公共云中的奥地利eID生态系统：如何在保持实用性的同时获得隐私
The Austrian eID Ecosystem in the Public Cloud: How to Obtain Privacy While Preserving Practicality
摘要：
奥地利电子身份证系统是奥地利电子政务战略的一个主要支柱。eID系统确保公民的唯一身份和安全认证，保护对涉及敏感和个人数据的应用程序的访问。特别是，奥地利eID系统支持三个主要用例：奥地利公民的身份识别和认证、电子表示以及奥地利公共部门应用中的外国公民身份认证。为了支持所有这些用例，几个组件（本地部署在应用程序域中或集中部署）需要相互通信。虽然本地部署在可扩展性方面具有一些优势，但所有相关组件的集中部署仍然是有利的，例如由于较少的维护工作。然而，集中部署很容易导致负载瓶颈，因为理论上整个奥地利人口以及-对于外国公民-整个欧盟人口都可以使用所提供的服务。为了缓解可扩展性的问题，在本文中，我们建议将生态系统的主要组件迁移到公共云。然而，将可信服务转移到公共云中会带来新的障碍，特别是在隐私方面。为了绕过隐私问题，在本文中，我们提出了一种方法，通过应用选定的加密技术（特别是使用代理重新加密和可编辑签名），以保护隐私的方式将完整的奥地利eID生态系统迁移到公共云中。应用这种方法，通过仍然支持所有三个主要的eID系统用例，不会向公共云提供商披露敏感数据。最后，我们讨论我们的方法的基础上选定的标准。
英文摘要：
The Austrian eID system constitutes a main pillar within the Austrian e-Government strategy. The eID system ensures unique identification and secure authentication for citizens protecting access to applications where sensitive and personal data is involved. In particular, the Austrian eID system supports three main use cases: Identification and authentication of Austrian citizens, electronic representation, and foreign citizen authentication at Austrian public sector applications. For supporting all these use cases, several components -- either locally deployed in the applications' domain or centrally deployed -- need to communicate with each other. While local deployments have some advantages in terms of scalability, still a central deployment of all involved components would be advantageous, e.g. due to less maintenance efforts. However, a central deployment can easily lead to load bottlenecks because theoretically the whole Austrian population as well as -- for foreign citizens -- the whole EU population could use the provided services. To mitigate the issue on scalability, in this paper we propose the migration of main components of the ecosystem into a public cloud. However, a move of trusted services into a public cloud brings up new obstacles, particular with respect to privacy. To bypass the issue on privacy, in this paper we propose an approach on how the complete Austrian eID ecosystem can be moved into a public cloud in a privacy-preserving manner by applying selected cryptographic technologies (in particular using proxy re-encryption and redactable signatures). Applying this approach, no sensitive data will be disclosed to a public cloud provider by still supporting all three main eID system use cases. We finally discuss our approach based on selected criteria.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
