Privacy-enhancing technologies for the world wide web

Oppliger, Rolf

doi:10.1016/j.comcom.2005.02.003

Cited by 19 publications

(27 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Making code mobile means that programs or code segments are exchanged between computer networks and systems and the heterogeneity of platforms is hidden by a common language in which the program code is actually written [4]. A solution to protect the execution environment (e.g.…”

Section: Introductionmentioning

confidence: 99%

Delivering Attribute Certificates over GPRS

Kambourakis

Rouskas

Gritzalis

2004

Proceedings of the 2004 ACM Symposium on Applied Computing

View full text Add to dashboard Cite

Attribute Certificates (ACs) have been developed and standardized by the ANSI X9 committee as an alternative and better approach, to X.509 public key certificates, for carrying authorization information. Attribute Authorities (AA) bind the characteristics of an entity (called attributes) to that entity by signing the appropriate AC. Therefore, ACs can be used for controlling access to system resources and employing role-based authorization and access controls policies accordingly. Although ACs are widely used and standardized, to the best of our knowledge, no mobile infrastructure or service currently utilizes them. In this paper, we first examine how basic Public Key Infrastructure (PKI) can be incorporated into mobile networks and especially the Universal Mobile Telecommunications System (UMTS). As a case study, we then experiment with ACs in the GPRS network, using a prototype implementation. In particular, we investigate and measure the performance in terms of service and transfer times when ACs are introduced in the mobile environment. Our measurements show that ACs technology not only is feasible to implement in present and future mobile networks, but at the same time can deliver flexible and relatively fast services to the subscribers, without compromising security.

show abstract

Section: Introductionmentioning

confidence: 99%

Delivering Attribute Certificates over GPRS

Kambourakis

Rouskas

Gritzalis

2004

Proceedings of the 2004 ACM Symposium on Applied Computing

View full text Add to dashboard Cite

show abstract

“…There are a few alternative and/or complementary approaches to handle the certificate revocation problem (Oppliger 2002). However, and unfortunately, the certificate revocation issue is not properly solved (and sometimes not even addressed) by many applications in use today.…”

Section: Certificate Managementmentioning

confidence: 99%

“…As such, it is a digitally signed data structure that attests to the ownership of a public key (Oppliger 2002). …”

Section: Public Key Infrastructuresmentioning

confidence: 99%

Why have public key infrastructures failed so far?

López

Oppliger²,

Pernul

2005

Internet Research

Self Cite

View full text Add to dashboard Cite

Abstract:Since public key cryptography is a fundamental technology for electronic commerce, people have often argued that public key infrastructures and corresponding certification services are the gold-mines of the information age. Contrary to these relatively high expectations, public key infrastructures have not really taken off and many certification service providers have even gone out of business. In this paper, we overview and discuss the technical, economical, legal, and social reasons why public key infrastructures have failed so far, summarize the lessons learnt, and give our expectations about the future development of the field.

show abstract

“…Medical data is highly private, and confidential pieces of information should only be available to the owner, the medical team in charge of patient's treatment and restrictions to the medical research community. Data security in the TRENCADIS architecture is based on the Grid Security Infrastructure [22] (GSI), plus several tools and procedures to enhance privacy. There are three main issues dealing with security in TRENCADIS:…”

Section: Security Issuesmentioning

confidence: 99%

Content-based organisation of virtual repositories of DICOM objects

Espert

García

Anastásio

et al. 2009

Future Generation Computer Systems

View full text Add to dashboard Cite

The integration of multi-centre medical image data to create knowledge repositories for research and training activities has been an aim targeted since long ago. This paper presents an environment to share, to process and to organise medical imaging data according to a structured framework in which the image reports play a key role. This environment has been validated on a clinical environment, facing problems such as firewalls and security restrictions, in the frame of the CVIMO (Valencian Cyberinfrastructure of Medical Imaging in Oncology) project. The environment uses a middleware called TRENCADIS (Towards a Grid Environment for Processing and Sharing DICOM Objects) that provides users with the management of multiple administrative domains, data encryption and decryption on the fly and semantic indexation of images. Data is structured into four levels: Global data available, virtual federated storages of studies shared across a vertical domain, subsets for projects or experiments on the virtual storages and individual searches on these subsets. This structure of levels gives the needed flexibility for organising authorisation, and hides data that are not relevant for a given experiment. The main components and interactions are shown in the document, outlining the workflows and explaining the different approaches considered, including the protocols used and the difficulties met.

show abstract

Privacy-enhancing technologies for the world wide web

Cited by 19 publications

References 14 publications

Delivering Attribute Certificates over GPRS

Delivering Attribute Certificates over GPRS

Why have public key infrastructures failed so far?

Content-based organisation of virtual repositories of DICOM objects

Contact Info

Product

Resources

About