KÖPSELL, Stefan and Petr ŠVENDA. Secure Logging of Retained Data for an Anonymity Service. In M. Bessi et al. Privacy and Identity Management for Life. Berlin: Springer, 2010, p. 284-296, 15 pp. ISBN 978-3-642-14281-9. Available from: https://dx.doi.org/10.1007/978-3-642-14282-6_24.
Other formats:   BibTeX LaTeX RIS
Basic information
Original name Secure Logging of Retained Data for an Anonymity Service
Authors KÖPSELL, Stefan (276 Germany) and Petr ŠVENDA (203 Czech Republic, guarantor, belonging to the institution).
Edition Berlin, Privacy and Identity Management for Life, p. 284-296, 15 pp. 2010.
Publisher Springer
Other information
Original language English
Type of outcome Proceedings paper
Field of Study 10201 Computer sciences, information science, bioinformatics
Country of publisher Czech Republic
Confidentiality degree is not subject to a state or trade secret
Publication form printed version "print"
RIV identification code RIV/00216224:14330/10:00067391
Organization unit Faculty of Informatics
ISBN 978-3-642-14281-9
ISSN 1868-4238
Doi http://dx.doi.org/10.1007/978-3-642-14282-6_24
UT WoS 000301966400024
Keywords in English secure logging; anonymity service; data retention
Tags International impact, Reviewed
Changed by Changed by: RNDr. Pavel Šmerk, Ph.D., učo 3880. Changed: 30/4/2014 04:14.
Abstract
The recently introduced legislation on data retention to aid prosecuting cyber-related crime in Europe also affects the achievable security of systems for anonymous communication on the Internet. We have analyzed the newly arising risks associated with the process of accessing and storage of the retained data and propose a secure logging system, which utilizes cryptographic smart cards, trusted timestamping servers and distributed storage. These key components will allow for controlled access to the stored log data, enforce a limited data retention period, ensure integrity of the logged data, and enable reasonably convenient response to any legitimated request of the retained data. A practical implementation of the proposed scheme was performed for the AN.ON anonymity service, but the scheme can be used for other services affected by data retention legislation.
PrintDisplayed: 18/10/2024 00:46