Sovereignty Over Personal Data in Brazil: State Jurisdiction Facing Denial of Access to Userss Data by Online Platform Whatsapp

Lemos, Amanda Nunes Lopes Espiñeira; Kurtz, Lahis Pasquali

doi:10.2139/ssrn.3107293

Cited by 1 publication

(1 citation statement)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, not only a malicious user may undesirably read the app's data: the government may, in some cases, demand access to messages exchanged and users' metadata to the application company, by means of its judiciary system. Such a court decision may be controversial, as in Brazil, whose Supreme Court has received two actions regarding the government rights over the personal data and user privacy, and the imposition of sanctions by public authorities if the access is denied by the application [13]. These actions are still in course.…”

Section: Problem Statementmentioning

confidence: 99%

Securing Instant Messages With Hardware-Based Cryptography and Authentication in Browser Extension

et al. 2020

View full text Add to dashboard Cite

Instant Messaging (IM) provides near-real-time communication between users, which has shown to be a valuable tool for internal communication in companies and for general-purpose interaction among people. IM systems and supporting protocols, however, must consider security aspects to guarantee the messages' authenticity, confidentiality, and integrity. In this paper, we present a solution for integrating hardware-based public key cryptography into Converse.js, an open-source IM client for browsers enabled with the Extensible Messaging and Presence Protocol (XMPP). The proposal is developed as a plugin for Converse.js, thus overriding the original functions of the client; and a browser extension that is triggered by the plugin and is responsible for calling the encryption and decryption services for each sent and received message. This integrated artifact allowed the experimental validation of the proposal providing authenticity of IM users with digital certificates and protection of IM messages with hardware-based cryptography. Results also shows the proposed systems is resistent to adversarial attacks against confidentiality and integrity and it is secure when considering cryptrographic tests like the Hamming distance and the NIST SP800-22.

show abstract

Section: Problem Statementmentioning

confidence: 99%