Minimal information disclosure in a centralized authorization system

Lavinia Egidi; Giovanni Porcelli

doi:10.1016/S1571-0661(04)80686-8

Minimal information disclosure in a centralized authorization system

Lavinia Egidi, Giovanni Porcelli

Dipartimento di Scienze e Innovazione Tecnologica

Risultato della ricerca: Contributo su rivista › Articolo da conferenza › peer review

Abstract

We propose a centralized authorization system, in which user authorizations cannot be retrieved in a computationally feasible way without cooperation of user, authorization server and end-servers. A certain level of anonymity is also guaranteed to the users. The security of the protocol is based on standard cryptographic assumptions. We show that the complexity of the protocol compares to that of the SSL handshake protocol.

Lingua originale	Inglese
pagine (da-a)	89-104
Numero di pagine	16
Rivista	Electronic Notes in Theoretical Computer Science
Volume	85
Numero di pubblicazione	3
DOI	https://doi.org/10.1016/S1571-0661(04)80686-8
Stato di pubblicazione	Pubblicato - ago 2003
Evento	SecCo'03, First International Workshop on Security Issues in Coordination Models, Languages, and Systems (Satellite Event for ICALP - Eindhoven, Netherlands Durata: 28 giu 2003 → 29 giu 2003

Accesso al documento

10.1016/S1571-0661(04)80686-8

Altri file e collegamenti

Link to publication in Scopus

Cita questo

@article{bbe86f4dd8674ef29f7710ecf6c083de,

title = "Minimal information disclosure in a centralized authorization system",

abstract = "We propose a centralized authorization system, in which user authorizations cannot be retrieved in a computationally feasible way without cooperation of user, authorization server and end-servers. A certain level of anonymity is also guaranteed to the users. The security of the protocol is based on standard cryptographic assumptions. We show that the complexity of the protocol compares to that of the SSL handshake protocol.",

author = "Lavinia Egidi and Giovanni Porcelli",

year = "2003",

month = aug,

doi = "10.1016/S1571-0661(04)80686-8",

language = "English",

volume = "85",

pages = "89--104",

journal = "Electronic Notes in Theoretical Computer Science",

issn = "1571-0661",

publisher = "Elsevier B.V.",

number = "3",

note = "SecCo'03, First International Workshop on Security Issues in Coordination Models, Languages, and Systems (Satellite Event for ICALP ; Conference date: 28-06-2003 Through 29-06-2003",

}

TY - JOUR

T1 - Minimal information disclosure in a centralized authorization system

AU - Egidi, Lavinia

AU - Porcelli, Giovanni

PY - 2003/8

Y1 - 2003/8

N2 - We propose a centralized authorization system, in which user authorizations cannot be retrieved in a computationally feasible way without cooperation of user, authorization server and end-servers. A certain level of anonymity is also guaranteed to the users. The security of the protocol is based on standard cryptographic assumptions. We show that the complexity of the protocol compares to that of the SSL handshake protocol.

AB - We propose a centralized authorization system, in which user authorizations cannot be retrieved in a computationally feasible way without cooperation of user, authorization server and end-servers. A certain level of anonymity is also guaranteed to the users. The security of the protocol is based on standard cryptographic assumptions. We show that the complexity of the protocol compares to that of the SSL handshake protocol.

UR - http://www.scopus.com/inward/record.url?scp=18944384603&partnerID=8YFLogxK

U2 - 10.1016/S1571-0661(04)80686-8

DO - 10.1016/S1571-0661(04)80686-8

M3 - Conference article

AN - SCOPUS:18944384603

SN - 1571-0661

VL - 85

SP - 89

EP - 104

JO - Electronic Notes in Theoretical Computer Science

JF - Electronic Notes in Theoretical Computer Science

IS - 3

T2 - SecCo'03, First International Workshop on Security Issues in Coordination Models, Languages, and Systems (Satellite Event for ICALP

Y2 - 28 June 2003 through 29 June 2003

ER -

Minimal information disclosure in a centralized authorization system

Abstract

Accesso al documento

Altri file e collegamenti

Fingerprint

Cita questo