Information society projects promise wealth and better services to those countries which digitise and encourage the consumer and citizen to participate. As paper recedes into the background and digital data becomes the primary resource in the information society, what does this mean for privacy? Can there be privacy when every communication made through ever-developing ubiquitous devices is recorded? Data protection legislation developed as a reply to large scale centralised databases which contained incorrect data and where data controllers denied access and refused to remedy information flaws. Some decades later the technical world is very different one, and whilst data protection remains important, the cries for more privacy-oriented regulation in commerce and eGov continue to rise. What factors should underpin the creation of new means of regulation? The papers in this collection have been drawn together to develop the positive and negative effects upon the information society which privacy regulation implies.

Stefan Brands proposes cryptographic building blocks for the design of digital certificates that preserve privacy without sacrificing security. As paper-based communication and transaction mechanisms are replaced by automated ones, traditional forms of security such as photographs and handwritten signatures are becoming outdated. Most security experts believe that digital certificates offer the best technology for safeguarding electronic communications. They are already widely used for authenticating and encrypting email and software, and eventually will be built into any device or piece of software that must be able to communicate securely. There is a serious problem, however, with this unavoidable trend: unless drastic measures are taken, everyone will be forced to communicate via what will be the most pervasive electronic surveillance tool ever built. There will also be abundant opportunity for misuse of digital certificates by hackers, unscrupulous employees, government agencies, financial institutions, insurance companies, and so on.In this book Stefan Brands proposes cryptographic building blocks for the design of digital certificates that preserve privacy without sacrificing security. Such certificates function in much the same way as cinema tickets or subway tokens: anyone can establish their validity and the data they specify, but no more than that. Furthermore, different actions by the same person cannot be linked. Certificate holders have control over what information is disclosed, and to whom. Subsets of the proposed cryptographic building blocks can be used in combination, allowing a cookbook approach to the design of public key infrastructures. Potential applications include electronic cash, electronic postage, digital rights management, pseudonyms for online chat rooms, health care information storage, electronic voting, and even electronic gambling.