NDLI: Privacy-preserving revocation checking

Content Provider	SpringerLink
Author	Narasimha, M. Solis, J. Tsudik, G.
Copyright Year	2008
Abstract	Digital certificates signed by trusted certification authorities (CAs) are used for multiple purposes, most commonly for secure binding of public keys to names and other attributes of their owners. Although a certificate usually includes an expiration time, it is not uncommon that a certificate needs to be revoked prematurely. For this reason, whenever a client (user or program) needs to assert the validity of another party’s certificate, it performs a certificate revocation check. There are several revocation techniques varying in both the operational model and underlying data structures. One common feature is that a client typically contacts some third party (whether trusted, untrusted or semi-trusted) and obtains some evidence of either revocation or validity (non-revocation) for the certificate in question. While useful, revocation checking can leak sensitive information. In particular, third parties of dubious trustworthiness can discover the identity of the party performing the revocation check, as well as the target of the check. The former can be easily remedied with techniques such as onion routing or anonymous web browsing. Whereas, hiding the target of the query is not obvious. This paper focuses on the privacy in revocation checking, explores the loss of privacy in current revocation checking techniques and proposes simple and efficient privacy-preserving techniques for two well-known revocation methods.
Starting Page	61
Ending Page	75
Page Count	15
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	8
Issue Number	1
e-ISSN	16155270
Language	English
Publisher	Springer-Verlag
Publisher Date	2008-09-16
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Anonymity and privacy Revocation Certificate revocation lists Certificate revocation trees Communications Engineering, Networks Management of Computing and Information Systems Coding and Information Theory Operating Systems Computer Communication Networks Data Encryption
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Privacy-preserving authentication of trees and graphs

Privacy-preserving personal health record using multi-authority attribute-based encryption with revocation

Certificate revocation system implementation based on the Merkle hash tree

Resolving privacy-preserving relationships over outsourced encrypted data storages

Delay-sensitive approaches for anonymizing numerical streaming data

Enhanced privacy of a remote data integrity-checking protocol for secure cloud storage

BlindIdM: A privacy-preserving approach for identity management as a service

A practical privacy-preserving targeted advertising scheme for IPTV users

Double-trapdoor anonymous tags for traceable signatures

Privacy-preserving revocation checking

Similar Documents

Privacy-preserving authentication of trees and graphs

Privacy-preserving personal health record using multi-authority attribute-based encryption with revocation

Certificate revocation system implementation based on the Merkle hash tree

Resolving privacy-preserving relationships over outsourced encrypted data storages

Delay-sensitive approaches for anonymizing numerical streaming data

Enhanced privacy of a remote data integrity-checking protocol for secure cloud storage

BlindIdM: A privacy-preserving approach for identity management as a service

A practical privacy-preserving targeted advertising scheme for IPTV users

Double-trapdoor anonymous tags for traceable signatures

Privacy-preserving revocation checking