Yun-Kyung Lee, Jung-Yeon Hwang, Byung-Ho Chung, Jeong-Nyeo Kim,

Vol. 21, No. 5, pp. 181-196, Oct. 2011
10.13089/JKIISC.2011.21.5.181, Full Text:
Keywords: anonymous access control, Anonymous Authentication, Privacy Protection
Abstract

There's a controversy about an invasion of privacy which includes a leakage of private information and linking of user's behavior on internet. Although many solutions for this problem are proposed, we think anonymous authentication, authorization, and payment mechanism is the best solution for this problem. In this paper, we propose an effective anonymity-based method that achieves not only authentication but also authorization. Our proposed method uses anonymous qualification certificate and group signature method as an underlying primitive, and combines anonymous authentication and qualification information. An eligible user is legitimately issued a group member key pair through key issuing process and issued some qualification certificates anonymously, and then, he can take the safe and convenience web service which supplies anonymous authentication and authorization. The qualification certificate can be expanded according to application environment and it can be used as payment token.

Statistics
Cite this article