Plug-n-trust: Practical trusted sensing for mHealth

MobiSys'12 - Proceedings of the 10th International Conference on Mobile Systems, Applications, and Services

Volumn , Issue , 2012, Pages 309-322

  Sorber, Jacob M ^a   Shin, Minho ^b   Peterson, Ron ^a   Kotz, David ^a  

^a DARTMOUTH COLLEGE   (United States)

^b Myong Ji University   (South Korea)

Author keywords

mhealth; smartcards; smartphones; trusted computing

Indexed keywords

CONFIDENTIAL DATA; EXPERIMENTAL EVALUATION; FLEXIBLE PROGRAMMING; HASHING TECHNIQUES; MEDICAL CONDITIONS; MEDICAL DATA; MEDICAL SENSING; MHEALTH; PLUG-INS; SAFETY CRITICAL APPLICATIONS; SAFETY-CRITICAL; SECURITY GOALS; SENSING TECHNOLOGY; SOFTWARE-BASED; TRUSTED COMPUTING; WIRELESS SENSOR;

CELLULAR TELEPHONES; DATA PROCESSING; HEALTH CARE; MOBILE DEVICES; MOBILE PHONES; SAFETY ENGINEERING; SENSORS; SMART CARDS; SMARTPHONES; TELEPHONE SETS;

MEDICAL COMPUTING;

EID: 84864353539     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2307636.2307665     Document Type: Conference Paper

References (46)

1. M. Abadi, M. Budiu, U. Erlingsson, and J. Ligatti. Control-flow integrity principles, implementations, and applications. ACM Transactions on Information Systems Security, 13(1), Nov. 2009. DOI 10.1145/1609956.1609960.
2. O. Aciicmez, A. Latifi, J.-P. Seifert, and X. Zhang. A trusted mobile phone prototype. In IEEE Consumer Communications and Networking Conference (CCNC), pages 1208-1209, Jan. 2008. DOI 10.1109/ccnc08.2007.270.
3. S. Agarwal and C. T. Lau. Remote health monitoring using mobile phones and web services. Telemedicine and e-Health, 16(5):603-607, June 2010. DOI 10.1089/tmj.2009.0165.
4. S. Ancoli-Israel, R. Cole, C. Alessi, M. Chambers, W. Moorcroft, and C. P. Pollak. The role of actigraphy in the study of sleep and circadian rhythms. American Academy of Sleep Medicine Review Paper, 26(3):342-392, 2003.
5. J. Andrus, C. Dall, A. V. Hof, O. Laadan, and J. Nieh. Cells: a virtual mobile smartphone architecture. In Proceedings of the ACM Symposium on Operating Systems Principles (SOSP), pages 173-187. ACM, Nov. 2011. DOI 10.1145/2043556.2043574.
6. A. Arcelus, R. Goubran, H. Sveistrup, M. Bilodeau, and F. Knoefel. Context-aware smart home monitoring through pressure measurement sequences. In Proceedings of IEEE International Workshop on Medical Measurement and Applications (MEMEA), pages 32-37, Apr. 2010. DOI 10.1109/MEMEA.2010.5480223.
7. T. Ball and J. R. Larus. Optimally profiling and tracing programs. ACM Transactions on Programming Languages Systems, 16:1319-1360, July 1994. DOI http://doi.acm.org/10.1145/183432.183527.
8. F. Buttussi and L. Chittaro. Smarter phones for healthier lifestyles: An adaptive fitness game. IEEE Pervasive Computing, 9(4):51-57, Oct. 2010. DOI 10.1109/MPRV.2010.52.
9. L. P. Cox and P. M. Chen. Pocket hypervisors: Opportunities and challenges. In Proceedings of the IEEE Workshop on Mobile Computing Systems and Applications (HotMobile), pages 46-50. IEEE, 2007. DOI 10.1109/HotMobile.2007. 20.
10. S. Coyle, F. Benito-Lopez, R. Byrne, and D. Diamond. On-body chemical sensors for monitoring sweat. In Wearable and Autonomous Biomedical Devices and Systems for Smart Environment, volume 75 of Lecture Notes in Electrical Engineering, pages 177-193. Springer, 2010. DOI 10.1007/978-3-642-15687-8 9.
11. L. Cranor and S. Garfinkel. Security and Usability. O'Reilly Media, Inc., 2005.
12. K. Dietrich and J. Winter. Towards customizable, application specific mobile trusted modules. In Proceedings of the ACM Workshop on Scalable Trusted Computing (STC), pages 31-40. ACM, 2010. DOI 10.1145/1867635.1867642.
13. A. Dua, N. Bulusu, W.-c. Feng, and W. Hu. Towards trustworthy participatory sensing. In USENIX Conference on Hot Topics in Security. USENIX, Aug. 2009. Online at http://www.usenix.org/event/hotsec09/tech/full-papers/dua. pdf.
14. Enterproid.com. Enterproid: The Divide platform. Online at http://www.enterproid.com/features.php, visited Dec. 2011.
15. J.-E. Ekberg, Nokia. Mobile Trusted Module (MTM) - an introduction. Online paper, 2007. Online at http://research.nokia.com/files/tr/NRC-TR-2007- 015.pdf.
16. U. Erlingsson, M. Abadi, M. Vrable, M. Budiu, and G. C. Necula. XFI: software guards for system address spaces. In Proceedings of the Symposium on Operating Systems Design and Implementation (OSDI), pages 75-88. USENIX, Nov. 2006. Online at http://www.usenix.org/event/osdi06/tech/full-papers/erlingsson/ erlingsson.pdf.
17. Giesecke and Devrient GmbH. Online at http://www.gi-de.com/, visited Mar. 2011.
18. R. Gennaro, C. Gentry, and B. Parno. Non-interactive verifiable computing: Outsourcing computation to untrusted workers. In T. Rabin, editor, Advances in Cryptology (CRYPTO), volume 6223, pages 465-482. Springer, 2010. DOI 10.1007/978-3-642-14623-7 25.
19. P. Gilbert, L. P. Cox, J. Jung, and D. Wetherall. Toward trustworthy mobile sensing. In Proceedings of the Workshop on Mobile Computing Systems & Applications (HotMobile), pages 31-36. ACM, Feb. 2010. DOI 10.1145/1734583. 1734592.
20. H. Gobioff, S. Smith, J. D. Tygar, and B. Yee. Smart cards in hostile environments. In Proceedings of the USENIX Workshop on Electronic Commerce, pages 23-28, 1996. Online at http://www.cs.dartmouth.edu/~sws/pubs/gsty96.pdf.
21. Go-Trust NFC smart cards. Online at http://www.go-trust.com/products/swp- secure-microsd/, visited Dec. 2011.
22. Google. Google wallet. Online at http://www.google.com/wallet/, visited Dec. 2011.
23. D. Halperin, T. S. Heydt-Benjamin, B. Ransford, S. S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W. H. Maisel. Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses. In Proceedings of the IEEE Symposium on Security and Privacy (S&P), pages 129-142. IEEE Press, May 2008. DOI 10.1109/SP.2008.31.
24. A. Iliev and S. W. Smith. Small, Stupid, and Scalable: Secure Computing with Faerieplay. In Proceedings of the ACM Workshop on Scalable Trusted Computing (STC), 2010.
25. D. Kleidermacher. Next generation secure mobile devices. Information Quarterly, 7(4), 2008.
26. R. Korthaus, A. R. Sadeghi, C. Stüble, and J. Zhan. A practical property-based bootstrap architecture. In Proceedings of the ACM Workshop on Scalable Trusted Computing (STC), pages 29-38. ACM, 2009. DOI 10.1145/1655108.1655114.
27. D. Kotz. A threat taxonomy for mHealth privacy. In Proceedings of the Workshop on Networked Healthcare Technology (NetHealth). IEEE Press, Jan. 2011. DOI 10.1109/COMSNETS.2011.5716518.
28. D. Low. Protecting Java code via code obfuscation. Crossroads, 4(3):21-23, Apr. 1998. DOI 10.1145/332084.332092.
29. S. Mare, J. Sorber, M. Shin, C. Cornelius, and D. Kotz. Adapt-lite: Privacy-aware, secure, and efficient mhealth sensing. In Proceedings of the Workshop on Privacy in the Electronic Society (WPES), Oct. 2011. DOI 10.1145/2046556.2046574.
30. J. M. McCune, B. J. Parno, A. Perrig, M. K. Reiter, and H. Isozaki. Flicker: an execution infrastructure for TCB minimization. SIGOPS Operating Systems Review, 42:315-328, Apr. 2008. DOI 10.1145/1352592.1352625.
31. Mobile Phone Work Group. Mobile Trusted Module FAQ. Online at http://www.trustedcomputinggroup.org/ resources/mobile-trusted-module-faq, visited Dec. 2010.
32. M. Naehrig, K. Lauter, and V. Vaikuntanathan. Can homomorphic encryption be practical? In Proceedings of the ACM Workshop on Cloud Computing Security, pages 113-124. ACM, Oct. 2011. DOI 10.1145/2046660.2046682.
33. SIMalliance. SIMaLliance Web Site. Online at http://www.simalliance.org, visited Dec. 2011.
34. S. Saroiu and A. Wolman. I am a sensor, and I approve this message. In Proceedings of the Eleventh Workshop on Mobile Computing Systems & Applications (HotMobile), HotMobile '10, pages 37-42. ACM, 2010. DOI 10.1145/1734583.1734593.
35. L. A. Saxon, D. L. Hayes, F. R. Gilliam, P. A. Heidenreich, J. Day, M. Seth, T. E. Meyer, P. W. Jones, and J. P. Boehmer. Long-term outcome after ICD and CRT implantation and influence of remote device follow-up: The ALTITUDE survival study. Circulation, 122(23):2359-2367, Dec. 2010. DOI 10.1161/CIRCULATIONAHA.110.960633.
36. Open source. Seek-for-android. Online at https: //code.google.com/p/seek- for-android/wiki/PCSCLite, visited Apr. 2011.
37. A. Shubina, S. Bratus, W. Ingersol, and S. W. Smith. The diversity of TPMs and its effects on development: a case study of integrating the TPM into OpenSolaris. In Proceedings of the ACM Workshop on Scalable Trusted Computing (STC), pages 85-90. ACM, 2010. DOI 10.1145/1867635.1867649.
38. L. Singaravelu, C. Pu, H. HÃd'rtig, and C. Helmuth. Reducing TCB complexity for security-sensitive applications: Three case studies. In Proceedings of European Conference on Computer Systems, pages 161-174, 2006.
39. E. G. Sirer, W. de Bruijn, P. Reynolds, A. Shieh, K. Walsh, D. Williams, and F. B. Schneider. Logical attestation: an authorization architecture for trustworthy computing. In Proceedings of the ACM Symposium on Operating Systems Principles (SOSP), pages 249-264. ACM, Nov. 2011. DOI 10.1145/2043556.2043580.
40. J. Sriram, M. Shin, T. Choudhury, and D. Kotz. Activity-aware ECG-based patient authentication for remote health monitoring. In Proceedings of the International Conference on Multimodal Interfaces and Workshop on Machine Learning for Multi-modal Interaction (ICMI-MLMI), pages 297-304. ACM Press, Nov. 2009. DOI 10.1145/1647314.1647378.
41. Trusted Computing Group. TPM Main Speci cation Level 2 Version 1.2, Rev 103. Online at http://www.trustedcomputinggroup.org/resources/tpm-main- specification, visited Dec. 2010.
42. TrustZone. ARM TrustZone web site. Online at http://www.arm.com/products/ processors/technologies/trustzone.php, visited Dec. 2010.
43. S. Vaughan-Nichols. Virtualization sparks security concerns. Computer, 41(8):13-15, Aug. 2008. DOI 10.1109/MC.2008.276.
44. VMWare, Inc. and LG Electronics MobileComm U.S.A, Inc. VMWare News Release, Dec. 7, 2010. Online at http://www.vmware.com/company/news/releases/ vmware-lge-partnership.html, visited Dec. 2010.
45. A. Wolman, S. Saroiu, and V. Bahl. Using trusted sensors to monitor patients' habits. In USENIX Workshop on Health Security and Privacy. USENIX Association, Aug. 2010. Online at http://research.microsoft.com/en-us/um/people/ alecw/healthsec-2010.pdf.
46. F. Zhou, H.-I. Yang, J. Álamo, J. Wong, and C. Chang. Mobile personal health care system for patients with diabetes. In Y. Lee, Z. Bien, M. Mokhtari, J. Kim, M. Park, J. Kim, H. Lee, and I. Khalil, editors, Aging Friendly Technology for Health and Independence, volume 6159 of Lecture Notes in Computer Science, chapter 12, pages 94-101. Springer, 2010. DOI 10.1007/978-3-642-13778-5-12.