Paper 2009/481

PPS: Privacy Preserving Statistics using RFID Tags

Erik-Oliver Blass, Kaoutar Elkhiyaoui, and Refik Molva

Abstract

As RFID applications are entering our daily life, many new security and privacy challenges arise. However, current research in RFID security focuses mainly on simple authentication and privacy-preserving identication. In this paper, we discuss the possibility of widening the scope of RFID security and privacy by introducing a new application scenario. The suggested application consists of computing statistics on private properties of individuals stored in RFID tags. The main requirement is to compute global statistics while preserving the privacy of individual readings. PPS assures the privacy of properties stored in each tag through the combination of homomorphic encryption and aggregation at the readers. Re-encryption is used to prevent tracking of users. The readers scan tags and forward the aggregate of their encrypted readings to the back-end server. The back-end server then decrypts the aggregates it receives and updates the global statistics accordingly. PPS is provably privacypreserving. Moreover, tags can be very simple since they are not required to perform any kind of computation, but only to store data.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Published elsewhere. Unknown where it was published
Keywords
RFIDprivacyunlinkabilitystatistics
Contact author(s)
erik-oliver blass @ eurecom fr
History
2011-02-04: last of 4 revisions
2009-09-29: received
See all versions
Short URL
https://ia.cr/2009/481
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2009/481,
      author = {Erik-Oliver Blass and Kaoutar Elkhiyaoui and Refik Molva},
      title = {{PPS}: Privacy Preserving Statistics using {RFID} Tags},
      howpublished = {Cryptology {ePrint} Archive, Paper 2009/481},
      year = {2009},
      url = {https://eprint.iacr.org/2009/481}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.