Search

Location-based services are becoming more and more popular in mobile online so-cial networks(mOSNs) for smart cities, but users' privacy also has aroused wide concern, such as locations, friend sets and other private information. At present, many location sharing protocols in mOSNs have been proposed, but these pro-tocols are inecient and ignore some security risks. In this paper, we propose a new location sharing protocol, which solves these two issues by using symmetric encryption and asymmetric encryption properly. We adopt the following methods to reduce the communication and computation costs: only setting up one loca-tion server; connecting social network server and location server directly instead of through celluar towers; avoiding broadcast encryption. We introduce dummy iden-tities to protect users' identity privacy, and prevent location server from inferring users' activity tracks by updating dummy identities in time. The details of security and performance analysis with the related protocols show that our protocol enjoys two advantages: (1) it's more ecient than the related protocols, which greatly re-duces the computation and communication costs; (2) it satises all security goals, however, most previous protocols only meet some security goals.

In this article, we propose an efficient lattice-based ring signature scheme for message authentication in vehicular ad-hoc networks (VANETs). It provides unconditional identity privacy preservation, message authentication, and location privacy for the sender vehicle. The authentication of messages is extremely vital as it gives motivation for vehicles to accept, act, and further transmit messages to other vehicles in the network as well as remain a member of the network. Any unauthorized vehicle cannot transmit fraud messages into the network if messages are authenticated. The public key cryptography-based methods are more relevant for message authentication because of their easy key management and local derivation of keys. However, they add complexity to the whole network and require significant storage and computational power. Also, the predictable mobility characteristics of vehicles moving on the road make them vulnerable to tracking. This requires an additional mechanism to preserve location privacy. The proposed scheme provides unconditional identity privacy and location privacy. It is more efficient than the existing ring signature schemes in case of signature generation and verification process. Theoretical analysis and experimental results show that the proposed scheme provides security and unconditional privacy to vehicles in VANETs.

The emergence of Wireless Body Area Networks (WBAN) provides users with ubiquitous wireless communication services, such as continuous exchange of medical information in real time. Therefore, WBAN is considered to be one of the effective wireless sensor technologies for improving medical services. However, the characteristics of WBAN make it subject to multiple attacks, such as the leakage of private information of users, and WBAN is also inefficient. In this paper, a certificateless ring signature scheme CLRS is proposed. In addition, we propose a public auditing scheme with identity privacy protection, which combines the certificateless ring signature technology for cloud-assisted body area network. Through the analysis of security, it shows that the scheme can resist the existing attack methods such as forging attacks. Finally, the comparison between theoretical analysis and experimental simulation shows that the scheme has obvious efficiency advantages compared with the existing scheme.

In recent studies, vehicular networks have been considered as a promising solution to achieve better traffic management and to improve the driving experience of drivers. In vehicular networks, vehicle-to-everything (V2X) services, e.g. on-road traffic information exchange and location-based services, are provided to facilitate road safety for vehicles and traffic management for the relevant authorities. Dedicated Short Range Communications is specifically designed for V2X communications, and recently the cellular network has shown great potential to support V2X with better performance and more applications. Due to the wireless nature of V2X communications, how to secure V2X communications and guarantee the privacy of users are great challenges that have hampered the implementation of vehicular services. Many solutions have been proposed by researchers in last two decades. In this paper, we present a comprehensive survey on the state-of-the-art solutions concerning security and privacy for V2X communications. For security, detailed discussions on cryptography based schemes and trust based schemes are provided. For privacy, we summarize and compare general solutions in preserving identity privacy and location privacy. Cellular based V2X communications have shown many advantages over DSRC, and the oncoming fifth-generation cellular technology is going to provide more possibilities to V2X. Thus, security architectures and solutions for cellular based communications are also illustrated and discussed. Finally, we summarize the remaining challenges and point out future research directions.

Universal Mobile Telecommunication System (UMTS) is a popular 3G standard for mobile telecommunication networks. ‘Vulnerability of the subscriber’s identity privacy and the need to eliminate this vulnerability’, is an established security issue in UMTS. This vulnerability continues to exist up to various extents in the descendent networks of UMTS, like LTE. Several solutions suggesting improvements to the identity privacy in UMTS is present in the literature. In this paper, we look into select few of these solutions, with the expectation that researcher envisioning to work in this area will get a direction in devising an efficient mechanism in improving identity privacy in UMTS, its descendants and future mobile networks.

Resulting from treatment advances, the Human Immunodeficiency Virus (HIV) is now a long-term condition, and digital solutions are being developed to support people living with HIV in self-management. Sharing their health data with their peers may support self-management, but the trust, identity, privacy and security (TIPS) considerations of people living with HIV remain underexplored. Working with a peer researcher who is expert in the lived experience of HIV, we interviewed 26 people living with HIV in the United Kingdom (UK) to investigate how to design a peer data sharing platform. We also conducted rating activities with participants to capture their attitudes towards sharing personal data. Our mixed methods study showed that participants were highly sophisticated in their understanding of trust and in their requirements for robust privacy and security. They indicated willingness to share digital identity attributes, including gender, age, medical history, health and well-being data, but not details that could reveal their personal identity. Participants called for TIPS measures to foster and to sustain responsible data sharing within their community. These findings can inform the development of trustworthy and secure digital platforms that enable people living with HIV to share data with their peers and provide insights for researchers who wish to facilitate data sharing in other communities with stigmatised health conditions.

In email system, the cryptography technology has been used to defend email secrets, so it is important to search specific encrypted emails on cloud sever without local decryption. The Public key encryption with keyword search (PEKS) might is a suitable way to perform the email ciphertext search. However, most existing PEKS schemes cannot protect the identity privacy of data sender. Deniably authenticated encryption (DAE) technique allows the data sender to deny his/her involvement after the communication. Moreover, the receiver can verify the authenticity of ciphertext in DAE, which assures the identity privacy of data sender. In this paper, so as to solve the above shortages in existing PEKS schemes, we introduce an original scheme called designated server certificateless deniably authenticated encryption with keyword search (dCLDAEKS), where leverages the techniques of DAE and designated server. In dCLDAEKS, data sender authenticates the messages and simultaneously encrypt them. Meanwhile, only designated server has ability to execute search ciphertext operation for receivers. So there is no adversary including the server can launch inside or outside offline KGA. Therefore dCLDAEKS scheme can better protect the identity privacy of data sender. In addition, compared the related schemes in the literature, dCLDAEKS scheme perform less efficient in some procedure, but it can against inside KGA and better protect the sender's identity privacy.

Vehicular social networks (VSNs) are moving from infancy to maturity. However, the characteristics of wireless channel availability and the high mobility of vehicles in the VSNs create new challenges for privacy preservation; the corresponding solutions require a combination of technologies. A common theme in this paper is the combination of crowdsensing (CS) and the VSNs. We first design a three-layer CS-based VSN architecture that includes a CS layer, mobile management layer, and core control layer. Then, we propose a two-stage privacy-preserving (TSPP) algorithm to protect identity and location privacy for the CS-based VSN. In TSPP algorithm, to protect identity privacy, we design a way of identity management. Simultaneously, by correlation analysis, we design a suppression strategy to satisfy $\varepsilon $ -privacy with no information loss for location privacy protection. The simulation results show that our proposed TSPP algorithm better protects identity and location privacy than current algorithms. The results are based on four metrics: average processing time, identity privacy, location privacy, and information loss.

The vast deployment of the Internet of Things (IoT) is improving human life standards every day. These IoT applications are producing a massive amount of data from the environment where it is deployed. The collected data are mostly including end-user private data or industrial data, which are transmitted over the internet to the cloud devices for storing, processing, and sharing with the connected applications. Recent IoT data privacy-related researches are mostly focused on data privacy within a particular location of the network or at a specific device, but as per our knowledge, none has pointed and listed all the places where the end-user or industrial data privacy risks exist. In this work, we have addressed both technical and management aspects to enhance the privacy of IoT data. We have identified and listed the places where IoT data privacy risks exist, followed by our proposed model for data privacy enhancement in the internet of things (IoT). A list of ten suggestions for avoiding data privacy leakage to enhance IoT data privacy enhancement is presented. The results of this work should be useful for both academic researchers and stakeholders from the industry while designing and implementing new IoT solutions for the enhancement of human society.

The unprecedented proliferation of mobile smart devices has propelled a promising computing paradigm, Mobile Crowd Sensing (MCS), where people share surrounding insight or personal data with others. As a fast, easy, and cost-effective way to address large-scale societal problems, MCS is widely applied into many fields, e.g., environment monitoring, map construction, public safety, etc. Despite the popularity, the risk of sensitive information disclosure in MCS poses a serious threat to the participants and limits its further development in privacy-sensitive fields. Thus, the research on privacy protection in MCS becomes important and urgent. This paper targets the privacy issues of MCS and conducts a comprehensive literature research on it by providing a thorough survey. We first introduce a typical system structure of MCS, summarize its characteristics, propose essential requirements on privacy on the basis of a threat model. Then, we survey existing solutions on privacy protection and evaluate their performances by employing the proposed requirements. In essence, we classify the privacy protection schemes into four categories with regard to identity privacy, data privacy, attribute privacy, and task privacy. Besides, we review the achievements on privacy-preserving incentives in MCS from four viewpoints of incentive measures: credit incentive, auction incentive, currency incentive, and reputation incentive. Finally, we point out some open issues and propose future research directions based on the findings from our survey.

Participatory sensing is a process whereby mobile device users (or participants) collect environmental data on behalf of a service provider who can then build a service based upon these data. To attract submissions of such data, the service provider will often need to incentivize potential participants by offering a reward. However, for the privacy conscious, the attractiveness of such rewards may be offset by the fact that the receipt of a reward requires users to either divulge their real identity or provide a traceable pseudonym. An incentivization mechanism must therefore facilitate data submission and rewarding in a way that does not violate participant privacy. This paper presents Privacy-Aware Incentivization (PAI), a decentralized peer-to-peer exchange platform that enables the following: (i) Anonymous, unlinkable and protected data submission, (ii) Adaptive, tunable and incentive-compatible reward computation, (iii) Anonymous and untraceable reward allocation and spending. PAI makes rewards allocated to a participant untraceable and unlinkable and incorporates an adaptive and tunable incentivization mechanism which ensures that real-time rewards reflect current environmental conditions and the importance of the data being sought. The allocation of rewards to data submissions only if they are truthful (i.e., incentive compatibility) is also facilitated in a privacy-preserving manner. The approach is evaluated using proofs and experiments.

In cloud service over crowd-sensing data, the data owner (DO) publishes the sensing data through the cloud server, so that the user can obtain the information of interest on demand. But the cloud service providers (CSP) are often untrustworthy. The privacy and security concerns emerge over the authenticity of the query answer and the leakage of the DO identity. To solve these issues, many researchers study the query answer authentication scheme for cloud service system. The traditional technique is providing DO's signature for the published data. But the signature would always reveal DO's identity. To deal with this disadvantage, this paper proposes a cooperative query answer authentication scheme, based on the ring signature, the Merkle hash tree (MHT) and the non-repudiable service protocol. Through the cooperation among the entities in cloud service system, the proposed scheme could not only verify the query answer, but also protect the DO's identity. First, it picks up the internal nodes of MHT to sign, as well as the root node. Thus, the verification computation complexity could be significantly reduced from O(log2N) to O(log2N0.5) in the best case. Then, it improves an existing ring signature to sign the selected nodes. Furthermore, the proposed scheme employs the non-repudiation protocol during the transmission of query answer and verification object to protect trading behavior between the CSP and users. The security and performance analysis prove the security and feasibility of the proposed scheme. Extensive experimental results demonstrate its superiority of verification efficiency and communication overhead.

“Our pasts are becoming etched like a tattoo into our digital skins,” wrote J. D. Lasica in 1998 (qtd. in Mayer-Schonberger 36). Since then, developments relating to online identity and privacy hav...

3GPP Release 15, the first 5G standard, includes protection of user identity privacy against IMSI catchers. These protection mechanisms are based on public key encryption. Despite this protection, IMSI catching is still possible in LTE networks which opens the possibility of a downgrade attack on user identity privacy, where a fake LTE base station obtains the identity of a 5G user equipment. We propose (i) to use an existing pseudonym-based solution to protect user identity privacy of 5G user equipment against IMSI catchers in LTE and (ii) to include a mechanism for updating LTE pseudonyms in the public key encryption based 5G identity privacy procedure. The latter helps to recover from a loss of synchronization of LTE pseudonyms. Using this mechanism, pseudonyms in the user equipment and home network are automatically synchronized when the user equipment connects to 5G. Our mechanisms utilize existing LTE and 3GPP Release 15 messages and require modifications only in the user equipment and home network in order to provide identity privacy. Additionally, lawful interception requires minor patching in the serving network.

The ubiquitous deployment of Internet of Things (IoT) devices enhances connectivity and communication, and benefits almost every aspect of our lives from manufacturing to retail to smart homes. However, low levels of security protection in these devices due to their limited resources open opportunities for malicious users. An IoT forensics system collecting, processing, analyzing and reporting evidence of attack is required to mitigate the IoT security issues. Although such system has been studied over the past decade and solutions such as cloud-based IoT forensic were proposed, limitation still exist. In this paper, leveraging on the blockchain technology, we propose a per-missioned blockchain-based IoT forensics framework to enhance the integrity, authenticity and non-repudiation properties for the collected evidence. We formally define the system architecture, provide framework details, and propose a cryptographic-based approach to mitigate identity privacy concern.

This paper presents a novel research model of identity and the use of this model to answer some interesting research questions. Information travels in the cyber world, not only bringing us convenience and prosperity but also jeopardy. Protecting this information has been a commonly discussed issue in recent years. One type of this information is Personally Identifiable Information (PII), often used to perform personal authentication. People often give PIIs to organizations, e.g., when applying for a new job or filling out a new application on a website. While the use of such PII might be necessary for authentication, giving PII increases the risk of its exposure to criminals. We introduce two innovative approaches based on our model of identity to help evaluate and find an optimal set of PIIs that satisfy authentication purposes but minimize risk of exposure. Our model paves the way for more informed selection of PIIs by organizations that collect them as well as by users who offer PIIs to these organizations.

There is a big security risk in traditional distributed localization without protecting the location and identity privacy of anchor nodes. Thus, based on software-defined networking (SDN), we propose a security localization mechanism for heterogeneous wireless sensor networks (WSN). After obtaining the state of sensor nodes in data plane, SDN controller runs the complementary range-based and range-free positional algorithms in a centralized way. At the same time, the difference of transmission power of heterogeneous sensor nodes is taken into account. The security analysis and experimental results show that the mechanism can reduce the positioning error while ensuring the privacy of anchor nodes.

In recent year’s cloud computing is popularly increased day by day in the form of securing, updating, storing, sharing confidential data. Today’s condition about data security in cloud computing is very bad thing happens when people work on cloud for confidential company data. System provides scheme for secured data sharing when we use dynamic groups in an un-trusted clouds. In a system, users can share data in other groups without revealing identity privacy to the cloud. Efficient user revocation and new user joining is also supported by the system. Public revocation list is used for efficient user revocation without updating the private keys of the other users. New users before participation can decrypt directly. User within a group is identified by a group signature. Also public revocation list is used. System is a secure data sharing scheme in a multiple group policy. KeywordsCloud Computing, Access controls, Dynamic groups. __________________________________________________*****_________________________________________________

Recent developments in Internet of Things (IoT) technologies have already put a huge impact on the medical and health sector. Thus, the patient treatment can be performed in more efficient ways compared with traditional methods. Secure identification is a key system requirement for patients to acquire these health related services. Fast and convenient identification is important in the case of critical and elderly or disabled patients who required frequent health services. In this paper, we are presenting concept of the Naked environment where patients can get health services from smart and intelligent surroundings of hospital without using explicit gadgets. Patients would have direct interaction with the environment and get identified through it. We propose a biometric based authentication scheme for the Naked hospital environment that also protects the patients identity privacy. In addition, we show that this authentication scheme can resist various well known attacks such as insider attacks, replay attacks and identity privacy among others.

Aiming at the existing problems of multi-user encrypted search scheme in cloud computing environment, a basic multi-user encrypted scheme is proposed firstly, and then the basic scheme is extended to an anonymous hierarchical management authority. Compared with most of the existing schemes, the scheme not only to achieve the protection of keyword information, but also to achieve the protection of user identity privacy; the same time, data owners can directly control the user query permissions, rather than the cloud server. In addition, through the use of a special query key generation rules, to achieve the hierarchical management of the user’s query permissions. The safety analysis shows that the scheme is safe and that the performance analysis and experimental data show that the scheme is practicable.

The adoption of an e-Health Cloud has different advantages especially allowing sharing and exchanging information between medical institutions, availability of information, reducing costs, etc. However, preserving identity privacy is a significant challenge of security in all environments, and constitutes particularly a very serious concern in Cloud environments. Indeed, an important barrier to the adoption of Cloud is user fear of privacy loss in the Cloud, particularly in an e-Health Cloud where users are patients. Users may not want to disclose their identities to the Cloud Service Provider, a way to protect them is making them anonymous. In this paper, we will propose an adaptive and flexible approach to protect the identity privacy of patients in an e-Health Cloud through an anonymous authentication scheme.

International audience; In this paper, we propose a trust-based vehicular platoon crowdsensing scheme, named TripSense, in VANET. The proposed TripSense scheme introduces a trust-based system to evaluate vehicles' sensing abilities and then selects the more capable vehicles in order to improve sensing results accuracy. In addition, the sensing tasks are accomplished by platoon member vehicles and preprocessed by platoon head vehicles before the data are uploaded to server. Hence, it is less time-consuming and more efficient compared with the way where the data are submitted by individual platoon member vehicles. Hence it is more suitable in ephemeral networks like VANET. Moreover, our proposed TripSense scheme integrates unlinkable pseudo-ID techniques to achieve PM vehicle identity privacy, and employs a privacy-preserving sensing vehicle selection scheme without involving the PM vehicle's trust score to keep its location privacy. Detailed security analysis shows that our proposed TripSense scheme not only achieves desirable privacy requirements but also resists against attacks launched by adversaries. In addition, extensive simulations are conducted to show the correctness and effectiveness of our proposed scheme

Cellular networks have evolved through various generations, starting with 1G, followed by 2G and then by 3G, cellular networks have come a long way. A recent technology that has marked the beginning of 4G is Long Term Evolution (LTE). While transmission technologies, authentication mechanisms, confidentiality protection, etc., improved significantly through the generations, not much has improved with regards to the subscriber’s identity privacy, and LTE is no exception. Much of this could be due to the trust model adopted in these networks. Introduction of sensitive services like mobile-banking, mobile-commerce, etc., has increased the importance of identity privacy by many folds. Identification of threats like location tracking and comprehensive profiling - where data about movement, usage, etc., of a subscriber is amassed and linked to his/her identity to explore various attacks - is quite alarming. In this paper, we propose a new trust model for strengthening identity privacy in cellular networks; it has an additional capacity to enhance interoperability among different cellular operators. We also propose a security extension that adopts this trust model to improve identity privacy and interoperability in LTE. A formal analysis of the extension proves that it meets its security goals.

With the rapid popularization of the Internet of Things (IoT) in our daily lives, the communication security and identity privacy of IoT devices must be ensured. However, traditional authentication mechanisms utilized in IoT cannot completely ensure a user&rsquo, s privacy when his/her messages are routed via an untrusted intermediate device. Strong designated-verifier proxy re-signature (SDVPRS) is a new cryptographic technology that combines the advantages of strong designated verifier signature and proxy re-signature. Therefore, SDVPRS is considered to be a better approach to maintain data integrity and protect the identity privacy of the signer in a resource-limited IoT device. Nevertheless, designing a secure SDVPRS scheme without random oracles is still a challenging task. In this paper, we mainly focus on such a construction by providing a new method. We first provide the formal definition of SDVPRS and its security model. Then, we present the first SDVPRS scheme, which is bidirectional, multi-use and non-transferable, and we prove its security under the standard complexity assumptions in the standard model. The analysis results show that our SDVPRS scheme can not only protect the privacy of the signer&rsquo, s identity, but also provide non-delegatability for signature verification. We present an example of potential application to environmental monitoring systems using our SDVPRS scheme.

We present the novel concept of Controllable Face Privacy. Existing methods that alter face images to conceal identity inadvertently also destroy other facial attributes such as gender, race or age. This all-or-nothing approach is too harsh. Instead, we propose a flexible method that can independently control the amount of identity alteration while keeping unchanged other facial attributes. To achieve this flexibility, we apply a subspace decomposition onto our face encoding scheme, effectively decoupling facial attributes such as gender, race, age, and identity into mutually orthogonal subspaces, which in turn enables independent control of these attributes. Our method is thus useful for nuanced face de-identification, in which only facial identity is altered, but others, such gender, race and age, are retained. These altered face images protect identity privacy, and yet allow other computer vision analyses, such as gender detection, to proceed unimpeded. Controllable Face Privacy is therefore useful for reaping the benefits of surveillance cameras while preventing privacy abuse. Our proposal also permits privacy to be applied not just to identity, but also to other facial attributes as well. Furthermore, privacy-protection mechanisms, such as k-anonymity, L-diversity, and t-closeness, may be readily incorporated into our method. Extensive experiments with a commercial facial analysis software show that our alteration method is indeed effective.

This chapter presents emerging wireless technologies applied to the domain of healthcare, which has been identified as a very important domain of increasing interest to researchers. The chapter also provides an overview of the security issues related to these emerging technologies and networks.

Die erste Zielstellung ist, durch die phanomenologische Methode wohlbegrundete Begriffe zu entwickeln, indem man elementare Phanomene der heutigen Welt mit einem Augenmerk auf die Privatheit und das Digitale durchdenkt, um zu beleuchten, wer wir sind in der Cyberwelt — also eine Phanomenologie des digitalen Werseins. Die zweite Zielstellung ist, durch die hermeneutische Methode eine Auseinandersetzung mit alterer sowie neuerer Literatur zur Privatheit einschlieslich in der heute entstehenden Cyberwelt zu fuhren, deren wichtigste Ergebnisse Kritiken der lediglich informationellen Privatheit sowie des autonomen Subjekts gegenuber einer objektiven, verdinglichten Welt enthalten — im Gegensatz zu einem Selbst, das stets in gesellschaftlichen Machtspielen eingelassen ist. Phanomenologische Ergebnisse umfassen u. a. i) Selbstidentitat durch ein Interplay mit der Welt, ii) personliche Privatheit im Unterschied zur Privatheit des Privateigentums, iii) die Cyberwelt als kunstliche, digitale Dimension, um schlieslich zu diskutieren, iv) was Freiheit in der Cyberwelt bedeuten kann, ohne dabei v) interkulturelle Aspekte sowie vi) den EU-Kontext zu vernachlassigen.

Security is becoming a major concern in multiagent systems, since an agent's incorrect or inappropriate behaviour may cause non-desired effects, such as money and data loss. Some multiagent platforms (MAP) are now providing baseline security features, such as authentication, authorization, integrity and confidentiality. However, they fail to support other features related to the sociability skills of agents such as agent groups. What is more, none of the listed MAPs provide a mechanism for preserving the privacy of the users (regarding their identities) that run their agents on such MAPs. In this paper, we present the security infrastructure (SI) of the Magentix MAP, which supports agent groups and preserves user identity privacy. The SI is based on identities that are assigned to all the different entities found in Magentix (users, agents and agent groups). We also provide an evaluation of the SI describing an example application built on top of Magentix and a performance evaluation of it. Copyright © 2010 John Wiley & Sons, Ltd., This work has been partially supported by CONSOLIDER-INGENIO 2010 under grant CSD2007-00022, and TIN 2008-04446 and PROMETEO/2008/051 projects. Jose M. Such is enjoying a grant of Conselleria d'Empresa, Universitat i Ciencia de la Generalitat Valenciana (BFPI06/096). Juan M. Alberola is enjoying a grant of Ministerio de Ciencia e Innovacion de Espana (AP2007-00289).

International audience; The use of RFID technology in complex and distributed environments often leads to a multi-domain RFID system in which security issues such as authentication of tags and readers, granting access to data, and revocation of readers turn into an administrative challenge. In this paper, we propose a new public-key-based mutual authentication protocol that addresses the reader revocation problem while maintaining efficiency and identity privacy. In addition, our new protocol integrates fine-grained access control and key establishment with mutual authentication. The core of our solution is the use of the concepts of key-splitting and distributed signatures to solve the validation and revocation problem. We show that our protocols can be implemented on RFID tags using lightweight implementations of elliptic curve cryptography.

International audience; In this paper, we present a novel framework for the generic construction of biometric Identity Based Encryption (IBE) schemes, which do not require bilinear pairings and result in more efficient schemes than existing fuzzy IBE systems implemented for biometric identities. Also, we analyze the security properties that are specific to biometric IBE namely anonymity and identity privacy. Considering these notions, we present generic constructions for biometric IBE and ID-KEM based on weakly secure anonymous IBE schemes, error correcting codes and generic conversion schemes. Finally, we describe concrete applications of our framework and compare them to the existing fuzzy IBE systems in terms of time complexity.

This paper examines the development in Ontario of the ‘enhanced driver's licence’ as a passport substitute for entering the US, including the public discussion surrounding it. We discuss the significant security, privacy, and identity risks that outweigh the benefits claimed, and call for more effective public participation in decision making over future ID schemes.

This paper discusses some of the major issues surrounding trust in e-commerce, by first defining the concept of trust before identifying and examining some trust-enhancing strategies, products and services and their impacts. The conclusion uses this review to highlight key future research priorities aimed at gaining theoretical and practical insights into how the needs of consumers, citizens, business, government and other stakeholders can be taken into account in a balanced way when developing a strategy for building trust in electronic markets.

Authentication protocols are constructed using certain fundamental security mechanisms. This paper discusses how the properties of the underlying mechanisms affect the design of authentication protocols. We firstly illustrate factors affecting the selection of protocols generally. These factors include the properties of the environment for authentication protocols and the resources of the authenticating entities. We then consider a number of authentication protocols which are based on mechanisms satisfying different conditions than those required for the ISO/IEC 9798 protocols, in particular the use of non-random nonces and the provision of identity privacy for the communicating parties.

Current controversies about the Mind—Body Identity Theory form a case-study for the investigation of the methods practised by linguistic philosophers. Recent criticisms of these methods question that philosophers can discern lines of demarcation between ‘categories’ of entities, and thereby diagnose ‘conceptual confusions’ in ‘reductionist’ philosophical theories. Such doubts arise once we see that it is very difficult, and perhaps impossible, to draw a firm line between the ‘conceptual’ and the ‘empirical’ and thus to differentiate between a statement embodying a conceptual confusion and one that expresses a surprising empirical result. The proponent of the Identity Theory (by which I mean one who thinks it sensible to assert that empirical inquiry will discover that sensations (not thoughts) are identical with certain brain-processes)1 holds that his opponents’ arguments to the effect that empirical inquiry could not identify brain processes and sensations are admirable illustrations of this difficulty. For, he argues, the classifications of linguistic expressions that are the ground of his opponents’ criticism are classifications of a language which is as it is because it is the language spoken at a given stage of empirical inquiry. But the sort of empirical results that would show brain processes and sensations to be identical would also bring about changes in our ways of speaking.

Efficient protection of huge amount of IoT produced data is key for wide scale data analytic services. The most efficient way is to use pure symmetric encryption as that allows both fast decryption at the analytic engine side as well as energy efficient encryption at the IoT side. However, symmetric encryption can only be performed if there is a way to directly map an encrypted object to the correct key. Typically, such mapping require a unique IoT identity, which constitute a privacy problem. In this paper, we present an IoT identity protection scheme for symmetric IoT data encryption. We give basic security definitions for this problem setting, present a new construction and give security proofs of security level achieved with the construction. Performance figures for a proof of concept implementation are also given. The new scheme gives a fair trade-off between identity privacy and complexity.

The growing use of the Internet and other information and communication technologies (ICTs) in e-government services raises important new issues of 'cyber trust' that could have a significant influence on governance structures and practices in the future. This paper argues that at the heart of debates about cyber trust in e-government is a 'trust tension' between the need to collect data on individuals as the basis for providing services and fears about the inappropriate use of personal information gathered, stored, and analysed using ICTs. It draws on studies of experiences in e-commerce and e-business, as well as e-government, to illuminate the nature of cyber trust and its wider social dimensions, including the main related challenges faced in e-government and some strategies, products and services for dealing with them.