Privacy enhanced identity scheme using an un-linkable identifier
A privacy enhanced identity scheme that may use public and private key cryptography to selectively distribute attributes of a token holder to a relying party. A challenge message {Rnonce, RID}, where Rnonce is a reader nonce and RID is a reader identifier. Methods may also include, responsive to the challenge message, sending a response message including at least an encrypted private token identifier TID and a session key k. In response to a challenge from a reader. The token sends a message that includes token identifier that is un-linkable to other identifiers sent from the same token.
1. A method for sending an un-linkable identifier from a token, comprising:
sending a Challenge message to a token, wherein the Challenge={Rnonce, RID}, where Rnonce is a reader nonce and RID is a reader identifier; and
responsive to the challenge message, receiving a Response message, wherein the Response={signature(H(Tnonce, Rnonce, RID)), Tnonce, XID}, where signature is a digital signature using a private key of the token, H is a hash function, Tnonce is a token nonce and XID is an unlinkable identifier of the token.
2. The method of claim 1 , wherein the XID={E (k, P), E (TID, k)}, where TID is a token identifier, k is a session key, P is a public key of the registry, E(TID,k) is the TID encrypted using the session key k, and E(k,P) is the session key k encrypted using the public key P.
3. The method of claim 2 , further including sending the response message to a registry.
4. The method of claim 3 , further including decrypting the session key k at the registry using a registry private key Q and decrypting the TID using the decrypted session key k.
5. The method of claim 4 , further including using a key based upon the decrypted TID in a database query to obtain information registered to the TID.
6. The method of claim 3 , wherein the message sent to the registry further includes {Rnonce, RID}.
7. The method of claim 6 , further including verifying the RID by checking signature (H(Tnonce, Rnonce, RID)).
8. The method of claim 7 , further comprising using a key based upon the verified RID as in a database query to determine which information corresponding to the TID a relying party is authorized to receive.
9. The method of claim 1 , wherein the response includes a one-time password (OTP).
10. The method of claim 1 , wherein the response includes biometric data.
11. A method for sending an un-linkable identifier from a token, comprising:
sending a Challenge message to a token, wherein the Challenge={Rnonce, RID}, where Rnonce is a reader nonce and RID is a reader identifier;
responsive to the challenge message, sending a Response message including at least an encrypted private token identifier TID and a session key;
verifying the RID; and
querying a database using a key based on the verified RID to identify information corresponding to the TID that a relying third party is authorized to receive.
12. The method of claim 11 , further including sending the response message to a registry.
13. The method of claim 12 , further including decrypting the session key k at the registry using a registry private key Q and decrypting the TID using the decrypted session key k.
14. The method of claim 13 , further including using a key based upon the decrypted TID in a database query to obtain information registered to the TID.
15. The method of claim 12 , wherein the message sent to the registry further includes {Rnonce, RID}.
16. The method of claim 11 , wherein the response includes a one-time password (OTP).
17. The method of claim 11 , wherein the response includes biometric data.
18. A method for providing information about a token holder to a relying party, comprising:
receiving a token of the token holder at a reader of the relying party;
sending a challenge message to the token, the challenge message including an attribute list identifying at least one attribute of the token holder requested by the relying party;
receiving from the token a response including an un-linkable identifier;
sending a request to an identity registry distinct from the relying party and from the token holder, the request including the token response and the attribute list; and
receiving a registry response from the identity registry, the registry response including at least one of:
the at least one attribute;
an error message;
an indication that the at least one attribute is not available; and
an indication that the relying party is not authorized to access the at least one attribute.
19. The method of claim 18 , wherein the un-linkable identifier is generated from a combination of:
a token identifier encrypted with a session key; and
the session key encrypted with a public key of the identity registry.
20. The method of claim 18 , wherein the token is an identification card.