Constructing Secure Localization Systems with Adjustable Granularity Using Commodity Hardware

Abstract

Abstract-Proof of a user's identity is not always a sufficient means for making an authorization decision. In an increasing set of circumstances, knowledge of physical location provides additional and necessary context for making decisions about resource access. For example, sensitive information stored on a laptop (e.g. customer records, social security numbers, etc), may require additional protections if a user operates outside of an approved area. However, current localization techniques based on signal strength reporting or specialized hardware fail to achieve this goal. In this paper, we design, develop, deploy and measure a system which securely determines the location of a user to within one meter through using only off-the-shelf 802.11 and Bluetooth equipment. We apply this equipment in a two-phased challengeresponse protocol: first determining the general area of the client in the Regionalization phase and then pinpointing it in the Localization phase. Using nearly 32,000 data points collected over 75 days, we argue that the stability of wireless networks over time creates easily distinguishable location profiles by which a client can be positioned. Additionally, we demonstrate the inherent ability of a two-phased protocol to discern a client's location information at a level of granularity no finer than is necessitated by policy. After discussing a number of applications, we build a location-based access control framework that automatically protects a white-listed set of resources through encryption when the user leaves specified areas. Our analyses show that this system provides a realistic and efficient means of incorporating unforgeable location information at the appropriate level of granularity into many authorization decisions.

Modeling a secure supply chain integrity preservation system

“…Luo et al have presented a method, which allows the generation of privacy-preserved location proofs [13]. Other methods of secure localization include utilizing social networks [28], or combination of wireless medium, such as WiFi and Bluetooth [29]. However, localization is only a part of the work.…”

Secure Localization Using Dynamic Verifiers

“…The 'two tests'based scheme in [1] can detect false position claims from a single attacker, but is not secure against collusion attack. The system in [22] uses signal intensity of 802.11 card for accurate location determination, but does not consider collusion attack.…”

‘Who, When, and Where?’ Location Proof Assertion for Mobile Devices

“…Hence, the fake proofs resemble an actual proof and can be utilized by the user as a false evidence of presence at that location. The related works thus far have not considered any third-party endorsement for location proofs, which makes the schemes vulnerable to collusion attacks [1,[4][5][6][7][8][9][10][11][12][13][14][15].…”