Anonymous credentials on a standard java card

Secure identity tokens such as Electronic Identity (eID) cards are emerging everywhere. At the same time usercentric identity management gains acceptance. Anonymous credential schemes are the optimal realization of usercentricity. However, on inexpensive hardware platforms, typically used for eID cards, these schemes could not be made to meet the necessary requirements such as futureproof key lengths and transaction times on the order of 10 seconds. The reasons for this is the need for the hardware platform to be standardized and certified. Therefore an implementation is only possible as a Java Card applet. This results in severe restrictions: little memory (transient and persistent), an 8-bit CPU, and access to hardware acceleration for cryptographic operations only by defined interfaces such as RSA encryption operations. Still, we present the first practical implementation of an

• Type: Conference
• Year: 2009
• Where: CCS
• Authors: Patrik Bichsel, Jan Camenisch, Thomas Groß, Victor Shoup
• Keywords: Anonymous Credential Schemes, CCS 2009, Hardware Platform, Identity Management Gains, Security Privacy