Anna Squicciarini, "Privacy and anonymity in Trust Negotiations"."

CERIAS Security Seminar Podcast

Trust negotiation is an emerging approach for establishing trust in open systems, where sensitive interactions may often occur between entities with no prior knowledge of each other. Although several proposals today exist of systems for the management of trust negotiation, none of them provides a comprehensive approach to the problem of privacy preservation. Trust negotiation systems, however, by their very nature may represent a threat to privacy. Credentials, exchanged during negotiations, often contain sensitive personal information that thus needs to be selectively released. As we believe that trust negotiation systems must effectively address privacy issues to be widely acceptable, we have investigated privacy in the context of trust negotiations. In this talk, we will propose the main results obtained so far in the area of trust negotiation as part of the Ph.D. activity. We propose a set of privacy preserving features to be included in any trust negotiation system, such as the support for the P3P standard, as well as a number of innovative features such as a novel format to encode digital credentials specifically designed for preserving privacy. Finally, we illustrate techniques for supporting anonymous trust negotiations as part of a privacy-preserving trust negotiations, to carry on trust negotiations without revealing identity related information.