Re: Abstraction from existing technologies

On Jul 24, 11:10, Shahid Shoaib wrote:
> Subject: Re: Abstraction from existing technologies
>
>
> ----- Original Message -----
> From: "Christian Hauser" <lobase@gmx.net>
> To: <geopriv@mail.apps.ietf.org>
> Sent: Friday, July 20, 2001 7:35 AM
> Subject: Abstraction from existing technologies
>
> > This entity would know very accurate location information about the
users.
> > Because that information has to be prevented from being linked to the
> users'
> > identities (as I depicted in my mail from July, 12th), this Location
> Service
> > must be usable pseudonymously.
>
> The problem is that where ever the mobile user goes, he has to be
> authenticated first. For example, if the user moves from a UMTS network
> outside to a WLAN network inside a building, he will need to be
> authenticated by the WLAN operator, which will reveal his identity and
> location to the WLAN operator.

In my opinion, authenticating does not necessarily have to imply revealing
a user's real identity. I think, it should be possible to be authenticated
by a pseudonym (perhaps with a trusted third party guaranteeing for the
integrity of the pseudonym and/or for the liquidity of the user). According to the
provider's policy more or less additional information can be bound to that
pseudonym, whatever the provider needs for authentication.

If a user would use different pseudonyms with different providers (what I
would highly recommend), he would have to give them a reference to his location
information in the location service. (This reference should look different
for different pseudonyms in order to disable linkage to the same target by
parties other than the location service.)

Best regards,

Christian Hauser

Institute of Communication Networks and Computer Engineering
University of Stuttgart, Pfaffenwaldring 47, 70569 Stuttgart, Germany

-- 
Sent through GMX FreeMail - http://www.gmx.net