Podrobný výpis o publikaci

KÖPSELL, Stefan a Petr ŠVENDA. Secure Logging of Retained Data for an Anonymity Service. In M. Bessi et al. Privacy and Identity Management for Life. Berlin: Springer. s. 284-296, 15 s. ISBN 978-3-642-14281-9. doi:10.1007/978-3-642-14282-6_24. 2010.

Další formáty: BibTeX LaTeX RIS

Základní údaje
Originální název	Secure Logging of Retained Data for an Anonymity Service
Autoři	KÖPSELL, Stefan (276 Německo) a Petr ŠVENDA (203 Česká republika, garant, domácí).
Vydání	Berlin, Privacy and Identity Management for Life, od s. 284-296, 15 s. 2010.
Nakladatel	Springer

Další údaje
Originální jazyk	angličtina
Typ výsledku	Stať ve sborníku
Obor	10201 Computer sciences, information science, bioinformatics
Stát vydavatele	Česká republika
Utajení	není předmětem státního či obchodního tajemství
Forma vydání	tištěná verze "print"
Kód RIV	RIV/00216224:14330/10:00067391
Organizační jednotka	Fakulta informatiky
ISBN	978-3-642-14281-9
ISSN	1868-4238
Doi	http://dx.doi.org/10.1007/978-3-642-14282-6_24
UT WoS	000301966400024
Klíčová slova anglicky	secure logging; anonymity service; data retention
Příznaky	Mezinárodní význam, Recenzováno
Změnil	Změnil: RNDr. Pavel Šmerk, Ph.D., učo 3880. Změněno: 30. 4. 2014 04:14.

Anotace
The recently introduced legislation on data retention to aid prosecuting cyber-related crime in Europe also affects the achievable security of systems for anonymous communication on the Internet. We have analyzed the newly arising risks associated with the process of accessing and storage of the retained data and propose a secure logging system, which utilizes cryptographic smart cards, trusted timestamping servers and distributed storage. These key components will allow for controlled access to the stored log data, enforce a limited data retention period, ensure integrity of the logged data, and enable reasonably convenient response to any legitimated request of the retained data. A practical implementation of the proposed scheme was performed for the AN.ON anonymity service, but the scheme can be used for other services affected by data retention legislation.

Anotace

The recently introduced legislation on data retention to aid prosecuting cyber-related crime in Europe also affects the achievable security of systems for anonymous communication on the Internet. We have analyzed the newly arising risks associated with the process of accessing and storage of the retained data and propose a secure logging system, which utilizes cryptographic smart cards, trusted timestamping servers and distributed storage. These key components will allow for controlled access to the stored log data, enforce a limited data retention period, ensure integrity of the logged data, and enable reasonably convenient response to any legitimated request of the retained data. A practical implementation of the proposed scheme was performed for the AN.ON anonymity service, but the scheme can be used for other services affected by data retention legislation.