Mobile User Location-specific Encryption (MULE): Using your office as your password

WiSec'10 - Proceedings of the 3rd ACM Conference on Wireless Network Security

Volumn , Issue , 2010, Pages 151-162

  Studer, Ahren ^a   Perrig, Adrian ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Key derivation; Laptop theft; Location based access; Security

Indexed keywords

HOME USE; LOCATION BASED; MOBILE USERS; PLUG-AND-PLAY; SENSITIVE INFORMATIONS; USER INVOLVEMENT;

CRYPTOGRAPHY; GLOBAL SYSTEM FOR MOBILE COMMUNICATIONS; LAPTOP COMPUTERS; LOCATION; WIRELESS NETWORKS;

NETWORK SECURITY;

EID: 77952333072     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1741866.1741892     Document Type: Conference Paper

References (35)

1. S. M. Bellovin and M. Merritt. Encrypted key exchange: Password-based protocols secure against dictionary attacks. In Proceedings of IEEE Symposium on Research in Security and Privacy, 1992.
2. S. Brands and D. Chaum. Distance-bounding protocols. In Proceedings of Advances in Cryptology (EUROCRYPT), 1993.
3. D. Brumley and D. Boneh. Remote timing attacks are practical. In Proceedings of USENIX Security Symposium, 2003.
4. W. E. Burr, W. T. Polk, and D. F. Dodson. Recommendation for electronic authentication. Special Publication SP 800-863, NIST, 2004.
5. M. Cagalj, S. Capkun, and J.-P. Hubaux. Key agreement in peer-to-peer wireless networks. IEEE (Special Issue on Cryptography), 2006.
6. S. Capkun and J. Hubaux. Secure positioning of wireless devices with application to sensor networks. In Proceedings of IEEE Conference on Computer Communications (INFOCOM), 2005.
7. D. Chaum. Blind signatures for untraceable payments. In Proceedings of Advances in Cryptology (Crypto), 1982.
8. CNN. Agency chief: Data on stolen va laptop may have been erased. http://www.cnn.com/2006/US/06/08/vets.data/, 2006.
9. M. D. Corner and B. D. Noble. Zero-interaction authentication. In Proceedings of ACM Conference on Mobile Computing and Networking (MobiCom), 2002.
10. M. L. Damiani, E. Bertino, B. Catania, and P. Perlasca. Geo-rbac: A spatially aware rbac. ACM Transactions on Information and System Security, 2007.
11. T. Dierks and C. Allen. The TLS protocol version 1.0. Technical Report 2246, IETF, Jan. 1999.
12. J. A. Halderman, S. Schoen, N. Heninger, W. Clarkson, W. Paul, J. A. Calandrino, A. J. Feldman, J. Appelbaum, and E. Felten. Lest we remember: c old boot attacks on encryption keys. In Proceedings of USENIX Security Symposium, 2008.
13. A. Jain, A. Ross, and U. Uludag. Biometric template security: Challenges and solutions. In Proceedings of European Signal Processing Conference (EUSIPCO), 2005.
14. T. Kindberg, K. Zhang, and N. Shankar. Context authentication using constrained channels. In Proceedings of IEEE Workshop on Mobile Computing Systems and Applications, 2002.
15. Linksky, J. et al. Simple Pairing Whitepaper, revision v10r00. http://www.bluetooth.com/NR/rdonlyres/ 0A0B3F36-D15F-4470-85A6-F2CCFA26F70F/0/ SimplePairing-WP-V10r00.pdf, August 2006.
16. P. MacKenzie and M. K. Reiter. Networked cryptographic devices resilient to capture. In Proceedings of IEEE Symposium on Security and Privacy, 2001.
17. J. M. McCune, A. Perrig, and M. K. Reiter. Seeing-is-believing: Using camera phones for human-verifiable authentication. In Proceedings of IEEE Symposium on Security and Privacy, 2005.
18. R. Mears and L. Ponemon. Enterprise@risk: Privacy & data protection survey. http://www.deloitte.com/dtt/ article/0,1002,cid=182733,00.html, 2007.
19. Microsoft. BitLocker drive encryption: Technical overview. http://technet.microsoft.com/en-us/ windowsvista/aa906017.aspx.
20. F. Monrose, M. K. Reiter, Q. Li, and S. Wetzel. Cryptographic key generation from voice. In Proceedings of IEEE Symposium on Research in Security and Privacy, 2001.
21. OpenSSL. The OpenSSL project. http://www.openssl.org.
22. A. Papadimoulis. Security by oblivity. http://thedailywtf.com/Articles/ Security-by- Oblivity.aspx.
23. Privacy Rights Clearinghouse. A chronology of data breaches. http://www.privacyrights.org/ar/ ChronDataBreaches.htm.
24. K. Regan. No end in sight: Data breach tally approaches 100 million. http://www.technewsworld.com/story/53222.html.
25. B. Rosenberg. Chronology of data breaches 2006: Analysis. http://www.privacyrights.org/ar/ DataBreaches2006-Analysis.htm.
26. RSA Labortories. RSA SecurID. http://www.rsa.com/rsalabs/node.asp?id= 1156.
27. A.-R. Sadeghi, M. Selhorst, C. Stüble, C. Wachsmann, and M. Winandy. TCG inside?: a note on TPM specification compliance. In Proceedings of ACM workshop on Scalable trusted computing (STC), 2006.
28. N. Saxena, J.-E. Ekberg, K. Kostiainen, and N. Asokan. Secure device pairing based on a visual channel. In Proceedings of IEEE Symposium on Security and Privacy, 2006.
29. SecureStar. DriveCrypt: Disk encryption and data encryption software. http: //www.securstar.com/products-drivecrypt.php.
30. K. Small. Data breaches caused by human error, hardware theft. http://www.itnews.com.au/News/87188,data-breachescaused- by-human-error- hardware-theft-survey.aspx.
31. F. Stajano and R. J. Anderson. The resurrecting duckling: Security issues for ad-hoc wireless networks. In Security Protocols Workshop, 1999.
32. N. O. Tippenhauer and S. Capkun. Id-based secure distance bounding and localization. In Proceedings of European Symposium on Research in Computer Security (ESORICS), 2009.
33. Trusted Computing Group. TPM main specification. Main Specification Version 1.2 rev. 103, Trusted Computing Group, July 2007.
34. U. Uludag, S. Pankanti, and A. K. Jain. Fuzzy vault for fingerprints. In Proceedings of International Conference on Audio- and Video-Based Biometric Person Authentication (AVBPA), 2005.
35. E. Uzun, K. Karvonen, and N. Asokan. Usability analysis of secure pairing methods. In Proceedings of Usable Security Workshop (USEC), 2007.