User-Centric Identity Management Using Trusted Modules

Abstract

Many service providers want to control access to their services and offer personalized services. This implies that the service provider requests and stores personal attributes. However, many service providers are not sure about the correctness of attributes that are disclosed by the user during registration. Federated identity management systems aim at increasing the user-friendliness of authentication procedures, while at the same time ensuring strong authentication to service providers. This paper presents a new flexible approach for user-centric identity management, using trusted modules. Our approach combines several privacy features available in current federated identity management systems and offers extra functionality. For instance, attribute aggregation is supported and the problem of user impersonization by identity providers is tacked.

Trusted Computing to Increase Security and Privacy in eID Authentication

“…anonymous/pseudonymous authentication and selective disclosure) that anonymous credentials do. A few exceptions, such as the German eID system and the system proposed in [11], do provide similar privacy preserving features.…”

“…If the PIN verification succeeds (8), the card signs the challenge and transfers the resulting signature and the certificate (cert u ) to the PAL (9-10). The PAL now verifies the authentication (11)(12). If the verification succeeds, the PAL extracts the requested attributes (atts) from cert u (13).…”