Attribute Based Credentials for Subscriptionbased Services

Abstract

In the digital era, where data privacy concerns are paramount, traditional authentication methods often fall short in safeguarding user information. To address this issue, this thesis examines the application of Attribute-Based Credentials (ABCs) within subscription-based services, focusing on their potential to enhance data privacy while ensuring the retention of essential service functionalities. ABCs offer a viable alternative by facilitating authentication through the verification of necessary user attributes without disclosing underlying personal information, addressing critical privacy issues inherent in digital interactions. The research delineates the theoretical framework of ABCs and their operational capabilities, particularly their integration into existing digital infrastructures. It assesses compatibility across various operating systems and devices, crucial for widespread adoption. The trustworthiness of ABCs on smartphones is also evaluated, considering their potential to accurately represent user identities in a secure and privacy-preserving manner. Empirical evidence from a structured proof of concept within a media streaming service context demonstrates that ABCs can maintain all the functionalities of traditional authentication systems while providing additional privacy benefits. This includes selective information disclosure, minimal data storage, and the capability to manage user attributes directly. The findings suggest that ABCs are not only a secure and privacy-enhancing technology but also fully capable of supporting the dynamic requirements of modern digital services without compromising on functionality. This thesis contributes to digital identity management literature, proposing ABCs as a substantial enhancement over traditional methods in the context of subscription-based digital services.