Research Works
The first research field is the privacy preserving for users in digital transactions. Especially raising digital certificates allowing anonymity and selective disclosure of content and proofs of properties on signed identity attributes. These works are supported by software developments as the Cryptic library.
A second research area concerns trust relationships in open environments. The goal is to highlight the constraints on security properties, confidentiality for instance, in an environment where there no single authority, communications take place over hostile channels and multiples entities, may be unknown from each other, have to establish trust relationships. These works can be applied to pervasive and ubiquitous environments (ambient intelligence, sensors networks, ubiquitous computing, etc.). Articles are in under publication.
Works are currently led on a dynamic access control implementation based on trust. This kind of access control, based on roles established with certificates issued from trusted third parties, are suited to inter-organizational access control and allowing access to strangers. It can be applied in the personal sphere, where an unknown subject can consume a service thanks to certificates issued from trusted parties of the service provider, the state or a bank for instance. it can also be applied in the professional sphere, for instance when accesses are offered to employees of partner companies.
A particular research interest is focused on human factors of a global identity management system offering to users a suitable interface to their digital life. It means: simplify authentications, help users in monitoring and controlling the personal information disclosure, assist users in leading administrative, banking and business online procedures. For a part, is consists in designing a graphical user interface, for instance to provide users with a privacy dashboard dedicated to e-administration (in that case, a e-citizen dashboard). The results might be the user assistance for e-administration transactions, for voting or, for presenting and keeping safe their national digital identity documents.