A "privacy by design" eID scheme supporting Attribute-based Access Control (ABAC)

This eID scheme built along "privacy by design" principles covers a full range of identification using a single mechanism starting from the use of pseudonyms, followed by a gradual disclosure of some attributes with the consent of the end-user, up to the disclosure of a sufficient number attributes that allows a full identification of an end-user under a given context, again with the consent of the end-user. This eID scheme is resistant to the Alice and Bob Collusion attack (ABC attack) and for that reason mandates the use of secure elements that must have specific functional and security properties. Such secure elements may be provided by any manufacturer, initially without any personal data in it, and may be distributed or sold by anybody, e.g. in supermarkets, in coffee shops or by Internet web sites.