Anonymous PKI Framework for Privacy-Guaranteed e-Services

This paper is on the study of anonymous PKI (public key infrastructure) framework using pseudonym - is generated by using IKE (Internet key exchange) protocol based on the DH (Diffie-Hellman) key exchange algorithm between user and PCA (Privacy CA) - and this is designed to cooperate with existing PKI. We use IKE protocol for creating pseudonym against replay attack and use RSA-based PKI certificate for guaranteeing reliability of user´s anonymous public key against MITM (man-in-the- middle) attack. This anonymous PKI framework can be used in privacy-guaranteed premium e-services (like e-payment, no full-fledged PKI for anonymous adult verification, anonymous SSO (single sign-on), and etc.). The computational complexity of the proposed method is similar to existing PKI solution.