Method and Apparatus for Anonymous Authentication on Trust in Social Networking

• US 20160156593A1
• Filed: 07/01/2013
• Published: 06/02/2016
• Est. Priority Date: 07/01/2013
• Status: Abandoned Application

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Yan, Zheng
• Application Number:
  US14/900,349
• Publication Number:
  US 20160156593A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD

Abstract

A method for anonymous trust authentication may comprise: issuing trust information to a first node from a network entity, wherein the trust information indicates a trust evaluation for the first node; distributing a trust list to a plurality of nodes comprising at least the first node and a second node, wherein the trust list is associated with the trust evaluation for the first node, and wherein the trust information and the trust list are used for an anonymous trust authentication between the first node and the second node.

Claims

1-60. -60. (canceled)

61. An apparatus, comprising:

at least one processor; and

at least one memory comprising computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

issue trust information to a first node from the apparatus, wherein the trust information indicates a trust evaluation for the first node;

distribute a trust list to a plurality of nodes comprising at least the first node and a second node, wherein the trust list is associated with the trust evaluation for the first node, and

wherein the trust information and the trust list are used for an anonymous trust authentication between the first node and the second node.

62. The apparatus according to claim 61, wherein the apparatus further comprises:

a trusted server with which the plurality of nodes are registered, or a third node as an authorized party registered with the trusted server.

63. The apparatus according to claim 61, wherein the trust evaluation for the first node is associated with an authentication code and a trust value of the first node.

64. The apparatus according to claim 63, wherein the trust value of the first node is evaluated by the apparatus independently, or by the apparatus and one or more other apparatuses cooperatively.

65. The apparatus according to claim 61, wherein the trust list comprises an aggregated list of trust evaluations certified by the apparatus.

66. The apparatus according to claim 65, wherein the trust evaluations in the aggregated list are ordered based at least in part on trust values associated with the trust evaluations.

67. The apparatus according to claim 65, wherein the trust evaluations in the aggregated list are associated with trust values within a range specified for the apparatus.

68. An apparatus, comprising:

at least one processor; and

at least one memory comprising computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

obtain respective trust information from one or more network entities, wherein the trust information from a corresponding network entity indicates a trust evaluation for the apparatus by the corresponding network entity;

generate security information for the apparatus based at least in part on the respective trust information; and

send a message with authentication information to another apparatus from the apparatus, wherein the authentication information is associated with the security information and used for an anonymous trust authentication between the apparatus and the another apparatus.

69. The apparatus according to claim 68, wherein the one or more network entities further comprise:

a trusted server with which the apparatus and the another apparatus are registered, at least one further apparatus as an authorized party registered with the trusted server, or a combination thereof.

70. The apparatus according to claim 68, wherein the trust evaluation for the apparatus is associated with an authentication code and a trust value of the apparatus.

71. The apparatus according to claim 68, wherein the security information comprises a pair of one-off public and private keys of the apparatus;

and wherein the authentication information is associated with;

the one-off public key of the apparatus, and a signature generated by using the one-off private key of the apparatus.

72. The apparatus according to claim 68, wherein the security information comprises multiple pairs of one-off public and private keys of the apparatus;

and wherein the authentication information is associated with;

the one-off public keys of the apparatus, and a signature aggregated from multiple signatures which are generated by using the one-off private keys of the apparatus.

73. An apparatus, comprising:

at least one processor; and

at least one memory comprising computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

obtain, from one or more network entities, respective trust lists of which at least one trust list is associated with a trust evaluation for another apparatus;

receive a message with authentication information at the apparatus from the another apparatus, wherein the authentication information is associated with at least one trust evaluation for the another apparatus; and

perform an anonymous trust authentication between the apparatus and the another apparatus based at least in part on the authentication information and the respective trust lists.

74. The apparatus according to claim 73, wherein the one or more network entities further comprise:

a trusted server with which the apparatus and the another apparatus are registered, at least one further apparatus as an authorized party registered with the trusted server, or a combination thereof.

75. The apparatus according to claim 73, wherein the trust evaluation for the another apparatus is associated with an authentication code and a trust value of the another apparatus.

76. The apparatus according to claim 73, wherein the trust list distributed by a corresponding network entity comprises an aggregated list of trust evaluations certified by the corresponding network entity.

77. The apparatus according to claim 76, wherein the trust evaluations in the aggregated list are ordered based at least in part on trust values associated with the trust evaluations.

78. The apparatus according to claim 76, wherein the trust evaluations in the aggregated list are associated with trust values within a range specified for the corresponding network entity.

79. The apparatus according to claim 76, wherein the authentication information is associated with:

one or more one-off public keys of the another apparatus, and a signature generated by using one or more one-off private keys corresponding to the one or more one-off public keys; and

wherein said performing the anonymous trust authentication comprises;

verify authenticity of the one or more one-off public keys based at least in part on the respective trust lists; and

verify the signature based at least in part on the one or more one-off public keys.

80. The apparatus according to claim 73, wherein the anonymous trust authentication is performed by batch verification.