author: B. Sylwester, J. Sylwester ; K.J.H. Phillips
date: Received ; accepted
title: **Soft X-ray coronal spectra at low activity levels observed by RESIK**

The quiet-Sun X-ray emission is important for deducing coronal heating mechanisms, but it has not been studied in detail since the emphOrbiting Solar Observatory (*OSO*) spacecraft era. Bragg crystal spectrometer X-ray observations have generally concentrated on flares and active regions. The high sensitivity of the RESIK (REntgenovsky Spectrometer s Izognutymi Kristalami) instrument on the *CORONAS-F* solar mission has enabled the X-ray emission from the quiet corona to be studied in a systematic way for the first time. Our aim is to deduce the physical conditions of the non-flaring corona from RESIK line intensities in several spectral ranges using both isothermal and multithermal assumptions. We selected and analyzed spectra in 312 quiet-Sun intervals in January and February 2003, sorting them into 5 groups according to activity level. For each group, the fluxes in selected spectral bands have been used to calculate values parameters for the best-fit that lead to a intensities characteristic of each group. We used both isothermal and multitemperature assumptions, the latter described by differential emission measure (DEM) distributions. RESIK spectra cover the wavelength range ($3.3-6.1$ Å). This includes emission lines of highly ionized Si, S, Cl, Ar, and K, which are suitable for evaluating temperature and emission measure, were used. The RESIK spectra during these intervals of very low solar activity for the first time provide information on the temperature structure of the quiet corona. Although most of the emission seems to arise from plasma with a temperature between 2 MK and 3 MK, there is also evidence of a hotter plasma ($T \sim 10$ MK) with an emission measure 3 orders smaller than the cooler component. Neither coronal nor photospheric element abundances appear to describe the observed spectra satisfactorily.

# Introduction

The RESIK X-ray spectrometer on the Russian *CORONAS-F* solar orbiting mission (circular polar orbit: altitude 550 km, period 96 minutes) obtained numerous high-resolution flare and active-region spectra in the $3.3-6.1$ Å range over the period August 2001 – May 2003. The RESIK instrument (Sylwester et al., 2005) was a bent crystal spectrometer with four spectral channels in which solar X-ray emission was diffracted by crystal wafers made of silicon (Si 111, $2d = 6.27$ Å) and quartz (Qu $10\bar 10$, $2d =
8.51$ Å). Although most previous spacecraft crystal spectrometers suffered from the strong instrumental backgrounds caused by fluorescence of the crystal material, RESIK had a system of pulse-height analyzers enabling primary solar photons to be distinguished from secondary photons produced by fluorescence. The background could thus be practically eliminated for much of the period 2003 January – March when the non flaring solar X-ray activity was often below C1 class as measured by the *GOES* 1 – 8 Å sensor. The sensitivity of RESIK was maximized by not having a collimator placed in front of the crystals. This, like the equivalent Bragg Crystal Spectrometer on the *Yohkoh* spacecraft (operational 1991–2001), produced some spectral confusion when two simultaneous bright sources were present on the Sun, but in practice this rarely occurred. The low-activity corona gives rise to X-ray line profiles in RESIK spectra having large line widths through spatial broadening.

Several analyses have been done on spectra of solar flares from RESIK (Sylwester et al., 2006; Chifor et al., 2007; Sylwester, Sylwester and Phillips, 2008), but here we report on spectra obtained during a period of sustained low solar activity, which have high statistical quality because of the relatively high sensitivity of RESIK. The observed spectral shapes including continua are available for analysis of the temperature structure of the emitting regions, specifically the differential emission measure as a function of electron temperature $T$; and from this, the absolute abundances of the elements giving rise to the spectral lines can be assessed.

Quiet-Sun X-ray spectra have not received nearly as much attention in the past as those from flares, but some properties of the quiet Sun have been widely studied using its ultraviolet emission, which has been measured by the following experiments: Orbiting Solar Observatory *OSO* series (1962-1975; see for instance Dupree and Reeves, 1971; Dupree et al., 1973), *Aerobee* rocket spectrometer (1969, see Malinovsky and Heroux, 1973), 9 months of the *Skylab* mission (May 1973-February 1974, see Vernazza and Reeves, 1978), the series of 9 Solar EUV Rocket Telescope and Spectrograph (SERTS) flights (the first in 1989, see Brosius et al., 1996, 1998), the *SOHO* mission (starting in December 1995, CDS and SUMER data, see Warren, Mariska and Lean, 1998). The data obtained have been used as well to construct a reference atlas of quiet-Sun ultraviolet radiation (Curdt, Landi and Feldman, 2004) from which differential emission measure (DEM) distributions can be inferred. Brosius et al. (1996) calculated DEM distributions for quiet-Sun conditions during two observing periods near the maximum of Cycle 21 (1991 May 7 and 1993 August 17) based on SERTS data. Their DEM solutions included a power law in the temperature range $6.3\times 10^4$ K–$5.0\times 10^5$ K with hot plasma as shown by a localized maximum at 5 MK. A DEM with similar distribution was obtained by Kretzschmar, Lilensten, and Aboudarham (2004) based on *SOHO* SUMER data, having a power-law shape in the range $2.0\times 10^4$ K–$2.0\times 10^5$ K with a high-temperature bump at 1.1 MK. Ralchenko, Feldman, and Doschek (2007) have studied quiet-corona spectra as observed by SUMER during the 2000 June 13–19 period, deducing that the observed line intensities can be satisfactorily described by a model with two Maxwellian electron distributions, a first population corresponding to an isothermal temperature of $\sim 1.3\times 10^6$ K, and a second, smaller population ($\sim 5\%$) of hot (300–400 eV) electrons accounting for the intensities of highly charged Ar and Ca ion lines observed by SUMER.

The DEM analysis was also performed using *SOHO* Coronal Diagnostic Spectrometer (CDS) data for the internetwork, network, and bright network regions of the quiet Sun by O'Shea et al. (2000). They find that the DEM distributions differ in each region over the temperature range 0.25 – 1 MK.

Recently, Young et al. (2007) have published a quiet-Sun extreme ultraviolet (EUV) spectrum in the ranges 170–211 Å and 246–292 Å, as observed on 2006 December 23 by the *Hinode* EUV Imaging Spectrometer (EIS).

| No  | Range \[Å\] |         Dominant contributor          |
|:---:|:-----------:|:-------------------------------------:|
|     |             |                                       |
|  1  | 3.40 - 3.62 |       cont. + K xviii $2p$+sat.       |
|  2  | 3.62 - 3.80 | cont. + Ar xviii $2p$, S xvi $4p, 5p$ |
|  3  | 3.85 - 4.10 |  cont. + Ar xvii $2p$+sat, S xv $4p$  |
|  4  | 4.10 - 4.25 |           cont. + S xv sat.           |
|  5  | 4.35 - 4.43 |         cont. + S xv $3p$+sat         |
|  6  | 4.43 - 4.52 |        cont. + Cl xvi $2p$+sat        |
|  7  | 4.68 - 4.74 |   cont. + S xvi $2p$, + Si xiv $8p$   |
|  8  | 4.74 - 4.81 |          cont. + Si xiv $6p$          |
|  9  | 5.00 - 5.13 |         S xv $2p$+sat + cont.         |
| 10  | 5.26 - 5.35 |       Si xiii $5p$+sat. + cont.       |
| 11  | 5.36 - 5.50 |       Si xiii $4p$+sat. + cont.       |
| 12  | 5.50 - 5.63 |          Si xii sat. + cont.          |
| 13  | 5.64 - 5.72 |         Si xiii $3p$ + cont.          |
| 14  | 5.73 - 5.86 |          Si xii sat. + cont.          |
| 15  | 5.90 - 6.00 |               continuum               |

Wavelength intervals used for DEM studies

The quiet-Sun hard X-ray emission observed by *RHESSI* has been examined by Hannah et al. (2007) using a fan-beam modulation technique during seven periods of off-pointing of the *RHESSI* spacecraft between 2005 June and 2006 October. They established new upper limits on the 3–200 keV X-ray emission for when the *GOES* level of activity was below A1 class, updating much earlier measurements (Peterson et al., 1966). Schmelz et al. (2009) have investigated the emission of a nonflaring active region based on the ten filters of the *Hinode* X-ray Telescope data using two independent algorithms to reconstruct the differential emission measure distribution. In addition to the typical low-temperature emission measure ($T<5$ MK), they find a very hot component ($\sim
30$ MK) with small emission measure. These findings have recently been modified by Schmelz 2009, priv. comm.: the temperature of the hotter component is now much lower, around 10 MK. Reale et al. (2009) have investigated the *Hinode* XRT data averaged over one hour during a nonflaring period (2006 November 12), finding a hotter component (temperature $\sim 6.3$ MK) corresponding to a nonflaring active region. These observational results are supported by the theoretical work of Klimchuk et al. (2008) who use hydrodynamic simulations of nanoflares to predict a small amount of hot plasma in addition to the dominant 2–3 MK plasma component.

The RESIK spectra recorded during solar minimum can bridge the gap between the results obtained from ultraviolet and X-ray images and spectra and the models of coronal plasma heating. In earlier work, we analyzed RESIK spectra to determine the conditions of flaring plasmas, but here we apply the same techniques of analyzing emission during low-level periods to deduce the properties of the quiet-Sun corona.

# RESIK spectra selection and isothermal analysis

We selected 312 time intervals, each 5 min in duration, for which solar activity levels in the first quarter of 2003 were at their lowest. The measurements were taken outside intervals of increased background owing to passages of the *CORONAS-F* spacecraft through polar ovals or the South Atlantic Anomaly. Early in 2003, the RESIK instrument characteristics (high voltage and amplitude discrimination) were set at their optimum values. Each spectrum analyzed was integrated over a 302 s interval, the longest selectable period for a low-flux operating mode, so the overall data accumulation time was 26.2 hours. The spectra correspond to *GOES* activity levels from $\sim$A9 to $\sim$B5. We found it useful to group the observed spectra according to the activity level at the time that they were recorded, so that the summed spectra for any group has an improved statistical quality. The division into groups was chosen according to activity level steps of 0.1 in the logarithm (0.1 dex).

In Fig. 1 we show the distribution of spectra with *GOES* classes. The lowest class includes spectra from the *GOES* class between A9 and B1 (1–8 Å flux from $9\times 10^{-8}$ to $1\times 10^{-7}$ W m$^{-2}$), attained between 2003 February 23 and February 25. Although flaring periods were always carefully avoided in selecting spectra, it was impossible to avoid the presence of active regions, as RESIK operated close to the maximum of Cycle 23.

A typical pattern of activity during the time of the selected spectra collection is illustrated (Fig. 2) with a set of full-disk EUV images from the Extreme-ultraviolet Imaging Telescope (EIT; Delaboudiniere et al., 1995) aboard the Solar and Heliospheric Observatory (*SOHO*) on 2003 February 24 around 19:00 UT. The images are in the spectral bands $304$ Å (He ii), $171$ Å (Fe ix-x), $195$ Å (Fe xii), and $284$ Å (Fe xv), which are sensitive to temperatures of about 80000 K, 1.3 MK, 1.6 MK, and 2 MK, respectively. Weak active-region emission is visible in all passbands. This is also true for all other times when RESIK spectra were selected, so our results therefore apply to times when the corona was quiet and also when there were weak active regions. In Fig. 3, the average of all the 312 spectra is shown, with spectral lines or their expected wavelengths identified. The background is a true solar continuum. Identification of main contributing lines is provided in Table 1.

For these quiet-Sun spectra, there is practically no line emission in channel 1 (shown in blue), though for flare spectra, the prominent triplet of lines due to K xviii (3.53–3.57 Å) is always present (Sylwester et al., 2006). Similarly, the Ar  xvii (3.95–4.00 Å) triplet in channel 2 (dark red) is barely distinguished but the lines are very prominent during flares. Only weak line emission is visible in channel 3 (orange), identifiable with dielectronic satellites to the parent $1s-3p$ (*w3*) transition line of the H-like S xvi ion. However, channel 4 (yellow) is rich in strong lines formed by relatively cool plasma ($T < \sim5$ MK).

The He-like S xv line triplet (5.05-5.10 Å) is prominent but with only two components resolved owing to increased line widths. More prominent line features correspond to Si xiii transitions $1s^2 - 1s4p$ and $1s^2 - 1s3p$ ($w4$, $w3$) at 5.40 and 5.68 Å, with nearby Si xii dielectronic satellites at 5.56 and 5.82 Å ($d4$, $D$). The $w4$, $d4$ lines are marked by red arrows, the $w3$, $D$ lines by blue arrows. Ratios of the flux in an Si xii dielectronic satellite feature to that in the parent Si xiii resonance line is very sensitive to temperature in the range 2–5 MK (Phillips et al., 2006). Here we used the ratio $D/w3$ to determine the cooler plasma component temperature characterizing the general coronal emission that the selected RESIK spectra are sensitive to. To do this, we fitted Gaussian profiles to the lines (continuum level subtracted) and the flux ratios compared with theoretical values. The derived "isothermal" temperatures ($T_{\rm
D/w3}$ raw) are given in Table 2 for each activity class. The temperatures range from 3.1 MK to $\sim 3.8$ MK for the lowest and highest activity classes. They are much lower than those corresponding to flare temperatures (Phillips et al., 2006), even those late in the decay phase. It is striking to see that the intensity of the satellite line $D$ is much higher than the parent line $w3$, even for a medium-$Z$ ($Z=14$) element like Si. Generally, this has been seen in flare spectra only for Fe  xxiv satellites near Fe xxv lines (near 1.9 Å: $Z$ for Fe = 26): note that the flux ratio scales as $Z^4$.

A simple way of deducing the physical characteristics of an emitting plasma is by the ratio of fluxes in broad-band filters. For RESIK, the corresponding technique is to take the flux ratio of the total amount of emission in channels 3 and 4. An isothermal assumption is often too crude to be useful (as will be shown later), and physical interpretation of derived values can be ambiguous (Sylwester, 1990). The results of the analysis are given in Table 2 (denoted by "3/4" entries). The $T_{3/4}$ values clearly decrease with increasing activity levels, against expectation, whereas the values of $T_{D/w3}$ increase. This can be understood in terms of the DEM analysis presented later. The most commonly used diagnostics of physical conditions in the coronal thermal plasma component rely on interpreting the flux ratios measured in the two standard *GOES* bands. This standard approach (available, e.g., in the *GOES* section of the IDL *SolarSoft* package: Freeland & Handy 1998) was used here, and values of temperatures and emission measures are given in Table 2 as averages over corresponding activity groups (denoted by subscript G). It should be stressed, however, that the *GOES* values derived for the lower intensity classes may be somewhat biased by problems intrinsic to measurements of very low flux levels. The results shown in Table 2 indicate that $T_{\rm G}$ decreases with activity class, as with the values of $T_{3/4}$. With average values of $T$ and $EM$, we may estimate the total thermal energy in the soft X-ray emitting component. It has been shown by Sylwester et al. (2008) that this energy content can be expressed as

$$E_{th} = 3k T\, N_e\, V = \sqrt{V}\, ThM~~~~~~   {\rm ergs,}$$ where $V$ is the emitting volume and $ThM$, a "thermodynamic measure", is defined by

$$ThM = 3k T \,\sqrt{EM}~~~~~~~~~~~~{\rm g~cm}^{1/2}\,{\rm s}^{-2}.$$ The use of $ThM$ is convenient as its variation directly reflects the changes of thermal energy, provided the emitting volume does not change substantially. Derived values of $ThM$ are given in Table 2. It is seen that, in spite of significant differences between the values of $T_{3/4}$ and $T_{G}$ as well $EM_{3/4}$ and $EM_{G}$, values of $ThM_{3/4}$ and $ThM_{G}$ agree quite well. This is an indirect illustration that the value of $ThM$ is relatively independent of the uncertainties in determinations of $T$ and $EM$ (the uncertainties cancel in the product).

# Differential emission measure determinations

It is generally known that the isothermal approach to determining the characteristics of emitting plasma has serious limitations (Sylwester, 1990) and a more advanced approach relies on the concept of differential emission measure, DEM (Sylwester, Schrijver, and Mewe, 1980). We used the DEM approach to analyze of quiet-Sun RESIK spectra arranged by activity grouping. The algorithm we used follows the Bayesian approach, described in detail by Sylwester, Schrijver, and Mewe (1980), and called the Withbroe-Sylwester algorithm. To apply this algorithm to the analysis of RESIK data, we selected 15 spectral intervals in all four RESIK channels. The wavelength ranges of channels 1 and 2 were divided into 2 broad ranges (between 0.15 Å and 0.25 Å wide) with the remaining 11 ranges in channels 3 and 4 placed around stronger lines or line groups. The ranges are given in Table 1, together with principal contributors to the emission. We performed tests by slightly varying the band widths to find which were the most suitable.

The spectral fluxes were then integrated over each band to improve the count statistics. These fluxes were then used as input to the DEM iterative algorithm. Theoretical spectra providing another source of input for the DEM inversions have been calculated from the CHIANTI v5.2 atomic code (*SolarSoft*) using the coronal, photospheric, and the other suitable plasma composition models.

The goodness of the fit between the observed and DEM-fitted band fluxes was determined by the standard normalized $\chi^2$ values,

$$\chi^2=\frac{1}{n}\sum_{\rm i=1}^{\rm
n}{\frac{(F_i-F_{ic})^2}{\sigma_i^2}},$$

which is easy to determine when the uncertainties (due to photon count rate statistics) are known. The absolute fluxes should have very small uncertainties because the RESIK intensity calibration is well known (Sylwester et al., 2005). The DEM iterative process was continued for $10^4$ iterations or whenever continuous convergence was attained.

```latex
\begin{table*}
\caption{Derived plasma parameters for individual activity classes}  % title of Table
\label{table:2}      % is used to refer this table in the text
\centering                          % used for centering table
\begin{tabular}{c c c c c c}        % centered columns (4 columns)
\hline\hline                 % inserts double horizontal lines
\vspace{1mm}
 Level               & {\bf A9-B1} & {\bf B1-B2} & {\bf B2-B3} & {\bf B3-B4} & {\bf B4-B5}   \\ % table
\hline
{\bf Isothermal}         &{\bf results}&             &             &             &           \\
&&&&&\\
\hline
%\vspace{3mm}
&&&&&\\
$T_{\rm D/w3}$ [MK]     & 3.11        &  3.68       & 3.84        & 3.88        & 3.85           \\
\hline
&&&&&\\
$T_{\rm G}$ [MK]      & 7.7         &  6.5        & 5.7         & 5.1         & 5.1           \\
$EM_{\rm G}^a$        & 0.98        &  2.7        & 4.8         & 9.8         & 12.6          \\
$ThM_{\rm G}^b$       & 1.00        &  1.40       & 1.67        & 2.08        & 2.38          \\
\hline
%\vspace{3mm}
&&&&&\\
$T_{\rm 3/4}$ [MK]       & 4.8         &  4.8        & 4.0         & 3.6         & 3.8           \\
$EM_{\rm 3/4}^a$         & 1.6         &  7.5        & 19.7        & 47.8        & 59.7          \\
$ThM_{\rm 3/4}^b$        & 0.80        &  1.70       & 2.33        & 3.29        & 3.81          \\
%\vspace{3mm}
\hline\hline
{\bf Multithermal}           & {\bf results}&             &      &             &               \\
&&&&&\\
\hline
 {\bf El. abun}          & $10^{-6}$   $\Downarrow$  &   &   &   &     \\    % table  heading
Ar                       &  4.65       &   4.59      &  4.35       &  4.45       &  4.27 \\
S                        &  5.62       &  10.6       & 14.3        & 17.6        & 17.8          \\
Si                       & 27.4        &  25.5       & 26.5        & 25.4        & 27.7            \\
%\vspace{1mm}
\hline                 % inserts double horizontal lines
%   {\bf Char.} &    {\bf of}   & {\bf low-T} &{\bf comp.}&               &                 \\
$T_{\rm L}$ [MK]         & 2.9           &  2.6          & 2.5           & 2.4           & 2.3            \\
$EM_{\rm L}^a$  & 0.17           &  0.79          & 2.77           & 8.63           & 22.2 \\
$ThM_{\rm L}^b$  & 1.58           &  3.08          & 5.54           & 9.25           & 14.1 \\           %\vspace{1mm}
\hline                 % inserts double horizontal lines
%   {\bf Char.} &    {\bf of}   & {\bf high-T} &{\bf comp.}&               &                 \\
$T_{\rm H}$ [MK]         & 9.1           &  8.0          & 6.9           & 6.5           & 6.1            \\
$EM_{\rm H}^a$  & 0.023           &  0.089        & 0.42         & 1.03           & 1.86  \\
$ThM_{\rm H}^b$  & 0.18           &  0.32          & 0.58           & 0.87           & 1.11 \\
\hline                 % inserts  horizontal lines
\end{tabular}
{\small \flushleft $^a$ in $10^{47}$~cm$^{-3}$;  $^b$ in
$10^{15}$~g~cm$^{-3/2}$.}
\end{table*}
```

In Eq. 3, $F_i$ is the photon flux measured in band *i*, $F_{ic}$ is the flux calculated based on given DEM model, *n* the number of spectral bands used (*n=15*), and $\sigma_i$ the uncertainty in the measured flux of *i* band. We have initially performed the DEM inversion over the temperature range from 2 MK to 30 MK, but we found it unnecessary to extend the range beyond $T>15$ MK. No further improvement in the fit quality is observed with a larger band-width in the case of the quiet spectra analysis. Clearly the line and continuum fluxes depend on the plasma composition of the source region, so an appropriate element abundance model must be used to recover the DEM shape accordingly.

It is not obvious which of the two generally used composition models (coronal or photospheric abundances) should be used in the analysis of the quiet corona spectra, so we did the DEM inversions for both sets of plasma abundances. The resulting best-fit DEM shapes for the averaged spectrum (integration time 26.2 hours) are shown in the left and middle panels of Fig. 4. The envelope of uncertainties of the DEM shape, from 100 Monte-Carlo runs, is shown by the lengths of the error bars. It can be seen how sensitive the resulting shape of the average DEM is to the assumed model of the plasma composition. The best-fit $\chi^2$ values are beyond an acceptable range for both photospheric or coronal composition models. We thus concluded that to provide a reliable estimates of the DEM shape we should also finely adjust the plasma composition in order to optimize the fit between the observed and calculated spectral band fluxes. To do this, we generated a large spectral look-up, many-dimensional spectral database containing the synthesized profiles in the spectral ranges covered by RESIK (each 0.001 Å), in 101 temperature points (equidistant between $6<{\rm log}\,T<8$), with varying abundances of the elements Ar, S, and Si. The abundances of the other elements not directly influencing the spectral shape for the considered $T$-range of calculations were kept equal to their coronal values. The range of particular element variability was taken from 0.1 to 20 times the coronal abundance value.

With such a large spectral look-up cube it has been relatively easy to look for effects of the dependence of the DEM inversion on particular-element composition. The results obtained are illustrated in Fig. 5, where we show the trend in the minimum value of $\chi^2$ as a function of element absolute abundance for Ar, S, and Si. A well-defined minimum is present in each of the plots. The location of the minimum along the abundance axis is placed close to the photospheric value for S and Si. For the element Ar, which has a high value of first ionization potential (FIP), derived optimum abundance is above the coronal value. It follows that neither the photospheric nor the coronal abundance models can be used to describe the observed set of spectral intensities at the same time. Therefore we performed the DEM inversion using the optimum abundance values as determined from the position of the minima in Fig. 5. The result is shown in Fig. 4 (right panel). It is seen that the calculated shape of the DEM is smoother in comparison with the photospheric or coronal cases and the error envelope decreases. The calculated value of the normalized $\chi^2$ is also brought now into an acceptable range. As a consequence of this exercise, we decided to perform the composition optimization process for every DEM inversion for corresponding activity class. The results are shown in Table 2 and illustrated in Fig. 7.

The calculated, abundance-optimized shapes of DEM distribution are presented in different colors. The black histogram represents the highest activity class (B4-B5). No error bars are shown in order to increase the visibility. It is observed that all DEM distributions are bimodal with the cooler (lower temperature) and hotter (higher temperature) components well separated. As the activity level increases, the average temperatures of the low and high-T components shift toward lower temperatures. This is somewhat unexpected but can be understood as partly due to the deconvolution process working more effectively when the emission measure ratio of the lower and higher-T components is decreasing. The amount of cooler plasma found is orders of magnitude higher than the hotter one. Depending on the activity level, this amounts to 750 and 1190 for the lower and higher activity levels, respectively. In Table 2 the basic characteristics of the cooler (index L) and hotter (index H) plasma components is presented. In calculating the total thermal energy content from the obtained DEM=$\varphi(T)$ distributions, we used the following formulas, derived assuming a constant pressure or density in the emission volume: $$E_{th}|_{p={\rm const}}=\sqrt{V}\,\, 3 k \sqrt {\int{T^2\varphi(T)dT}}$$ $$E_{th}|_{Ne={\rm const}}=\sqrt{V}\,\, 3 k \frac{\int{T \varphi(T) dT}}
  {\sqrt{\int{\varphi(T)dT}}}~~~.$$

It is straightforward to assign the meaning of thermodynamic measure $ThM$ to the righthand factors of Eqs. 4 and 5. It was found that the difference between results obtained in the constant pressure or constant density assumptions did not differ by more than a few percent for the considered DEM shapes, so in Table 2 we insert average values, characteristic of the cooler and hotter components. With the knowledge of respective volumes occupied by a cooler and the hotter plasma, it would be possible to estimate thermal energy content of respective components. This study is in progress.

The results of DEM calculations with the element-abundance optimization for the five activity classes are shown in Fig. 7 in different colors. The bimodal character of resulting DEM is evident. The average values of the parameters characterizing each of the two plasma components are given in Table 2 along with the associated set of optimum elemental abundances is provided. The data set in Table 2 shows that the abundances of Ar and Si do not depend on the activity level, but the sulfur abundance of the plasma contributing to RESIK channel 4 spectra systematically increases by a factor of $\sim 4$ from a level well below the photospheric to the coronal abundance with activity increasing from lower to higher classes. The reason for this behavior is not known at present. It is important to note that the optimum abundances of Si are below the generally assumed photospheric level, but the Ar abundances (Ar is a high-FIP element) lie even above coronal values. As concerns the energy content associated with the two plasma components, it is interesting to note that the thermodynamic measure ratios of the lower and higher-$T$ components are much less than the ratio of respective emission measures. Provided that the emitting volumes are comparable, this would mean that the ratio of the total thermal energy content of the hotter and cooler components is not all that different, and as a consequence, the heating processes responsible for formation of the hotter component should not be disregarded in studies of the overall energy balance even for nonflaring coronal conditions.

# Concluding remarks

We analyzed 312 individual RESIK spectra grouped into 5 different activity classes based on *GOES* levels of activity recorded at the time of the spectra collection. All selected spectra were taken during the nonflaring, low activity conditions prevailing in the corona, though some weak active-region emission was always present. The spectral observations (all with a five-minute integration time) cover the period between 2003 January 1 and March 14. The analysis assumed both isothermal and multithermal distributions, the latter leading to determination of DEM distributions for each activity class. The DEMs were obtained with the Withbroe-Sylwester Bayesian iterative, maximum likelihood procedure. The fluxes integrated over 15 wavelength bands covering the range 3.3 - 6.1 Å were used as an input data for the deconvolution. We found it necessary to allow for the emitting plasma composition to be nonstandard, i.e. neither coronal nor photospheric, by varying the abundances of those elements making important contributions to the line emission in the spectra. This analysis has never been done before except for a few flares (to be published, Montreal COSPAR). The main results of the present study follow.

1.  It is necessary to use the multithermal approach in analyzing the spectra. The results obtained in the isothermal approximation provide different values of $T$ and $EM$ parameters depending on the ratio considered. However, the values of so-called thermodynamic measure that is directly related to the total thermal energy plasma content are very close, because they are surprisingly independent of the particular ratio used for its determination.

2.  It appears necessary to allow for the plasma composition differences when using the multitemperature approach in the analysis. Neither coronal nor photospheric composition models are able to describe the observed spectra satisfactorily. This result may also bias the outcome of any isothermal analysis performed with an isothermal approach.

3.  The two-temperature character of the DEM shape determined here for non-flaring plasmas has also been obtained for flares (Sylwester et al. 2008). The presence of the higher-$T$ component, with $T$ somewhat below 10 MK, is physically important. The emission measure associated with this hotter plasma is $\sim 3$ orders of magnitude smaller than in the generally accepted $T \sim 2 - 3$ MK component. This higher-$T$ component is required because it is impossible to reproduce the observed spectra without it.

It is worth noting that the presence of a hotter component in active region emission has been recently suggested by Reale et al. (2009) from their analysis of *Hinode* XRT images of an active region and by Schmelz et al. (2009), although the very high temperature of the hotter component discussed by Schmelz et al. (2009) has been reduced to a value near what is obtained in this work (Schmelz 2009, priv. comm.).


abstract: Data security, which is concerned with the prevention of unauthorized access to computers, databases, and websites, helps protect digital privacy and ensure data integrity. It is extremely difficult, however, to make security watertight, and security breaches are not uncommon. The consequences of stolen credentials go well beyond the leakage of other types of information because they can further compromise other systems. This paper criticizes the practice of using clear-text identity attributes, such as Social Security or driver's license numbers—which are in principle not even secret—as acceptable authentication tokens or assertions of ownership, and proposes a simple protocol that straightforwardly applies public-key cryptography to make identity claims verifiable, even when they are issued remotely via the Internet. This protocol has the potential of elevating the business practices of credit providers, rental agencies, and other service companies that have hitherto exposed consumers to the risk of identity theft, to where identity theft becomes virtually impossible.
author:
bibliography: Refs.bib
title: Why the Equifax Breach
  Should Not Have Mattered

# Introduction

A recent data breach at consumer credit reporting agency Equifax has compromised sensitive personal information such as Social Security numbers, birth dates, and driver's license numbers of as many as 143 million US consumers and up to 44 million British residents . Consumers are outraged and concerned about the looming threat of falling victim to identity theft. Dozens of people whose personal data were leaked have filed lawsuits against Equifax. Politicians decry the lack of control that consumers have over their information as it is collected and sold by companies. Senator Warren and others were the first to respond with legislation they introduced as the Freedom from Equifax Exploitation (FREE) Act , which would let consumers "freeze" and "unfreeze" their accounts at no cost. In the meantime, the Federal Trade Commission (FTC) has started an investigation into the hack, scrutinizing the company's data security practices for possible neglect.

While all these responses address legitimate concerns regarding the business practices of credit reporting agencies and emphasize the necessity of companies taking responsibility for the protection of personal information that is stored on their servers, one very important question remains unasked: Why, in this day and age, do we allow plain-text, copyable strings of characters to serve as a means of authentication?

This paper provides answers to this question, and it suggests a path forward by providing a practical solution towards improving the state of affairs. In particular, it shows how well-established cryptographic algorithms can be leveraged to drastically improve the verifiability of identity claims. The result is a secure and verifiable format for the storage and exchange of identity claims, which, once it establishes itself as an industry standard, would render plain-text personal information useless for the purpose of committing identity fraud. Had this kind of technology been deployed, the Equifax breach would have still been problematic from a privacy standpoint, but it would not have subjected millions of consumers to a substantial risk of falling victim to identity fraud.

# Background

The problem of identity theft is multifaceted, and it can be studied through many different lenses. While the technical execution of an attack can be explained in terms of computer science, engineering, or even psychology (social engineering ), the phenomenon also can be treated as a societal problem, and its incidence be explained in the frameworks of law and economics. FTC consumer complaint statistics indicate that identity theft has been steadily on the rise throughout the 2000s . Two very different explanations for this have gained traction in the legal academic literature. On the one hand, Lopucki  argues that the decline of public life and the gradual removal of contact information from public registers has lead to an inability of businesses to authenticate clients. Solove , on the other hand, attributes the problem to a lack of control that consumers have over their personal information. This lack of control increases the likelihood that one's personal information ends up in the hands of criminals.

The thesis of this article is that neither Lopucki nor Solove is right. Of course, impersonation is easier when it can be done over the phone or from behind a computer screen, but publicly available personal information—precisely because it is *publicly* available—can be no useful aid in identifying fraudsters. The lack of control over personal information, however, *is* problematic, but particularly because it is violating of privacy, not because it necessarily weakens security. Besides, given the mega security breaches that we have seen over the recent years (Home Depot, Target, and JPMorgan have had high-profile security breaches, all of which occurred fairly recently, in 2014 ), so much data has already been leaked that there is little left to control. The solution to identity theft must therefore not be sought in measures that limit or increase *access* to personal data, but in a mechanism that protects against the improper *usage* of personal data.

# Incentives and Risk

Commercial businesses optimize their activities to maximize net profit. As such, fraud is a risk like any other that needs to be managed. One way to manage risk is to invest in measures that reduce the risk, another is to insure against damages. Companies will make a trade-off between these strategies that they expect is most profitable . Preventative measures can reduce insurance expenses and foster consumer trust (which potentially leads to higher revenue), but the cost of implementing preventative measures may outweigh the reduction in insurance cost, in which case the question remains: How pertinent are those measures to the customer experience? If a risk poses no threat to loss of revenue and it is more effective to insure against damages, a company has no incentive to allocate budget for prevention. The only other factors that will tip the scale towards prevention are laws, rules, and regulations which, if not abided by, could hurt business via lawsuits, license revocations, or fines.

Credit card companies are notorious for the poor security of their payment methods: particularly in the US, transactions normally do not require the customer to enter a PIN-code, and in-person transactions typically require no identification; sometimes not even a signature. Purchases made through the Internet often do not involve any authentication at all; it is typically sufficient to enter the card holder name and billing address, along with the credit card number and CCV. It is easy to explain why credit card companies continue to use such primitive technology: it is more profitable to do so. Sophisticated security measures are costly to implement, but, perhaps more importantly, they potentially make it more complicated (or impossible) to make purchases, particularly online, via phone, or in remote areas where direct authentication of a transaction may not be feasible. Hence, improved security, aside from the cost of implementing it, could lead to a reduction in revenue. Apparently, these costs are expected to outweigh the cost of credit card fraud. Instead of improving security to prevent fraud, credit card companies have shifted their focus to just-in-time fraud *detection*, leveraging statistical models (e.g., ) and machine learning techniques (e.g., ) to identify suspicious transactions in order to block them or verify their legitimacy with the customer. This turns out to be an adequate solution for the merchant, the consumer, and credit card issuer; the financial damage of credit card fraud is mitigated with minimal impact on the customer experience, and the financial liability is absorbed by the card issuer or the merchant.

As shown in the credit card example, when there exists a direct relationship between a business and its customer, damage control may indeed be a more pragmatic answer to fraud than it is to try to prevent it. The problem is: there might not be such relationship. In the case of Equifax, other businesses, not consumers, are the company's customers. It would be more accurate to say that consumers (or their data) are Equifax's product. Hence, Equifax has little incentive to align its interest with the interests of consumers. On the contrary, safeguarding consumer data is a costly undertaking. If companies like Equifax were more invested in protecting consumer data breaches may be less likely to occur, but impenetrable security is very difficult (if not impossible) to achieve. And when a breach does occur, where a credit card company can simply issue new credit cards and block and revoke compromised ones, data brokers and credit reporting agencies have no such power with respect to the data they handle. This leaves the burden of having to deal with the aftermath of a potential abuse of any stolen information to rest entirely on the affected consumers, even though they never entrusted the company that leaked their information with storing their personal data to begin with.

An example of such an aftermath is the more insidious variant of a credit card fraud that entails the illegitimate creation of a new account, which can take months before it is discovered. Again, it is a misalignment of incentives between businesses and their customers that ends up facilitating identity theft. In , Hoofnagle exposes just how embarrassingly easy it is for impostors to obtain credit or medical services. The paper discusses sixteen cases of identity fraud, and in almost all of these cases credit or services were granted on the basis of applications that were rife with errors that should have suggested fraud. Yet, because most of the cost of identity theft is externalized, and businesses make a trade off that optimizes their own profit, they choose to issue credit or provide services even in marginal situations. Companies do not want more rigorous screening because it will cost them revenue. This textbook example of externalizing cost will not disappear unless careless application screening are to become penalized by law, or the injury that results of negligent screening is to be considered a legal basis for a tort claim.

Of course, Equifax is now in a world of legal trouble as it faces lawsuits that are seeking class action status . The legal battle that shall unfold in the years to come may lead the industry to re-evaluate its priorities with respect to the protection of consumer data, but that will only address part of the problem. The remainder of this article discusses a technical solution to the data breach problem that, instead of focusing on improvement of data confidentiality, aims to diminish the practical value of plain-text personal information by providing a reliable method for proofs of identity. It is clear, however, that the industry cannot be expected to take the lead in adopting this technology unless a change is incentivised or enforced by law.

# Certified Identity Claims

The purpose of a Certified Identity Claim (CIC) is for a relying party (RP) e.g., an airline, to obtain from a subject (S), e.g., a traveler, an attestation of the relationship between S and some set of attributes (e.g., last name, date of birth, and passport number)—information similar to that which was compromised by the Equifax breach. The use of CICs is a solution to the problem of identity theft, which entails the fraudulent use of attributes that relate to *another* individual than the person using them, for example, to gain unwarranted access to resources. It is the ability to verify the relationship between an identity claim and the entity that issues it that makes identity theft virtually impossible.

The certification of identity attributes is carried out by a trusted third party, referred to as the attribute authority (AA). In this system, identity theft would require an attacker to either compromise the security between S and AA or steal the private key of AA. Both are very difficult to achieve, and both are reparable, respectively by resetting S's authentication credentials or by revocation of AA's certificate.

## Verification of CICs

The use of a CIC involves a particular sequence of actions and message exchanges. Let us examine the message sequence that is presumably the most common, where RP requests S to prove ownership of some attribute, and S obliges by requesting AA to provide a CIC, which S finally relays to RP. This sequence, illustrated in Fig. , would substitute for requests for *uncertified* identity claims which, on the Web, are ordinarily solicited via a form that is rendered in the browser and filled out manually with keyboard input from the user. An important difference is that while an HTML form provides a description that is understandable by humans, the request sent from RP to S has to be passed along to a third party, AA, which, after authenticating S, will have to parse the request and compile an appropriate answer. All of the latter should be carried out automatically, so the format of the request must be machine readable. Importantly, the request must *also* be rendered in a human-readable form to enable the user operating S to determine whether it would indeed like to grant the request and forward it to AA, or deny it and cancel the exchange.

If we examine Fig.  a bit closer, we see that the request consists of three parts; a description, a nonce, and a certificate. The description encodes what particular information is requested from S. The nonce is a randomly generated bit string that is only used once, never across subsequent requests. The nonce is required to prevent replay attacks. Because AA bundles the requested attributes with the nonce that is provided by RP, it is evident that the certification must have occurred in response to RP's request. Without the nonce, S could reuse a CIC that it had previously obtained from AA, even if AA would no longer certify the claim at the present time (e.g., because S no longer has an active account).

After authenticating S, AA obtains the request and has to formulate a valid response. For instance, if RP is a lender and S is a potential borrower, the request may look like `[name, credit_score]`, and the matching attributes would look something like `['John Davis', 589]`. The next step is to encrypt the attributes together with the nonce using the public key of RP. The resulting cipher text is then signed by AA (using its private key). The extra round of encryption that is applied, before AA does its signing, is critical because it prevents RP from being able to stage a man-in-the-middle attack. Without it, RP would be able to retrieve a request from *another* relying party, say X, forward it to S (along with the same nonce), obtain a CIC from S and submit it to X. Neither X or S would be able to detect the attack. Because AA encrypts the attributes with the public key of RP, X will not be able to read them. It is important that the signature is applied after the encryption and not the other way around. If the keys were to be used in reversed order, RP would be able to decrypt the signed attributes and encrypt them with X's public key before forwarding them to S. Alternatively, if RP were to present X's certificate to S instead of its own, the attack would be detectable by S.

## Trust

Before RP can verify a claim, it first has to decide whether AA is authoritative to assert the veracity of the claim. The authenticity of the certification provided by AA may be derived from the certificate that RP receives from S. This certificate ties the "common name" of the AA (e.g., bankofamerica.com) to a public key, attested by a chain of trust that should lead back to an intermediary or root CA that RP also trusts. The most trivial way for RP to keep track of relationships between AAs and the types of claims they are trusted to certify, is to maintain a white list. Simply put, for each claims request that RP makes, it will need to *a priori* decide whose certifications it will accept as material. For example, for a claim that establishes holdership of a bank account, all well-established banks could be acceptable AAs. Another method would be for RP to request a claim from AA and expect it to be certified by the American Bankers Association. What this mechanism basically gives rise to is a dynamic variant of a Public-Key Infrastructure (PKI) that is guided by ad-hoc inquisition rather than deliberate top-down one-off design.

## Privacy

CICs can be viewed as a privacy-enhancing technology. Apart from preventing misuse of personal information, the use of CICs obviates the need for the collection of personal information beyond what is strictly necessary. Because identity claims are independently verifiable, there is no need to rely on cross referencing with other information in order to gain confidence in the authenticity of the claims. Better yet, a relying party will be less inclined to rely on omni-directional identifiers  (i.e., information that uniquely identifies an entity across multiple contexts, such as a Social Security Number) if it can increase confidence in the veracity of the identity claims it actually cares about. For instance, assume that a service provider needs to determine eligibility on the basis of an applicant's age, taxable income, and marital status. Instead of requesting copies of the applicant's passport, tax return, and marriage certificate, it could simply request CICs that attest the required information, without even revealing as much as the applicant's name.

The decoupling between RP and AA is deliberate. The fact that all communication between them goes through S puts the user in maximal control of the information flow. In this way, the user controls when and how often a third party can access their personal information. Of course, modulo legal provisions in a privacy statement, a user has no control over what a third party does with the personal information it has already acquired. However, particularly for transient claims (e.g., account balance), it is useful that the protocol gives S the power to throttle how often RP receives updates. Of course, the decisions of S may well be performed automatically on the basis of some predefined policy rather than having a human on the loop. The avoidance of direct communication between RP and AA could potentially also prevent AA from tracking the activities of S, but the protocol in Fig.  reveals RP's identify to AA by sharing its public key.

Although a relying party is capable of storing the contents a CIC in clear text, the sequence of cryptographic operations on the information guarantees that RP cannot extend the ability to verify the CIC to a third party without also handing over its private key, which would compromise RP's own security. To inspect the CIC, it must first be decrypted with AA's public key and then once again with RP's private key. Without the latter step, the contents of the CIC is unreadable, and if the claim is shared in clear text it is no longer verifiable.

## Vulnerabilities

The security of CICs is predicated on some basic assumptions which, albeit reasonable, under certain circumstance could be broken. Let us discuss them one by one.

### Compromised keys

It is possible that the private key of RP or AA gets stolen. This would impair the ability of S to authenticate them, thus making sessions susceptible to man-in-the-middle attacks. When AA has its private key stolen, the trustworthiness of its signature is also compromised.

### Faulty or dishonest parties

The cryptography prevents attackers from tampering with claims, but it has no way to prevent false information from ending up in a claim. Claims are trusted on the basis of authority. In principle, AA could certify a false claim, or it could impersonate S. However, this sort of malicious behavior would violate trust and would quickly lead to the demise of AA.

### Broken random number generators

It is important that a sufficiently random nonce is produced by RP. If it fails to do so, S may be able to successfully "replay" a previously issued CIC.

### Quantum computers

The strength of public-key cryptography hinges on the computational intractability of mathematical problems like prime factorization of large integers. Quantum computers hold the promise of performing factorization in exponentially less time than classical or stochastic methods could . Thus far, quantum computers are not that capable, but there are reasonable expectations that quantum supremacy is achievable in the not-too-distant future .

## Adoptability

The proposed protocol can be implemented using off-the-shelf technology and existing web standards (RSA  for the signing and verification of claims, X.509  for the certificates that authenticate the signatures, HTTPS  for end-point verification and secure communication), and would require only a modest standardization effort. Specifically, the syntax of requests and claims needs to be agreed upon, and there must be a standardized conceptualization of the attributes that can be featured in them: all parties involved will need to understand the contents of a CIC. SAML  is an XML-based standard that is already equipped with the ability to encode assertions regarding identity attributes, but the idea of certified identity claims could be extended beyond the assertion of simple attributes. A more elaborate protocol could potentially leverage the W3C Web Ontology Language (OWL)  and allow for the formulation of more expressive assertions that involve relationships between multiple entities and certifications by multiple authorities.

An important feature of CICs is that they do not require session-oriented protocols; CICs are self-contained and are tied to a particular request by means of a nonce and a particular RP via encryption. This means that the exchange of CICs can be conducted entirely in a RESTful  fashion. Secure connections are assumed between S and RP and S and AA. If these connections are not secure, a man-in-the-middle attack could be staged by an attacker who is interested in letting the victim unwittingly submit claims that are not theirs but the attacker's. For instance, an attacker could hijack an online purchase and reroute the delivery of the purchased item by injecting a false shipping address. An obvious way to secure the message exchange is to use HTTPS, which could also facilitate authentication of RP and AA with respect to S. The methods of authentication of S by RP and AA, respectively, are intentionally left unspecified. Where one organization may want rely on token-based authentication, another may want to use key authentication, a password, biometrics, or some sort of two-factor authentication. We can assume that the level security implemented by RP and AA is proportional to the sensitivity of the kinds of activities that it protects (e.g., money transfers, access to medical records, etc.).

# Related Work

Public-key cryptography has been widely adopted as a means to authenticate Web pages (X.509 certificates) and encrypt Web traffic (TLS/SSL). CICs and X.509 certificates are similar, but where a X.509 certificate is designed specifically to tie a public key to a hostname, organization, or individual, a CIC may bear any sort of identity claim. Another difference is that an X.509 certificate is signed by a Certificate Authority (CA), whereas a CIC is signed by an Attribute Authority. This distinction is significant, because the trustworthiness of a CA is determined by its relationship with other CAs, whereas the trustworthiness of an AA is determined with respect to a particular set of attributes, and stands or falls by the relationship that the AA has with the subject. For example, the non-profit organization Let's Encrypt[^1] provides free SSL/TLS certificates for any organization or individual that can demonstrate that it controls the domain of the hostname it wishes to tie their public key to. Verification of control is simple and can be automated; the proof requires no more than the creation of a provisioned DNS record and HTTP-accessible resource. But how would just any AA verify whether an individual has any outstanding traffic tickets, for instance? Indeed, it requires an authority with access to very specific information about the subject in order to veritably certify such identity claim. To vouch for the absence of outstanding traffic tickets, the Department of Motor Vehicles would be an bona fide authority, but the American Automobile Association would not.

The concept of claims-based identity was pioneered by Cameron  at Microsoft in the mid-2000s when he laid out seven "laws" of identity, which provide useful guidelines for the design of systems that cope with identity on the Internet. Cameron proposes a definition of identity in terms of claims rather than identifiers. With this definition, he shifts the paradigm from identifying individuals to proving the relationship between digital identity and real-world objects. By choosing the term "claim" instead of "assertion," he emphasizes that this relationship is always imbued with some level of uncertainty, and could manifest itself as a potential weakness in any secure system. The protocol described in this paper implements the first four of Cameron's laws, which boil down to: "user consent," "minimal disclosure," "justifiable use," and "context isolation." The fifth law states that an identity system needs to allow for pluralism of operators and technologies, which the protocol also does, granted that it leaves the method for end-point authentication unspecified. The sixth and seventh laws are strictly concerned with user experience, which is entirely outside of the scope of this paper.

The notion of *federated* identity captures the fact that identity attributes are often stored across multiple distinct identity management systems. Federated identity management (FIM)  entails the exchange of identity information between identity management systems. A subset of FIM is concerned with single sign-on (SSO), in which a user's single authentication ticket, or token, is trusted across multiple systems or even organizations. Open standards for FIM are WS-Security and its extension WS-Trust . The goal of FIM is somewhat different from CIC. Where FIM is designed to facilitate long-term collaboration between businesses to provide services to an overlapping customer base, CIC facilitates exchanges between entirely unrelated stakeholders on a per-request basis. Where FIM is aimed at providing tight integration between federations, CIC provides a loose coupling. Popular SSO protocols are OpenID  and OAuth . Online platforms like Google[^2] and Facebook[^3] also allow third parties to rely on their user authentication mechanism and provide limited access to their users' account details.

Governments have also attempted to design systems for identity management and authentication. Some have become quite successful nationwide identity systems, and are leveraged for purposes as proof of age, proof of citizenship, and for generating digital signatures. These government-run systems, however, tend to poorly interact with commercially-run systems. The National Strategy for Trusted Identities in Cyberspace (NSTIC) that President Obama signed in 2011, sought to change that by creating an "Identity Ecosystem" for the improvement of online transactions . The program went through dozens of pilots, but the idea never materialized in any way, shape, or form that was ready for adoption. Large and complex identity systems come with many risks and challenges  such as over-centralization, lack of interoperability, possible privacy violations, etc. Basically, the more problems a system attempts to solve, the more challenges it presents to widespread adoption. Highly successful and widely-adopted security mechanisms (e.g., HTTPS) tend to be simple, only address a single issue, and tend not to have too many dependencies on infrastructure.

# Conclusions

The problem of identity theft is a solvable problem; the issue was not prevalent prior to the advent of Web technology and e-commerce, and its current heavy manifestation indicates a problem with the technology we rely on. A lack of sophistication in the way we verify personal information is to blame. While some suggest that "data is the new currency," , the way we pass around personal information is the monetary equivalent of exchanging plain-paper banknotes with handwritten denominations on them. This primitive state of affairs is not a reason to scrutinize the security of sites that retain our personal information in order to prevent theft; it is an argument for finding ways to verify the *authenticity* of personal information—similar to how security features on paper money help distinguish genuine bank notes from counterfeit ones.

The CIC protocol presented in this paper provides a simple solution to the inexcusable lack of verifiability of identity claims that leads to the tens of millions of cases of identity theft and tens of billions of dollars of fraud damages that are suffered, year after year. The protocol can be understood by anyone with basic knowledge of public-key cryptography, it is inherently distributed, it is fully interoperable with any existing authentication infrastructure, and it could be seamlessly integrated into the online user experience as a substitute of ordinary HTML forms.

Once the use of CICs becomes widespread, the use of clear-text identity attributes can be abandoned altogether, which would render security breaches, like the one that happened to Equifax, considerably less detrimental. However, it will be up to governments or regulators like the Federal Trade Commission to impose restrictions on the acceptance of unverifiable user-provided electronic data, particularly for the purpose of entering legally binding agreements, because most businesses have very little incentive to impose such restrictions themselves.

# Acknowledgments

I would like to thank Prof. Chris Hoofnagle for his encouragement and critical feedback on this work, and for the fruitful discussions I had with him about identity fraud, privacy law, and consumer protections. I am also thankful to Antonio Iannopollo for his helpful suggestions that greatly enhanced the readability of this paper.

[^1]: <https://letsencrypt.org>

[^2]: <https://developers.google.com/identity/>

[^3]: <https://developers.facebook.com/docs/facebook-login/>


address: M. N. Mikheev Institute of Metal Physics, 620108 Ekaterinburg, Russia
author: V. Yu. Irkhin [^1] and Yu. N. Skryabin
title: Dirac points, spinons and spin liquid in twisted bilayer graphene

**1. Introduction**

Heterostructures of two-dimensional (atomically-thin) materials attract great attention of scientists owing to their ability to provide novel electronic properties. Recently, correlated flat band has been observed in a graphene bilayer system . This band results from the superlattice modulation in the moire structure of two graphene sheets twisted by an angle which is close to the theoretically predicted "magic angle". The temperature dependence of the amplitude of the Shubnikov-de Haas oscillations demonstrated large electron effective masses and small Fermi velocities.

The unique properties of twisted bilayer graphene (TwBLG) open up a new basis for many-body quantum phases. The accessibility and gate tunability of the flat bands through twist angle may provide the way to a number of exotic correlated systems, including unusual superconductors and quantum spin liquids. In particular, for carrier concentration near half of the superlattice density, $n=\pm n_s/2$ (which corresponds to half-filling in the effective Hubbard model) the flat band strongly correlated system is Mott-like insulating phase arising from electron localization in the moire superlattice. The metal-insulator transition at about 4 K is confirmed by measurements of transport properties (conductance) . This behavior is qualitatively different from previously reported zero-field insulating behavior which occurs at an integer multiple of $\pm n_s$.

In a typical Mott insulator, the ground state usually has an antiferromagnetic spin ordering which is not observed in our system. Thus we have a Mott paramagnetic ground state that can be described within modern theoretical concepts. This singlet ground state can be treated as a spin liquid. From this point of view, the TwBLG system is somewhat similar to copper-oxide systems with square lattice, but the situation is even more favorable: suppression of antiferromagnetic ordering owing to frustrations on a triangular lattice is surely justified, unlike cuprates where competition of long-range electron hoppings in the $t-J$ model should be introduced .

In the present paper we discuss possible field-theoretical approaches to describe the TwBLG system with especial attention to topological aspects.

**2. Moire and Dirac points**

Consider first the Dirac points in TwBLG within the one-electron picture (neglecting correlations). Two close graphene layers yield a moire superlattice which modifies the graphene electron dispersion and opens gaps both at the primary Dirac point and the moire-induced secondary Dirac point in the valence band .

To zeroth order, the low-energy band structure of TwBLG can be considered as two sets of monolayer graphene Dirac cones (each is four-fold degenerate due to valley and spin) rotated about the $\Gamma$ point by the twist angle. The difference between the two wave vectors at the point $K$ (or $K'$) gives rise to the mini Brillouin zone (MBZ) – a small hexagon, which is reciprocal to the moire superlattice . The Dirac cones near the same valley mix through interlayer hybridization, whereas interactions between distant Dirac cones are suppressed, so that the valley itself is a good quantum number.

The Dirac cones are characterized by a renormalized Fermi velocity $v_F$. At $v_F \to 0$ there exist three additional Dirac points with opposite winding numbers ($-1$) to the main Dirac point ($+1$). For $v_F = 0$ when all four Dirac points merge, the winding number is $-2$, since the total winding number cannot change . At exactly the first magic angle, the Dirac point at each corner of the MBZ ($K_s$ and $K_{s'}$) becomes a parabolic band touching with winding number $-2$, similar to bilayer graphene with Bernal stacking (except that the two corners have the same winding number) .

When crossing the van Hove energy with doping the topology of the Fermi surface changes . The winding number drops from $-1$ or $+1$ (depending on the conduction band) to 0 since higher energy contours encircle the MBZ $\bar{\Gamma}$ symmetry point where no Berry curvature exists. Thus we have a topological transition in the presence of van Hove singularities.

**3. Mott transition in TwBLG**

According to the experimental data , at $|n|> n_s/2$ the Shubnikov-de Haas oscillation frequencies in TwBLG correspond to straight lines which extrapolate to zero at the half-filling densities. The authors of suppose that this may mean small Fermi pockets resulting from charged quasiparticles near a Mott-like insulator phase, and the halved degeneracy of the pockets might be related to the spin-charge separation in the Mott insulator, similar to the situation in cuprates . In other words, we have a partial Mott transition in the localized spin states subsystem (formation of the Hubbard subbands violating the Fermi liquid picture). Note that in this sense the narrow band Hubbard ($t-J$) model can be effectively represented as a two-band s-d exchange model .

Thus we have a situation of strong correlations. As concluded in , a theoretical treatment of the TwBLG problem can be performed within a two-band Hubbard model (including the valley degrees of freedom) on a frustrated triangular lattice. Then we have to use the SU(4) basis . However, these two valleys can be treated as independent in zero order consideration.

To treat the metal-insulator (Mott-Hubbard) transition, one represents conventionally the electron annihilation operator as a product of a charged boson $b_i$ and a neutral spinful fermion (spinon) $f_{i\sigma}$, so that in the rotor representation (see ) $$\label{1}
c_{i\sigma} = b_i f_{i\sigma}.$$ With increasing the Hubbard $U$, the spinless boson system at an odd-integer band filling undergoes a superfluid-to-Mott insulator transition. In a mean field description, the spinons are free (non-interacting), despite strong correlations in the electronic system. If the boson $b_i$ is condensed $(\langle b \rangle \neq 0)$ we get the Fermi liquid (FL) phase of the physical electrons: when replacing $b$ by its $c$-number average $\langle b \rangle$, the $f_\sigma$ fermions acquire the same quantum numbers as the initial electrons, so that the $f_\sigma$ Fermi surface describes a conventional metal. If the boson is gapped and consequently uncondensed, a spin liquid Mott insulator occurs, where Fermi surface of neutral fermionic excitations (spinons) survives. The Mott insulator for the bosons is also an insulator state for the electrons with a gap to all charged excitations, and there is a continuous transition to an insulator with a "ghost" spinon Fermi surface. Thus we have the situation of deconfinement where charge and spin degrees of freedom are separated, and the gauge field can play an important role. Away from half-filling, the Bose holon operators should be introduced using other slave particle representations, see .

The flat band situation with large effective mass is somewhat similar to that in heavy fermion (Kondo) systems where f-electron states become delocalized and take part in the Fermi surface even in the absence of "direct" hybridization .

**4. Dirac points and spinons in the strongly correlated case**

The Mott transition on the honeycomb lattice corresponding to grahene (the situation on the bilayer graphene triangular lattice is similar) has been investigated in Refs. . In this case the correlated metallic state is a semimetal containing gapless electronic excitations at isolated Fermi points in the Brillouin zone only. These points are essentially the Fermi surface of electrons.

The states near the Fermi points have a Dirac-like spectrum, and the problem can be analyzed within the corresponding relativistic formalism. The low energy action for the neutral Dirac spinons $\Psi$ in the insulating phase has the structure $$\begin{aligned}
S&=&\int d^{3}x \sum_\mu \sum_{\sigma=1}^N\bar{\Psi}_{\sigma}
 (\partial_{\mu}-ia_{\mu})\gamma_{\mu}\Psi_{\sigma}
\label{Q}
\end{aligned}$$ where integration is performed in 2+1 dimensions, $\gamma_\mu$ are the Dirac matrices, $\bar{\Psi}_{\sigma} \equiv \Psi^{\dag}_{\sigma} \gamma_{0}$, and $a_\mu$ is an emergent gauge field associated with the spinon-boson decomposition of the electron operator (1). Note that the Dirac excitation spectrum can be formed even if the bare lattice electron dispersion does not lead to such a spectrum (e.g., for the square and kagome lattices) .

Depending upon the details of the lattice, $a_\mu$ can be a U(1) or SU(2) gauge field. For a large number of flavors $N$ (determined by the number of the Dirac points in the Brillouin zone), the action $S_D$ describes a conformal field theory (CFT). Thus we have a scale-invariant, strongly interacting quantum state with a power-law spectrum for all excitations, well-defined quasiparticles being absent. This state is labeled as an algebraic spin liquid (see ). Note that one of the ways to obtain a deconfined phase is to include gapless excitations which carry gauge charges. These excitations can screen the gauge interaction to make it less confining .

Unlike true deconfined phases where noninteracting quasiparticles become free at low energies, here deconfinement means only that the gapless charged particles remain gapless, but are not quite free. The corresponding gapless spin liquids are obtained from the staggered flux liquid (sfL) and uniform RVB (uRVB) phases. The uRVB state leads upon doping to strange-metal states with a large Fermi surface, so that the picture of isolated spinon Dirac points somewhat changes .

The FL phase contains boson condensation which restores the quasiparticle picture. Therefore the low-energy excitations in the FL phase are described by electron-like quasiparticles and this phase corresponds to a FL phase of electrons.

The dynamics for the $U(1)$ gauge field arises owing to screening by bosons and fermions, both carrying gauge charge. In the low doping case one can take into account screening by fermions only. After integrating out $\Psi$ in () the effective partition function for the U(1) gauge field reads $$\begin{aligned}
\cal Z&=&\int Da_{\mu}\exp\Big( -\frac{1}{2}\int\frac{d^3q}{(2\pi)^3}a_{\mu}
({q})\Pi_{\mu\nu}a_{\nu}(-{q})\Big), \nonumber \\
\Pi_{\mu\nu}&=&\frac{N}{8}\sqrt{{q}^2}\Big(\delta_{\mu\nu}
- \frac{q_{\mu}q_{\nu}}{{q}^{2}}\Big).
\label{Pi}
\end{aligned}$$ The polarizability $\Pi$ makes the gauge coupling $a_\mu j^\mu$ a marginal perturbation at the free fermion fixed point.

Consider the electron Green's function. In the leading order in $1/N$, it was found that $$G(x)=\langle b^\dagger( x) b(0)\rangle_0
\langle f( x) f^\dagger(0) \exp (i\int_0^{x} dx \cdot a) \rangle$$ where $\int_0^{x}d x$ is the integration along the straight return path and $\langle...\rangle$ stands for integrating out the gauge fluctuations . Then one obtains $$G(x)
\propto (x^2)^{-(2-\alpha)/2}
\label{b}$$ with the exponent $\alpha \sim 1/N$ being the anomalous dimension; for the square-lattice antiferromagnet $\alpha = 32/(3 \pi^2 N)$. These results describe a partial confinement of spinons and bosons coupled by the gauge field. The conductivity is determined by the contributions of both fermions and bosons which cannot be considered as independent quasiparticles .

**5. Topology of Lifshitz transitions**

The electron states in a strongly correlated system need not to have purely quasiparticle nature. They can be described by both poles and branch cuts of the Green's function, cf. Eq. (). If the suppression of the quasiparticle residue $Z$ is strong, the pole in the Green's function can be even transformed to the zero, $G(E) \propto E + \varepsilon(\bf{k})$, which means formation of the energy gap and takes place, e.g., for the Mott transition . The violation of the standard Fermi-liquid picture can be described in terms of the formation of the Luttinger surface which is the surface of zeros of the electron Green's function .

The Lifshitz transitions (in particular, those discussed in Sect. 2) can be viewed as quantum phase transitions with change of the topology of the Fermi surface (FS), but without symmetry breaking. The topology of FS is characterized not only by its shape. FS itself is the singularity in the Green's function, which is topologically protected: it is the vortex line in the frequency-momentum space . Formally, in the Mott insulating phase FS does not exist. However, the topology of FS is preserved if we take into account the Luttinger contribution. Then the Luttinger theorem (the conservation of the volume enclosed by FS independently of the interaction strength) is still valid . It should be noted that the Fermi surface combined from the poles and zeros is a whole object which cannot have holes and edges . A similar picture occurs in cuprates where the Fermi points are stretched into arcs to form a large closed Fermi surface .

As for the non-Fermi liquid behavior, the flat band can be also treated as the Khodel-Shaginyan fermion condensate caused by electron-electron interaction , where all the states have zero energy.

The Lifshitz transition for bilayer graphene is governed by the conservation of the topological charge $N_2$. Merging of the two conical points with $N_2 = 1$ leads to formation of the Dirac node with quadratic dispersion and the topological charge $N_2 = 2$. Interaction between the layers may lead to several possible scenarios of the geometry of the fermionic spectrum in bilayer graphene. In particular, the $N_2 = 2$ Dirac point can split into four Dirac conical points with $N_2 = \pm 1$ (trigonal warping). The total topological charge is conserved, $N_2 = 1 + 1 + 1 - 1 = 2$ .

Thus the topological treatment may provide an interpolation from the one-electron Dirac points to the Dirac fermions (spinons) at the Fermi points in the strongly correlated Hubbard ($t-J$) model.

**6. Superconductivity**

Many features of TwBLG are similar to those of the cuprate high-$T_c$ materials where superconductivity occurs in a close vicinity of Mott insulator state after passing small antiferromagnetic region with doping. Here the transition may occur through complicated states, including incommensurate charge and magnetic order, stripes and magnetic phase separation. Doping is supposed to frustrate the ground state Neel order so that the system is pushed across the transition where the Neel order is lost and a spin liquid state arises . Thus the transition to the superconducting state goes continuously via quantum critical point, a pseudogap state forming at finite temperatures in the quantum critical regime. The critical point can have a deconfinement nature. At the same time, in TwBLG the situation seems to be even more clear since antiferromagnetism is totally suppressed by frustrations of triangular lattice.

Introducing exchange interactions in the narrow band system enables one to treat exotic topological phases and superconductivity . In particular, the d-wave superconducting phase contains both the boson and fermion-pair condensate.

The superconducting properties can change in the deconfinement situation. The conventional and strongly correlated superconductors (being topologically ordered states) can be distinguished by flux quantum which equals $hc/(2e)$ in the former case (fermion pairing) and $hc/e$ in the latter case (Bose condensation in the spin-gap state) .

Recently, the value $hc/(4e)$ was found in Ref. . These authors proposed topologically protected gapless edge states and half-vortices carrying half the usual superconducting flux quantum (effective $4e$ charge superconductor). The flat band superconductivity has been also discussed in Ref..

**7. Conclusions**

According to estimations in Ref. , we have in TwBLG strong coupling or intermediate coupling situation (the Hubbard $U$ is larger or of order of effective electron bandwidth). We have considered above the strong correlation limit in TwBLG system in terms of spinon-boson denconfinement. At the same time, occurrence of spinons and fractionalized Fermi liquid (FL$^*$) state with non-Fermi-liquid features can take place also in the intermediate coupling case described by the spin-fermion model with suppressed magnetic ordering . The transition from small to large Fermi surface can be connected with the change in statistics of spinons .

With increase of doping, the Fermi level crosses the van Hove singularity in the nearly flat band and we come to a new strongly correlated state. A similar situation in cuprates (pinning of the Fermi level to the van Hove singularity and the formation of flat bands in the two-dimensional $t-t'$ Hubbard model) was considered in Ref.. The corresponding theoretical treatment for TwBLG requires further investigations.

The research was carried out within the state assignment of FASO of Russia (theme "Flux" No AAAA-A18-118020190112-8 and theme "Quantum" No. AAAA-A18-118020190095-4) and supported in part by the Russian Foundation for Basic Research (project no. 16-02-00995).

[^1]: e-mail: firstname.lastname@example.com


abstract: Directional detection of non-baryonic Dark Matter is a promising search strategy for discriminating WIMP events from background. However, this strategy requires both a precise measurement of the energy down to a few keV and 3D reconstruction of tracks down to a few mm. To achieve this goal, the MIMAC project has been developed. It is based on a gaseous micro-TPC matrix, filled with $\rm CF_4$ and $\rm CHF_{3}$. The first results on low energy nuclear recoils ($\rm ^1H$ and $\rm ^{19}F$) obtained with a low mono-energetic neutron field are presented. The discovery potential of this search strategy is discussed and illustrated by a realistic case accessible to MIMAC.
address: LPSC, Universite Joseph Fourier Grenoble 1, CNRS/IN2P3, Institut Polytechnique de Grenoble;  IRFU,CEA Saclay, 91191 Gif-sur-Yvette cedex;  LMDN, IRSN Cadarache, 13115 Saint-Paul-Lez-Durance
author: D. Santos, J. Billard, G. Bosson, J.L.  Bouly, O. Bourrion,
Ch.  Fourel, C. Grignon, O. Guillaudin, F. Mayet, J.P. Richer; A. Delbart, E. Ferrer, I. Giomataris, F.J. Iguaz, J.P. Mols; C. Golabek, L. Lebreton
title: <u>**MIMAC**</u>: A micro-tpc matrix for directional detection of dark matter

# Introduction

Directional detection of Dark Matter is based on the fact that the solar system moves with respect to the center of our galaxy with a mean velocity of roughly 220 km/s . Taking into account the hypothesis of the existence of a galactic halo of DM formed by WIMPs (Weakly Interacting Particles) with a negligible rotation velocity, we can expect a privileged direction for the nuclear recoils in our detector, coming out from elastic collision with those WIMPs.

The MIMAC (MIcro-tpc MAtrix of Chambers) detector project tries to get these elusive events by a double detection: ionization and track, at low gas pressure with low mass target nuclei (H, $^{19}$F or $^3$He). In order to have a significant cross section we explore the axial, spin dependent, interaction on odd nuclei. The very weak correlation between the neutralino-nucleon scalar cross section and the axial one, as it was shown in , makes this research, at the same time, complementary to the massive target experiments.

# MIMAC prototype

The MIMAC prototype consists of one of the chamber of the matrix allowing to show the ionization and track measurement performances needed to achieve the directional detection strategy. The primary electron-ion pairs produced by a nuclear recoil in one chamber of the matrix are detected by driving the electrons to the grid of a bulk micromegas and producing the avalanche in a very thin gap (128 or 256$\mu$m).

As pictured on figure , the electrons move towards the grid in the drift space and are projected on the anode thus allowing to get information on X and Y coordinates. To access the X and Y dimensions with a 200 $\mu$m spatial resolution, a bulk micromegas with a 4 by 4 cm$^²$ active area, segmented in pixels with a pitch of 350 $\mu$m was used as 2D readout in the first prototype. In order to reconstruct the third dimension Z of the recoil, the LPSC developed a self-triggered electronics able to perform the anode sampling at a frequency of 40 MHz. This includes a dedicated 16 channels ASIC associated to a DAQ in its first version now the 64 channels version is installed, as shown in fig. (left).. The 10cmx10cm micromegas coupled to the MIMAC electronics running the 512 channels shown in fig. (center), working, is in fact the validation of the feasibility of a large TPC for directional detection. The installation at Modane of the first module bi-chamber, shown in fig. (right) has been accepted for June 2011.

In order to get the total recoil energy we need to know the ionization quenching factor (IQF) of the nuclear recoil in the gas used. We have developed at the LPSC a dedicated experimental facility to measure such IQF. A precise assessment of the available ionization energy has been performed by Santos *et al.* in He + 5$\% \rm C_4H_{10}$ mixture within the dark matter energy range (between 1 and 50 keV) by a measurement of the IQF. For a given energy, an electron track in a low pressure micro-TPC is an order of magnitude longer than a recoil one. It opens the possibility to discriminate electrons from nuclei recoils by using both energy and track length information, as it was shown in . The 3D tracks are obtained from consecutive read-outs of the anode, every 25 ns, defining the event. To get the length and the orientation of the track, an independent measurement of the drift velocity is needed. Preliminary measurements, with different gases in the MIMAC prototype, of the drift velocity have been performed and they fit well with Magboltz simulations .

# First experimental results

The first result concerning the ability to detect tracks with the prototype was performed with a $\rm ^{55}Fe$ X-ray source in order to reconstruct the 5.9 keV electron tracks produced by photoelectric effect in the active volume.

Figure presents a typical electron track seen by the anode (X,Y) (left panel), its projection on the XZ plane (right panel) and reconstructed in 3D (center panel). This result shows the MIMAC capability to reconstruct the track of low energy electrons which are the typical background in dark matter experiments.

On fig (left panel), a 3D track reconstruction is achieved for high energy (5.5 MeV) alpha particles issued from the natural radioactivity ($\rm ^{222}Rn$) present in the chamber. However, the final validation concerning the possibility for MIMAC to get directional detection had to be done with neutrons giving nuclear recoils in the range of a few keV. In order to have mono-energetic neutron fields, in the range of a few tens of keV, we perform an experiment at the AMANDE facility (IRSN- Cadarache) allowing to select the energy of the neutrons by the angle with respect to a proton beam producing a neutron resonance on a LiF target.

On fig (center and right panel), 3D tracks of nuclear recoils following elastic scattering of mono-energetic neutrons are represented. On the center panel, a 8 keV proton recoil leaving a track of 2.4 mm long in 350 mbar $\rm ^4He+ 5\% C_4H_{10}$ is represented. This event is a typical kind of signal that MIMAC will expect for dark matter search. The right panel presents a 50 keV (in ionization) fluorine recoil of 3 mm long obtained in a 55 mbar mixture of 70% $\rm CF_4$ + 30% $\rm CHF_3$. In addition, the electron-recoil discrimination, a very important point for dark matter detection, showing the ability to separate gamma background from nuclear recoils, has been presented in pure Isobutane or $\rm ^4He+ 5\% C_4H_{10}$ mixture in ref. .

# Directional detection of Dark Matter and its discovery potential

Directional detection of non-baryonic Dark Matter is a promising search strategy for discriminating WIMP events from background offering a complementarity to massive detectors . The directionality gives a solid and unambiguous signature of the correlation between the galactic halo and a signal in our detector. This is achieved by searching for a correlation of the WIMP signal with the solar motion around the galactic center, observed as a direction dependence of the WIMP flux coming roughly from the direction of the Cygnus constellation . This is generally referred to as directional detection of Dark Matter and several projects are being developed for this goal .

The main asset of directional detection is the fact that the WIMP angular distribution is pointing towards the Cygnus constellation while the background one is isotropic (fig ). The right panel of figure presents a typical recoil distribution observed by a directional detector : $100$ WIMP-induced events and $100$ background events generated isotropically. For an elastic axial cross-section on nucleon $\rm \sigma_{n} = 1.5 \times 10^{-3} \ pb$ and a $\rm 100 \ GeV.c^{-2}$ WIMP mass, this corresponds to an exposure of $\rm \sim 7\times 10^3  \ kg.day$ in $\rm ^{3}He$ and $\rm \sim 1.6 \times 10^3 \ kg.day$ in CF$_4$, on their equivalent energy ranges as discussed in ref. . Low resolution maps are used in this case ($N_{\rm pixels} = 768$) which is sufficient for the low angular resolution, $\sim 15^\circ$ (FWHM), expected for this type of detector. In this case, 3D read-out and sense recognition are considered, while background rejection is based on electron/recoil discrimination by track length and energy selection . It is not straightforward to conclude from the recoil map of figure (right) that it does contain a fraction of WIMP events pointing towards the direction of the solar motion.

To extract information from this example of a measured map, a likelihood analysis has been developed. The likelihood value is estimated using a binned map of the overall sky with Poisson statistics, as shown in Billard *et al.* . This is a four parameter likelihood analysis with $m_\chi$, $\lambda = S/(B+S)$ the WIMP fraction ($B$ is the background spatial distribution taken as isotropic and $S$ is the WIMP-induced recoil distribution) and the coordinates ($\ell$, $b$) referring to the maximum of the WIMP event angular distribution.

The result of this map-based likelihood method is that the main recoil direction is recovered and it is pointing towards ($\ell = 95^{\circ} \pm 10^{\circ}, b = -6^{\circ} \pm 10^{\circ}$) at $68 \  \%$ CL, corresponding to a non-ambiguous detection of particles from the galactic halo. This is indeed the discovery proof of this detection strategy (left panel of fig. ) . Furthermore, the method allows to constrain the WIMP fraction in the observed recoil map leading to a constraint in the $(\sigma_n, m_\chi)$ plane (right panel of fig. ). As emphasized in ref. , a directional detector could allow for a high significance discovery of galactic Dark Matter even with a sizeable background contamination. For very low exposures, competitive exclusion limits may also be imposed .

# Conclusions

Directional detection is a promising search strategy to discover galactic dark matter. The MIMAC detector provides the energy of a recoiling nucleus and the reconstruction of its 3D track. The first 3D tracks observed with the MIMAC prototype were shown: 5.9 keV electrons (typical background) and low energy proton and fluorine recoils (typical signal). The next step will be to build a demonstrator of 1 m$^3$ to show that the large micro-tpc matrix for directional detection of dark matter search is accessible.

# References