutions for applications witch such specific requirements.…”

Section: A State Of the Artmentioning

confidence: 99%

Cryptographic Protocols for Confidentiality, Authenticity and Privacy on Constrained Devices

Hajný

Dzurenda

Marqués

et al. 2020

2020 12th International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT)

View full text Add to dashboard Cite

LicenseThis publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited. Take down policyIf you believe that this document breaches copyright, please contact the authors, and we will investigate your claim. BibTex entry@inproceedings{BUT165663, author="Jan {Hajný} and Petr {Dzurenda} and Raúl {Casanova-Marqués} and Lukáš {Malina}", title="Cryptographic Protocols for Confidentiality, Authenticity and Privacy on Constrained Devices", booktitle="

show abstract

Towards a Full-Featured Implementation of Attribute Based Credentials on Smart Cards

Cited by 11 publications

References 26 publications

Fast revocation of attribute-based credentials for both users and verifiers

Fast revocation of attribute-based credentials for both users and verifiers

The Austrian eID ecosystem in the public cloud: How to obtain privacy while preserving practicality

Cryptographic Protocols for Confidentiality, Authenticity and Privacy on Constrained Devices

Contact Info

Product

Resources

About