Leveraging Trusted Network Connect for Secure Connection of Mobile Devices to Corporate Networks

Detken, Kai-Oliver; Fhom, Hervais Simo; Sethmann, Richard; Diederich, Günther

doi:10.1007/978-3-642-15476-8_16

Cited by 5 publications

(3 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Securing a corporate network presents some similarities with the automotive context, e.g., when integrating mobile devices. Their approaches make use of strong authentication mechanisms and device integrity measurements in order to establish network connections and VPN tunnels [22]. However they usually lack specifications for a secure resource-and data-management.…”

Section: Related Workmentioning

confidence: 99%

Middleware-based Security for Hyperconnected Applications in Future In-Car Networks

Bouard¹,

Burgkhardt²,

Eckert³

2013

ICST Trans Mobile Comm Appl

View full text Add to dashboard Cite

Today's cars take advantage of powerful electronic platforms and provide more and more sophisticated connected services. More than just ensuring the role of a safe transportation mean, they process private information, industrial secrets, communicate with our smartphones, Internet and will soon host thirdparty applications. Their pervasive computerization makes them vulnerable to common security attacks, against which automotive technologies cannot protect. The transition toward Ethernet/IP-based on-board communication could be a first step to respond to these security and privacy issues. In this paper, we present a security framework leveraging local and distributed information flow techniques in order to secure the on-board network against internal and external untrusted components. We describe the implementation and integration of such a framework within an IP-based automotive middleware and provide its evaluation.

show abstract

Section: Related Workmentioning

confidence: 99%

Middleware-based Security for Hyperconnected Applications in Future In-Car Networks

Bouard¹,

Burgkhardt²,

Eckert³

2013

ICST Trans Mobile Comm Appl

View full text Add to dashboard Cite

show abstract

“…Corporate network security and automotive on-board security present several similarities, e.g., when integrating mobile devices. The corporate approaches rely mostly on strong authentication mechanisms and device integrity measurements in order to establish network connections or a VPN tunnel [13]. However they only regulate the network access and usually lack specifications for resources, data management and specifically information flows.…”

Section: Related Workmentioning

confidence: 99%

Middleware-Based Security and Privacy for In-car Integration of Third-Party Applications

Bouard

Graf

Burgkhardt

2013

IFIP Advances in Information and Communication Technology

View full text Add to dashboard Cite

Today's vehicles include up to seventy networked electronic platforms handling simultaneously infotainment and safety functions. Fully connected to the world, the car is now customizable, communicates with several external devices, online services and will be soon hosting third party applications, as our smartphones already do. Such an evolution raises several critical security and privacy issues. While offering numerous advantages, the use of Ethernet, the Internet Protocol (IP) and their associated security protocols as on-board communication standards may not be sufficient. A generic framework focused on information security and on the aforementioned use cases would fill this gap and is still missing. In this paper, we present a combination of car-wide and local security concepts for IP-based middleware securing the integration of unsafe automotive scenarios. We describe the implementation and integration of these mechanisms and show their evaluation.

show abstract

“…By proposing a new protocol stack, authors extended the application of TNC to the web environment. By analyzing and comparing the existing network control technology, integrating MTM (Mobile Trusted Module) as root-of-trust on smart phone, [7] extended the TNC to the mobile platform in order to resolve the security issues in mobile network. The proposed VOGUE architecture connected mobile platforms and management server by using the VPN gateway, and it granted the access control rights to the terminal depends on the comparing results of the integrity measurement results in mobile platform.…”

Section: Introductionmentioning

confidence: 99%

Trusted Anonymous Authentication Scheme for Trusted Network Connection in Mobile Environment

Wu¹,

Ming-wei²,

Zhang³

et al. 2012

JNW

View full text Add to dashboard Cite

Technologies make the mobile terminals such as smart phones, PDAs and handsets much more powerful to access mobile network in recent years. Especially with the widely use of mobile terminals, mobile network now becomes a primary tool for daily and business interactions. However, the proliferation of mobile terminals also draws mobile malware’s attention which will do damage to the mobile terminal and further affect the security of mobile network. But the traditional access control and authentication mechanism cannot resolve such security issues. On the basis of trusted computing technology, we proposed a mobile trusted network architecture by extending the trusted network connection in mobile environment. And an improvement EAP-EHash method is used in the proposed architecture to implement authentication. We defined two service scenarios in the authentication scheme, home network authentication and roaming network authentication. The process of each scenario is described in detail. By introducing the pseudonym mechanism, our scheme can protect user identity. And the connection status not only depends on the identification process, but also the trust status of the platform. The analysis shows that our scheme benefits the properties of user identity anonymity, mutual authentication, fake agent resistance, platform integrity verification, EAP and TNC Compatible. And the ciphersuite negotiation makes our scheme more suitable for resource limited mobile terminals

show abstract

Leveraging Trusted Network Connect for Secure Connection of Mobile Devices to Corporate Networks

Cited by 5 publications

References 2 publications

Middleware-based Security for Hyperconnected Applications in Future In-Car Networks

Middleware-based Security for Hyperconnected Applications in Future In-Car Networks

Middleware-Based Security and Privacy for In-car Integration of Third-Party Applications

Trusted Anonymous Authentication Scheme for Trusted Network Connection in Mobile Environment

Contact Info

Product

Resources

About