A privacy-enhanced access log management mechanism in SSO systems from nominative signatures. (2017)

• Record Type: Journal Article
• Authors: Nakagawa, Sanami; Nishide, Takashi; Okamoto, Eiji; Emura, Keita; Hanaoka, Goichiro; Sakai, Yusuke; Kodate, Akihisa
• Is Part Of: International journal of applied cryptography. Volume 3:Number 4(2017)
• Page Start: 394
• Page End: 406
• Publication Date: 2017
• Subjects: nominative signature -- single sign on system -- access log management -- digital signature; Data encryption (Computer science) -- Periodicals; Cryptography -- Periodicals; Computer security -- Periodicals; 652.8
• Languages: English
• ISSNs: 1753-0563

Abstract

In online services, a service provider (SP) manages access logs containing customers' buying histories. Therefore, user's information is revealed from the exposed logs if each customer can be linked. In fact, such information exposure has occurred due to the popularisation of online services. To cope with this problem, SPs may only have to delete access logs, but then no illegitimate users will be traced from the logs. In this paper, we propose a log management mechanism of solving problems. Specifically, we consider single sign on (SSO) systems, since plural access logs might be connected by one account. We construct our privacy-enhanced access log management mechanism based on the Wang-Wang-Susilo SSO system (TrustCom, 2013) which applies the Schuldt-Hanaoka nominative signature scheme (ACNS, 2011). Finally, we estimte the efficiency of the proposed system, computation time is at most just over 80 milliseconds on a PC, which seems sufficiently practical.