Upload
fredrick-heald
View
229
Download
6
Embed Size (px)
Citation preview
Eternity Service
http://www.kolej.mff.cuni.cz/~eternity
Content
What is Eternity Service
Project goals
Implementation
Example
Motivation
Privacy
Integrity
Availability
Motivation
Privacy
Integrity
Availability
System requirements
search
download
upload
delete
modify
anonymity
security
History
Ross Anderson
Adam Back
Tonda Benes
we, MFF UK
Project goals
search for data
store data
anonymous communication
protocols for electronic payments
time synchronization
administrator interface
extendability
Implementation
K lie n t
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
Implementation
K lie n t
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
Implementation
K lie n t
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o
E s o E s o
Implementation
K lie n t
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o
E s o E s oA c s
B a n k
Implementation
K lie n t
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o
E s o E s oA c s
B a n k
M ixM ix
M ixM ix
M ix
Mix
onion routingtraffic paddingheader paddingdata paddingcertificates for SixTra n s la to r
R e ce iv e r
R e ce iv e r S e n de r
S e n de r
S ix
Onion routing
))))))))))
))
Six
M ix M ix M ix M ix
S ix S ix
Six
M ix M ix M ix M ix
S ix S ixS ix S ix S ix
Six
M ix M ix M ix M ix
S ix S ixS ix S ix S ix
E s o A c sA c s B a n k C lie n t
Eso
search data
store data
payments for storage
time synchronization
T C BB a n k e r
A llo ca to r
Fin de r
S y n ch ro
. . . .
S i x
Acs
Esos
Mixes
Banks S i x
A ddre s sM a n a g e r
Es oCertif
BankCertifM ix
Certif
Management of certificates of:
Bank
Accepts money from clients
management of anonymous accounts
payments to Esos (payment‘s validity checks)
S i x
Pa y m e n tM a n a g e r
pa y m e n ts
Client
upload file
search for file
download file
operations:
S i x
M a jo rdo m o
B a n k e r
$ _
Technology used
objects
threads
FreeBSD
STL
RSAEuro
Example
K lie n t - n o te b o o k
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o - v e n c a .k o le j
A c s - v e n c a .k o le j
M ix - m a il.k o le jM ix - n o te b o o k
M ix - d zu n g le .m s
M ix - v e n c a .k o le j
Upload file
K lie n t - n o te b o o k
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o - v e n c a .k o le j
A c s - v e n c a .k o le j
M ix - m a il.k o le jM ix - n o te b o o k
M ix - d zu n g le .m s
M ix - v e n c a .k o le j
Request for Eso certificatesRequest for storageFile to store
Upload file
K lie n t - n o te b o o k
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o - v e n c a .k o le j
A c s - v e n c a .k o le j
M ix - m a il.k o le jM ix - n o te b o o k
M ix - d zu n g le .m s
M ix - v e n c a .k o le j
Request for Eso certificatesRequest for storageFile to store
Upload file
K lie n t - n o te b o o k
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o - v e n c a .k o le j
A c s - v e n c a .k o le j
M ix - m a il.k o le jM ix - n o te b o o k
M ix - d zu n g le .m s
M ix - v e n c a .k o le j
Request for Eso certificatesRequest for storageFile to store
Search for file
K lie n t - n o te b o o k
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o - v e n c a .k o le j
A c s - v e n c a .k o le j
M ix - m a il.k o le jM ix - n o te b o o k
M ix - d zu n g le .m s
M ix - v e n c a .k o le j
Request for Eso certificatesRequest to search for file
Search for file
K lie n t - n o te b o o k
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o - v e n c a .k o le j
A c s - v e n c a .k o le j
M ix - m a il.k o le jM ix - n o te b o o k
M ix - d zu n g le .m s
M ix - v e n c a .k o le j
Request for Eso certificatesRequest to search for file
Download file
K lie n t - n o te b o o k
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o - v e n c a .k o le j
A c s - v e n c a .k o le j
M ix - m a il.k o le jM ix - n o te b o o k
M ix - d zu n g le .m s
M ix - v e n c a .k o le j
Request for Eso certificatesRequest for file
Download file
K lie n t - n o te b o o k
m e c h a na n o n y m ní k o m u n is y s t é a s o v
E s o - v e n c a .k o le j
A c s - v e n c a .k o le j
M ix - m a il.k o le jM ix - n o te b o o k
M ix - d zu n g le .m s
M ix - v e n c a .k o le j
Request for Eso certificatesRequest for file
Summary
search for data
store data
anonymous communication
protocols for e-payments
time synchronization
administrator interface
extendability
Eso - TCB, Client
Eso - TCB, encryption
Mix, onion routing
Bank, Bankers
Scheduler, Synchronizer
config & log files
Six, GMessage
Eternity Service
http://www.kolej.mff.cuni.cz/~eternity