N1005 IBM Research: privacy

<div style="box-sizing: border-box; color: #222222; direction: ltr; font-family: 'Helvetica Neue', Helvetica, Helvetica, Arial, sans-serif; line-height: 1.6; margin-bottom: 25px; padding: 0px;"><br /><i><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Editor’s Note: This article is by <a href="https://twitter.com/@jancamenisch">Dr. Jan Camenisch</a>, cryptographer, IBM Research</span></i></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7dDjewe87X8lnV3Iba1uXlEwtcpMtTDDoQbUYIxFzdkOiEZGSUkkVwxHWtaEZsQc4rQDhwqJmtqbA4-ndfY9YYX9BYGUvhAOULX02rrYcXsnk8a4QkrjfPsMnIkxC8s-zQzAIcz2DdUk/s1600/EUz5hXR3_400x400.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><span style="font-size: large;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7dDjewe87X8lnV3Iba1uXlEwtcpMtTDDoQbUYIxFzdkOiEZGSUkkVwxHWtaEZsQc4rQDhwqJmtqbA4-ndfY9YYX9BYGUvhAOULX02rrYcXsnk8a4QkrjfPsMnIkxC8s-zQzAIcz2DdUk/s200/EUz5hXR3_400x400.jpg" width="200" /></span></a></div><div style="box-sizing: border-box; color: #222222; direction: ltr; font-family: 'Helvetica Neue', Helvetica, Helvetica, Arial, sans-serif; line-height: 1.6; margin-bottom: 25px; padding: 0px;"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Your personal identity data was worth several hundred dollars on the black market 10 years ago. Today, it’s worth pocket change. Why? Because it’s easier to steal this information than ever before.</span><br /><br /><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">As more pieces of our lives go online, we regularly have to authenticate ourselves for service providers, including social media tools and e-commerce sites. Today, identity <a href="https://securityintelligence.com/no-authentication-without-trust/">authentication</a> is realized by mirroring the paper-based processes in the electronic realm, but this often exposes an excessive amount of personal information. For example, when you show your driver’s license to prove your age, you also unintentionally share your address.</span></div><div style="box-sizing: border-box; color: #222222; direction: ltr; font-family: 'Helvetica Neue', Helvetica, Helvetica, Arial, sans-serif; line-height: 1.6; margin-bottom: 25px; padding: 0px;"></div><a name="more"></a> <b><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Protecting Personal Information in the Paper Age</span></b><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;"></span><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;"> </span><br /><br /><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Because electronic information is much harder to control and protect than information on paper, this praxis erodes our privacy and puts us at risk. Indeed, the flow of information in today’s electronic networks is virtually impossible to follow and assess. Thus, it is important that data is always protected and kept secret and that disclosure is minimized whenever possible.</span><br /><br /><table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: left; margin-right: 1em; text-align: left;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-xQoZhk5Swk2Zq_cLDcpvFSP95wgR-B4Q70F-INlRzEGLl4yb_9yduk-2cGrF8I3WNYrCsP1YBaATEz6PEZ81XcdbtcZVWSW4CIp4Cw89O8PJIL9ZhrinOZ3kQPGJkY1rr_4p2Np-rxA/s1600/webinar.jpg" imageanchor="1" style="clear: right; margin-bottom: 1em; margin-left: auto; margin-right: auto;"><span style="font-size: large;"><img border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-xQoZhk5Swk2Zq_cLDcpvFSP95wgR-B4Q70F-INlRzEGLl4yb_9yduk-2cGrF8I3WNYrCsP1YBaATEz6PEZ81XcdbtcZVWSW4CIp4Cw89O8PJIL9ZhrinOZ3kQPGJkY1rr_4p2Np-rxA/s320/webinar.jpg" width="320" /></span></a></td></tr><tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small;">Join: <a href="http://www.ibm.biz/identitymixerwebinar" target="_blank">live webinar</a><a href="http://www.ibm.biz/identitymixerwebinar"></a></span></td></tr></tbody></table> <span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Consider <a href="https://youtu.be/gKK1PxGu6Fo?list=PL8C5495E23CD99286">this fictional transaction</a>: Alice, a movie buff, wants to stream the classic film “Alice in Wonderland” from BestMovies, an online movie service. Before it will stream the movie, BestMovies requires proof that Alice satisfies the necessary access control rules, i.e., that Alice has bought a subscription and is older than 12 years of age.</span><br /><br /><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">In the paper-based world, the clerk at BestMovies would tell Alice what proof is required, and Alice would present her BestMovies subscription card and her driver’s license or some other government-issued ID. The clerk would verify the two documents for authenticity and specifically check Alice’s birthdate. While the clerk would see all of her information, he would most likely forget shortly thereafter, assuming he views hundreds of similar documents per day. Thus, Alice’s privacy and information security is retained.</span><br /><br /><b><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Moving Toward Digital Solutions</span></b><br /><div class="MsoNormal"><br /></div> <div align="right"> <table align="right" border="1" cellpadding="0" cellspacing="0" class="MsoTableGrid" style="border-collapse: collapse; border: none; margin-left: 6.75pt; margin-right: 6.75pt; mso-border-alt: solid white .5pt; mso-border-insideh-themecolor: background1; mso-border-insideh: .5pt solid white; mso-border-insidev-themecolor: background1; mso-border-insidev: .5pt solid white; mso-border-themecolor: background1; mso-padding-alt: 0in 5.4pt 0in 5.4pt; mso-table-anchor-horizontal: column; mso-table-anchor-vertical: paragraph; mso-table-left: right; mso-table-lspace: 9.0pt; mso-table-overlap: never; mso-table-rspace: 9.0pt; mso-table-top: .05pt; mso-yfti-tbllook: 1184;"> <tbody><tr style="mso-yfti-firstrow: yes; mso-yfti-irow: 0; mso-yfti-lastrow: yes;">  <td style="border: solid white 1.0pt; mso-border-alt: solid white .5pt; mso-border-themecolor: background1; mso-border-themecolor: background1; padding: 0in 5.4pt 0in 5.4pt; width: 2.25in;" valign="top" width="216">  <div class="MsoNormal" style="mso-element-anchor-horizontal: column; mso-element-anchor-vertical: paragraph; mso-element-frame-hspace: 9.0pt; mso-element-left: right; mso-element-top: .05pt; mso-element-wrap: around; mso-element: frame; mso-height-rule: exactly;"><span style="font-family: "HelvNeue Light for IBM",sans-serif; font-size: 13.0pt; line-height: 107%;"><b><a href="http://ibm.co/1PBAAiU">It’s Time to Radically Overhaul Approaches to   Data Privacy</a></b> </span></div><div class="MsoNormal" style="mso-element-anchor-horizontal: column; mso-element-anchor-vertical: paragraph; mso-element-frame-hspace: 9.0pt; mso-element-left: right; mso-element-top: .05pt; mso-element-wrap: around; mso-element: frame; mso-height-rule: exactly;"><br /></div><div class="MsoNormal" style="mso-element-anchor-horizontal: column; mso-element-anchor-vertical: paragraph; mso-element-frame-hspace: 9.0pt; mso-element-left: right; mso-element-top: .05pt; mso-element-wrap: around; mso-element: frame; mso-height-rule: exactly;"><span style="font-family: "HelvNeue Light for IBM",sans-serif; font-size: 13.0pt; line-height: 107%;">– IBM Research’s Sima Nadler on the IBM Think blog.</span></div></td> </tr></tbody></table></div><div class="MsoNormal"><span style="font-family: "HelvNeue Light for IBM",sans-serif; font-size: 13.0pt; line-height: 107%;">The same doesn’t hold true in the digital world. Like Neil Armstrong’s footprints on the lunar surface, the information will not be forgotten, but rather stored — most likely in the cloud, which is often poor protected.</span></div><span style="font-family: "HelvNeue Light for IBM",sans-serif; font-size: 13.0pt; line-height: 107%; mso-ansi-language: EN-US; mso-bidi-font-family: "Times New Roman"; mso-bidi-language: AR-SA; mso-fareast-font-family: Calibri; mso-fareast-language: EN-US;">Unfortunately, this native transposition is exactly what is typically done: The identity providers issue a credential to the users containing their attributes. When authenticating with the credential, the user has no choice but to transmit the full set of credentials to the provider no matter what data is being requested. Apart from revealing more information than often necessary, users can be tracked across different service providers because of the uniqueness of their certificates. Some popular examples of such technologies that follow this approach include X.509 client certificates as well as existing government eID solutions.</span><div class="MsoNormal"><br /></div><div class="MsoNormal"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">The second approach requires the <a href="https://securityintelligence.com/to-err-is-human-why-your-users-identity-is-your-securitys-weakest-link/">identity provider</a> to be online and involved in all of its users’ authentication transactions. While the issuer can certify only those attributes that are explicitly required (which is good for privacy), there’s a privacy bottleneck in the system that can track all its users’ transactions. From a security point of view, this approach is not ideal: The identity provider needs to be highly available but also highly protected from cybercriminals, which are contradicting requirements.</span></div><div class="MsoNormal"><br /></div><div class="MsoNormal"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Neither of these approaches is completely satisfactory from a privacy and security point of view because they both require users to reveal more information than necessary. To solve this, the team at IBM Research – Zurich developed Identity Mixer. Identity Mixer uses advanced, provably secure cryptographic algorithms to authenticate users while providing only the minimally necessary information, without revealing any collateral and unintended data, to simultaneously achieve both privacy and security.</span></div><div class="MsoNormal"><br /></div><div class="MsoNormal"><b><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">How Identity Mixer Works</span></b></div><div class="MsoNormal"><br /></div><div class="MsoNormal"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">In its simplest form, Identity Mixer works similar to traditional attribute-based credentials with a few crucial differences. Each user has a single secret key but can have multiple public keys that correspond to it. In a way, this secret key is the user’s secret identity, and users can derive as many public identities from it as necessary. For example, Alice could use one identity for BestMovies and another to pay her taxes online. Each transaction gets a different public key, leaving no privacy breadcrumbs.</span></div><br /><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Alice can get an attributed certified credential such as an eID, a driver’s license or a membership card by sending one of her public keys to the issuer of the desired credential. The issuer will then sign that public key along with Alice’s attributes, which vouches for and sends the resulting credential back to Alice. Alice stores the received credential in her digital wallet, which can run on her mobile phone, computer, another preferred device or via a cloud-based wallet. This process is conceptually identical to one of the X.509 attribute certificates, except Identity Mixer uses different cryptographic algorithms.</span><br /><div class="MsoNormal"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;"></span></div><div class="MsoNormal"></div><div class="MsoNormal"></div><div class="MsoNormal"></div><div class="MsoNormal"><br /></div><div class="MsoNormal"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">When Alice is requested to authenticate to a service — let’s say she wants to stream “Alice in Wonderland” from BestMovies again — the service provider will send her a presentation policy stating the information needed to proceed. In the example, the presentation policy would state BestMovies requires Alice to prove that she’s older than 12 according to government-issued credentials and that she possesses a valid subscription credential from BestMovies. This is the second difference to traditional approaches, where users are typically asked to identify themselves in order for the service provider to evaluate whether the user satisfies the <a href="http://www.ibm.com/software/products/en/access-mgr-web?ce=ISM0484&ct=SWG&cmp=IBMSocial&cm=h&cr=Security&ccy=US">access control</a> policy.</span> </div><div class="MsoNormal"><br /></div><div class="MsoNormal"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Now, having received the presentation policy, Alice’s digital wallet will offer her a choice of which credentials she can use to satisfy it, or the wallet will point out which credentials she is missing. After Alice has selected the necessary credentials, her wallet will use a cryptographic algorithm to transform her credentials into a presentation token, which she can then send to BestMovies, the verifier<i>.</i></span></div><br /><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">This transformation is the third and probably most important difference to the traditional approaches. The presentation token consists only of the information that Alice needs and is willing to reveal instead of the full set of attributes contained in her credentials. Thus, the presentation token would just contain the attributes “User is older than 12 according to a credential issued by the government” and “User possesses a subscription credential by BestMovies with a nonexpired validity date.” The presentation token validates with the public verification key. Then the verifier can check the validity of the token using the issuer’s verification key with the cryptographic verification algorithm and learn only the information about Alice that was specified in the presentation policy — nothing more.</span> <br /><div class="MsoNormal"><br /></div><div class="MsoNormal"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Want to give <a href="http://idemixdemo.mybluemix.net/">Identity Mixer</a> a spin? You only need a Web browser to test the ultimate tool for both privacy protection and security.</span></div><div class="MsoNormal"><br /></div><div class="MsoNormal"><b><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">For More Information</span></b></div><div class="MsoNormal"><br /></div><div class="MsoNormal"><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Identity Mixer offers many more extended features than the ones explained above, including exclusive pseudonyms, multicredential tokens and designated inspectors. Learn more about the privacy-preserving characteristics and data-minimizing strategies implemented on <a href="http://www.zurich.ibm.com/idemix/features.html?ce=ISM0484&ct=SWG&cmp=IBMSocial&cm=h&cr=Security&ccy=US">Identity Mixer’s website</a>.</span></div><br /><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">You can also discover some of the developments happening in the world of identity and authentication by checking out groups such as <a href="http://www.au2eu.eu/">Authentication and Authorisation for Entrusted Unions (AU2EU)</a> and <a href="https://abc4trust.eu/">Attribute-based Credentials for Trust (ABC4Trust)</a>, both of which are changing the way organizations manage authentication and access.</span><br /><br /><span style="font-family: "helvneue light for ibm" , sans-serif; font-size: 13.0pt; line-height: 107%;">Finally, join us on Data Privacy Day, 28 January 2016 for a live <a href="http://www.research.ibm.com/labs/zurich/idemix/webinar.html">demonstration webinar</a> of IBM Identity Mixer.</span><br /><br /><span style="font-size: large;"><iframe allowfullscreen="" frameborder="0" height="315" src="https://www.youtube.com/embed/gKK1PxGu6Fo" width="560"></iframe></span>

bluemix identity mixer privacy security Data Privacy Day Webinar: Protecting Personal Information Can Be Easy

Editor’s Note: This article is by Dr. Jan Camenisch , cryptographer, IBM Research Your personal identity data was worth several hundred doll...

Data Privacy Day Webinar: Protecting Personal Information Can Be Easy

From Internship to Professor: Cryptographer Looks Back at the Birth of Identity Mixer