Privacy and Identity Management for Life

Name: Privacy and Identity Management for Life
Brand: Springer
Price: 149.79 EUR
Availability: OnlineOnly

Jan Camenisch Simone Fischer-Hübner Kai Rannenberg(Herausgeber*in)

Springer (Verlag)

1. Auflage

Erschienen am 7. Juli 2011

XXIV, 512 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-642-20317-6 (ISBN)

149,79 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Intro
Privacy and Identity Mangement for Life
Preface
List of Contributors to this Book
Contents
Introduction
Chapter 1 PrimeLife
1.1 Motivation
1.2 Vision and Objectives of the PrimeLife Project
1.3 Defining Privacy
1.4 From Identity via Identity Management to Privacy by Identity Management
1.4.1 Identity - What It Is
1.4.1.1 Partial Identities
1.4.1.2 Requirements for Using Partial Identities
1.4.2 Presentation of Identities - Pseudonyms
1.4.2.1 Important Kinds of Attributes
1.4.3 Time Aspects of Identity Management and Privacy
1.5 Further Facets of Privacy
1.6 PrimeLife's Contributions to Protect Pricacy
1.6.1 Part I - Privacy in Life
1.6.2 Part II - Mechanisms to Enable Privacy
1.6.3 Part III - User Interfaces for Privacy Management
1.6.4 Part IV - Policies to Control Privacy
1.6.5 Part VI - Infrastructures for Privacy
1.6.6 Part VII - Privacy Live!
References Introduction
Part I Privacy in Life
Introduction
Chapter 2 Privacy in Social Software
2.1 Scenarios and Requirements
2.1.1 Scenario 1: A Social Network Site
2.1.2 Scenario 2: A Forum
2.1.3 General Requirements
2.2 Two Prototypes for Privacy-Enhanced Social Networking
2.2.1 Introduction
2.2.2 Privacy Issues in Social Network Sites
2.2.2.1 Who is the Audience?
2.2.2.2 Context Collision or Lack of Audience Segregation
2.2.2.3 Persistence of Information
2.2.2.4 Peer Surveillance, Snooping and Gossiping
2.2.2.5 Who Controls a User's Information?
2.2.3 Clique: An Overview
2.2.3.1 Audience Segregation in Clique
2.2.3.2 Control Over the Visibility of Individual Items of Information in Clique
2.2.4 Scramble!: An Overview
2.2.4.1 Selective Access Control in Scramble!
2.2.4.2 Scramble! and Web 2.0
2.3 Privacy-Enhancing Selective Access Control for Forums
2.3.1 Objectives
2.3.2 Introducing phpBB Forum Software and PRIME Framework
2.3.3 Extending phpBB with Selective Access Control
2.3.4 Scenario Revisited
2.3.5 Privacy-Awareness Information
2.3.6 User Survey
2.4 Concluding Remarks
2.5 Acknowledgements
Chapter 3 Trustworthiness of Online Content
3.1 Introduction
3.2 Scenarios and requirements
3.2.1 Scenarios
3.2.1.1 Blog
3.2.1.2 Wiki
3.2.2 High-level mechanisms
3.2.2.1 Core mechanisms
3.2.2.2 Supportive means
3.2.3 Requirements of mechanisms
3.2.3.1 User reputation and certification
3.2.3.2 Binding Metadata to Data
3.2.3.3 Evaluating Trustworthiness (or any other property of content)
3.2.3.4 Privacy-Friendly Incentive System
3.3 Experiments
3.3.1 Binding metadata to data
3.3.1.1 Findings
3.3.1.2 Experiment and questionnaire
3.3.2 User Reputation and Certification
3.3.2.1 Study Design
3.3.2.2 Results
3.4 Demonstrators
3.4.1 Trustworthy Blogging
3.4.1.1 Main Idea
3.4.1.2 Demonstrator Architecture and Mechanisms
3.4.1.3 Learnings
3.4.2 Encouraging Comments with Incentives
3.4.2.1 Principals
3.4.2.2 Concepts
3.4.2.3 Checks and Balances
3.4.3 Author reputation system and trust evaluation of content in MediaWiki
3.4.3.1 Architecture
3.4.3.2 Functionality
3.4.3.3 Lessons learned
3.5 Conclusive Remarks
3.6 Acknowledgements
Chapter 4 Identity and Privacy Issues Throughout Life
4.1 Challenges and Requirements
4.1.1 Dealing with Dynamics
4.1.1.1 Dynamics in the surroundings of the individual
4.1.1.2 Dynamics in the individual's ability or willingness of managing her private sphere on her own.
4.1.2 Digital Footprint
4.1.2.1 Sensitive Attributes
4.1.2.2 Linking Data
4.1.3 Concepts for Delegation
4.1.3.1 Fruit of the womb
4.1.3.2 Children and teenagers
4.1.3.3 Adults lacking privacy management capabilities
4.1.3.4 Deceased people
4.1.3.5 Delegation based on explicit decisions of the data subject
4.2 Demonstrator
4.2.1 Overview of the Backup Demonstrator Architecture
4.2.1.1 Basic building blocks used by the core
4.2.1.2 File system and external storage providers
4.2.1.3 Backup and Restore
4.2.1.4 Delegation
4.2.2 Deployment and Usage of the Demonstrator
4.3 Concluding Remarks
4.4 Acknowledgements
References Part I
Part II Mechanisms for Privacy
Introduction
Chapter 5 Cryptographic Mechanisms for Privacy
5.1 Introduction
5.2 Cryptography to the Aid
5.3 Private Credentials, Their Extensions, and Applications
5.3.1 Extended Functionalities
5.3.2 Direct Anonymous Attestation
5.4 Other Privacy-Enhancing Authentication Mechanisms
5.4.1 Privacy-Enhancing Encryption
5.5 Electronic Voting, Polling, and Petitions
5.6 Oblivious Transfer with Access Control and Prices
5.7 Oblivious Trusted Third Parties
5.8 Conclusion
Chapter 6 Transparency Tools
6.1 Introduction
6.2 Setting the Scene
6.3 On Privacy Preserving and Secure Logs
6.3.1 Attacker Model and Security Evaluation
6.4 PriorWork and Our Contribution
6.5 Technical Overview
6.5.1 State and Secrets
6.5.2 Entry Structure and Storage
6.5.3 API
6.5.4 Unlinkability
6.6 Conclusion and Outlook
Chapter 7 Interoperability of Trust and Reputation Tools
7.1 Introduction
7.2 Social need
7.3 Legal Aspect
7.4 Security and Privacy Requirements
7.5 Technical Implementability
7.6 Infrastructure
7.6.1 Interoperability with Applications
7.6.2 Interoperability with Trust Management
7.6.3 Interoperability with Identity Management
7.6.4 Resulting implementation
7.7 Conclusion
Chapter 8 Data Privacy
8.1 Introduction
8.2 Privacy Metrics and Information Theory
8.2.1 Basic Concepts
8.2.2 Traditional Privacy Metrics
8.2.3 An Information Theoretic Approach for Privacy Metrics
k-anonymity
t-closeness
l-diversity
Comparing Risk Parameters
8.2.4 Protecting Privacy of Sensitive Value Distributions
8.3 Privacy Protection Techniques
8.3.1 Basic Concepts
8.4 Fragmentation and Encryption
8.4.1 Fragmentation Model
8.4.2 Minimal Fragmentation
8.4.3 Query Evaluation
8.5 Departing from Encryption
8.5.1 Fragmentation Model
8.5.2 Minimal Fragmentation
8.5.3 Query Evaluation
8.6 Preserving Utility in Data Publication
8.6.1 Visibility Requirements
8.6.2 Loose Associations
8.7 Conclusions
Chapter 9 Selective Exchange of Confidential Data in the Outsourcing Scenario
9.1 Introduction
9.2 Preliminaries
9.3 Encryption Schema
9.3.1 Key Agreement
9.3.2 Key Derivation
9.3.3 Encryption Policy
9.4 Resource Sharing Management
9.5 Comparison with the PGP's Key-Management Strategy
9.6 Exposure Evaluation
9.6.1 Anonymous Accesses
9.7 Encryption Policy Updates
9.7.1 Two-Layered Encryption Model
9.7.2 Over-Encryption
9.7.3 Collusion Evaluation
9.8 Conclusions
References Part II
Part III HCI
Introduction
Chapter 10 PET-USES
10.1 Introduction
10.2 PET-USES in Practice
10.2.1 When to use the PET-USES
10.2.2 How to use the PET-USES
10.3 Conclusions
10.4 Appendix: PET-USES[1.0]
10.4.1 Instructions
Chapter 11 HCI for PrimeLife Prototypes
11.1 Introduction
11.2 Overview of HCI challenges
11.2.1 Challenge 1: Limited User Knowledge of PETs
11.2.2 Challenge 2: Technologically Driven Development of PETs
11.2.3 Challenge 3: Understanding PET Related Terms
11.2.4 Challenge 4: Wrong Mental Models of PETs
11.2.5 Challenge 5: Privacy as a Secondary Task
11.2.6 Challenge 6: Complex Mechanisms are Hard to Understand
11.3 Tackling the Challenges
11.3.1 Limited User Knowledge of PETs
11.3.2 Technologically Driven Development of PETs
11.3.3 Understanding of PET Related Terms
11.3.4 Wrong Mental Models of PETs
11.3.5 Privacy as a Secondary Task
11.3.6 Complex Mechanisms are Hard to Understand
11.4 HCI Activities and Software Development
11.4.1 Backup Prototype
11.4.2 Privacy Dashboard
11.4.3 Examples Reflected
11.5 Discussion and Outlook
Chapter 12 The Users' Mental Models' Effect on their Comprehension of Anonymous Credentials
12.1 Introduction
12.1.1 Anonymous Credentials
12.1.2 Related Work
12.2 Performed User Tests
12.2.1 Method
12.2.1.1 Participants and Test Design
12.2.2 The Card-Based Approach
12.2.2.1 Test Results for the Card-Based Selection Paradigm
12.2.3 The Attribute-Based Approach
12.2.3.1 Test Results for the Attribute-based Selection Paradigm
12.2.4 Results of the User Studies
12.3 Conclusions & FutureWork
12.4 Acknowledgments
Chapter 13 Trust and Assurance HCI
13.1 Introduction
13.2 Social Trust Factors
13.3 A Trust Evaluation Function
13.3.1 Trust Parameters Used
13.3.2 Design Principles and Test Results
13.3.3 Test Results
13.4 The Data Track
13.4.1 Use of the Data Track
13.4.2 Test Scenarios & Test Setups
13.4.3 Results of the Usability Tests
13.4.3.1 Results Regarding the Search Functionality
13.4.3.2 Results Regarding the Online Access Functionality
13.4.4 Discussion of Data Track Usability Tests
13.5 Conclusions
Chapter 14 HCI for Policy Display and Administration
14.1 Introduction
14.2 RelatedWork
14.3 User Interfaces for Policy Management and Display
14.3.1 Selecting Privacy Preferences
14.3.2 The "Send Data?" Dialog
14.3.2.1 Meeting Requirements with the Design of the "Send Data?" Dialog
14.3.3 Testing the Usability of the "Send Data?" Dialog
14.3.4 Conclusions and Outlook
Chapter 15 Privacy Policy Icons
15.1 Introduction
15.2 Motivation for Introducing Privacy Icons
15.3 Related Work
15.4 PrimeLife Icon Sets
15.4.1 PrimeLife Icon Set for General Usage
15.4.2 PrimeLife Icon Set for Social Networks
15.5 Test Results
15.6 An Approach for Handling E-mail Data: Privicons
15.7 Conclusions and Outlook
Part IV Policy Languages
Introduction
Chapter 16 Policy Requirements and State of the Art
16.1 Definitions
16.1.1 Data Handling Policies
16.1.2 Access Control Policies
16.1.3 Trust Policies
16.2 Legal Requirements
16.3 Policy Language Requirements
16.3.1 General Design Principles and Expressivity
16.3.2 Requirements for Data Handling Policies
16.3.3 Requirements for Access Control policies
16.3.4 Requirements for Trust policies
16.3.5 Other Technical Requirements for PrimeLife
16.4 State of the Art
16.4.1 Access Control Policy Languages
16.4.2 Data Handling Policy Languages
16.4.3 Anonymous Credential Systems and Private Information Management
Chapter 17 Matching Privacy Policies and Preferences: Access Control, Obligations, Authorisations, and Downstream Usage
17.1 Privacy Specifications: Preferences, Policies, and Sticky Policies
17.2 Matching Data Handling
17.2.1 Boolean Match
17.2.2 Going Further than Boolean Match
17.3 Obligations
17.3.1 Triggers
17.3.2 Actions
17.3.3 Enforcement
17.4 Authorisations
17.5 Downstream Data Handling
17.5.1 Structure of Downstream Authorisations
17.5.2 Proactive Matching of Downstream Data Handling
17.5.3 Lazy Matching of Downstream Data Handling
17.6 Conclusion
Chapter 18 Advances in Access Control Policies
18.1 Privacy-Preserving Access Control
18.1.1 Credentials Enabling Privacy-Preservation
18.1.2 A Policy Language for Privacy-Preserving Access Control
18.2 Credential Ontologies: Concepts and Relations
18.2.1 Abstractions
18.2.2 Delegation by Recursion
18.3 Dialog Management
18.3.1 Policy Sanitisation
18.4 Integration into XACML
18.4.1 Credential-Based XACML
18.4.2 SAML as Claims Language
18.4.3 XACML Architecture Extensions
18.5 Concluding Remarks
Chapter 19 Legal Policy Mechanisms
19.1 Introduction
19.2 Legal Framework for Processing Personal Data
19.3 Gaps in Current Policy Language Approaches
19.3.1 XACML
19.3.2 P3P
19.4 Methodology
19.4.1 Looking into Privacy Policies
19.4.2 Looking at the Law
19.5 Use Cases
19.5.1 Online Shopping
19.5.2 Social Networking
19.6 Results and Further Research
Chapter 20 Policy Implementation in XACML
20.1 Introduction
20.2 Architecture
20.2.1 High Level Architecture
20.2.1.1 Data Subject
20.2.1.2 Data Controller
20.2.1.3 Third Party
20.2.2 Detailed Architecture
20.2.2.1 Presentation Layer
20.2.2.2 Business Layer
20.2.2.3 Persistence layer
20.3 PPL Policy Language Structure
20.3.1 PolicySets, Policy and Rules
20.3.2 Credential Requirements
20.3.3 Provisional Actions
20.3.4 Data Handling Policies
20.3.5 Data Handling Preferences
20.3.6 Sticky Policies
20.3.7 Obligations
20.3.8 Authorisations
20.4 PPL Engine Data Model
20.4.1 Package pii
20.4.2 Package policy.Impl
20.4.3 Package Credential
20.4.4 Package Obligations
20.4.5 Package StickyPolicy
20.4.5.1 Sub-package impl
20.4.5.2 Sub-package Authorisations Mismatch
20.4.5.3 Sub-package Obligations Mismatch
20.5 Conclusion
References Part IV
Part V Infrastructures for Privacy and Identity Management
Introduction
Chapter 21 Privacy for Service Oriented Architectures
21.1 Introduction
21.2 Requirements for Privacy in SOA
21.2.1 Core Policy Requirements
21.2.2 Privacy Logging Requirements
21.2.3 Requirements for Access to Personal Information
21.2.4 Cross-Domain-Specific Requirements
21.2.5 Requirements for Additional Mechanisms
21.3 Abstract Framework Addressing the Lifecycle of Privacy Policies in SOAs
21.3.1 Privacy Issues Arising from SOA
21.3.2 Abstract Protocol
21.3.3 PII Provider
21.3.4 PII Consumer
21.3.5 Matching Abstract Framework with SOA Requirements
21.4 Policy Composition
21.4.1 Policy Composition Scenario
21.4.2 Privacy Policy Composition Challenges
21.4.3 Data-Centric Architecture for Privacy Enforcement
21.4.4 Conclusion
21.5 Outlook and Open Issues
Chapter 22 Privacy and Identity Management on Mobile Devices: Emerging Technologies and Future Directions for Innovation
22.1 The Status: Privacy and Identity Management on Smart Mobile Devices
22.2 The Changing Context (I): Multiple Partial Identities across Devices
22.3 The Changing Context (II): Multiple Identity Providing Stakeholders Along an Increasingly Dynamic Mobile Services Value Chain
22.4 Technologies for Identity Management and Privacy Enhancement: Secure Elements
22.5 Present Secure Element Technologies: UICCs and Stickers
22.5.1 The Universal Integrated Circuit Card (UICC) and the Smart Card Web Server
22.5.2 The Sticker as Example for Static Mobile Service Identities
22.6 Emerging Secure Element Technologies: Trusted Execution Environments and the Privacy Challenge
22.7 Technologies for Secure and Dynamic Mobile Services and the Privacy Challenge in Highly Dynamic Environments
22.8 Contributions of the PrimeLife Project for the Advancement of Technologies in the Field
22.9 The Privacy Challenge in Mobile Services and Future Directions for Innovation
Chapter 23 Privacy by Sustainable Identity Management Enablers
23.1 Introduction
23.2 Economic Valuation Approach for Telco-Based IdentityManagement Enablers
23.2.1 Description of the Baseline Option and Feasible Delta Options
Use Case - Age Verification Scenario
23.2.2 Identification of each Stakeholder's Costs and Benefits Based on Delta Scenarios in Comparison to the Baseline Scenario
Use Case - Age Verification Scenario
23.2.3 Selection of Key Costs and Benefits for each Stakeholder
Use Case - Age Verification Scenario
23.2.4 Mapping of each Stakeholder's Key Cost and Benefits on IdM Service Provider by Cause-Effect Chains
Use Case - Age Verification Scenario
23.2.5 Clustering of Mapped IdM Service Provider Costs and Benefits
Use Case - Age Verification Scenario
23.2.6 Assessment and Aggregation of Clustered IdM Service Provider costs and Benefits
Use Case - Age Verification Scenario
23.2.7 Visualisation of Aggregated IdM Service Provider Costs and Benefits
Use Case - Age Verification Scenario
23.3 Description of the Identity Management Scenarios
23.3.1 Authentication
23.3.1.1 Baseline Option - End Customer Provides Username & Password
23.3.1.2 Delta Option 1 - Telco Forwards Authentication Code to End Customer
23.3.1.3 Delta Option 2 - Telco Provides Authentication Data
23.3.2 Privacy Policy Enforcement
23.3.2.1 Baseline Option - Manual Policy Enforcement by the End Customer
23.3.2.2 Delta Option 1 - Service Provider Enforces Privacy Policy
23.3.2.3 Delta Option 2 - Policy Enforcement by the Telco
23.4 RelatedWork
23.5 Summary and FutureWork
References Part V
Part VI Privacy Live
Introduction
Chapter 24 Open Source Contributions
24.1 Introduction
24.2 Social Software
24.2.1 Clique - Privacy-Enhanced Social Network Platform
24.2.2 Scramble! - Audience Segregation by Encryption
24.2.3 Privacy-Awareness Support for Forum Users: Personal Data MOD
24.2.4 Privacy-Enhancing Selective Access Control for Forums
24.3 Dudle - Privacy-enhanced Web 2.0 Event Scheduling
24.4 The Privacy Dashboard
24.5 Privacy in Databases
24.5.1 Pri-Views - Protecting Sensitive Values by Fragmentation
24.5.2 Over-Encrypt
24.6 Anonymous Credentials
24.6.1 Identity Mixer Crypto Library
24.6.2 Components for a Privacy-Preserving Access Control System
24.7 Conclusion
Chapter 25 Contributions to Standardisation
25.1 Introduction
25.2 Standardisation in ISO/IEC JTC 1/SC 27/WG 5
25.2.1 ISO 24760 - Framework for Identity Management
25.2.2 Introducing Privacy Protection Goals to ISO 29101 Privacy Reference Architecture
25.3 Web Privacy
25.3.1 Workshop on Access Control Application Scenarios
25.3.1.1 Attributes
25.3.1.2 Sticky Policies
25.3.1.3 Obligations
25.3.1.4 Credential-based Access Control
25.3.2 Workshop on Privacy for Advanced Web APIs
25.3.3 Workshop on Privacy and Data Usage Control
25.3.4 Workshop on Internet Privacy
25.4 PrimeLife's Contributions to Standardisation in IETF
25.5 Conclusion and Outlook
Chapter 26 Best Practice Solutions
26.1 Introduction
26.2 Recommendations to Industry
26.2.1 Data Minimisation by Pseudonyms and Private Credentials
26.2.2 Improvement of Privacy Functionality in Social Media
26.2.3 Better Protection of the User's Privacy on the Web
26.2.4 Better Information of Users on Privacy-Relevant Issues on the Web
26.3 Recommendations to Policy Makers
26.3.1 Clear Guidelines for System Developers and Data Controllers
26.3.2 Incentives and Sanctions
26.3.3 Development of Law
Chapter 27 PrimeLife's Legacy
References
Index

Systemvoraussetzungen

Als PDF speichern Als Link merken