11:55 Microsoft opens uprove | |
Summary: C # code.msdn.microsoft.com / uprovesdkcsharp Java code.msdn.microsoft.com / uprovesdkjava UPD I found a good article a 2-year statute of limitations For those who have not heard about the U-prove, a small introduction. Issue For any online purchases to customers today, we have to open too much information about yourself: name, address, phone number, of course credit card number. Thus, if this information becomes available to an attacker, it is possible to get into a lot of headaches. This problem becomes even more pressing with the introduction of the so-called one-click purchases (Amazon, if I remember correctly, even patented this method). In this case, online shopping store and all information in their databases to the end of time. Status Quo Unfortunately, the market there are not many alternatives. I refer to him OpenID (typical use - Google Checkout), Windows Live ID. But these solutions in a somewhat different (in my opinion) of the region - autenifikatsii. While I would like to have a simple, reliable and cryptographically strong method for verification of certain information, such as monetary transactions. Most importantly, the "seller" should know exactly as much information as necessary to carry out the correct transaction. Solution Technology U-prove, created by Stefan Brands (the company Credentica, bought by Microsoft two years ago www.credentica.com/), combines the de facto industry standard - cryptosystems based on the open / private key, and most interesting, an opportunity not to give access to some elements of data transferred (which is impossible in the RSA). In other words, I can create a token containing information on the lump sum (!) The transaction without having to open some personal information about yourself. If, however, for purchases of alcohol or tobacco products, I need to indicate your age, I can open my age, for example, a shipping address. For the rest refer to the time video channel9.msdn.com/shows/Identity/Deep-Dive-into-U-Prove-Cryptographic-protocols / and / or free book www.credentica.com / the_mit_pressbook.html Launched in free-swimming SDK under the "free license" allows us to play with this technology, a decentralized manner (without reference to the "big players"). | |
|
| |
| Total comments: 0 | |