DP5: A Private Presence Service
DP5: A Private Presence Service
复制标题
DOI：
10.1515/popets-2015-0008
复制
发表时间：
2015-06
影响因子：
--
通讯作者：
N. Borisov;G. Danezis;I. Goldberg
中科院分区：
文献类型：
--
作者：
N. Borisov;G. Danezis;I. Goldberg
社交应用的抽象用户喜欢在他们的朋友在线时得到通知。通常情况下，这是由一个中央服务器跟踪谁在线和离线，以及所有用户的包含敏感信息的“好友列表”。我们提出了一种密码服务DP5，它以一种隐私友好的方式实现了在线存在指示。DP5允许客户注册他们的在线状态，并查询他们的朋友列表是否存在，同时对此列表保密。除了在线状态，还支持高完整性状态更新，以促进密钥更新和会合协议。虽然基础设施服务是DP5运行所必需的，但它们的设计不需要任何长期机密，并在受到危害的情况下提供完美的前向机密。我们对协议的不可区分性进行了安全性论证，并对其可扩展性和性能进行了评估。
Abstract Users of social applications like to be notified when their friends are online. Typically, this is done by a central server keeping track of who is online and offline, as well as of all of the users’ “buddy lists”, which contain sensitive information. We present DP5, a cryptographic service that implements online presence indication in a privacy-friendly way. DP5 allows clients to register their online presence and query the presence of their list of friends while keeping this list secret. Besides presence, high-integrity status updates are supported, to facilitate key update and rendezvous protocols. While infrastructure services are required for DP5 to operate, they are designed to not require any long-term secrets and provide perfect forward secrecy in case of compromise. We provide security arguments for the indistinguishability properties of the protocol, as well as an evaluation of its scalability and performance.