Electronic tickets (e-tickets) are electronic versions of paper tickets, which enable users to access intended services and improve services' efficiency. However, privacy may be a concern of e-ticket users. In this paper, a privacy-preserving electronic ticket scheme with attribute-based credentials is proposed to protect users' privacy and facilitate ticketing based on a user's attributes. Our proposed scheme makes the following contributions: (1) users can buy different tickets from ticket sellers without releasing their exact attributes; (2) two tickets of the same user cannot be linked; (3) a ticket cannot be transferred to another user; (4) a ticket cannot be double spent; (5) the security of the proposed scheme is formally proven and reduced to well known (q-strong Diffie-Hellman) complexity assumption; (6) the scheme has been implemented and its performance empirically evaluated. To the best of our knowledge, our privacy-preserving attribute-based e-ticket scheme is the first one providing these five features. Application areas of our scheme include event or transport tickets where users must convince ticket sellers that their attributes (e.g. age, profession, location) satisfy the ticket price policies to buy discounted tickets. More generally, our scheme can be used in any system where access to services is only dependent on a user's attributes (or entitlements) but not their identities.
E-Tickets from Special Devices. There are other e-ticket schemes designed around special devices, including personal trusted device (PTD) @cite_50 , trusted platform module (TPM) @cite_48 , mobile handsets @cite_19 , Unlike our scheme, these schemes require special devices and do not enable de-anonymisation after double spending a ticket nor do they support privacy-preserving attribute-based ticketing.
@cite_19 @cite_48 @cite_50
2344800964 1522968316 2125027978
The mobile ticket dispenser system (MTDS) allows customers to remotely draw tickets for service orders anywhere through a mobile handset. In our previous work, the MTDS was applied to a restaurant scenario in which both clerks and customers are patient, i.e., once a mobile ticketing (MT) customer remotely draws the ticket, his request can be served by the clerk when the clerk is available, regardless of when the customer arrives at the restaurant. In this paper, the MTDS is applied to a post office scenario in which the customers are patient, but the clerk is impatient since the original ticket drawn by the MT customer may be invalid if he she does not arrive at the post office before his her turn. In this case, the behavior of the MT customer is the same as the so-called in-person ticketing customer who needs to draw a ticket in person when he she arrives at the service counter. We propose an analytical model to derive the probability that an MT customer misses his her turn when he she arrives at the post office. A discrete-event simulation model is developed to investigate the performance of the predicted time adjustment mechanism for the MTDS. We also use real data collected at a post office to observe the queuing behavior. Our study provides guidelines for arranging the time for an MT customer to arrive at the MTDS server. Trusted Computing is a security base technology that will perhaps be ubiquitous in a few years in personal computers and mobile devices alike. Despite its neutrality with respect to applications, it has raised some privacy concerns. We show that trusted computing can be applied for service access control in a manner protecting users’ privacy. We construct a ticket system, a concept at the heart of Identity Management, relying solely on the capabilities of the trusted platform module and the Trusted Computing Group’s standards. Two examples show how it can be used for pseudonymous, protected service access. Advances in wireless network technology and the continuously increasing users of Personal Trusted Device (PTD) make the latter an ideal channel for offering personalized services to mobile users. In this paper, we apply some cryptology (such as public key infrastructure, hashing chain and digital signature) to propose a realistic mobile ticket system such that fairness, non-repudiation, anonymity, no forging, efficient verification, simplicity, practicability and obviate the embezzlement issues can be guaranteed. On the basis of PTD is more portable and personal than personal computer, we gradually perceived that the widely used PTD will present huge commerce profits for mobile ticket service provider and it is convenient to the PTD user.