Secure Logging of Retained Data for an Anonymity Service

Abstract : The recently introduced legislation on data retention to aid prosecuting cyber-related crime in Europe also affects the achievable security of systems for anonymous communication on the Internet. We have analyzed the newly arising risks associated with the process of accessing and storage of the retained data and propose a secure logging system, which utilizes cryptographic smart cards, trusted timestamping servers and distributed storage. These key components will allow for controlled access to the stored log data, enforce a limited data retention period, ensure integrity of the logged data, and enable reasonably convenient response to any legitimated request of the retained data. A practical implementation of the proposed scheme was performed for the AN.ON anonymity service, but the scheme can be used for other services affected by data retention legislation.
Type de document :
Communication dans un congrès
Michele Bezzi; Penny Duquenoy; Simone Fischer-Hübner; Marit Hansen; Ge Zhang. 5th IFIP WG 9.2, 9.6/11.4, 11.6, 11.7/PrimeLife International Summer School(PRIMELIFE), Sep 2009, Nice, France. Springer, IFIP Advances in Information and Communication Technology, AICT-320, pp.284-298, 2010, Privacy and Identity Management for Life. 〈10.1007/978-3-642-14282-6_24〉
Liste complète des métadonnées

Littérature citée [17 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01061062
Contributeur : Hal Ifip <>
Soumis le : vendredi 5 septembre 2014 - 11:04:47
Dernière modification le : mardi 8 août 2017 - 17:36:21
Document(s) archivé(s) le : vendredi 14 avril 2017 - 13:48:16

Fichier

petr.pdf
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Stefan Köpsell, Petr Švenda. Secure Logging of Retained Data for an Anonymity Service. Michele Bezzi; Penny Duquenoy; Simone Fischer-Hübner; Marit Hansen; Ge Zhang. 5th IFIP WG 9.2, 9.6/11.4, 11.6, 11.7/PrimeLife International Summer School(PRIMELIFE), Sep 2009, Nice, France. Springer, IFIP Advances in Information and Communication Technology, AICT-320, pp.284-298, 2010, Privacy and Identity Management for Life. 〈10.1007/978-3-642-14282-6_24〉. 〈hal-01061062〉

Partager

Métriques

Consultations de la notice

157

Téléchargements de fichiers

113