We present a solution to the problem of privacy invasion in a multiparty digital rights management scheme. (Roaming) users buy content licenses from a content provider and execute it at any nearby content distributor. Our approach, which does not need any trusted third party--in contrast to most related work on privacy-preserving DRM--is based on a re-encryption scheme that runs on any mobile Android device. Only a minor security-critical part needs to be performed on the device's smartcard which could, for instance, be a SIM card.
The anonymous payment scheme used in this paper has been introduced by @cite_9 . Analyses of this method have proven it to be more suited for our application in comparison to the frequently cited scheme by @cite_8 in @cite_17 . This is because of the chosen system being more flexible. Another reason behind choosing this protocol is that the (POS) devices used provide another layer of anonymity for the user since these device serve as a proxy between the user and the payee. Contrasting the basic version @cite_9 , however, we provide extensions such as the payment of change in case the user does not have the right amount of money in his her wallet. The anonymous payment scheme does not allow any party to get to know which content has been purchased if the user makes legitimate payments only. If the user tries to defraud some party, however, his her identity can be unveiled so that he she can be held accountable.
@cite_9 @cite_17 @cite_8
2039877753 2031618446
We present a privacy-friendly architecture for a future cloud computing scenario where software licensing and software payment plays a major role. We show how digital rights management as a technical solution for software licensing can be achieved in a privacy-friendly manner. In our scenario, users who buy software from software providers and execute it at computing centres stay anonymous. At the same time, our approach guarantees that software licences are bound to users and that their validity is checked before execution. Thus, digital rights management constitutes an incentive for software providers to take part in such a future cloud computing scenario. We employ a software re-encryption scheme so that computing centres are not able to build profiles of their users - not even under a pseudonym. We make sure that malicious users are unable to relay software to others. The large-scale automated transaction systems of the near future can be designed to protect the privacy and maintain the security of both individuals and organizations.