API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 5636
[ACTIVE]

Traceable Anonymous Certificate

Metadata

Publisher
IETF
Doc Type
Experimental
Pages
31
Abstract
This document defines a practical architecture and protocols for offering privacy for a user who requests and uses an X.509 certificate containing a pseudonym, while still retaining the ability to map such a certificate to the real user who requested it. The architecture is compatible with IETF certificate request formats such as PKCS10 (RFC 2986) and CMC (RFC 5272). The architecture separates the authorities involved in issuing a certificate: one for verifying ownership of a private key (Blind Issuer) and the other for validating the contents of a certificate (Anonymity Issuer). The end entity (EE) certificates issued under this model are called Traceable Anonymous Certificates (TACs). This memo defines an Experimental Protocol for the Internet community.
Publication Date
2009-08-01
Status Note
Experimental
DOI
10.17487/RFC5636
Link
https://doi.org/10.17487/RFC5636
Author(s)
Sanghwan Park
Haeryong Park
Yoojae Won
Jaeil Lee
Stephen Kent
Keyword(s)
X.509, Blind Issuer, Anonymity Issuer, Traceable Anonymous Certificate, End Entity
Latest version of IETF RFC 5636

Document Versions — IETF RFC 5636

  • ▶ IETF RFC 5636 (2009-08-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • Shaohua Tang, "Simple Threshold RSA Signature Scheme Based on Simple Secret Sharing", in "Computational Intelligence and Security", CIS 2005, Part II, Springer, pp. 186-191, 2005. EXTERNAL
  • S. Brands, "Rethinking public key infrastructures and digital certificates - Building in Privacy", PhD thesis, Eindhoven Institute of Technology, Eindhoven, The Netherlands, 1999. EXTERNAL
  • Philip MacKenzie and Michael K. Reiter, "Two-Party Generation of DSA Signature", Crypto 2001. EXTERNAL
  • S. Rafaeli, M. Rennhard, L. Mathy, B. Plattner, and D. Hutchison, "An Architecture for Pseudonymous e-Commerce", AISB'01 Symposium on Information Agents for Electronic Commerce, pp. 33-41, 2001. EXTERNAL
  • Taekyoung Kwon, Jung Hee Cheon, Yongdae Kim, Jae-Il Lee, "Privacy Protection in PKIs: A Separation-of-Authority Approach", in "Information Security Applications", WISA 2006, Springer, pp. 297-311, 2007. EXTERNAL
  • "Tor: anonymity online", http://www.torproject.org . EXTERNAL
  • D. Chaum, "Blind signature system", CRYPTO '83, Plenum Press, page 153, 1984. EXTERNAL
  • IETF RFC 2560 [Superseded*]
  • IETF RFC 3280 [Superseded*]
  • IETF RFC 3850 [Superseded*]
  • IETF RFC 5246 [Superseded*]
  • T-REC-X.509.2000 — X.509-2000 EXTERNAL
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5636.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 5636, Traceable Anonymous Certificate. Available at https://doi.org/10.17487/RFC5636
Snippet:
IETF RFC 5636, Traceable Anonymous Certificate. Available at https://doi.org/10.17487/RFC5636

HTML (ISO 690 compliant)

Preview:
IETF RFC 5636, Traceable Anonymous Certificate. Available at https://doi.org/10.17487/RFC5636
Snippet:
<span class="citation"><cite>IETF RFC 5636</cite>, Traceable Anonymous Certificate. Available at <a href="https://doi.org/10.17487/RFC5636" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5636</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 5636, Traceable Anonymous Certificate
doi: 10.17487/RFC5636
url: https://doi.org/10.17487/RFC5636
Snippet:
<li>
<cite id="bib-rfc5636">IETF RFC 5636</cite>, Traceable Anonymous Certificate
<span class="doi">10.17487/RFC5636</span>
</li>

Referenced By