Privacy-Friendly Checking of Remote Token Blacklists - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2013

Privacy-Friendly Checking of Remote Token Blacklists

Résumé

Consulting a remote blacklist as part of verifying a token should not come at the cost of privacy. In particular, the blacklist provider should be unable to identify which tokens are being verified. The contents of the blacklist should also be protected; that is, it should not be possible to learn the contents of the blacklist, for example by querying the blacklist provider a large number of times. This paper defines a range of desirable properties for privacy preserving blacklist checking protocols, and surveys existing technical solutions to this problem. We propose adaptations where appropriate, and provide concrete performance estimates for the use case of checking whether or not a passport has been reported lost or stolen.
Fichier principal
Vignette du fichier
978-3-642-37282-7_3_Chapter.pdf (411.88 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01470501 , version 1 (17-02-2017)

Licence

Paternité

Identifiants

Citer

Roel Peeters, Andreas Pashalidis. Privacy-Friendly Checking of Remote Token Blacklists. 3rd Policies and Research in Identity Management (IDMAN), Apr 2013, London, United Kingdom. pp.18-33, ⟨10.1007/978-3-642-37282-7_3⟩. ⟨hal-01470501⟩
49 Consultations
71 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More