{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,19]],"date-time":"2026-10-19T07:11:26Z","timestamp":1792393886126,"version":"4.4.0"},"reference-count":47,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2016,7,4]],"date-time":"2016-07-04T00:00:00Z","timestamp":1467590400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Ann Math Artif Intell"],"published-print":{"date-parts":[[2016,10]]},"DOI":"10.1007\/s10472-016-9516-8","type":"journal-article","created":{"date-parts":[[2016,7,4]],"date-time":"2016-07-04T03:49:21Z","timestamp":1467604161000},"page":"101-129","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["On compositional reasoning about anonymity and privacy in epistemic logic"],"prefix":"10.1007","volume":"78","author":[{"given":"Yasuyuki","family":"Tsukada","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hideki","family":"Sakurada","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ken","family":"Mano","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yoshifumi","family":"Manabe","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2016,7,4]]},"reference":[{"key":"9516_CR1","doi-asserted-by":"crossref","unstructured":"Backes, M., Hritcu, C., Maffei, M.: Automated verification of remote electronic voting protocols in the applied pi-calculus. In: Proc. 21st IEEE Computer Security Foundations Symposium (CSF \u201908), pp. 195\u2013209. IEEE Computer Society Press (2008)","DOI":"10.1109\/CSF.2008.26"},{"key":"9516_CR2","doi-asserted-by":"crossref","unstructured":"Baskar, A., Ramanujam, R., Suresh, S.P.: Knowledge-based modelling of voting protocols. In: Proc. 11th Conference on Theoretical Aspects of Rationality and Knowledge (TARK \u201907), pp. 62\u201371. ACM (2007)","DOI":"10.1145\/1324249.1324261"},{"key":"9516_CR3","volume-title":"Identity Management: Concepts, Technologies, and Systems","author":"E Bertino","year":"2011","unstructured":"Bertino, E., Takahashi, K.: Identity Management: Concepts, Technologies, and Systems. Artech House, Norwood (2011)"},{"key":"9516_CR4","unstructured":"Boureanu, I., Jones, A.V., Lomuscio, A.: Automatic verification of epistemic specifications under convergent equational theories. In: Proc. 11th International Conference on Autonomous Agents and Multiagent Systems (AAMAS \u201912), vol. 2, pp. 1141\u20131148 (2012)"},{"key":"9516_CR5","doi-asserted-by":"crossref","unstructured":"Canetti, R.: Universally composable security: A new paradigm for cryptographic protocols. In: Proc. 42nd Annual Symposium on Foundations of Computer Science (FOCS \u201901), pp. 136\u2013145 (2001)","DOI":"10.1109\/SFCS.2001.959888"},{"key":"9516_CR6","doi-asserted-by":"crossref","unstructured":"Chadha, R., Delaune, S., Kremer, S.: Epistemic logic for the applied pi calculus. In: Proc. Joint 11th IFIP WG 6.1 International Conference FMOODS 2009 and 29th IFIP WG 6.1 International Conference FORTE 2009 (FMOODS\/FORTE \u201909). LNCS, vol. 5522, pp. 182\u2013197. Springer (2009)","DOI":"10.1007\/978-3-642-02138-1_12"},{"issue":"2","key":"9516_CR7","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1145\/358549.358563","volume":"24","author":"D Chaum","year":"1981","unstructured":"Chaum, D.: Untraceable electronic mail, return addresses, and digital pseudonyms. Commun. ACM 24(2), 84\u201388 (1981)","journal-title":"Commun. ACM"},{"issue":"4","key":"9516_CR8","doi-asserted-by":"crossref","first-page":"435","DOI":"10.3233\/JCS-2009-0340","volume":"17","author":"S Delaune","year":"2009","unstructured":"Delaune, S., Kremer, S., Ryan, M.: Verifying privacy-type properties of electronic voting protocols. J. Comput. Secur 17(4), 435\u2013487 (2009)","journal-title":"J. Comput. Secur"},{"key":"9516_CR9","doi-asserted-by":"crossref","unstructured":"D\u00edaz, C., Seys, S., Claessens, J., Preneel, B.: Towards measuring anonymity. In: Proc. Second International Workshop on Privacy Enhancing Technologies (PET \u201902). LNCS, vol. 2482, pp. 54\u201368. Springer (2002)","DOI":"10.1007\/3-540-36467-6_5"},{"key":"9516_CR10","doi-asserted-by":"crossref","unstructured":"Dingledine, R., Mathewson, N., Syverson, P.F.: Tor: The second-generation onion router. In: Proc. 13th USENIX Security Symposium, pp. 303\u2013320. USENIX (2004)","DOI":"10.21236\/ADA465464"},{"key":"9516_CR11","doi-asserted-by":"crossref","unstructured":"Edman, M., Sivrikaya, F., Yener, B.: A combinatorial approach to measuring anonymity. In: Proc. 2007 IEEE International Conference on Intelligence and Security Informatics (ISI \u201907), pp. 356\u2013363 (2007)","DOI":"10.1109\/ISI.2007.379497"},{"key":"9516_CR12","doi-asserted-by":"crossref","DOI":"10.7551\/mitpress\/5803.001.0001","volume-title":"Reasoning About Knowledge","author":"R Fagin","year":"1995","unstructured":"Fagin, R., Halpern, J.Y., Moses, Y., Vardi, M.Y.: Reasoning About Knowledge. The MIT Press, Cambridge (1995)"},{"key":"9516_CR13","doi-asserted-by":"publisher","unstructured":"Feng, T., Han, S., Guo, X., Ma, D.: A new method of formalizing anonymity based on protocol composition logic. Secur. Comm. Networks. (2014). doi: 10.1002\/sec.1068","DOI":"10.1002\/sec.1068"},{"key":"9516_CR14","doi-asserted-by":"crossref","unstructured":"Fujioka, A., Okamoto, T., Ohta, K.: A practical secret voting scheme for large scale elections. In: Proc. Workshop on the Theory and Application of Cryptographic Techniques (AUSCRYPT\u201992). LNCS, vol. 718, pp. 244\u2013251. Springer (1993)","DOI":"10.1007\/3-540-57220-1_66"},{"key":"9516_CR15","doi-asserted-by":"crossref","unstructured":"Garcia, F.D., Hasuo, I., Pieters, W., van Rossum, P.: Provable anonymity. In: Proc. 2005 ACM Workshop on Formal Methods in Security Engineering (FMSE \u201905), pp. 63\u201372. ACM (2005)","DOI":"10.1145\/1103576.1103585"},{"key":"9516_CR16","doi-asserted-by":"crossref","unstructured":"Gelernter, N., Herzberg, A.: On the limits of provable anonymity. In: Proc. 12th ACM Workshop on Privacy in the Electronic Society (WPES \u201913), pp. 225\u2013236. ACM (2013)","DOI":"10.1145\/2517840.2517850"},{"key":"9516_CR17","doi-asserted-by":"crossref","unstructured":"Goriac, I.: An epistemic logic based framework for reasoning about information hiding. In: Proc. Sixth International Conference on Availability, Reliability and Security (ARES \u201911), pp. 286\u2013293. IEEE Computer Society Press (2011)","DOI":"10.1109\/ARES.2011.49"},{"key":"9516_CR18","volume-title":"Reasoning About Uncertainty","author":"JY Halpern","year":"2003","unstructured":"Halpern, J.Y.: Reasoning About Uncertainty. The MIT Press, Cambridge (2003)"},{"issue":"3","key":"9516_CR19","doi-asserted-by":"crossref","first-page":"483","DOI":"10.3233\/JCS-2005-13305","volume":"13","author":"JY Halpern","year":"2005","unstructured":"Halpern, J.Y., O\u2019Neill, K.R.: Anonymity and information hiding in multiagent systems. J. Comput. Secur 13(3), 483\u2013512 (2005)","journal-title":"J. Comput. Secur"},{"issue":"1","key":"9516_CR20","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1145\/1410234.1410239","volume":"12","author":"JY Halpern","year":"2008","unstructured":"Halpern, J.Y., O\u2019Neill, K.R.: Secrecy in multiagent systems. ACM Trans. Inform. Syst. Secur. 12(1), 5 (2008)","journal-title":"ACM Trans. Inform. Syst. Secur."},{"issue":"4","key":"9516_CR21","doi-asserted-by":"crossref","first-page":"917","DOI":"10.1145\/153724.153770","volume":"40","author":"JY Halpern","year":"1993","unstructured":"Halpern, J.Y., Tuttle, M.R.: Knowledge, probability, and adversaries. J. ACM 40(4), 917\u2013960 (1993)","journal-title":"J. ACM"},{"issue":"22\u201324","key":"9516_CR22","doi-asserted-by":"crossref","first-page":"2239","DOI":"10.1016\/j.tcs.2010.01.031","volume":"411","author":"I Hasuo","year":"2010","unstructured":"Hasuo, I., Kawabe, Y., Sakurada, H.: Probabilistic anonymity via coalgebraic simulations. Theoret. Comput. Sci 411(22\u201324), 2239\u20132259 (2010)","journal-title":"Theoret. Comput. Sci"},{"key":"9516_CR23","doi-asserted-by":"crossref","unstructured":"Hevia, A., Micciancio, D.: An indistinguishability-based characterization of anonymous channels. In: Proc. Eighth International Symposium on Privacy Enhancing Technologies (PETS \u201908). LNCS, vol. 5134, pp. 24\u201343. Springer (2008)","DOI":"10.1007\/978-3-540-70630-4_3"},{"issue":"1","key":"9516_CR24","doi-asserted-by":"crossref","first-page":"3","DOI":"10.3233\/JCS-2004-12102","volume":"12","author":"D Hughes","year":"2004","unstructured":"Hughes, D., Shmatikov, V.: Information hiding, anonymity and privacy: a modular approach. J. Comput. Secur 12(1), 3\u201336 (2004)","journal-title":"J. Comput. Secur"},{"key":"9516_CR25","unstructured":"Jonker, H., Pieters, W.: Receipt-freeness as a special case of anonymity in epistemic logic. In: IAVoSS Workshop on Trustworthy Elections (WOTE \u201906) (2006)"},{"issue":"1","key":"9516_CR26","doi-asserted-by":"crossref","first-page":"46","DOI":"10.1016\/j.ipl.2006.06.016","volume":"101","author":"Y Kawabe","year":"2007","unstructured":"Kawabe, Y., Mano, K., Sakurada, H., Tsukada, Y.: Theorem-proving anonymity of infinite-state systems. Inform. Process. Lett 101(1), 46\u201351 (2007)","journal-title":"Inform. Process. Lett"},{"key":"9516_CR27","unstructured":"Kelly, D.: A taxonomy for and analysis of anonymous communications networks. Ph.D. thesis, Air Force Institute of Technology (2009)"},{"key":"9516_CR28","doi-asserted-by":"crossref","unstructured":"K\u00fcsters, R., Truderung, T.: An epistemic approach to coercion-resistance for electronic voting protocols. In: Proc. 2009 IEEE Symposium on Security and Privacy (S&P \u201909), pp. 251\u2013266. IEEE Computer Society Press (2009)","DOI":"10.1109\/SP.2009.13"},{"issue":"6","key":"9516_CR29","doi-asserted-by":"crossref","first-page":"1251","DOI":"10.1093\/logcom\/exq013","volume":"20","author":"K Mano","year":"2010","unstructured":"Mano, K., Kawabe, Y., Sakurada, H., Tsukada, Y.: Role interchange for anonymity and privacy of voting. J. Logic Comput 20(6), 1251\u20131288 (2010)","journal-title":"J. Logic Comput"},{"key":"9516_CR30","doi-asserted-by":"crossref","unstructured":"Mauw, S., Verschuren, J., de Vink, E.P.: Data anonymity in the FOO voting scheme. In: Proc. Second International Workshop on Views on Designing Complex Architectures (VODCA \u201906). ENTCS, vol. 168, pp. 5\u201328 (2007)","DOI":"10.1016\/j.entcs.2006.11.001"},{"key":"9516_CR31","unstructured":"Pfitzmann, A., Hansen, M.: A terminology for talking about privacy by data minimization: Anonymity, unlinkability, undetectability, unobservability, pseudonymity, and identity management. Ver. v0.34 (2010)"},{"issue":"4","key":"9516_CR32","doi-asserted-by":"crossref","first-page":"482","DOI":"10.1109\/49.668972","volume":"16","author":"MG Reed","year":"1998","unstructured":"Reed, M.G., Syverson, P.F., Goldschlag, D.M.: Anonymous connections and onion routing. IEEE J. Sel. Area. Comm 16(4), 482\u2013494 (1998)","journal-title":"IEEE J. Sel. Area. Comm"},{"key":"9516_CR33","doi-asserted-by":"crossref","unstructured":"Schneider, S., Sidiropoulos, A.: CSP and anonymity. In: Proc. Fourth European Symposium on Research in Computer Security (ESORICS \u201996). LNCS, vol. 1146, pp. 198\u2013218. Springer (1996)","DOI":"10.1007\/3-540-61770-1_38"},{"key":"9516_CR34","doi-asserted-by":"crossref","unstructured":"Serjantov, A., Danezis, G.: Towards an information theoretic metric for anonymity. In: Proc. Second International Workshop on Privacy Enhancing Technologies (PET \u201902). LNCS, vol. 2482, pp. 41\u201353. Springer (2002)","DOI":"10.1007\/3-540-36467-6_4"},{"issue":"3","key":"9516_CR35","doi-asserted-by":"crossref","first-page":"477","DOI":"10.2307\/40041279","volume":"154","author":"DJ Solove","year":"2006","unstructured":"Solove, D.J.: A taxonomy of privacy. Univ. Pennsyl. Law Rev. 154(3), 477\u2013560 (2006)","journal-title":"Univ. Pennsyl. Law Rev."},{"key":"9516_CR36","doi-asserted-by":"crossref","unstructured":"Studer, T.: An application of justification logic to protocol verification. In: Proc. 2011 Seventh International Conference on Computational Intelligence and Security (CIS \u201911), pp. 779\u2013783 (2011)","DOI":"10.1109\/CIS.2011.177"},{"issue":"5","key":"9516_CR37","doi-asserted-by":"crossref","first-page":"557","DOI":"10.1142\/S0218488502001648","volume":"10","author":"L Sweeney","year":"2002","unstructured":"Sweeney, L.: k-anonymity: A model for protecting privacy. Internat. J. Uncertain. Fuzziness Knowl.-based Syst 10(5), 557\u2013570 (2002)","journal-title":"Internat. J. Uncertain. Fuzziness Knowl.-based Syst"},{"key":"9516_CR38","doi-asserted-by":"crossref","unstructured":"Syverson, P.F., Stubblebine, S.G.: Group principals and the formalization of anonymity. In: Proc. World Congress on Formal Methods in the Development of Computing Systems (FM \u201999), Volume I. LNCS, vol. 1708, pp. 814\u2013833. Springer (1999)","DOI":"10.1007\/3-540-48119-2_45"},{"issue":"3","key":"9516_CR39","doi-asserted-by":"crossref","first-page":"828","DOI":"10.1016\/j.future.2012.02.001","volume":"29","author":"FL T\u0307iplea","year":"2013","unstructured":"T\u0307iplea, F.L., Vamanu, L., Varlan, C.: Reasoning about minimal anonymity in security protocols. Futur. Gen. Comput. Sys 29(3), 828\u2013842 (2013)","journal-title":"Futur. Gen. Comput. Sys"},{"key":"9516_CR40","doi-asserted-by":"crossref","unstructured":"Troncoso, C., Gierlichs, B., Preneel, B., Verbauwhede, I.: Perfect matching disclosure attacks. In: Proc. Eighth International Symposium on Privacy Enhancing Technologies (PETS \u201908). LNCS, vol. 5134, pp. 2\u201323. Springer (2008)","DOI":"10.1007\/978-3-540-70630-4_2"},{"issue":"3","key":"9516_CR41","first-page":"177","volume":"3","author":"Y Tsukada","year":"2010","unstructured":"Tsukada, Y., Mano, K., Sakurada, H., Kawabe, Y.: Anonymity, privacy, onymity, and identity: A modal logic approach. Trans. Data Privacy 3(3), 177\u2013198 (2010)","journal-title":"Trans. Data Privacy"},{"key":"9516_CR42","unstructured":"Tsukada, Y., Sakurada, H., Mano, K., Manabe, Y.: An epistemic approach to compositional reasoning about anonymity and privacy. In: Proc. 14th Conference on Theoretical Aspects of Rationality and Knowledge (TARK \u201913), pp. 239\u2013248. (Available as arXiv: 1310.6441 ) (2013)"},{"key":"9516_CR43","doi-asserted-by":"crossref","unstructured":"van der Meyden, R., Su, K.: Symbolic model checking the knowledge of the dining cryptographers. In: Proc. 17th IEEE Computer Security Foundations Workshop (CSFW-17), pp. 280\u2013291. IEEE Computer Society Press (2004)","DOI":"10.1109\/CSFW.2004.1310747"},{"key":"9516_CR44","doi-asserted-by":"crossref","unstructured":"van der Meyden, R., Wilke, T.: Preservation of epistemic properties in security protocol implementations. in: Proc. 11th Conference on Theoretical Aspects of Rationality and Knowledge (TARK \u201907), pp. 212\u2013221. ACM (2007)","DOI":"10.1145\/1324249.1324278"},{"key":"9516_CR45","doi-asserted-by":"crossref","unstructured":"van Eijck, J., Orzan, S.: Epistemic verification of anonymity. In: Proc. Second International Workshop on Views on Designing Complex Architectures (VODCA \u201906). ENTCS, vol. 168, 159\u2013174 (2007)","DOI":"10.1016\/j.entcs.2006.08.026"},{"key":"9516_CR46","volume-title":"Privacy-aware data management by means of data degradation: making private data less sensitive over time. Ph.D. thesis","author":"HJW van Heerde","year":"2010","unstructured":"van Heerde, H.J.W.: Privacy-aware data management by means of data degradation: making private data less sensitive over time. Ph.D. thesis. University of Twente, Enschede (2010)"},{"key":"9516_CR47","doi-asserted-by":"crossref","unstructured":"Veeningen, M., de Weger, B., Zannone, N.: Modeling identity-related properties and their privacy strength. In: Proc. Seventh International Workshop on Formal Aspects of Security and Trust (FAST \u201910). LNCS, vol. 6561, pp. 126\u2013140. Springer (2011)","DOI":"10.1007\/978-3-642-19751-2_9"}],"container-title":["Annals of Mathematics and Artificial Intelligence"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10472-016-9516-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10472-016-9516-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10472-016-9516-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,3]],"date-time":"2025-06-03T19:44:34Z","timestamp":1748979874000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10472-016-9516-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,7,4]]},"references-count":47,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2016,10]]}},"alternative-id":["9516"],"URL":"https:\/\/doi.org\/10.1007\/s10472-016-9516-8","relation":{},"ISSN":["1012-2443","1573-7470"],"issn-type":[{"value":"1012-2443","type":"print"},{"value":"1573-7470","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,7,4]]}}}