개인정보보호를 위한 익명 인증 기법 도입 방안 연구
A Study on the Applicability of Anonymous Authentication Schemes for Fine-Grained Privacy Protection
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
As information communication technologies have highly advanced, a large amount of user sensitive information can be easily collected and unexpectedly distributed. For user-friendly services, a service provider requires and processes more user information. However known privacy protection models take on a passive attitude toward user information protection and often involve serious weaknesses. In reality, information exposure by unauthorised access and mistakenly disclosure occurs frequently. In this paper, we study on the applicability of anonymous authentication services for fine-grained user privacy protection. We analyze authentication schemes and classify them according to the level of privacy newly defined in this paper. In addition, we identify security requirements that a privacy protection scheme based on anonymous authentication can achieve within legal boundary.
Abstract
As information communication technologies have highly advanced, a large amount of user sensitive information can be easily collected and unexpectedly distributed. For user-friendly services, a service provider requires and processes more user information. However known privacy protection models take on a passive attitude toward user information protection and often involve serious weaknesses. In reality, information exposure by unauthorised access and mistakenly disclosure occurs frequently. In this paper, we study on the applicability of anonymous authentication services for fine-grained user privacy protection. We analyze authentication schemes and classify them according to the level of privacy newly defined in this paper. In addition, we identify security requirements that a privacy protection scheme based on anonymous authentication can achieve within legal boundary.
참고문헌 (35)
- 방송통신위원회, "2010 국가정보보호백서", 65~66 (2010)
- 김정덕, "개인정보보호를 위한 관리체계와 거버넌스", 정보보호학회지, pp.1~5 (2008)
- 정상조, "광고기술의 발전과 개인정보의 보호", 저스티스, (106), pp.601~623 (2008), 한국법학원
- 송유진, "개인정보보호를 위한 기술적 요구사항", 학술정보 주간기술동향, (1224), 정보통신산업진흥원
- 양재모, "전자거래상 개인정보보호에 대한 민사적 접근", 사이버커뮤니케이션학보, 27(2), pp.91~119 (2010), 사이버커뮤니케이션학회
- 윤상오, "전자정부 구현을 위한 개인정보보호 정책에 관한 연구: 정부신뢰 구축의 관점에서", 한국지역정보화학회지, 12(2), pp.1~29 (2009), 한국지역정보화학회
- 이형효, "개인정보보호를 위한 주민등록번호 대체수단 및 관리체계", 한국정보기술학회논문지, 8(6), pp.49~58 (2010), 한국정보기술학회
- Chaum, "Group signatures", Advances in Cryptology,Eurocrypt‘91,LNCS 547, pp.257~265 (1991)
- D.Boneh, "Short group signatures", Advances in Cryptology,CRYPTO'04,LNCS 3152, pp.41~52 (2004)
- S.Canard, "Group Signatures are Suitable for Constrained Devices", ICISC2010 (2010), Springer
- M.Lee, "The Fiat–Shamir Transform for Group and Ring Signature Schemes", SCN2010,LNCS 6280, pp.363~380 (2010), Springer
- R.L.Rivest, "How to Leak a Secret", Advances in Cryptology, Asiacrypt'01, LNCS 2248, pp.552~565 (2001), Springer-Verlag
- D.Chaum, "Security without identification:Transaction systems to make big brother obsolete", Communications of the ACM, 28(10), pp.1030~1044 (1985)
- J.Camensich, "Design and implementation of the idemix anonymous credential system", Proceedings of the 9th ACM Conference on Computer and Communications Security, pp.21~30 (2002)
- J.Camenisch, "Credential Authenticated Identification and Key Exchange", Crypto 2010,LNCS 6223, pp.255~276 (2010), Springer
- P Bichsel, "Anonymous Credentials on a Standard Java Card", ACM CCS'09, pp.600~610 (2009), ACM Press
- J.Camenisch, "Rethinking Accountable Privacy Supporting Services", ACM Digital Identity Management Workshop(DIM) (2008)
- D.Halperin, "Security and Privacy for Implantable Medical Devices", IEEE Pervasive Computing, 7(1) (2008)
- J.Camenisch, "Preliminary Thoughts on Privacy Supporting Binding of Biometrics to Credentials", Hot Topics in Privacy Enhancing Technology(HotPETs 2010) (2010)
- "Traceable Anonymous Certificate", IETF RFC5636, ~
- "National Bodies contributions received to ISO", IEC NP 20008-2 - Information technology - Security techniques - Anonymous digital signatures – Part 2 (in response to SC 27 N8212), IEC JTC1 SC27 N8527, pp.2010, ~
- 강전일, "실생활 응용을 위한 짧은 그룹 서명 기법(BBS04)에 대한 연구", 정보보호학회논문지, 19(5), pp.3~15 (2009), 한국정보보호학회
- 황정연, "효율적인 지역연결성을 제공하는 짧은 그룹 서명 기법", 대한전자공학회 하계학술대회 발표집 (2010)
- E.Brickell, "Direct Anonymous Attestation", Proceedings of the 11th ACM Conference on Computer and Communications Security, pp.132~145 (2004)
- J. Walker, "Key Exchange with Anonymous Authentication using DAA- SIGMA Protocol", INTRUST 2010, ~ (2010)
- S.Goldwasser, "The knowledge complexity of interactive proof systems", SIAM Journal on Computing(Philadelphia:Society for Industrial and Applied Mathematics), 18(1), pp.186~208 (1989)
- A.J.Menezes, "Handbook of Applied Cryptography" (1996), CRC Press
- H.Lin, "Concurrent Non-Malleable Zero Knowledge Proofs", Crypto 2010,LNCS 6223, pp.429~446 (2010), Springer
- "I-PIN"[URL]
- "Differences between OASIS Security Assertion Markup Language (SAML) V1.1 and V1.0. OASIS Draft, Document ID sstc-saml-diff-1.1-draft-01"[URL]
- A.Sahai, "Fuzzy Identity Based Encryption", Advances in Cryptology – Eurocrypt,volume 3494 of LNCS, pp.457~473 (2005), Springer
- V.Goyal, "Attribute Based Encryption for Fine-Grained Access Conrol of Encrypted Data", In the 13th ACM conference on Computer and Communications Security(ACM CCS06), pp.89~98 (2006), ACM
- J.Bethencourt, "Ciphertext-Policy Attribute-Based Encryption", Proceedings of the 2007 IEEE Symposium on Security and Privacy, pp.321~334 (2007), IEEE
- "Consumer Privacy Attitudes and Behaviors"[URL]