Difference between revisions of "Privacy Enhancing Credential"

From MgmtWiki
Jump to: navigation, search
(Context)
(Ecosystems)
Line 8: Line 8:
  
 
==Ecosystems==
 
==Ecosystems==
* Perhaps the simplest [[Ecosystem]] is a [[Smart Card]]
+
* Perhaps the simplest [[Ecosystem]] is a [[Smart Card]] which comes with secure private key generation and cannot export the key.
 
* The Credential could be included and used entirely within the context of a [[Trusted Execution Environment]], or a secure enclave and its resident software.
 
* The Credential could be included and used entirely within the context of a [[Trusted Execution Environment]], or a secure enclave and its resident software.
  

Revision as of 13:18, 6 May 2022

Full Title or Meme

A collection of private and secret data that can be used to prove an assertion in a manner that does not release more private information than absolutely required for the purpose described. Perhaps that term is used to indicate a mobile computer device, which is the preferred technology solution.

Context

  • Regardless of any technology used to protect user data in a credential, it serves no purpose if it is not limited to use in a protected Ecosystem.
  • In some contexts, the term "Privacy Enhancing Credential" is used, although there are very few use cases where a credential is not mobile even when it is just a driver's license in a holder's pocket.
  • Simple credentials that do not rely on secrets to protect user data are not considered to be of any value as a Privacy Enhancing Credential.

Ecosystems

  • Perhaps the simplest Ecosystem is a Smart Card which comes with secure private key generation and cannot export the key.
  • The Credential could be included and used entirely within the context of a Trusted Execution Environment, or a secure enclave and its resident software.

References