Deep Dive into U-Prove Cryptographic Protocols
- Posted: Mar 02, 2010 at 8:12 AM
- 35,875 Views
- 5 Comments
Download
How do I download the videos?
- To download, right click the file type you would like and pick “Save target as…” or “Save link as…”
Why should I download videos from Channel9?
- It's an easy way to save the videos you like locally.
- You can save the videos in order to watch them offline.
- If all you want is to hear the audio, you can download the MP3!
Which version should I choose?
- If you want to view the video on your PC, Xbox or Media Center, download the High Quality WMV file (this is the highest quality version we have available).
- If you'd like a lower bitrate version, to reduce the download time or cost, then choose the Medium Quality WMV file.
- If you have a Zune, WP7, iPhone, iPad, or iPod device, choose the low or medium MP4 file.
- If you just want to hear the audio of the video, choose the MP3 file.
Right click “Save as…”
- High Quality WMV (PC, Xbox, MCE)
- MP3 (Audio only)
- MP4 (iPod, Zune HD)
- Mid Quality WMV (Lo-band, Mobile)
In this third and last IdElement installment on the U-Prove CTP series, we once again feature Dr. Stefan Brands, who spends an hour describing the crypto behind U-Prove. Wrapping your head around all the mathematical details may require some effort, but
if you are interested in this space it is totally worth it. By the end of the video, you will have a clear understanding of how U-Prove works and how it can truly reconcile security and privacy requirements.
If you want to go even deeper, Stefan's book on the topic is freely available on line.
Get the CTP
here Get the
C# edition Get the Java edition
If you want to go even deeper, Stefan's book on the topic is freely available on line.
Comments Closed
Comments have been closed since this content was published more than 30 days ago, but if you'd like to continue the conversation,
please create a new thread in our Forums,
or
Contact Us and let us know.
Follow the Discussion
What does prevent the cooperation of the RP and IP to track the user?
The IP could store who requested the token which resulted in {H}sign and report it back to the RP. What am I missing?
From my understanding they can't cooperate because IP & RP don't know about each other
Well, the RP must know the IP:
1. to verify the signature
2. to be sure that is a well known authority (equivalent of a CA in classical crypto)
From what I understand is the "signature" part that handles this and it is not clear if H is what is actually disclosed to RP or not. If it is I don't see how RP and IP cannot cooperate, but again I might be missing somethig.
He didn't explain the whole process, so I'm guessing that's why the confusion. He did say that the signature process involves a collaboration between the IP and the user. As he mentioned in the video, he was not going to explain this new signature system, but it is different from the standard PKI system. I am guessing that H and it's signature are generated in a collaborative process between user and IP in a way that does not disclose H to the IP. If H is not disclosed to the IP, but only to user and relying party, then there can be no collaboration, even if IP=RP.
Please correct me if someone else knows more.
Indeed, U-Prove tokens are obtained using an advanced issuance protocol that results in “unlinkable” public key and issuer signature (these values are randomized by the user in the process). Since the issuer never sees these values, they cannot be used to track the user, even in collusion with the relying party (even if the issuer _is_ the relying party).
The video refers to our first U-Prove CTP. We recently released an update to the CTP, using the same architecture model but with a different client implementation. Details can be found on http://www.microsoft.com/u-prove; I encourage you to take a look at the white paper and the technology overview for more information.
Remove this comment
Remove this thread
close