Security and privacy in the TeSLA architecture

Christophe Kiennert (1, 2, 3) , Malinka Ivanova (4) , Anna Rozeva (4) , Joaquin Garcia-Alfaro (1, 2, 3)

1 TSP - RST - Département Réseaux et Services de Télécommunications
2 R3S-SAMOVAR - Réseaux, Systèmes, Services, Sécurité
3 IP Paris - Institut Polytechnique de Paris
4 TU-Sofia - Technical University of Sofia [Bulgaria]

In this chapter, we address security and privacy aspects in TeSLA, from a technical standpoint. The chapter is structured in three main parts. Firstly, we outline the main concepts underlying security in TeSLA, with regards to the protection of learners’ data and the architecture itself. Secondly, we provide an empirical analysis of a specific deployment in one of the members of the consortium. Some representative aspects such as security levels in terms of storage, processing and transfer are analyzed in the deployment of TeSLA at the Technical University of Sofia. In the third part, we address identity management issues and outline additional efforts we consider worth exploring.

Mots clés: X.509 certificates; Anonymity; Public key infrastructures; Authentication; Security; Authorship; Privacy; GDPR

Domaines: Informatique [cs]; Cryptographie et sécurité [cs.CR]

Christophe Kiennert, Malinka Ivanova, Anna Rozeva, Joaquin Garcia-Alfaro. Security and privacy in the TeSLA architecture. Engineering data-driven adaptive trust-based e-assessment systems: challenges and infrastructure solutions, 34, Springer, pp.85-108, 2020, Lecture Notes on Data Engineering and Communications Technologies book series (LNDECT), 978-3-030-29325-3. ⟨10.1007/978-3-030-29326-0_5⟩. ⟨hal-02393547⟩