A Three-Party Architecture and Protocol that Supports Users with Multiple Identities for Use with Location Based Services

In this paper we describe an architecture that supports the secure operation of Location Based Services (LBSs) over the Internet. In particular, we describe a three-party protocol that is used to mutually identify and authenticate users, LBSs, and a trusted middleware infrastructure that is re-sponsible for managing the users ’ identity and location in-formation. This authentication protocol is based upon the X.509 two-way authentication protocol and a mediated iden-tity based cryptography system, and it enables users to iden-tify and authenticate themselves to the infrastructure using their real identities. In order to preserve the users ’ privacy, they can identify and authenticate themselves to the LBSs using pseudonyms. This protocol can be subsequently used to exchange messages containing location information, and the confidentiality, integrity, and non-repudiation of these messages can be demonstrated