Unlinkable identifiers for tokens

摘要

A privacy enhanced identity scheme uses public and private key cryptography to selectively distribute attributes of a token holder to a relying party. A challenge message Rnonce, RID is sent from a reader to a token, where Rnonce is a reader nonce and RID is a reader identifier. Responsive to the challenge message to token sends a message that includes a token identifier that is unlinkable to other identifiers sent from the same token. The response message from the token includes at least an encrypted private token identifier TID and session key k. The reader may also be required to verify its authenticity via a separate identity registry.