Minimal Information Disclosure in a Centralized Authorization System

✍ Scribed by Lavinia Egidi; Giovanni Porcelli

• Book ID: 104444968
• Publisher: Elsevier Science
• Year: 2003
• Tongue: English
• Weight: 992 KB
• Volume: 85
• Category: Article
• ISSN: 1571-0661
• DOI: 10.1016/s1571-0661(04)80686-8

✦ Synopsis

We propose a centralized authorization system, in which user authorizations cannot be retrieved in a computationally feasible way without cooperation of user, authorization server and end-servers. A certain level of anonymity is also guaranteed to the users. The security of the protocol is based on standard cryptographic assumptions. We show that the complexity of the protocol compares to that of the SSL handshake protocol.