Digital Library of Gesellschaft für Informatik e.V.
Not a member yet
40758 research outputs found
Sort by
De-Anonymisierungsstrategien: Empirische Analyse und normative Implikationen – Eine Betrachtung von De-Anonymisierungsfällen und daraus folgenden Implikationen für die rechtlichen Anforderungen an die Anonymisierung
No full textDer vorliegende Beitrag untersucht De-Anonymisierungsfälle mit dem Ziel Lessons Learned zu identifizieren und hierdurch die rechtlichen Anforderungen an die Anonymisierung zu konkretisieren. Hierfür wurden im Rahmen einer Literaturanalyse De-Anonymisierungsfälle identifiziert und systematisch ausgewertet. Hierdurch konnten Ursachen möglicher DeAnonymisierungen identifiziert und Lessons Learned abgeleitet werden, welche sodann herangezogen wurden, um die rechtlichen Anforderungen an die Anonymisierung zu konkretisieren
Secure Multi-Party Homomorphic Encryption for Post-Quantum Biometric Recognition
No full textThis paper presents a post-quantum secure multi-party computation (MPC) scheme using homomorphic encryption (PQ-MHE) applied for fingerprint template protection. The proposed scheme leverages the CKKS cryptosystem for homomorphic operations and additive secret sharing (ASS) for splitting, storing, and comparing biometric templates across multiple servers. This architecture ensures that no single entity ever has access to the unencrypted templates. We benchmark the system using two-, three-, and four-server configurations. The scheme achieves a comparison time of 1.24 seconds and incurs 35 MB of communication, which can be reduced by approximately 98\% through caching and reusing the CKKS cryptographic context on the server side. The inherent approximate arithmetic of CKKS introduces a minor degradation, resulting in a 0.5 percentage point decrease in the true acceptance rate (TAR) compared to unencrypted fingerprint samples. The system is secure under a semi-honest adversary model with non-colluding servers and complies with the biometric information protection standards outlined in ISO/IEC 24745
Gestaltung von Open-Data-Portalen: Die Perspektive von technisch versierten Nutzern
No full textDie Nutzung von Open-Data-Portalen sowie die damit verbundene Generierung von Mehrwert durch solche Portale für Bürger ist bislang nur wenig verbreitet. Um einen Mehrwert aus Open Data für Bürger zu generieren, können Open-Data-basierte Anwendungen eine wichtige Rolle spielen. Allerdings unterliegt die Entwicklung solcher Anwendungen einigen Hindernissen. Der vorliegende Beitrag untersucht die Barrieren für die Entwicklung von Open-Data-basierten Anwendungen und unterbreitet Lösungsvorschläge für Betreiber von Open-Data-Portalen. Hierfür wurden 15 semi-strukturierte Interviews mit technisch versierten Nutzern, insb. Softwareentwicklern durchgeführt. Die Open Data Value Chain wurde als Grundlage genutzt, um 21 Maßnahmenvorschläge zur Verbesserung von Open-Data-Portalen zu synthetisieren. Um die Nutzung von Open Data durch Entwickler zu erleichtern, sollten sich Open-Data-Portale insbesondere stärker an der Datennachfrage orientieren, eine gute Auffindbarkeit von Datensätzen sicherstellen, die Nutzbarkeit der Daten verbessern, gute Rahmenbedingungen für Entwickler schaffen, die Arbeit mit den Daten erleichtern und beim Betrieb und Hosting resultierender Anwendungen unterstützen. Die Ergebnisse dieses Beitrags können von Portalbetreibern für die Weiterentwicklung von Open-Data-Portalen genutzt werden. The utilization of open data portals and the associated generation of added value for citizens through such portals is thus far rather limited. Open data-based applications have the potential to play a significant role in the generation of added value from open data for citizens. Nevertheless, the development of such applications is subject to a number of obstacles. This article examines the barriers to the development of open data-based applications and proposes solutions for operators of open data portals. For the purpose of this study, 15 semi-structured interviews were conducted with technically experienced users, particularly software developers. The open data value chain was utilized as a foundation for synthesizing 21 proposals for measures to enhance open data portals. In order to facilitate the utilization of open data by developers, open data portals should orient their efforts more strongly towards addressing data demand, ensure good findability of datasets, improve the usability of data, create good environments for developers, facilitate work with open data, and support the operation and hosting of resulting applications. The findings of this study can be utilized by portal operators to further develop open data portals
Towards Bringing Vitruvius into the Cloud II: Against Attacks from the Internet
No full textConsistency management for models is a field of active research. While performance is usually of limited interest, it is a necessity for the real-world applicability of such tools. Last year, we introduced a client-server architecture for our consistency management tool Vitruvius, focusing on transferring the concepts from monolithic to client-server. The contribution of this paper is the extension of this client-server architecture with security mechanisms, concretely, authentication, authorization, and encryption, and a first look on the influence on the performance of the tool. We extended the existing implementation and took performance measurements of the monolithic, the client-server and the secured client-server architectures
Biometric Bound Credentials for Age Verification
No full textThis paper examines the application of Biometric Bound Credentials (BBCreds) in age verification systems. Traditional age verification methods often rely on device possession or knowledge factors, creating vulnerabilities that can be exploited through device sharing or credential theft. BBCreds represent a paradigm shift by cryptographically binding age credentials to an individual's biometric features without storing actual biometric templates. This approach ensures that only the legitimate, physically present user can access age-restricted content or services, effectively preventing credential sharing and enhancing privacy. The paper discusses the technical implementation, advantages, limitations, and potential impact of this technology in creating more secure and privacy-preserving age verification systems
Mapping the Research Landscape of Public Administration Digitalization: A Conceptual Framework from the National Perspective of Germany
No full textThe digital transformation of public administration is a complex and dynamic challenge that continues to generate new research questions and practical needs. Despite growing academic engagement, the visibility, accessibility, and transferability of research findings to administrative practice remain limited. This paper addresses how the research landscape on public sector digitalization in the German context can be systematically captured and structured to support effective knowledge transfer. The study develops a conceptual framework that identifies key entities, attributes, and relationships in the research domain. A multimodal methodology combines a structured literature review, an online survey, and an analysis of public datasets. Findings highlight the fragmented nature of the information landscape and the challenges this poses for the knowledge transfer from research to implementation
