Winter
2011/12

Electronic Identity
Seminar, 2 SWS
Mittwoch 15:15 - 16:45, RUD 25, 4.113
Instructor: Dr. Wolf Müller
 

Computer Science Department
Systems Architecture Group

• Seminar, Praktische Informatik, Hauptstudium.
• 2h each week, over one semester (2 SWS).
• Students will present a selection of papers that will help you understand which threats exist, judge their significance and learn methods to defend your system against hackers. In addition you will explore the mathematical underpinnings of today's most common security tools and protocols. But most of all you will learn that there is no absolute security - i.e. your will have to learn ways to detect security breaches and recover from them.

Credits:

  In order to obtain credits for this seminar, participants are expected to:

• Attend regularly (at least 90%).
• Read each paper before the seminar, to be adequately prepared for discussion.
• Research an assigned subject; present major findings (45 min presentation; 30 min discussion).
• Presentations will be evaluated by two members of the audience at the end of each class (Bewertungskriterien-Seminarvortrag.pdf).
• Presenters summarize their presentation and relevant discussion on the Seminar's WIKI page within 2 weeks.
• Presentations may be given in English or German. All documents are in English (exceptions may be granted).

Prerequisites:

• This seminar is suitable for students of all technical science disciplines who have previously completed courses PI 1,2,3 or equivalent.

Wiki:

• In addition to the seminar home page (this page), there is a WIKI for dynamically added content, e.g. contributions by students: http://sarwiki.informatik.hu-berlin.de/W2011-EI.

Topics:

• OpenID 2.0 [http][draft] and OpenID Connect [http]
• U-Prove (Technology Overview) [https]
• IDEMIX, Identity Mixer [http] (Martin Schröder)
• I2P (An alternative to TOR?) [http] (Martin Fobian)
• DE-Mail [https] (Alexander Fehr)
• Elektronischer Aufenthaltstitel [pdf][TR]
• Bitcoin (How does it work?) [pdf][http][wiki] (Norbert Nestler)
• NFC protocol-overview (physics: range, modulation; modes: reader/writer, card-emulation, p2p) [http][internal][NFCForum] (Ngoc Son Le)
• NFC in public Transport (In particular DB's touch & travel) [pdf][html]
• Google Wallet [starting point] [press] (Christian Grabolle)
• ... (further topics are possible, also own interesting suggestions are welcome) (Michael Gehring)

Syllabus:

Further Readings (Books):

• http://www.heise.de/newsticker/meldung/Forensiker-erforschen-Google-Wallet-1396040.html
• http://viaforensics.com/mobile-security/forensics-security-analysis-google-wallet.html
• Claudia Eckert. IT-Sicherheit
• Ross Anderson. Security Engineering: A Guide to Building Dependable Distributed Systems.
• Bruce Schneier. Applied Cryptography: Protocols, Algorithms, and Source Code in C, Second Edition.
• Security and Cooperation in Wireless Networks, Thwarting Malicious and Selfish Behavior in the Age of Ubiquitous Computing, by Levente Buttyan (BME) and Jean-Pierre Hubaux (EPFL) (SeCoWiNetV1.5.pdf) [local]