U-Prove - Microsoft Research
U-Prove components are released in the Security and Cryptography Incubations Quarterly Technology Drop. A U-Prove token is a type of credential similar to a PKI certificate that can encode attributes of any type, but with two important differences: 1) The issuance and presentation of a token is unlinkable due to the special type of public key and signature encoded in the token; the cryptographic “wrapping” of the attributes contain no correlation handles. This prevents unwanted tracking of users when they use their U-Prove tokens, even by colluding insiders. 2) Users can minimally disclose information about what attributes are encoded in a token in response to dynamic verifier policies. As an example, a user may choose to only disclose a subset of the encoded attributes, prove that her undisclosed name does not appear on a deny list, or prove that she is of age without disclosing her actual birthdate. These user-centric aspects make the U-Prove technology ideally suited to creating the
U-Prove - Microsoft Research Skip to main content Research Publications Code & data People Microsoft Research blog Artificial intelligence Audio & acoustics Computer vision Graphics & multimedia Human-computer interaction Human language technologies Search & information retrieval Data platforms and analytics Hardware & devices Programming languages & software engineering Quantum computing Security, privacy & cryptography Systems & networking Algorithms Mathematics Ecology & environment Economics Medical, health & genomics Social sciences Technology for emerging markets Academic programs Events
related reading
- Secure multi-party computation - Wikipediaen.wikipedia.org
- Non-Revocation Tokenidentity.foundation
- Zero-knowledge proof - Wikipediaen.wikipedia.org
- When MFA isn’t an option: The legacy of ROPC | Red Canaryredcanary.com
- Advanced threat detection with User and Entity Behavior Analytics (UEBA) in Microsoft Sentinel | Microsoft Learnlearn.microsoft.com
- What is Private Key JWT: Deep dive into asymmetric client authentication — WorkOSworkos.com
- Encrypted Spaces — Research previewencryptedspaces.org
- Entra ID service principals in business email compromise schemes | Red Canaryredcanary.com
- Decentralized Identifiers (DIDs) v1.0w3.org
- Intern Breakdown #4: Zero-Knowledge Proofsinternbreakdowns.substack.com
- Revoke user access in an emergency in Microsoft Entra ID - Microsoft Entra ID | Microsoft Learnlearn.microsoft.com
- Report: Identity Crisis: The Biggest Prize in Security | A Contrary Research Deep Dive | Contrary Researchresearch.contrary.com