SPATE: Small-Group PKI-Less Authenticated Trust Establishment

Lin, Yue-Hsun; Studer, Ahren; Chen, Yao-Hsin; Hsiao, Hsu-Chun; Kuo, Li-Hsiang; Lee, Jason; McCune, Jonathan M.; Wang, King-Hang; Krohn, Maxwell; Lin, Phen-Lan; Perrig, Adrian; Sun, Hung–Min; Yang, Bo‐Yin

doi:10.1109/tmc.2010.150

Cited by 43 publications

(47 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…There have been relatively few studies on secure mobile group; however, a number of group security protocols including MultiParty [15], SAS-GMA [16], and SPATE [17] have been proposed. In simple terms, each device sends its public key to every other device via a wireless network, and thus each device generates authentication data independently.…”

Section: Related Workmentioning

confidence: 99%

Accumulative Secure Group Association in an Ad-hoc and Ubiquitous Network (Version 3.0)

Chagnaadorj

Tanaka

2015

Journal of Information Processing

View full text Add to dashboard Cite

Abstract:The increased popularity of mobile devices, such as laptops, mobile phones, tablets, accessory devices, and more, brings new challenges in the area of network security in the ubiquitous environment, where ad-hoc networks may be formed using mobile devices. There has been little discussion of setting up secure connections among a group of devices. A number of group security protocols has been proposed; however, these have tended to focus on a scenario whereby all devices must be located in one place at one time. In this paper, we describe a new secure group association method that associates mobile devices in an accumulative manner, so it does not require all group members to be physically present. It utilizes digital certification and extends the concept of out-of-band channels, through which the authentication data can be transferred using human user involvement. We have implemented a prototype system and conducted a comparative user experiment to demonstrate viability of the accumulative association.

show abstract

Section: Related Workmentioning

confidence: 99%

Accumulative Secure Group Association in an Ad-hoc and Ubiquitous Network (Version 3.0)

Chagnaadorj

Tanaka

2015

Journal of Information Processing

View full text Add to dashboard Cite

show abstract

“…This, the general description, connects an arbitrary-sized group. Good examples of group authentication using HISPs are SiB [15], GAnGs [7] and SPATE [24].…”

Section: Group Hispmentioning

confidence: 99%

“…And such peer-to-peer systems are not efficient when the scale of sharing increases. Practices introduced in [7,24] reveal the high complexity of group HISPs when using physical interactions to collect group information and authenticate members, therefore they are not practical when bootstrapping a large group.…”

Section: Related Researchmentioning

confidence: 99%

Social Networks for Importing and Exporting Security

Chen

Roscoe

2012

Large-Scale Complex IT Systems. Development, Operation and Management

View full text Add to dashboard Cite

Abstract. Online social networks are rapidly changing our lives. Their growing pervasiveness and the trust that we develop in online identities provide us with a new platform for security applications. Additionally, the integration of various sensors and mobile devices on social networks has shortened the separation between one's physical and virtual (i.e. web) presences. We envisage that social networks will serve as the portal between the physical world and the digital world. However, challenges arise when using social networks in security applications; for example, how can one prove to a friend (or Friend) that your Facebook page belongs to you and not a man in the middle? Once you have proved this, how can you use it to create a secure channel between any device belonging to you and one belonging to your friend? We show how human interactive security protocols (HISPs) can greatly assist in both these areas and in general create a decentralised and user-oriented model of security. And we demonstrate that by using this security model we can quickly and efficiently bootstrap security for sharing information within a large group.

show abstract

“…Moreover, we assume that the N users share a common secret that is utilized to generate a shared public/private key pair (K Mv P , K Mv s ) in an online fashion for each meeting setup instance v. The private key K Mv s generated in this way is known only to all meeting participants, whereas the public key K Mv P is known to everyone including the LDS. This could be achieved through a secure credential establishment protocol such as in [3,4,15].…”

Section: System Architecturementioning

confidence: 99%

Privacy in Mobile Computing for Location-Sharing-Based Services

Bilogrevic

Jadliwala

Kalkan

et al. 2011

Privacy Enhancing Technologies

View full text Add to dashboard Cite

Abstract. Location-Sharing-Based Services (LSBS) complement LocationBased Services by using locations from a group of users, and not just individuals, to provide some contextualized service based on the locations in the group. However, there are growing concerns about the misuse of location data by third-parties, which fuels the need for more privacy controls in such services. We address the relevant problem of privacy in LSBSs by providing practical and effective solutions to the privacy problem in one such service, namely the fair rendez-vous point (FRVP) determination service. The privacy preserving FRVP (PPFRVP) problem is general enough and nicely captures the computations and privacy requirements in LSBSs. In this paper, we propose two privacy-preserving algorithms for the FRVP problem and analytically evaluate their privacy in both passive and active adversarial scenarios. We study the practical feasibility and performance of the proposed approaches by implementing them on Nokia mobile devices. By means of a targeted user-study, we attempt to gain further understanding of the popularity, the privacy and acceptance of the proposed solutions.

show abstract

SPATE: Small-Group PKI-Less Authenticated Trust Establishment

Cited by 43 publications

References 26 publications

Accumulative Secure Group Association in an Ad-hoc and Ubiquitous Network (Version 3.0)

Accumulative Secure Group Association in an Ad-hoc and Ubiquitous Network (Version 3.0)

Social Networks for Importing and Exporting Security

Privacy in Mobile Computing for Location-Sharing-Based Services

Contact Info

Product

Resources

About