Section 7.3 motivates the objective of minimizing the use of a given pseudonym in order to reduce the working surface of an attacker for uncontrolled pseudonym disclosure. Moreover, the magnitude of the transitive closure of pseudonymized features that are linkable to a given pseudonym has a proportional impact, if this pseudonym is disclosed, irrespective of the fact that disclosure occurred in a controlled or in an uncontrolled way. That is, the smaller the magnitude of the transitive closure of pseudonymized features is, which are linkable to the disclosed pseudonym, the lower is the undesirable impact of its disclosure. Hence, it is desirable to reduce the linkability of pseudonymized features in audit data for misuse detection.
KeywordsFeature Type Transitive Closure Original Feature Homomorphic Encryption Audit Data
Unable to display preview. Download preview PDF.