Law enforcement and data retention in the light of an
anonymisation services

J 2011

Law enforcement and data retention in the light of an anonymisation services

KÖPSELL, Stefan a Petr ŠVENDA

Základní údaje

Originální název

Law enforcement and data retention in the light of an anonymisation services

Autoři

KÖPSELL, Stefan (276 Německo) a Petr ŠVENDA (203 Česká republika, garant, domácí)

Vydání

Masaryk University Journal of Law and Technology, Brno, Masarykova univerzita, 2011, 1802-5951

Další údaje

Jazyk

angličtina

Typ výsledku

Článek v odborném periodiku

Obor

10201 Computer sciences, information science, bioinformatics

Stát vydavatele

Česká republika

Utajení

není předmětem státního či obchodního tajemství

Odkazy

URL

Kód RIV

RIV/00216224:14330/11:00060091

Organizační jednotka

Fakulta informatiky

Klíčová slova anglicky

secure logging; anonymity service; data retention

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 22. 4. 2013 15:00, doc. RNDr. Petr Švenda, Ph.D.

Anotace

V originále

The recently introduced legislation on data retention to aid prosecuting cyber-related crime in Europe also affects the achievable security of systems for anonymous communication on the Internet. We have analysed the newly arising risks associated with the process of accessing and storage of the retained data and propose a secure logging system, which utilizes cryptographic smart cards, trusted timestamping servers and distributed storage. A practical implementation of the proposed scheme was performed for the AN.ON anonymity service, but the scheme can be used for other services affected by data retention legislation. We also discuss the practical experience from process of response to legal authorities’ requests both before and after the data retention directive was implemented. Moreover we give a general description of the legal obligations and the information about usefulness of the retained data is also provided. Derived from these obligations we give arguments reflecting challenges and obstacles for a secure and privacy respecting implementation of data retention.

Návaznosti

LA09016, projekt VaV

Název: Účast ČR v European Research Consortium for Informatics and Mathematics (ERCIM) (Akronym: ERCIM)

Investor: Ministerstvo školství, mládeže a tělovýchovy ČR, Účast ČR v European Research Consortium for Informatics and Mathematics

Citovat

KÖPSELL, Stefan a Petr ŠVENDA. Law enforcement and data retention in the light of an anonymisation services. Masaryk University Journal of Law and Technology. Brno: Masarykova univerzita, 2011, roč. 2/2011, Fall, s. 305-320. ISSN 1802-5951.

@article{984111,
   author = {Köpsell, Stefan and Švenda, Petr},
   article_location = {Brno},
   article_number = {Fall},
   keywords = {secure logging; anonymity service; data retention},
   language = {eng},
   issn = {1802-5951},
   journal = {Masaryk University Journal of Law and Technology},
   title = {Law enforcement and data retention in the light of an anonymisation services},
   url = {http://mujlt.law.muni.cz/storage/1327961485_sb_12-kopsell_svenda.pdf},
   volume = {2/2011},
   year = {2011}
}

TY  - JOUR
ID  - 984111
AU  - Köpsell, Stefan - Švenda, Petr
PY  - 2011
TI  - Law enforcement and data retention in the light of an anonymisation services
JF  - Masaryk University Journal of Law and Technology
VL  - 2/2011
IS  - Fall
SP  - 305-320
EP  - 305-320
PB  - Masarykova univerzita
SN  - 18025951
KW  - secure logging
KW  - anonymity service
KW  - data retention
UR  - http://mujlt.law.muni.cz/storage/1327961485_sb_12-kopsell_svenda.pdf
L2  - http://mujlt.law.muni.cz/storage/1327961485_sb_12-kopsell_svenda.pdf
N2  - The recently introduced legislation on data retention to aid prosecuting cyber-related crime in Europe also affects the achievable security of systems for anonymous communication on the Internet. We have analysed the newly arising risks associated with the process of accessing and storage of the retained data and propose a secure logging system, which utilizes cryptographic smart cards, trusted timestamping servers and distributed storage. A practical implementation of the proposed scheme was performed for the AN.ON anonymity service, but the scheme can be used for other services affected by data retention legislation. We also discuss the practical experience from process of response to legal authorities’ requests both before and after the data retention directive was implemented. Moreover we give a general description of the legal obligations and the information about usefulness of the retained data is also provided. Derived from these obligations we give arguments reflecting challenges and obstacles for a secure and privacy respecting implementation of data retention.
ER  -

KÖPSELL, Stefan a Petr ŠVENDA. Law enforcement and data retention in the light of an anonymisation services. \textit{Masaryk University Journal of Law and Technology}. Brno: Masarykova univerzita, 2011, roč.~2/2011, Fall, s.~305-320. ISSN~1802-5951.

Podrobný výpis o publikaci