CW 441

Steven Gevers and Bart De Decker
Automating privacy friendly information disclosure

Abstract

When using electronic services, people are often asked to provide information. Nowadays, this information is typically provided by typing it in using a keyboard. This is, however, an unreliable and insecure way for both user and service provider. The service provider has no guarantee about the correctness of the data. Also, it is very easy to claim being someone else. This report introduces a privacy agent. The privacy agent is able to disclose data, certified data and credentials to a service provider in an automatic way. The privacy agent makes information disclosure much more secure. By making use of credentials, service providers are assured of the correctness of the information. Users are protected against theft and fraud. Privacy is an important aspect in the report. Users have a set of privacy preferences which the privacy agent will try to match with the privacy policy of the service provider before disclosing information.

report.pdf (667K) / mailto: S. Gevers