Adds section on Anonymous Credentials

Author: dbosk

overview/overview.bib

@@ -97,3 +97,18 @@ @inproceedings{Eckersley2010hui
   organization={Springer},
   URL={https://panopticlick.eff.org/browser-uniqueness.pdf},
 }
+
+@ARTICLE{ElectronicIdentitiesNeedPrivateCredentials,
+  author={J. Camenisch and A. Lehmann and G. Neven},
+  journal={IEEE Security Privacy},
+  title={Electronic Identities Need Private Credentials},
+  year={2012},
+  volume={10},
+  number={1},
+  pages={80-83},
+  keywords={cryptography;message authentication;Internet;OpenID;X.509 certificates;credit card information;electronic identities;email address;personal information;private credentials;security assertion markup language;selfclaimed attributes;user authentication;Access control;Authentication;Computer security;Electronic commerce;Privacy;Public key;X.509 certificates;authentication;computer security;cryptography;identity management;private credentials;public keys},
+  doi={10.1109/MSP.2012.7},
+  ISSN={1540-7993},
+  month={Jan},
+  URL={http://ieeexplore.ieee.org/xpl/articleDetails.jsp?reload=true&arnumber=6142524},
+}

overview/overview.tex

@@ -630,6 +630,134 @@ \subsection{Alternative Approaches}
 
 % XXX include failure rates from Gollmann
 
+\subsection{Anonymous Credentials}
+
+\begin{frame}
+  \begin{example}[Age limits]
+    \begin{itemize}
+      \item Bob wants to go see a film in cinema.
+      \item Bob looks very young so Alice who works there wants to have proof 
+        of his age.
+
+        \pause{}
+
+      \item Show physical ID, reveals name, exact date of birth, \dots
+    \end{itemize}
+  \end{example}
+
+  \pause{}
+
+  \begin{exercise}
+    \begin{itemize}
+      \item That's a bit overkill, right?
+      \item What does Alice actually need to know?
+      \item In what direction must we move to achieve that?
+    \end{itemize}
+  \end{exercise}
+\end{frame}
+
+\begin{frame}
+  \begin{block}{What Alice needs?}
+    She must be convinced that Bob is older than 15.
+  \end{block}
+
+  \pause{}
+
+  \begin{alertblock}{How can she learn that?}
+    \begin{enumerate}
+      \item She has known Bob since he was born, so she knows.
+
+        \pause{}
+
+      \item She can ask someone \emph{she trusts} who knows Bob is older than 
+        15.
+    \end{enumerate}
+  \end{alertblock}
+\end{frame}
+
+\begin{frame}
+  \begin{alertblock}{But how can she do that?}
+    \begin{enumerate}
+      \item The trusted person who knows Bob is with Alice.
+
+        \pause{}
+
+      \item Alice can send a picture to the other person who verifies.
+        \begin{itemize}
+          \item This requires an \emph{authenticated} channel.
+        \end{itemize}
+
+        \pause{}
+
+      \item The trusted person made a certificate for Bob showing that he's 
+        older than 15.
+        \begin{itemize}
+          \item Alice must be able to \emph{verify} the certificate.
+          \item Bob must bring this certificate with himself everywhere.
+        \end{itemize}
+
+    \end{enumerate}
+  \end{alertblock}
+\end{frame}
+
+\begin{frame}
+  \begin{alertblock}{Alice interacts with the trusted person}
+    \begin{itemize}
+      \item Gaah, but Bob doesn't want the trusted person (his parents) to know 
+        he's at the cinema right now!
+      \item It's a small cinema so they'll know which film he sees if they 
+        learn when he's there.
+    \end{itemize}
+  \end{alertblock}
+
+  \pause{}
+
+  \begin{alertblock}{Alice reads and verifies the certificate}
+    \begin{itemize}
+      \item Phew, she accepted the note from his parents.
+      \item But now Alice learned all those embarrassing things in 
+        there.
+        \begin{itemize}
+          \item And Bob who has a crush on Alice \dots
+        \end{itemize}
+    \end{itemize}
+  \end{alertblock}
+\end{frame}
+
+\begin{frame}
+  \begin{block}{The idea}
+    \begin{itemize}
+      \item What if Bob could convince Alice
+        \begin{itemize}
+          \item that he has a certificate saying he's older than 15,
+          \item and is signed by someone Alice trusts.
+        \end{itemize}
+      \item Wouldn't that be awesome?
+    \end{itemize}
+  \end{block}
+\end{frame}
+
+\begin{frame}
+  \begin{example}[Anonymous 
+    Credentials\footfullcite{ElectronicIdentitiesNeedPrivateCredentials}]
+    \begin{itemize}
+      \item Makes heavy use of zero-knowledge proofs of knowledge.
+      \item Can prove equalities, inequalities, knowledge, ownership, \dots
+      \item Implementations and approaches:
+        \begin{description}
+          \item[Identity Mixer]
+            \url{https://www.research.ibm.com/labs/zurich/idemix/}
+          \item[U-Prove]
+            \url{http://research.microsoft.com/en-us/projects/u-prove/}
+          \item[AnonPass]
+            \url{https://eprint.iacr.org/2013/317}
+          \item[IRMA]
+            \url{https://www.irmacard.org/irma/}
+        \end{description}
+    \end{itemize}
+  \end{example}
+\end{frame}
+
 
 %%%%%%%%%%%%%%%%%%%%%%