Trust enhanced ubiquitous payment without too much privacy loss

ABSTRACT

Computational models of trust have been proposed for use in ubicomp environments for deciding whether to allow customers to pay with an e-purse or not. In order to build trust in a customer, a means to link transactions using the same e-purse is required. Roughly, trust is a result of knowledge. As the number of transactions increases, the resulting increase in knowledge about the user of the e-purse threatens privacy due to global profiling. We present a scheme (and its prototype) that mitigates this loss of privacy without forbidding the use of trust for smoothing payment by giving the opportunity to the user to divide trust (i.e. transactions) according to context (e.g. location, user's current activity or subset of shops).

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	Martín Abadi, On SDSI's linked local name spaces, Journal of Computer Security, v.6 n.1-2, p.3-21, Sept. 1998
	2	Alfarez Abdul-Rahman , Stephen Hailes, A distributed trust model, Proceedings of the 1997 workshop on New security paradigms, p.48-60, September 23-26, 1997, Langdale, Cumbria, United Kingdom [doi>10.1145/283699.283739]
	3	Jalal Al-Muhtadi , Roy Campbell , Apu Kapadia , M. Dennis Mickunas , Seung Yi, Routing Through the Mist: Privacy Preserving Communication in Ubiquitous Computing Environments, Proceedings of the 22 nd International Conference on Distributed Computing Systems (ICDCS'02), p.74, July 02-05, 2002
	4	B. D. Brunk, "Understanding the Privacy Space", in First Monday, vol. 7, no. 10, Library of the University of Illinois, Chicago, 2002, http://www.firstmonday.org/issues/issue7_10/brunk/index.html.
	5	V. Cahill, E. Gray, J.-M. Seigneur, C. Jensen, Y. Chen, B. Shand, N. Dimmock, A. Twigg, J. Bacon, C. English, W. Wagealla, S. Terzis, P. Nixon, G. d. M. Serugendo, C. Bryce, M. Carbone, K. Krukow, and M. Nielsen, "Using Trust for Secure Collaboration in Uncertain Environments", in Pervasive Computing July-September 2003, vol. 2(3), IEEE, 2003.
	6	R. Campbell, J. Al-Muhtadi, P. Naldurg, G. Sampermane, and M. D. Mickunas, "Towards Security and Privacy for Pervasive Computing", in Proceedings of the International Symposium on Software Security, Keio University, Tokyo, Japan, 2002.
	7	D. Chaum, "Achieving Electronic Privacy", in Scientific American, vol. August, pp. 96--100, 1992.
	8	T. M. Cooley, "A Treatise on the Law of Torts", Callaghan, Chicago, 1888.
	9	Anind K. Dey, Understanding and Using Context, Personal and Ubiquitous Computing, v.5 n.1, p.4-7, February 2001 [doi>10.1007/s007790170019]
	10	John R. Douceur, The Sybil Attack, Revised Papers from the First International Workshop on Peer-to-Peer Systems, p.251-260, March 07-08, 2002
	11	Gabriele Kotsis, Performance management in ubiquitous computing environments, Proceedings of the 15th international conference on Computer communication, p.988-997, August 12-14, 2002, Mumbai, Maharashtra, India
	12	R. Hes and J. Borking, "Privacy Enhancing Technologies: The Path to Anonymity", ISBN 90 74087 12 4, 2000, http://www.cbpweb.nl/downloads_av/AV11.PDF.
	13	JAMES, "JAMES: Java Apache Mail Enterprise Server", Website, http://james.apache.org.
	14	U. Jendricke, M. Kreutzer, and A. Zugenmaier, "Pervasive Privacy with Identity Management", in Proceedings of the Workshop on Security in Ubiquitous Computing, Ubicomp 2002.
	15	Xiaodong Jiang , Jason I. Hong , James A. Landay, Approximate Information Flows: Socially-Based Modeling of Privacy in Ubiquitous Computing, Proceedings of the 4th international conference on Ubiquitous Computing, p.176-193, September 29-October 01, 2002, Göteborg, Sweden
	16	Xiaodong Jiang , James A. Landay, Modeling Privacy Control in Context-Aware Systems, IEEE Pervasive Computing, v.1 n.3, p.59-63, July 2002 [doi>10.1109/MPRV.2002.1037723]
	17	Audun Jøsang, The right type of trust for distributed systems, Proceedings of the 1996 workshop on New security paradigms, p.119-131, September 17-20, 1996, Lake Arrowhead, California, United States [doi>10.1145/304851.304877]
	18	Alfred Kobsa , Jörg Schreck, Privacy through pseudonymity in user-adaptive systems, ACM Transactions on Internet Technology (TOIT), v.3 n.2, p.149-183, May 2003 [doi>10.1145/767193.767196]
	19	F. Labalme and K. Burton, "Enhancing the Internet with Reputations", 2001, www.openprivacy.org/papers/200103-white.html.
	20	Marc Langheinrich, A Privacy Awareness System for Ubiquitous Computing Environments, Proceedings of the 4th international conference on Ubiquitous Computing, p.237-245, September 29-October 01, 2002, Göteborg, Sweden
	21	Marc Langheinrich, Privacy by Design - Principles of Privacy-Aware Ubiquitous Systems, Proceedings of the 3rd international conference on Ubiquitous Computing, p.273-291, September 30-October 02, 2001, Atlanta, Georgia, USA
	22	S. Lederer, C. Beckmann, A. K. Dey, and J. Mankoff, "Managing Personal Information Disclosure in Ubiquitous Computing Environments", Intel Research, IRB-TR-03-015, 2003, http://www.intelresearch.net/Publications/Berkeley/070920030922_139.pdf.
	23	S. Marsh, "Formalising Trust as a Computational Concept", PhD Thesis, Department of Mathematics and Computer Science, University of Stirling, 1994, http://citeseer.nj.nec.com/marsh94formalising.html.
	24	E. M. Noam, "Privacy and Self-Regulation: Markets for Electronic Privacy", 1997, http://www.ntia.doc.gov/reports/privacy/selfreg1.htm#lB.
	25	S. Pearson, "Trusted Agents that Enhance User Privacy by Self- Profiling", Technical Report HPL-2002-196, Hewlett-Packard, 2002, http://www.hpl.hp.com/techreports/2002/HPL-2002-196.html.
	26	Berry Schoenmakers, Security Aspects of the Ecash™ Payment System, State of the Art in Applied Cryptography, Course on Computer Security and Industrial Cryptography - Revised Lectures, p.338-352, June 03-06, 1997
	27	SECURE, "Secure Environments for Collaboration among Ubiquitous Roaming Entities", Website, http://secure.dsg.cs.tcd.ie.
	28	J.-M. Seigneur, C. Damsgaard Jensen, S. Farrell, E. Gray, and Y. Chen, "Towards Security Auto-configuration for Smart Appliances", in Proceedings of the Smart Objects Conference, 2003, http://www.grenoblesoc.com/proceedings03/Pdf/45-Seigneur.pdf.
	29	Brian Shand , Nathan Dimmock , Jean Bacon, Trust for Ubiquitous, Transparent Collaboration, Proceedings of the First IEEE International Conference on Pervasive Computing and Communications, p.153, March 23-26, 2003
	30	Prashant Viswanathan , Binny Gill , Roy Campbell, Security Architecture in Gaia, University of Illinois at Urbana-Champaign, Champaign, IL, 2001
	31	M. Weiser, "The Computer for the 21st Century", Scientific American, 1991.
	32	Philip R. Zimmermann, The official PGP user's guide, MIT Press, Cambridge, MA, 1995