Implementation of a User Anonymity Application Using a Privacy-Preserving Entropy-as-a-Service with Quantum Security
Key material plays a critical role in cryptography. Devices that are unable to generate high-quality keys are exposed to multiple vulnerabilities. In this work, we present an Entropy-as-a-Service (EaaS) architecture to address this problem. The proposed solution creates secure keys and sends them to a mobile application using a Quantum Random Number Generator (QRNG). Futhermore, our solution provides anonymity to the users who request a key while ensuring that the EaaS provider can still apply access control policies. Keys are sent via a quantum channel and received by the mobile application via NFC to ensure security. A certificate is generated with the key to authenticate the user in the application services. This certificate creates an identity separate from his real identity.
Authors
- Manuel Fernández‐Veiga (ORCID: https://orcid.org/0000-0002-5088-0881)
- Francisco J. Nóvoa (ORCID: https://orcid.org/0000-0003-3629-8120)
- Carlos Dafonte (ORCID: https://orcid.org/0000-0003-4693-7555)
- David Soler (ORCID: https://orcid.org/0000-0002-7707-1646)
- Iván Cillero
- Ana María Cameán Fernández (ORCID: https://orcid.org/0000-0002-0252-7442)
Publication Details
- Published
- 2024-11-01
- DOI
- https://doi.org/10.17979/spudc.9788497498913.26
- Primary Topic
- Cloud Data Security Solutions
- Type
- article
- Field-Weighted Citation Impact
- 0.00
Funders
- European Commission
- Ministerio de Ciencia e Innovación
- Xunta de Galicia