Transaction pseudonyms in mobile environments

Abstract

Network Operators start to offer formerly hidden services such as location service, messaging services and presence services. This fosters the development of a new class of innovative context aware applications that are operated by third party application providers. However, without the implementation of proper privacy protection mechanisms, location and presence information, that is processed by third party application providers, may also imply severe risks to users. If no privacy protection is foreseen, the user's identity could be used maliciously which renders such applications dangerous. To protect the user's sensitive data such as location information we propose a novel service architecture which fosters the development of innovative applications that brings together internet applications with telco services. An underlying privacy enhancing mechanism that is based on the notion of pseudonyms allows even untrusted third party application providers to access sensitive data provided by telco services such as location, presence or messaging services. Due to their high security, pseudonyms guarantee that the user's identity is kept secret towards the untrusted application providers. Due to its low computational complexity this pseudonym generation scheme can also be implemented on devices such as mobile phones and digital assistants with only little computational power and restricted memory capabilities. To illustrate our approach, we demonstrate a transportation ticket application that implements the proposed service architecture. This application allows the use of transportation tickets which are extended by the location-tracking functionality. Similar to the well known paper based transportation tickets our solution supports anonymity of users even if the ticket application "knows" the location of the holder.

Gold‐Catalyzed Tandem Intramolecular Heterocyclization/Petasis–Ferrier Rearrangement of 2‐(Prop‐2‐ynyloxy)benzaldehydes as an Expedient Route to Benzo[b]oxepin‐3(2 H)‐ones

“…In the following we give a short introduction to the pseudonym approach: We assume that the Client and the Broker share a secret key ( pswd ) as well as an initial value (rand) generated by the Diffie Hellman cryptographic protocol 26. We also use a schema that is based on the keyed hash function HMAC 27. The keyed hash function HMAC that is denoted as h k can be initialized with a random value r .…”

Managing university internet access: balancing the need for security, privacy and digital evidence

“…It is acknowledged that there are reported positive and negative consequences of using pseudonymisation for various data streams in computer security, forensic computing and other related areas [15][16][17][18][19][20][21][22][23]. However, to address these underlying privacy concerns it would appear that there is merit in exploring the deployment of pseudonymisation.…”