Computer Science Department
School of Computer Science, Carnegie Mellon University
Edward J. Schwartz, David Brumley, Jonathan M. McCune
We propose and develop techniques for achieving contractual anonymity. In contractual anonymity, a user and service provider enter into an anonymity contract. The user is guaranteed anonymity and unlinkability from the contractual anonymity system unless they break the contract. Service providers are guaranteed that they can identify users who break the contract. Neither party can change the contract without the other's permission. In particular and unlike other schemes, the service provider is not able to take any action toward a particular user (such as revealing her identity or blacklisting her future authentications) unless she violates her contract.