[Paper Review] Safe Deals Between Strangers

H. M. Gladney|ArXiv.org|Aug 17, 1999

User Authentication and Security Systems12 references4 citations

TL;DR

This paper proposes a cryptographic protocol enabling secure, automated access control for servers interacting with unknown or anonymous clients (strangers), ensuring compliance with service agreements while preserving consumer privacy. It uses token-based authentication and access control mechanisms that scale across large networks and resist statistical inference attacks by consortia, supporting applications in e-business, digital libraries, and secure supply chains.

ABSTRACT

E-business, information serving, and ubiquitous computing will create heavy request traffic from strangers or even incognitos. Such requests must be managed automatically. Two ways of doing this are well known: giving every incognito consumer the same treatment, and rendering service in return for money. However, different behavior will be often wanted, e.g., for a university library with different access policies for undergraduates, graduate students, faculty, alumni, citizens of the same state, and everyone else. For a data or process server contacted by client machines on behalf of users not previously known, we show how to provide reliable automatic access administration conforming to service agreements. Implementations scale well from very small collections of consumers and producers to immense client/server networks. Servers can deliver information, effect state changes, and control external equipment. Consumer privacy is easily addressed by the same protocol. We support consumer privacy, but allow servers to deny their resources to incognitos. A protocol variant even protects against statistical attacks by consortia of service organizations. One e-commerce application would put the consumer's tokens on a smart card whose readers are in vending kiosks. In e-business we can simplify supply chain administration. Our method can also be used in sensitive networks without introducing new security loopholes.

Motivation & Objective

• To address the challenge of managing automated service requests from unknown or anonymous users in e-business and distributed systems.
• To enable reliable, policy-compliant access administration without prior authentication or user identification.
• To preserve consumer privacy while allowing servers to deny access to unauthorized incognitos.
• To scale effectively from small systems to massive client/server networks.
• To protect against statistical attacks by coordinated groups of service providers.

Proposed method

• The protocol uses cryptographic tokens issued to clients, which are verified by servers to enforce access policies without revealing user identity.
• Access control is enforced based on predefined service agreements, with policies expressed as access rules tied to tokens.
• Servers can perform state changes, deliver data, or control external devices based on token validity and policy compliance.
• Consumer privacy is maintained by ensuring no persistent identifiers are exposed during transactions.
• A variant protocol introduces randomization and obfuscation to prevent statistical correlation across multiple service requests by consortia.
• The system is designed to integrate with existing infrastructure, such as smart cards for token storage, and supports deployment in sensitive networks without introducing new vulnerabilities.

Experimental results

Research questions

• RQ1 How can servers securely and automatically enforce access policies for anonymous clients without prior authentication?
• RQ2 What mechanisms can preserve consumer privacy while still allowing servers to deny access to unauthorized users?
• RQ3 How can the protocol scale efficiently across large, distributed networks with diverse client populations?
• RQ4 In what ways can the protocol resist statistical analysis by coordinated service providers attempting to re-identify users?
• RQ5 How can the system be integrated into existing e-commerce and digital library infrastructures with minimal security risk?

Key findings

• The protocol enables reliable, automated access control for anonymous users based on service agreements, without requiring persistent user identifiers.
• Consumer privacy is preserved because no identifying information is revealed during transactions, and servers can deny access to incognitos.
• The system scales effectively from small deployments to large-scale client/server networks, supporting diverse services including data delivery and external device control.
• A protocol variant resists statistical attacks by consortia of service organizations through obfuscation and randomized token handling.
• The approach can be deployed in sensitive environments without introducing new security vulnerabilities, as validated through cryptographic design principles.
• The method supports practical applications such as smart card-based access in vending kiosks and streamlined supply chain administration in e-commerce.