Despite being the state of the art in anonymous revocation, BLAC, EPID, and PEREA allow only a basic form of revocation amounting to “revoke anybody on the blacklist”. Recently BLAC was extended to support d-strikes-out policies that revokes anybody who has d or more entries on the blacklist. In this paper we significantly advance this concept and make the first attempt to generalize reputation-based anonymous revocation through our proposed scheme called BLACR. We show how various negative or positive scores can be assigned to anonymous sessions across various categories of misbehavior resulting in users being blocked based on their reputation scores. We show how various relevant policies can be instantiated in BLACR and the workload for authenticating users is reasonable for web services.
|
|