Anonymous Credentials in Web Applications - A Child's Play with ...

Faculty of Computer Science Institute of Systems Architecture, Chair of Privacy and Data Security
Anonymous Credentials in Web
Applications
A Child's Play with the PRIME Core
Benjamin.Kellermann@tu-dresden.de
D19E 04A8 8895 020A 8DF6
0092 3501 1A32 491A 3D9C
Immanuel.Scholz@tu-dresden.de
EC9D D587 BDF0 0199 CE39
37B8 FFAE CFEF 5707 11EA
Nice, September 10, 2009

Possible Example Applications
Benjamin Kellermann Anonymous Credentials in Web Applications slide 2 of 10

Possible Example Applications
Benjamin Kellermann Anonymous Credentials in Web Applications slide 2 of 10

Naive Implementation
ID
ID
Benjamin Kellermann Anonymous Credentials in Web Applications slide 3 of 10

Naive Implementation
Benjamin Kellermann Anonymous Credentials in Web Applications slide 3 of 10

Solution
problems, requirements
Benjamin Kellermann Anonymous Credentials in Web Applications slide 4 of 10

Solution
problems, requirements
Benjamin Kellermann Anonymous Credentials in Web Applications slide 4 of 10

Solution
problems, requirements
SOLVED
Benjamin Kellermann Anonymous Credentials in Web Applications slide 4 of 10

Solution
problems, requirements
SOLVED
???
Benjamin Kellermann Anonymous Credentials in Web Applications slide 4 of 10

Problem
Benjamin Kellermann Anonymous Credentials in Web Applications slide 5 of 10

Comparison – PGP
Benjamin Kellermann Anonymous Credentials in Web Applications slide 6 of 10

Comparison – PGP
Benjamin Kellermann Anonymous Credentials in Web Applications slide 6 of 10

Comparison – PGP
Benjamin Kellermann Anonymous Credentials in Web Applications slide 6 of 10

Prime Architecture
Firefox
1: user enters
Web page
2: access
Web page
Application
Benjamin Kellermann Anonymous Credentials in Web Applications slide 7 of 10

Prime Architecture
Firefox
1: user enters
Web page
2: access
Web page
Application
client
PRIME
core
server
PRIME
core
Benjamin Kellermann Anonymous Credentials in Web Applications slide 7 of 10

Prime Architecture
Firefox
1: user enters
Web page
2: access
Web page
Application
3: ask PRIME
client
PRIME
core
server
PRIME
core
Benjamin Kellermann Anonymous Credentials in Web Applications slide 7 of 10

Prime Architecture
Firefox
1: user enters
Web page
Interceptor
2: access
Web page
Application
4: ask PRIME
3: ask PRIME
client
PRIME
core
server
PRIME
core
Benjamin Kellermann Anonymous Credentials in Web Applications slide 7 of 10

Prime Architecture
Firefox
1: user enters
Web page
Interceptor
2: access
Web page
Application
4: ask PRIME
3: ask PRIME
client
PRIME
core
server
PRIME
core
5: ask User
Benjamin Kellermann Anonymous Credentials in Web Applications slide 7 of 10

Prime Architecture
Firefox
1: user enters
Web page
Interceptor
2: access
Web page
Application
4: ask PRIME
3: ask PRIME
client
PRIME
core
6: show
credentials
server
PRIME
core
5: ask User
Benjamin Kellermann Anonymous Credentials in Web Applications slide 7 of 10

Demo
Live Demonstration
Benjamin Kellermann Anonymous Credentials in Web Applications slide 8 of 10

Warning, Bugs around
Benjamin Kellermann Anonymous Credentials in Web Applications slide 9 of 10

Conclusion
• Developers need easy Toolkit
• 10 lines of additional code for anonymous credentials!
• easy to use interface
• good tutorial documentation
• easy to set up issuing service
Benjamin Kellermann Anonymous Credentials in Web Applications slide 10 of 10

Faculty of Computer Science Institute of Systems Architecture, Chair of Privacy and Data Security
Thank you for your attention!
Discussion
Benjamin.Kellermann@tu-dresden.de
D19E 04A8 8895 020A 8DF6
0092 3501 1A32 491A 3D9C
Immanuel.Scholz@tu-dresden.de
EC9D D587 BDF0 0199 CE39
37B8 FFAE CFEF 5707 11EA
Nice, September 10, 2009