Using re-encryption to escrow private information escrow bound to multiple conditions
Suriadi Suriadi, Ernest Foo, Jason Smith · 2009
In a sitting whereby a user interacts with multiple service providers, each service provider is likely to follow different privacy regulations according to the nature of the industry it belongs and the applicable legislative requirements. We propose a protocol that escrows users private information which is bound to multiple set of conditions in a federated single sign-on environment. An identity-based proxy re-encryption scheme is applied along with trusted computing technologies. A performance analysis is provided to show the increased performance of our protocol in comparison to the existing anonymous credential approach. The security properties of the protocol is formally evaluated using the coloured petri nets and state-space analysis techniques.