IFIP Advances in Information and Communication Technology 298

Transcription

1 IFIP Advances in Information and Communication Technology 298

2 IFIP The International Federation for Information Processing IFIP was founded in 1960 under the auspices of UNESCO, following the First World Computer Congress held in Paris the previous year. An umbrella organization for societies working in information processing, IFIP s aim is two-fold: to support information processing within its member countries and to encourage technology transfer to developing nations. As its mission statement clearly states, IFIP s mission is to be the leading, truly international, apolitical organization which encourages and assists in the development, exploitation and application of information technology for the benefit of all people. IFIP is a non-profitmaking organization, run almost solely by 2500 volunteers. It operates through a number of technical committees, which organize events and publications. IFIP s events range from an international congress to local seminars, but the most important are: The IFIP World Computer Congress, held every second year; Open conferences; Working conferences. The flagship event is the IFIP World Computer Congress, at which both invited and contributed papers are presented. Contributed papers are rigorously refereed and the rejection rate is high. As with the Congress, participation in the open conferences is open to all and papers may be invited or submitted. Again, submitted papers are stringently refereed. The working conferences are structured differently. They are usually run by a working group and attendance is small and by invitation only. Their purpose is to create an atmosphere conducive to innovation and development. Refereeing is less rigorous and papers are subjected to extensive group discussion. Publications arising from IFIP events vary. The papers presented at the IFIP World Computer Congress and at open conferences are published as conference proceedings, while the results of the working conferences are often published as collections of selected and edited papers. Any national society whose primary activity is in information may apply to become a full member of IFIP, although full membership is restricted to one society per country. Full members are entitled to vote at the annual General Assembly, National societies preferring a less committed involvement may apply for associate or corresponding membership. Associate members enjoy the same benefits as full members, but without voting rights. Corresponding members are not represented in IFIP bodies. Affiliated membership is open to non-national societies, and individual and honorary membership schemes are also offered.

3 Vashek Matyáš Simone Fischer-Hübner Daniel Cvrček Petr Švenda (Eds.) The Future of Identity in the Information Society 4th IFIP WG 9.2, 9.6/11.6, 11.7/ FIDIS International Summer School Brno, Czech Republic, September 1-7, 2008 Revised Selected Papers 13

4 Volume Editors Vashek Matyáš Petr Švenda Masaryk University, Faculty of Informatics Botanicka 68a, Brno , Czech Republic {matyas, Simone Fischer-Hübner Karlstad University, Department of Computer Science Universitetsgatan 2, Karlstad, Sweden Daniel Cvrček Brno University of Technology Bozetechova 2, Brno , Czech Republic Library of Congress Control Number: CR Subject Classification (1998): D.4.6, K.6.5, C.2.0, H.2.7, K.4.4 ISSN ISBN Springer Berlin Heidelberg New York ISBN Springer Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publication or parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965, in its current version, and permission for use must always be obtained from Springer. Violations are liable to prosecution under the German Copyright Law. springer.com International Federation for Information Processing 2009 Printed in Germany Typesetting: Camera-ready by author, data conversion by Scientific Publishing Services, Chennai, India Printed on acid-free paper SPIN: /

5 Preface What constitutes an identity, how do new technologies affect identity, how do we manage identities in a globally networked information society? The increasing diversity of information and communication technologies and their equally wide range of usage in personal, professional and official capacities raise challenging questions of identity in a variety of contexts. The aim of the IFIP/FIDIS Summer Schools has been to encourage young academic and industry entrants to share their own ideas about privacy and identity management and to build up collegial relationships with others. As such, the Summer Schools have been introducing participants to the social implications of information technology through the process of informed discussion. The 4th International Summer School took place in Brno, Czech Republic, during September 1 7, It was organized by IFIP (International Federation for Information Processing) working groups 9.2 (Social Accountability), 9.6/11.7 (IT Misuse and the Law) and 11.6 (Identity Management) in cooperation with the EU FP6 Network of Excellence FIDIS and Masaryk University in Brno. The focus of the event was on security and privacy issues in the Internet environment, and aspects of identity management in relation to current and future technologies in a variety of contexts. Following the holistic approach advocated by the involved IFIP working groups and by the FIDIS Network of Excellence, a diverse group of participants ranging from young doctoral students to leading researchers in the field engaged in discussions, dialogues and debates in an informal and supportive setting. The interdisciplinary, and international, emphasis of the Summer School allowed for a broader understanding of the issues in the technical and social spheres. On the first five days (September 1 5), all topical sessions started with introductory lectures by invited speakers, followed by parallel workshops and seminars in the afternoons. The workshops consisted of short presentations based on the contributions submitted by participating PhD students, followed by active discussions. The weekend program (September 6 7) featured practical hands-on security and privacy workshops, namely, a local version of the Capture The Flag exercise. Contributions combining technical, social, ethical or legal perspectives were solicited. Keynote speeches provided the focus for the theme of the Summer School Historic Perspectives on Software Security and Privacy, Wireless Security and Privacy, Multilateral Security for Reputation Systems, Ambient Law, epassport Security, Virtual Communities and Social and Legal Aspects, Mobile Identity Management, Security Standards and Privacy Management, Mass Surveillance and Data Retention as well as Anonymity and Censor-Free Publishing and the contributions from participants enhanced the ideas generated by the keynote speeches. The Summer School was a very successful event. More than 50 delegates from 20 countries actively participated. We succeeded in initiating intensive discussions between PhD students and senior acclaimed researchers from different disciplines.

6 VI Preface These proceedings include both keynote papers and submitted papers that were accepted by the Program Committee, and presented at the Summer School. The review process consisted of two steps. In the first step, contributions for presentation at the Summer School were selected based on reviews of submitted short papers by the Summer School Program Committee. The second step took place after the Summer School, when the authors had an opportunity to submit their final full papers addressing discussions at the Summer School. The submissions were reviewed again, by three reviewers each, and those included in these proceedings were carefully selected by the International Summer School Program Committee and by additional reviewers according to common quality criteria. It is our pleasure to thank the members of the Program Committee, the additional reviewers, the members of the Organizing Committee as well as all the speakers. Without their work and dedication, this Summer School would not have been possible. Last but not least, we owe special thanks to Microsoft Research, FIDIS and IFIP for their financial support. February 2009 Vashek Matyáš Simone Fischer-Hübner Daniel Cvrček Petr Švenda

7 The Future of Identity in the Information Society - Challenges for Privacy and Security, FIDIS/IFIP Internet Security and Privacy Summer School September 1 7, 2008, Brno, Czech Republic General Chair Vashek Matyáš Program Committee Co-chairs Simone Fischer-Hübner Daniel Cvrček Karlstad University, Sweden University of Cambridge, UK Program Committee Geoff Busby David-Olivier Jaquet-Chiffelle George Danezis Penny Duquenoy Mark Gasson Dieter Gollmann Marit Hansen Dogan Kesdogan Kai Kimppa Mathias Klang Elisabeth de Leeuw Ronald Leenes Marc van Lieshout Javier Lopez Leonardo Martucci Steven Murdoch Lexi Pimenidis Kai Rannenberg Zdeněk Říha Jozef Vyskoč Independent Consultant, UK Berne University of Applied Sciences, Switzerland Microsoft Research Cambridge, UK Middlesex University, UK, IFIP WG 9.2 Chair Reading University, UK Technische Universität Hamburg-Harburg, Germany Independent Center for Privacy Protection, Kiel, Germany Siegen University, Germany University of Turku, Finland IT University/University of Göteborg, Sweden Ordina, The Netherlands, IFIP WG 11.6 Chair Tilburg University, The Netherlands TNO, The Netherlands University of Malaga, Spain Karlstad University, Sweden University of Cambridge, UK Siegen University, Germany Goethe University Frankfurt, Germany, IFIP TC11 Chair Masaryk University, Brno, Czech Republic VaF, Slovakia

8 VIII Organization Diane Whitehouse Louise Yngström Albin Zuccato The Castlegate Consultancy, UK Stockholm University/KTH, Sweden TeliaSonera, Sweden Additional Reviewer Rose Mharie Åhlfeld Skövde University, Sweden Local Organizing Committee Petr Švenda (Chair) Jan Krhovják Marek Kumpošt Václav Lorenc Kamil Malinka Andriy Stetsko Jiří Kůr Brno University of Technology, Czech Republic

9 Table of Contents Historic Perspective Lessons Learned or Not? Software Security The Dangers of Abstraction... 1 Dieter Gollmann History of Privacy Jan Holvast Information, Ethics, Identifiers Applied Ethics and ehealth: Principles, Identity, and RFID Diane Whitehouse and Penny Duquenoy Identity Management Systems in Healthcare: The Issue of Patient Identifiers Els Soenens A Survey on Transparency Tools for Enhancing Privacy Hans Hedbom Privacy Issues When Spiders Bite: The Use, Misuse, and Unintended Consequences of Silent Information Thomas P. Keenan Data Retention and Anonymity Services: Introducing a New Class of Realistic Adversary Models Stefan Berthold, Rainer Böhme, and Stefan Köpsell A Survey on Non-transferable Anonymous Credentials Sebastian Pape Wireless Security and Privacy Security of Wireless Communication Dan Cvrček Enhancing Multilateral Security in and by Reputation Systems Sandra Steinbrecher

10 X Table of Contents Challenges of Emerging Technologies An Overview of Electronic Passport Security Features Zdeněk Říha Location Privacy Issues in Wireless Sensor Networks JiříKůr and Andriy Stetsko Privacy-Enhanced and Anonymous Applications Design and Analysis of a Practical E-Voting Protocol Marián Novotný Business and Organisational Perspectives Comparing Identity Management Frameworks in a Business Context Jaap-Henk Hoepman, Rieks Joosten, and Johanneke Siljee Security Policy Satisfiability and Failure Resilience in Workflows Meghna Lowalekar, Ritesh Kumar Tiwari, and Kamalakar Karlapalem Privacy Awareness and Individual Control User Control Problems and Taking User Empowerment Further Rowena Rodrigues Privacy Awareness: A Means to Solve the Privacy Paradox? Stefanie Pötzsch Testing Privacy Awareness Mike Bergmann The Relationship between Data Protection Legislation and Information Security Related Standards Martin Meints Anonymity Attacks and Analysis Investigating Anonymity in Group Based Anonymous Authentication Daniel Slamanig and Christian Stingl Author Index