Protecting privacy during on-line trust negotiation

Kent E. Seamons; Marianne Winslett; Ting Yu; Lina Yu; Ryan Jarvis

doi:10.1007/3-540-36467-6_10

Protecting privacy during on-line trust negotiation

Kent E. Seamons, Marianne Winslett, Ting Yu, Lina Yu, Ryan Jarvis

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

38 Citations (Scopus)

Abstract

The dramatic growth of services and information on the Internet is accompanied by growing concerns over privacy. Trust negotiation is a new approach to establishing trust between strangers on the Internet through the bilateral exchange of digital credentials, the on-line analogue to the paper credentials people carry in their wallets today. When a credential contains sensitive information, its disclosure is governed by an access control policy that specifies credentials that must be received before the sensitive credential is disclosed. This paper identifies the privacy vulnerabilities present in on-line trust negotiation and the approaches that can be taken to eliminate or minimize those vulnerabilities. The paper proposes modifications to negotiation strategies to help prevent the inadvertent disclosure of credential information during online trust negotiation for those credentials or credential attributes that have been designated as sensitive, private information.

Original language	English
Title of host publication	Privacy Enhancing Technologies - 2nd International Workshop, PET 2002, Revised Papers
Editors	Roger Dingledine, Paul Syverson
Publisher	Springer Verlag
Pages	129-143
Number of pages	15
ISBN (Print)	354000565X, 9783540005650
DOIs	https://doi.org/10.1007/3-540-36467-6_10
Publication status	Published - 2003
Externally published	Yes
Event	2nd International Workshop on Privacy Enhancing Technologies, PET 2002 - San Francisco, United States Duration: 14 Apr 2002 → 15 Apr 2002

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	2482
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	2nd International Workshop on Privacy Enhancing Technologies, PET 2002
Country/Territory	United States
City	San Francisco
Period	14/04/02 → 15/04/02

Access to Document

10.1007/3-540-36467-6_10

Cite this

Seamons, K. E., Winslett, M., Yu, T., Yu, L., & Jarvis, R. (2003). Protecting privacy during on-line trust negotiation. In R. Dingledine, & P. Syverson (Eds.), Privacy Enhancing Technologies - 2nd International Workshop, PET 2002, Revised Papers (pp. 129-143). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 2482). Springer Verlag. https://doi.org/10.1007/3-540-36467-6_10

Seamons, Kent E. ; Winslett, Marianne ; Yu, Ting et al. / Protecting privacy during on-line trust negotiation. Privacy Enhancing Technologies - 2nd International Workshop, PET 2002, Revised Papers. editor / Roger Dingledine ; Paul Syverson. Springer Verlag, 2003. pp. 129-143 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{ddc1e465d910467a80a20af6bb398170,

title = "Protecting privacy during on-line trust negotiation",

abstract = "The dramatic growth of services and information on the Internet is accompanied by growing concerns over privacy. Trust negotiation is a new approach to establishing trust between strangers on the Internet through the bilateral exchange of digital credentials, the on-line analogue to the paper credentials people carry in their wallets today. When a credential contains sensitive information, its disclosure is governed by an access control policy that specifies credentials that must be received before the sensitive credential is disclosed. This paper identifies the privacy vulnerabilities present in on-line trust negotiation and the approaches that can be taken to eliminate or minimize those vulnerabilities. The paper proposes modifications to negotiation strategies to help prevent the inadvertent disclosure of credential information during online trust negotiation for those credentials or credential attributes that have been designated as sensitive, private information.",

author = "Seamons, {Kent E.} and Marianne Winslett and Ting Yu and Lina Yu and Ryan Jarvis",

note = "Publisher Copyright: {\textcopyright} Springer-Verlag Berlin Heidelberg 2003.; 2nd International Workshop on Privacy Enhancing Technologies, PET 2002 ; Conference date: 14-04-2002 Through 15-04-2002",

year = "2003",

doi = "10.1007/3-540-36467-6_10",

language = "English",

isbn = "354000565X",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Verlag",

pages = "129--143",

editor = "Roger Dingledine and Paul Syverson",

booktitle = "Privacy Enhancing Technologies - 2nd International Workshop, PET 2002, Revised Papers",

address = "Germany",

}

Seamons, KE, Winslett, M, Yu, T, Yu, L & Jarvis, R 2003, Protecting privacy during on-line trust negotiation. in R Dingledine & P Syverson (eds), Privacy Enhancing Technologies - 2nd International Workshop, PET 2002, Revised Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 2482, Springer Verlag, pp. 129-143, 2nd International Workshop on Privacy Enhancing Technologies, PET 2002, San Francisco, United States, 14/04/02. https://doi.org/10.1007/3-540-36467-6_10

Protecting privacy during on-line trust negotiation. / Seamons, Kent E.; Winslett, Marianne; Yu, Ting et al.
Privacy Enhancing Technologies - 2nd International Workshop, PET 2002, Revised Papers. ed. / Roger Dingledine; Paul Syverson. Springer Verlag, 2003. p. 129-143 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 2482).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Protecting privacy during on-line trust negotiation

AU - Seamons, Kent E.

AU - Winslett, Marianne

AU - Yu, Ting

AU - Yu, Lina

AU - Jarvis, Ryan

N1 - Publisher Copyright: © Springer-Verlag Berlin Heidelberg 2003.

PY - 2003

Y1 - 2003

N2 - The dramatic growth of services and information on the Internet is accompanied by growing concerns over privacy. Trust negotiation is a new approach to establishing trust between strangers on the Internet through the bilateral exchange of digital credentials, the on-line analogue to the paper credentials people carry in their wallets today. When a credential contains sensitive information, its disclosure is governed by an access control policy that specifies credentials that must be received before the sensitive credential is disclosed. This paper identifies the privacy vulnerabilities present in on-line trust negotiation and the approaches that can be taken to eliminate or minimize those vulnerabilities. The paper proposes modifications to negotiation strategies to help prevent the inadvertent disclosure of credential information during online trust negotiation for those credentials or credential attributes that have been designated as sensitive, private information.

AB - The dramatic growth of services and information on the Internet is accompanied by growing concerns over privacy. Trust negotiation is a new approach to establishing trust between strangers on the Internet through the bilateral exchange of digital credentials, the on-line analogue to the paper credentials people carry in their wallets today. When a credential contains sensitive information, its disclosure is governed by an access control policy that specifies credentials that must be received before the sensitive credential is disclosed. This paper identifies the privacy vulnerabilities present in on-line trust negotiation and the approaches that can be taken to eliminate or minimize those vulnerabilities. The paper proposes modifications to negotiation strategies to help prevent the inadvertent disclosure of credential information during online trust negotiation for those credentials or credential attributes that have been designated as sensitive, private information.

UR - http://www.scopus.com/inward/record.url?scp=84957811521&partnerID=8YFLogxK

U2 - 10.1007/3-540-36467-6_10

DO - 10.1007/3-540-36467-6_10

M3 - Conference contribution

AN - SCOPUS:84957811521

SN - 354000565X

SN - 9783540005650

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 129

EP - 143

BT - Privacy Enhancing Technologies - 2nd International Workshop, PET 2002, Revised Papers

A2 - Dingledine, Roger

A2 - Syverson, Paul

PB - Springer Verlag

T2 - 2nd International Workshop on Privacy Enhancing Technologies, PET 2002

Y2 - 14 April 2002 through 15 April 2002

ER -

Seamons KE, Winslett M, Yu T, Yu L, Jarvis R. Protecting privacy during on-line trust negotiation. In Dingledine R, Syverson P, editors, Privacy Enhancing Technologies - 2nd International Workshop, PET 2002, Revised Papers. Springer Verlag. 2003. p. 129-143. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/3-540-36467-6_10

Protecting privacy during on-line trust negotiation

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this