Decide

Taniguchi, Noburou; Chida, Koji; Shionoiri, Osamu; Kanai, Atsushi

doi:10.1145/1102486.1102493

Cited by 7 publications

(1 citation statement)

References 18 publications

(8 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The recent EC report [27] analyzes how the eIDAS Regulation supports the requirements for customer data portability, and gives indications on the control of credentials by the user through the verifiable claims that are emerging in a number of initiatives, such as the European Blockchain Service Infrastructure. Taniguchi et al in [28] proposed a scheme to protect digital identities' privacy by using anonymity and pseudonymity. The idea is that under ordinary circumstances, a person can act anonymously, but in case of a special situation, the identity of the involved person can be specified.…”

Section: B User Consent and Privacy Issuesmentioning

confidence: 99%

On Enabling Additional Natural Person and Domain-Specific Attributes in the eIDAS Network

2021

View full text Add to dashboard Cite

Within digital virtual space, secure and efficient user authentication and identification are essential to prevent identity theft and unauthorized access to sensitive information and services. The eIDAS network implementing the European (EU) Regulation 910/2014 links the electronic identity (eID) systems of EU countries to allow citizens to access services by authenticating with government eIDs. At authentication time, the eIDAS nodes transfer core personal attributes to the service providers (SPs), i.e., name, surname, date of birth, and an identifier. Since long-term applications require more personal or domain-specific data, e.g., to perform identity matching, the SPs must obtain them securely afterward in addition to the eIDAS attributes, with additional costs and risks. Herein, we extend the eIDAS network to retrieve and transfer additional person and domain-specific attributes besides the core ones. This process introduces technical, usability, and privacy issues that we analyze. We exploit a logical AP Connector acting between the eIDAS node and the local entities providing additional attributes. We implemented two AP Connectors, named AP-Proxy and AP-OAuth2, allowing the Italian pre-production eIDAS node to get additional attributes from the Politecnico di Torino university backend. In an experimental campaign, about 30 students have accessed academic services at three foreign universities with Italian eIDs and transferred additional attributes over the eIDAS network. Regardless of some usability and privacy concerns encountered, the user experience was positive. We believe our work is helpful in the implementation of the recently adopted European Digital Identity framework, which proposes to extend the person identification data set recognized cross border and the creation of digital wallets that link different data sets or credentials.INDEX TERMS electronic identity, eIDAS Regulation, digital identity management, attribute retrieval

show abstract

Section: B User Consent and Privacy Issuesmentioning

confidence: 99%

On Enabling Additional Natural Person and Domain-Specific Attributes in the eIDAS Network

2021

View full text Add to dashboard Cite

show abstract

A Systematisation of Knowledge: Connecting European Digital Identities with Web3

Biedermann,

Scerri,

Kozlova

et al. 2024

2024 IEEE International Conference on Blockchain (Blockchain)

View full text Add to dashboard Cite

A Review of How Whistleblowing is Studied in Software Engineering, and the Implications for Research and Practice

Hunt

Ferrario

2022

2022 IEEE/ACM 44th International Conference on Software Engineering: Software Engineering in Society (ICSE-SEIS)

View full text Add to dashboard Cite

Harmful software has resulted in loss of life, societal and environmental damage alongside economic losses from fines and sales embargoes. When someone perceives their team or organisation is creating or operating harmful software (e.g., defective, vulnerable, malicious or illegal), one way to attempt to change the situation is to "blow the whistle" and disclose the situation internally or externally. Studying harmful situations and the effectiveness of interventions, up to and including whistleblowing, can help identify technical and human successes and failings in software engineering (SE).The aim of this paper is to explore the extent to which whistleblowing is studied in SE with the objective of identifying themes, research approaches, gaps and concerns, and the implications for future SE research and practice.We find that whistleblowing is an under-explored area of SE research, and where research exists, it often takes the view that reporting harm is a matter of individual moral responsibility; we argue this poorly reflects SE collaborative practice where professional responsibilities are distributed across the software development lifecycle. We conclude by 1) recommending approaches that can help a more timely identification and mitigation of harm in SE; 2) suggesting mechanisms for improving the effectiveness and the personal safety of harm-reporting in SE, and 3) reflecting on the role that professional bodies can have in supporting harm reporting, up to and including whistleblowing. CCS CONCEPTS• Software and its engineering → Software creation and management; • Social and professional topics → Codes of ethics;

show abstract

Decide

Cited by 7 publications

References 18 publications

On Enabling Additional Natural Person and Domain-Specific Attributes in the eIDAS Network

On Enabling Additional Natural Person and Domain-Specific Attributes in the eIDAS Network

A Systematisation of Knowledge: Connecting European Digital Identities with Web3

A Review of How Whistleblowing is Studied in Software Engineering, and the Implications for Research and Practice

Contact Info

Product

Resources

About