Cryptology ePrint Archive: Report 2015/237
Fast Revocation of Attribute-Based Credentials for Both Users and Verifiers
Wouter Lueks and Gergely Alpár and Jaap-Henk Hoepman and Pim Vullers
Abstract: Attribute-based credentials allow a user to prove properties about herself anonymously. Revoking such credentials, which requires singling them out, is hard because it is at odds with anonymity. All revocation schemes proposed to date either sacrifice anonymity altogether, require the parties to be online, or put high load on the user or the verifier. As a result, these schemes are either too complicated for low-powered devices like smart cards or they do not scale. We propose a new revocation scheme that has a very low computational cost for users and verifiers, and does not require users to process updates. We trade only a limited, but well-defined, amount of anonymity to make the first practical revocation scheme that is efficient at large scales and fast enough for smart cards.
Category / Keywords: cryptographic protocols / revocation, privacy, anonymous credentials, attribute-based credentials
Original Publication (with major differences): IFIP SEC
Date: received 12 Mar 2015, last revised 4 Nov 2015
Contact author: lueks at cs ru nl
Available format(s): PDF | BibTeX Citation
Note: Updated/added some references. Not using QR(n) anymore.
Version: 20151104:160831 (All versions of this report)
Short URL: ia.cr/2015/237
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]