Privacy in digital identity systems: models, assessment and user adoption

Armen Khatchatourov (1, 2) , Maryline Laurent (3, 4, 5, 6) , Claire Levallois-Barth (7)

1 IMT-BS - LSH - Département Langues et Sciences Humaines
2 LASCO - Laboratoire Sens et Compréhension du Monde Contemporain
3 R3S-SAMOVAR - Réseaux, Systèmes, Services, Sécurité
4 TSP - RST - Département Réseaux et Services de Télécommunications
5 SAMOVAR - Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux
6 CNRS - Centre National de la Recherche Scientifique
7 LTCI - Laboratoire Traitement et Communication de l'Information

The use of privacy protection measures is of particular importance for existing and upcoming users' digital identities. Thus, the recently adopted EU Regulation on Electronic identification and trust services (eIDAS) explicitly allows the use of pseudonyms in the context of eID systems, without specifying the way they should be implemented. The paper contributes to the discussion on pseudonyms and multiple identities, by (1) providing an original analysis grid that can be applied for privacy evaluation in any eID architecture, and (2) intro-ducing the concept of eID deployer allowing to model virtually any case of the relation between the user, the eID implementation and user's digital identities. Based on these inputs, a comparative analysis of four exemplary eID architec-tures deployed in European countries is conducted. The paper also discusses how sensitive citizens of these countries are to the privacy argument while adopting these systems, and presents the "privacy adoption paradox".

Mots clés: EIDAS; Privacy impact as-sessment; E-Government; EID; EID deployer; Pseudonymous authentication; Privacy; Multiple / partial identities; Technology adoption; Selective disclosure; Privacy adoption paradox; Digital identity; Privacy by design; Personal data

Domaines: Réseaux et télécommunications [cs.NI]; Sociologie

Armen Khatchatourov, Maryline Laurent, Claire Levallois-Barth. Privacy in digital identity systems: models, assessment and user adoption. 14th International Conference on Electronic Government (EGOV), Aug 2015, Thessaloniki, Greece. pp.273-290, ⟨10.1007/978-3-319-22479-4_21⟩. ⟨hal-01283997⟩