Securing the drop-box architecture for assisted living

Proceedings of the Fourth ACM Workshop on Formal Methods in Security Engineering, FMSE'06. A workshop held in conjuction with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 1-12

  May, Michael J ^a   Shin, Wook ^b   Gunter, Carl A ^b   Lee, Insup ^a  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

^b UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Assisted living; Formal methods; Formal verification; Home health monitoring; Security protocol verification

Indexed keywords

ASSISTED LIVING; FORMAL VERIFICATION; HOME HEALTH MONITORING; SECURITY PROTOCOL VERIFICATION;

BIOINFORMATICS; HEALTH CARE; INFORMATION MANAGEMENT; NETWORK ARCHITECTURE; NETWORK PROTOCOLS; TELECOMMUNICATION SERVICES;

NETWORK SECURITY;

EID: 34547345007     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1180337.1180338     Document Type: Article

References (29)

1. M. Abadi, N. Glew, B. Horne, and B. Pinkas. Certified email with a light on-line trusted third party: design and implementation. In Proceedings of the eleventh international conference on World Wide Web, pages 387-395. ACM Press, 2002.
2. Martín Abadi and Roger Needharn. Prudent engineering practice for cryptographic protocols. Research Report 125, Digital Systems Research Center, Palo Alto, CA, 1 June 1994.
3. Martin Abadi and Philip Rogaway. Reconciling two views of cryptography (the computational soundness of formal encryption). Journal of Cryptology, 15(2):103-127, 2002.
4. Ross J. Anderson and Roger M. Needharn. Robustness principles for public key protocols. In Don Coppersmith, editor, CRYPTO, volume 963 of Lecture Notes in Computer Science, pages 236-247. Springer, 1995.
5. Michael Backes and Matthias Schunter. From absence of certain vulnerabilities towards security proofs: pushing the limits of formal verification. In NSPW '03: Proceedings of the 2003 workshop on New security paradigms, pages 67-74, New York, NY, USA, 2003. ACM Press.
6. K. Bhargavan, C. Fournet, and A. Gordon. A semantics for web services authentication. In Proceedings of the 31st ACM SIGPLAN-SIGACT symposium on principles of programming languages, pages 198-209. ACM Press, 2004.
7. K. Bhargavan, C. Fournet, A. Gordon, and S. Tse. Verified interoperable implementations of security protocols. In 19th IEEE Computer Security Foundations Workshop (CSFW-19), pages 139-152, Venice, Italy, July 2006. IEEE Computer Society.
8. [S] K. Bhargavan, C. Fournet, A. D. Gordon, and R. Pucella. TuIaFaIe: A security tool for web services. In International Symposium on Formal Methods for Components and Objects (FMCO'03), LNCS. Springer, 2004.
9. Bruno Blanchet. A computationally sound mechanized prover for security protocols. In IEEE Symposium on Security and Privacy, pages 140-154, Oakland, CA, May 2006. IEEE.
10. Zhe Chen, Xiaomei Yu, and David Feng. Telernedicine system over the internet. In CRPITS '00: Selected papers from the Pan-Sydney workshop on Visualisation, pages 113-118, Darlinghurst, Australia, Australia, 2001. Australian Computer Society, Inc.
11. IBM Corporation. Healthcare management solutions. www.research.ibm.com/ hc/home.html.
12. Intel Corporation. Age-in-place. www.intel.com/research/prohealth/cs- aging_in_place.htm.
13. Intel Corporation. Proactive health. www.intel.com/research/prohealth/.
14. Donald T. Davis. Defective sign and encrypt in S/MIME, PKCS#7, MOSS, PEM, PGP, and XML. In Proceedings of the Usenix Technical Conference, pages 65-78, Boston, MA, June 2001.
15. D. Dolev and A.C. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, 29(2):198-208, 1984.
16. Office for Civil Rights. Health insurance reform: Security standards; final rule. Federal Register, 68(34):8334-8381, 20 February 2003. 45 CFR Parts 160, 162, and 164.
17. Office for Civil Rights. Standards for privacy of individually identifiable health information. Regulation Text (Unofficial Version) 45 CFR Parts 160 and 164, U.S. Department of Health and Human Services, August 2003. As amended: May 31, 2002, Aug 14, 2002, Feb 20, 2003, and Apr 17, 2003.
18. A. Goodloe, C. A. Gunter, and M. Stehr. Formal prototyping in early stages of protocol design. In WITS '05: Proceedings of the 2005 Workshop on Issues in the Theory of Security, pages 67-80, New York, NY, USA, 2005. ACM Press.
19. Philips Inc. Motiva interactive healthcare platform. www.medical.philips. com/main/products/telemonitoring/ products/motiva.
20. V. Jones, A. Rensink, T. Ruys, E. Brinksma, and A. van Halteren. A formal MDA approach for mobile health systems. In Second European Workshop on Model Driven Architecture (MDA), Canterbury, England, Sept 2004.
21. Kevin D. Lux, Michael J. May, Nayan L. Bhattad, and Carl A. Gunter. WSErnail: Secure internet messaging based on web services. In International Conference on Web Services (ICWS), Orlando, FL, July 2005. IEEE.
22. Anthony Nadalin, Phil Griffin, Chris Kaler, Phillip Hallarn-Baker, and Ronald Monzillo (Eds.). Web services security UsernameToken profile 1.0. Standard 200401, OASIS, March 2004.
23. Univ. of Rochester. Center of future health. www.futvrrehealth.rochester. edu/news/.
24. Georgia Institute of Technology. Awarehome. www.cc.gatech.edu/fce/ahri/.
25. Univ. of Virginia. Smart in-home monitoring system. marc.med.virginia. edu/projects_smarthomemonitor.html.
26. N. Oliver and F. Flores-Mangas. HealthGear: A real-time wearable system for monitoring and analyzing physiological signals. Technical Report MSR-TR-2005-182, research.microsoft.com/-nuria/healthGear/, Redmond, WA, 2005 May 2005.
27. Edgar Pek, Sven Loncaric, and Anamarija Margan. Internet-based medical teleconsultation system. In Proceedings of the 2nd International Symposium on Image and Signal Processing and Analysis, pages 657-661, Pula, Croatia, June 2001. IEEE R8-EURASIP.
28. Q. Wang, W. Shin, B. K. Alshebli, M. Caccamo, C. Gunter, E. Gunter, J. Hou, K. Karahalios, X. Liu, C. Oh, L. Sha, and Z. Zeng. An open system architecture for assisted living. In IEEE International Conference on Systems, Man, and Cybernetics, Taipei, Taiwan, Oct 2006.
29. D. Zhou, J. Kuo, S. Older, and S. Chin. Formal development of secure email. In Proceedings of the 32nd Hawaii International Conference on System Sciences. IEEE Computer Society, 1999.