In this chapter we motivate the need for anonymity at the communication layer and describe the potential risks of having traceable communications. We then introduce the legal requirements on data retention and motivate the need for revocability of anonymity upon the request of law enforcement. We describe the main building blocks for anonymous communication and for anonymity revocation. We expl...

It is well-known that n-of-n Schnorr multisignatures can be produced in one round of communication by adding ordinary Schnorr signatures. As observed by Boneh, this can be extended from n-of-n to arbitrary monotone functions of the signers by use of a linear secret sharing scheme. However, such signatures have the property that they are signer indistinguishable; that is, any signer set which is...

The authors tested the effects of holding raters accountable for their performance ratings on the accuracy and the favorability of those ratings. Undergraduate research participants (N = 247) completed an inbasket exercise and observed a videotaped simulation during 2 sessions over a 2-week period. The simulation presented performance information on 4 simulated subordinates portrayed through vi...

Washington State is in the midst of a multi-payer model home test with implications for the nascent national effort to construct new health care payment and delivery systems. The model homes are redesigned primary care medical practices. Their structural supports include additional upfront payments, potential shared savings, and other elements reflective of “accountable care.” Accountable care,...

By enacting the Patient Protection and Affordable Care Act of 2010 (ACA), Congress provoked change in the status quo in American health care delivery and payment. Although challenged by conservative voices resistant to change, the ACA survived its recent constitutional challenge. Regardless of how Congress tries to amend the ACA in the future, one vestige of the ACA likely to remain at least in...

Current anonymous e-mail systems offer unconditional anonymity to their users which can provoke abusive behaviour. Dissatisfied users will drop out and liability issues may even force the system to suspend or cease its services. Therefore, controlling abuse is as important as protecting the anonymity of legitimate users when designing anonymous applications. This paper describes the design and ...