Location Privacy for Cellular Systems; Analysis and Solution

We present a thorough experimental and formal analysis of users' privacy in mobile telephony systems. In particular, we experimentally analyse the use of pseudonyms and point out weak deployed policies leading to some critical scenarios which make it possible to violate a user's privacy. We also expose some protocol's vulnerabilities resulting in breaches of the anonymity and/or user unlinkability. We show these breaches translate in actual attacks which are feasible to implement on real networks and discuss our prototype implementation. In order to countermeasure these attacks, we propose realistic solutions. Finally, we provide the theoretical framework for the automatic verification of the unlinkability and anonymity of the fixed 2G/3G procedures and automatically verify them using the ProVerif tool.

show abstract

“…There are only few formal and experimental studies concerning the level of privacy provided to users by mobile telephony systems [45][46][47].…”

Section: Previous Work On 2g/3g Security and Privacymentioning

confidence: 99%

“…Other work on 3G privacy enhancement A new framework for authentication has been proposed to provide subscriber privacy with respect to the network [47]. In particular, the authors aim to achieve MSs anonymity with respect to the serving network and location privacy of mobile stations with respect to the home network.…”

Section: Lte Privacymentioning

confidence: 99%

Analysis of privacy in mobile telephony systems

Arapinis

Mancini

Ritter

et al. 2016

Int. J. Inf. Secur.

View full text Add to dashboard Cite

show abstract

“…Køien and Oleshchuk [15] also propose a secure two-party protocol for the point-inclusion problem. However, as pointed by Zhong et al [1] the protocol has a flaw: Alice can learn Bob's location by choosing a degenerate polygon.…”

Section: Related Workmentioning

confidence: 99%

Security analysis of the Louis protocol for location privacy

Gupta

Saini

Mathuria

2009

2009 First International Communication Systems and Networks and Workshops

View full text Add to dashboard Cite

Abstract-Many location-based services for alerting persons of nearby friends have been deployed in practice. A drawback of most approaches to providing such services is that friends always learn each other's location even when they are not actually nearby. The Louis protocol proposed by Zhong, Goldberg and Hengartner aims to ensure that a friend's location is revealed to another friend if and only if the friends are actually nearby. The protocol lets a third party learn whether the friends are nearby, without the third party learning their location. The third party communicates the answer to the person who invokes the service. A key feature of the protocol is that a person can detect misbehavior by the third party or the person's friend. This paper reveals a flaw in the way the protocol handles the detection of the misbehaving party, leading to an unauthorized disclosure of a person's location. Two alternatives for fixing the flaw in the protocol are proposed and a heuristic analysis is given.

show abstract

“…As recent as 2006, the United States Department of Homeland Security (DHS) was debating the use of RFID for humans. In reports [37] and [38], it is clear that while one DHS full committee found that deployment of RFID for human identification should be done with caution, the second report by a subcommittee ruled that the practice was inappropriate [39]. The recommendation by the DHS subcommittee read [38]: "[t]here appear to be specific, narrowly defined situations in which RFID is appropriate for human identification.…”

Section: Rfid Implantees and Securitymentioning

confidence: 99%

Social-technical issues facing the humancentric RFID implantee sub-culture through the eyes of Amal Graafstra

Graafstra¹,

Michael

2010

2010 IEEE International Symposium on Technology and Society

View full text Add to dashboard Cite

Michael, M. G. (2010). Social-technical issues facing the humancentric RFID implantee sub-culture through the eyes of Amal Graafstra. In K. Michael (Eds.), IEEE Symposium on . Singapore: IEEE.Social-technical issues facing the humancentric RFID implantee subculture through the eyes of Amal Graafstra Abstract Radio-frequency identification (RFID) tags and transponders have traditionally been used to identify domesticated animals so that they can be reunited with their owners in the event that they stray. In the late 1990s, industry started to investigate the benefits of using RFID to identifying non-living things throughout the supply chain toward new efficiencies in business operations. Not long after, people began to consider the possibilities of getting RFID tag or transponder implants for themselves. Mr Amal Graafstra of the United States is one of the first, and probably most well-known 'do it yourselfer' (DIY) implantees, who enjoys building customized projects which enable him to interact with his private social living space. Since 2005, hundreds of people have embarked on a mission to interact with their mobile phones, their cars, and their house via a chip implant, providing personalized settings for their own ultimate convenience. This paper presents some of the socio-technical issues facing the RFID implantee sub-culture, namely health and safety, privacy, security, regulation, and societal perceptions. The paper concludes with a list of recommendations related to implantables for hobbyists. Keywords era2015, Social, technical, issues, facing, humancentric, RFID, implantee, sub, culture, through, eyes, Amal, Graafstra Disciplines Physical Sciences and Mathematics Publication DetailsMichael, K., Graafstra, A. & Michael, M. G. (2010). Social-technical issues facing the humancentric RFID implantee sub-culture through the eyes of Amal Graafstra. In K. Michael (Eds.), IEEE Symposium on Technology and Society (pp. 498-516

show abstract

Location Privacy for Cellular Systems; Analysis and Solution

Cited by 23 publications

References 16 publications

Analysis of privacy in mobile telephony systems

Analysis of privacy in mobile telephony systems

Security analysis of the Louis protocol for location privacy

Social-technical issues facing the humancentric RFID implantee sub-culture through the eyes of Amal Graafstra

Contact Info

Product

Resources

About