Privacy transparency patterns

This paper describes two privacy patterns for creating privacy transparency: the Personal Data Table pattern and the Privacy Policy Icons pattern, as well as a full overview of privacy transparency patterns. It is a first step in creating a full set of privacy design patterns, which will aid software developers with the realization of privacy by...

UbiKiMa: Ubiquitous authentication using a smartphone, migrating from passwords to strong cryptography

Passwords are the only ubiquitous form of authentication currently available on the web. Unfortunately, passwords are insecure. In this paper we therefore propose the use of strong cryptography, using the fact that users increasingly own a smartphone that can perform the required cryptographic operations on their behalf. This is not as trivial...

The Identity Crisis. Security, Privacy and Usability Issues in Identity Management

This paper studies the current "identity crisis" caused by the substantial security, privacy and usability shortcomings encountered in existing systems for identity management. Some of these issues are well known, while others are much less understood. This paper brings them together in a single, comprehensive study and proposes recommendations...

Compensation: Architecture for supporting dynamicity and negotiation in accounting, charging and billing

As of today, contractual agreements govern the terms of interaction between users and providers as well as between interoperating providers. Such contracts indicate usable services and resources, tariffs, payment methods, etc. Typically, these terms are negotiated once before the contract is signed and are seldom changed thereafter, such that...

Electronic Payments using Mobile Communication Devices

A method of making a payment uses a first mobile communication device (1) and a second mobile communication device (2), each mobile communication device being provided with a respective near field communication unit (11, 21) and at least one of the mobile communication devices being provided with an input unit (12) for inputting data. The method...

Electronic payments using payment cards

A method of making a payment uses a mobile communication device (1) and a payment card (2), both the mobile communication device (1) and the payment card (2) being provided with a respective near field communication unit (11, 21) and at least the mobile communication device (1) being provided with an input unit (12) for inputting data. The...

Electronic payments using payment cards

A method of making a payment uses a mobile communication device (1) and a payment card (2), both the mobile communication device (1) and the payment card (2) being provided with a respective near field communication unit (11, 21) and at least the mobile communication device (1) being provided with an input unit (12) for inputting data. The...

Beyond RFID: the NFC Security Landscape

For applications like mobile payments for which the use of NFC technology is considered, security is of paramount importance. This whitepaper discusses the main risks associated with using NFC technology, and the possible countermeasures that can be used to mitigate those risks.