An Architectural Model for Pseudonymous and Secure Authorizations

Based on the framework for pseudonyms given in Chap. 7 the model introduced in Chap. 3 is extended by the concept of pseudonymity in this Chapter. The property statements from Sect. 3.3 are interpreted in terms of pseudonyms in Sect. 8.1. The architecture introduced in Sect. 3.4 is extended by reidentification, audit data collection, and audit data processing in Sect. 8.2. Also, the control requirements are extended in Sect. 8.2. The application domain of the architectural model and the attacker model are described in Sect. 8.3. Finally, different architectures and the specific control requirements are given in Sect. 8.4. Most notably, the simplified control requirements for technical purpose binding over organizational purpose binding are explained in Sect. 8.4.1. The various architectures presented in this Chapter are compared in Chap. 9.