Anonymity and accountability in self-organizing electronic communities

ABSTRACT

In this paper we study the problem of anonymity versus accountability in electronic communities. We argue that full anonymity may present a security risk that is unacceptable in certain applications; therefore, anonymity and accountability are both needed. To resolve the inherent contradiction between anonymity and accountability in a flexible manner, we introduce the concepts of internal and external accountabilities. Intuitively, internal accountability applies to virtual users only, and is governed by the policy of a group (a community). In contrast, external accountability is needed to address issues related to misuse if the activity is to be penalized in real life according to internal rules or external laws. We provide a set of protocols to ensure that users' virtual and real identities cannot be disclosed unnecessarily, and allow users to monitor the data collected about them as well as to terminate their membership (both real and virtual) under certain conditions. We develop a general conceptual model of electronic Editorial Board (e-EB). In our thinking, there are deep connections between anonymity and self-organization. In turn, the concept of self-organizing e-EB (SO-eEB) is introduced here, and a robotic example is provided. Finally, SO-eEB is specialized to Anonymous and Accountable Self-Organizing Communities (A2SOCs), that fully supports internal and external accountability while providing anonymity.

REFERENCES

• 1: A. Abdul-Rahman and S. Hailes. Relying on trust to find reliable information. http://citeseer.nj.nec.com/348491.html, 2002.
• 2: Paul F. Syverson , David M. Goldschlag , Michael G. Reed, Anonymous Connections and Onion Routing, Proceedings of the 1997 IEEE Symposium on Security and Privacy, p.44, May 04-07, 1997
• 3: K. Bennett, C.Grothoff, T. Horozov, I. Patrascu, and T. Stef. Gnunet --- a truly anonymous networking infrastructure. http://citeseer.nj.nec.com/502472.html.
• 4: Levente Buttyán , Jean-Pierre Hubaux, Accountable Anonymous Access to Services in Mobile Communication Systems, Proceedings of the 18th IEEE Symposium on Reliable Distributed Systems, p.384, October 18-21, 1999
• 5: David L. Chaum, Untraceable electronic mail, return addresses, and digital pseudonyms, Communications of the ACM, v.24 n.2, p.84-90, Feb. 1981 [doi>10.1145/358549.358563]
• 6: J. Claessens, B. Preneel, and J. Vandewalle. Anonymity controlled electronic payment systems. In Proc. 20th Symp. on Information Theory in the Benelux, 1999.
• 7: Ian Clarke , Scott G. Miller , Theodore W. Hong , Oskar Sandberg , Brandon Wiley, Protecting Free Expression Online with Freenet, IEEE Internet Computing, v.6 n.1, p.40-49, January 2002 [doi>10.1109/4236.978368 ]
• 8: I. Clarke, O. Sandberg, B. Wiley, and T. W. Hong. Freenet: A distributed anonymous information storage and retrieval system. In Lecture Notes in Computer Science, volume 2009, 2001.
• 9: The freeweb project. http://freeweb.sourceforge.net/.
• 10: Eran Gabber , Phillip B. Gibbons , David M. Kristol , Yossi Matias , Alain Mayer, Consistent, yet anonymous, Web access with LPWA, Communications of the ACM, v.42 n.2, p.42-47, Feb. 1999 [doi>10.1145/293411.293447]
• 11: I. Goldberg , D. Wagner , E. Brewer, Privacy-enhancing technologies for the Internet, Proceedings of the 42nd IEEE International Computer Conference, p.103, February 23-26, 1997
• 12: International standard iso 7498--1984 (e): Information technology -- open systems interconnection -- reference model -- part 1: Basic reference model.
• 13: Rohit Khare , Adam Rifkin, Weaving a Web of trust, World Wide Web Journal, v.2 n.3, p.77-112, Summer 1997
• 14: I. Kókai and A. Lörincz. Fast adapting value estimation based hybrid architecture for searching the world-wide web. Applied Soft Computing, 28:1--13, 2002.
• 15: D. Kugler and H. Vogt. Off-line payments with auditable tracing. In Financial Cryptography, Lecture Notes in Computer Science. Springer-Verlag, 2002.
• 16: A. Lörincz, I. Kókai, and A. Meretei. Intelligent high-performance crawlers used to reveal topic-specific structure of the www. International Journal of Foundations of Computer Science, 13:477--495, 2002.
• 17: A. Lörincz, Z. Palotai, and S. Mandusitz. Efficient competition for news on the internet with minimized communication load. Manuscript in preparation, 2002.
• 18: Philip D. MacKenzie , Jeffrey Sorensen, Anonymous Investing: Hiding the Identities of Stockholders, Proceedings of the Third International Conference on Financial Cryptography, p.212-229, February 01, 1999
• 19: D. Martin and A. Schulman. Deanonymizing users of the safeweb anonymizing service, Nov. 2002. http://citeseer.nj.nec.com/martin02deanonymizing.html.
• 20: Napster. http://www.napster.com/about_us.html, 2002.
• 21: Joon S. Park , Ravi Sandhu , Gail-Joon Ahn, Role-based access control on the web, ACM Transactions on Information and System Security (TISSEC), v.4 n.1, p.37-71, Feb. 2001 [doi>10.1145/383775.383777]
• 22: Michael K. Reiter , Aviel D. Rubin, Crowds: anonymity for Web transactions, ACM Transactions on Information and System Security (TISSEC), v.1 n.1, p.66-92, Nov. 1998 [doi>10.1145/290163.290168]
• 23: Clay Shields , Brian Neil Levine, A protocol for anonymous communication over the Internet, Proceedings of the 7th ACM conference on Computer and communications security, p.33-42, November 01-04, 2000, Athens, Greece [doi>10.1145/352600.352607]
• 24: SourceForge.Net, the open source software development web site. http://www.sourceforge.net.
• 25: S. G. Stubblebine and P. F. Syverson. Authentic attributes with fine-grained anonymity protection. In Lecture Notes in Computer Science, volume 1962, 2001.
• 26: K. Sycara and D. Zeng. Cooperative intelligent software agents. Technical Report Technical Report # CMU-RI-TR-95-14., Carnegie Mellons University, School of Computer Science, Robotics Institute, 1995. http://www-2.cs.cmu.edu/softagents/papers/pleiades-TR-95-14.pdf.
• 27: Andrew S. Tanenbaum, Computer Networks, Prentice Hall PTR, Upper Saddle River, NJ, 1985
• 28: Andrew S. Tanenbaum , Maarten Van Steen, Distributed Systems: Principles and Paradigms, Prentice Hall PTR, Upper Saddle River, NJ, 2001
• 29: M. Venkatraman, B. Yu, and M. P. Singh. Trust and reputation management in a small-world network. http://citeseer.nj.nec.com/296051.html, 2002.
• 30: M. Waldman, A. D. Rubin, and L. F. Cranor. Publius: A robust, tamper-evident, censorship-resistant, web publishing system. In Proc. 9th USENIX Security Symposium, 2000.
• 31: Giorgos Zacharia , Alexandros Moukas , Pattie Maes, Collaborative Reputation Mechanisms in Electronic Marketplaces, Proceedings of the Thirty-second Annual Hawaii International Conference on System Sciences-Volume 8, p.8026, January 05-08, 1999
• 32: G. Ziegler, C. Farkas, A. Meretei, and A. L őrincz. Privacy preserving accountability in electronic communities. Submitted to WWW2003, Budapest, Hungary, 2002.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General

Additional Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.3 Organizational Impacts
          Subjects: Computer-supported collaborative work

General Terms:
Algorithms, Human Factors, Legal Aspects, Security

Keywords:
accountability, anonymity, authentication, privacy, self-organizing community