The SPARTA Pseudonym and Authorization System

This paper deals with privacy-preserving (pseudonymized) access to a service resource. In such a scenario, two opposite needs seem to emerge. On one side, the service provider may want to control in first place the user accessing its resources, i.e., without being forced to delegate the management of access permissions to third parties to meet privacy requirements. On the other side, it should be technically possible to trace back the real identity of an user upon dishonest behavior, and of course this must be necessary accomplished by an external authority distinct from the provider itself. The framework described in this paper aims at coping with these two opposite needs. This is accomplished through i) a distributed third-party-based instrastructure devised to assign and manage pseudonym certificates from ii) a two-party procedure, devised to bind an authorization permission to a pseudonym certificate with no thirt-party involvement. The latter procedure is based on a novel blind s...

• Type: Journal
• Year: 2008
• Where: ENTCS
• Authors: Giuseppe Bianchi, M. Bonola, Vincenzo Falletta, Francesco Saverio Proto, Simone Teofili
• Keywords: Authorization Permission, ENTCS 2008, Opposite Needs, Pseudonym Certificate