Previously there have been essentially only two models for computers that people can use to handle ordinary consumer transactions:
(1) the tamper-proof module, such as a smart card, that the person cannot modify or probe; and (2) the personal workstation
whose inner working is totally under control of the individual. The first part of this article argues that a particular combination
of these two kinds of mechanism can overcome the limitations of each alone, providing both security and correctness for organizations
as well as privacy and even anonymity for individuals.
Then it is shown how this combined device, called a wallet, can carry a database containing personal information. The construction
presented ensures that no single part of the device (i.e. neither the tamper-proof part nor the workstation) can learn the
contents of the database — this information can only be recovered by the two parts together.
Research partly done while visiting CWI