CT-ISG: Crypto Algorithms for an Integrated Approach to Conditional, Revocable and Traceable Anonymity

CT-ISG：用于有条件、可撤销和可追踪匿名集成方法的加密算法

• 批准号: 0831293
• 负责人: Anna Lysyanskaya
• 金额: $ 30万
• 依托单位: Brown University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2012-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831293&HistoricalAwards=false
• 关键词: CT; ISG; Crypto; Algorithms; Integrated

As records of individuals' activities become increasingly computerized and linked, privacy becomes an ever more challenging problem. It is especially challenging when legitimate security needs require the ability to link different transactions and even obtain details about the individuals involved. The focus of this project is on cryptographic technologies that achieve a compromise: transaction records should be anonymous until special circumstances (such as wrong-doing on the part of a particular individual, or an emergency that requires special measures) arise. One wants to specify these circumstances before a transaction takes place, so an individual can choose not to participate in a transaction that does not provide him or her with sufficient privacy guarantees.The project considers several trade-offs between anonymity and accountability. Conditional anonymity/conditional disclosure means that an individual user is anonymous until her activities violate a certain condition, at which point some piece of information about her becomes known. Revocable anonymity means that a user is anonymous to all but a special anonymity-revoking trustee that only becomes involved in case of emergency. Traceable anonymity means that, under special circumstances, it is possible to quickly trace all of a particular user's transactions; this can be a form of conditional anonymity where the circumstances are due to the user's misbehavior or revocable anonymity where a trustee decides when to run the trace algorithm. This project investigates techniques that allow one to develop and enforce anonymity contracts between individuals and organizations that spell out what can become known about the individual user and under what circumstances.

随着个人活动记录日益电脑化和相互联系，隐私成为一个更具挑战性的问题。当合法的安全需求要求能够链接不同的交易，甚至获得有关所涉及的个人的详细信息时，这尤其具有挑战性。这个项目的重点是实现妥协的加密技术：交易记录应该是匿名的，直到特殊情况（例如特定个人的不法行为，或者需要采取特殊措施的紧急情况）出现。人们希望在交易发生之前指定这些情况，因此个人可以选择不参与没有为他或她提供足够隐私保证的交易。该项目考虑了匿名和问责制之间的几种权衡。条件匿名/条件披露意味着个人用户是匿名的，直到她的活动违反了一定的条件，此时关于她的一些信息就会被知道。可撤销匿名意味着用户对所有人都是匿名的，除了一个特殊的撤销匿名的受托人，该受托人只在紧急情况下参与。可追踪的匿名性意味着，在特殊情况下，可以快速追踪特定用户的所有交易；这可以是一种有条件匿名的形式，这种情况是由于用户的不当行为造成的，也可以是可撤销匿名的形式，由受托人决定何时运行跟踪算法。这个项目研究了一些技术，这些技术允许人们在个人和组织之间开发和执行匿名合同，这些合同详细说明了个人用户的哪些信息以及在什么情况下可以被知道。