We introduce the notion of {\em escrowed identity}, an application of
key-escrow ideas to the problem of identification.
In escrowed
identity, one party $A$ does {\em not} give his identity to another
party $B$, but rather gives him information that would allow an
authorized third party $E$ to determine $A$'s identity. However, $B$
receives a guarantee that $E$ can indeed determine $A$'s identity. We
give protocols for escrowed identity based on the El-Gamal (signature
and encryption)
schemes and on the RSA function. A useful feature of our protocol is
that after setting up $A$ to use the system, $E$ is only involved when
it is actually needed to determine $A$'s identity.
DIMACS Home Page