Privacy Enhanced Registered Devices for Fine-Grained Access Control

Abstract

Aadhaar is one of the largest biometric identity systems in the world which aims to assign a unique digital identity to each resident of India. A resident can authenticate himself using his Aadhaar number and a biometric. Biometric is a very sensitive data, and registered devices were introduced to eliminate the use of stored biometrics. Each registered device is supposed to have a unique identity and to follow suggested best practices to ensure security. With the proliferation of digital services, the use of registered devices is expected to grow more in near future. Although registered device is a good initiative, attribute-based access and communication may not be very efficient at present. In the present world of ubiquitous computing, IoT and 5G, a device may need to provide an assurance that it possesses a certain set of requisite attributes rather than some serial or a model number. Furthermore, owner of the device may not want to reveal device identity to protect his privacy since device identity may be correlated with owner’s identity. In this paper, we present an efficient scheme of privacy enhanced attribute-based registered devices for fine-grained access control using attribute-based signature.