Location-Proof System Based on Secure Multi-party Computations

Dupin, Aurélien; Robert, Jean‐Marc; Bidan, Christophe

doi:10.1007/978-3-030-01446-9_2

Cited by 6 publications

(12 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The user obtains a location certificate from a number of location beacons, as in FOAM, and generates a zero-knowledge proof of its with the help of the beacons. Dupin et al [11] proposed another privacy-preserving scheme using group signatures for identity privacy, combining with secure multi-party computation for location privacy. It achieves strong privacy guarantees, but suffers high performance overhead due to the expensive cryptographic primitives.…”

Section: Related Workmentioning

confidence: 99%

“…From Table 3, we can see that only few schemes consider entity privacy. Meanwhile, only [11] and our scheme provide traceability while preserving the entity privacy and location privacy. The PoL scheme by Zhu et al [52] utilizes some kinds of mathematical combination operations to achieve entity and location privacy (without achieving traceability), but the adversary may have nonnegligible advantages in breaking these two security properties.…”

Section: Performance Of Polmentioning

confidence: 99%

“…In contrast, the entity and location privacy of both witnesses and prover to each other is the main concern in our scheme. While comparing with [11] (that provides similar security properties as our proposal), it uses much more expensive building blocks than ours.…”

Section: Performance Of Polmentioning

confidence: 99%

See 2 more Smart Citations

Group Time-based One-time Passwords and its Application to Efficient Privacy-Preserving Proof of Location

Yang

Jin

Ning

et al. 2021

Annual Computer Security Applications Conference

View full text Add to dashboard Cite

Time-based One-Time Password (TOTP) provides a strong second factor for user authentication. In TOTP, a prover authenticates to a verifier by using the current time and a secret key to generate an authentication token (or password) which is valid for a short time period. Our goal is to extend TOTP to the group setting, and to provide both authentication and privacy. To this end, we introduce a new authentication scheme, called Group TOTP (GTOTP), that allows the prover to prove that it is a member of an authenticated group without revealing its identity. We propose a novel construction that transforms any asymmetric TOTP scheme into a GTOTP scheme. Our approach combines Merkle tree and Bloom filter to reduce the verifier's states to constant sizes.As a promising application of GTOTP, we show that GTOTP can be used to construct an efficient privacy-preserving Proof of Location (PoL) scheme. We utilize a commitment protocol, a privacypreserving location proximity scheme, and our GTOTP scheme to build the PoL scheme, in which GTOTP is used not only for user authentication but also as a tool to glue up other building blocks. In the PoL scheme, with the help of some witnesses, a user can prove its location to a verifier, while ensuring the identity and location privacy of both the prover and witnesses. Our PoL scheme outperforms the alternatives based on group digital signatures. We evaluate our schemes on Raspberry Pi hardware, and demonstrate that they achieve practical performance. In particular, the password generation and verification time are in the order of microseconds

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Performance Of Polmentioning

confidence: 99%

See 1 more Smart Citation

Group Time-based One-time Passwords and its Application to Efficient Privacy-Preserving Proof of Location

Yang

Jin

Ning

et al. 2021

Annual Computer Security Applications Conference

View full text Add to dashboard Cite

show abstract

“…Proof-of-location (POL) systems [1], [2], [3], [4], [5], [6], [7], [8] offer a compelling solution for providing trustworthy evidence of user location in applications like gaming, supply chain, and workflow compliance. A POL system issues tokens, called proof-of-location or pol, to entities, indicating their presence at a particular geographic location.…”

Section: Introductionmentioning

confidence: 99%

Composable Anonymous Proof-of-Location With User-Controlled Offline Access

Akand

Avizheh

2023

IEEE Access

View full text Add to dashboard Cite

A proof-of-location (pol) is a digital credential issued to a user after proving their location to an issuer. The user can use the pol at a later time to prove to a verifier that they have been present at a claimed location. A secure Proof-of-Location (POL) system requires that pols be unforgeable and non-transferable to other users. POL systems can be used to provide fine-grained authentication and authorization and must ensure the privacy of the pol owner against the issuer and the verifier while allowing efficient presentation of pols combined with other credentials when needed. Efficiency is in terms of communication overhead in user-verifier POL sessions, which has particular significance in high-volume pol verification scenarios. We first propose a POL system that (i) is provably secure in a simulation-based framework, allowing a pol to be securely used with other credentials, and (ii) provides anonymity against the issuer and the verifier. We then extend the system to allow pols to be stored on a public distributed ledger system and selectively be presented to the verifiers by the user. This is the first POL system that satisfies the above properties. We implement POL algorithms on a mobile phone and present our experimental results showing the practicality of the system. Our proposed scheme is highly scalable compared to existing systems, reducing the user-verifier POL communication overhead by up to a factor of 94.

show abstract

“…To preserve location privacy, cryptographic and non-cryptographic techniques are both used in existing schemes. Cryptographic [4,15,22,41,55,56] techniques include hashing, MACs, symmetric encryption, and digital signatures. Non-cryptographic [47,57] techniques can use the channel's physical layer characteristics to generate signatures.…”

mentioning

confidence: 99%

Location Proof Systems for Smart Internet of Things: Requirements, Taxonomy, and Comparative Analysis

et al. 2020

View full text Add to dashboard Cite

In the current hyper-connected, data-driven era, smart devices are providing access to geolocation information, enabling a paradigm shift in diverse domains. Location proof systems utilize smart devices to provide witnessed proof of location to enable secure location-based services (LBS). Applications of location proof systems include safety, asset management and operations monitoring in health care, supply chain tracking, and Internet-of-Things (IoT)-based location intelligence in businesses. In this paper, we investigate the state of the art in location proof systems, examining design challenges and implementation considerations for application in the real world. To frame the analysis, we have developed a taxonomy of location proof systems and performed a comparative analysis over the common attributes, highlighting their strength and weaknesses. Furthermore, we have identified future trends for this increasingly important area of investigation and development.

show abstract

Location-Proof System Based on Secure Multi-party Computations

Cited by 6 publications

References 17 publications

Group Time-based One-time Passwords and its Application to Efficient Privacy-Preserving Proof of Location

Group Time-based One-time Passwords and its Application to Efficient Privacy-Preserving Proof of Location

Composable Anonymous Proof-of-Location With User-Controlled Offline Access

Location Proof Systems for Smart Internet of Things: Requirements, Taxonomy, and Comparative Analysis

Contact Info

Product

Resources

About