NDLI: TrustID: trustworthy identities for untrusted mobile devices

Please wait, while we are loading the content...

On the suitability of dissemination-centric access control systems for group-centric sharing

KameleonFuzz: evolutionary fuzzing for black-box XSS detection

Virtualization and security: happily ever after?

On protection in federated social computing systems

Measuring the robustness of source program obfuscation: studying the impact of compiler optimizations on the obfuscation of C programs

Systematic audit of third-party android phones

On quantitative dynamic data flow tracking

Shared responsibility is better than no responsibility: federated encryption in the cloud

Efficient privacy-aware search over encrypted databases

TrustID: trustworthy identities for untrusted mobile devices

An efficient privacy-preserving system for monitoring mobile users: making searchable encryption practical

Streamforce: outsourcing access control enforcement for stream data to the clouds

Automated black-box detection of access control vulnerabilities in web applications

COMPARS: toward an empirical approach for comparing the resilience of reputation systems

Interaction provenance model for unified authentication factors in service oriented computing

PREC: practical root exploit containment for android devices

Security of graph data: hashing schemes and definitions

DroidBarrier: know what is executing on your android

Keystroke biometrics: the user perspective

Is it really you?: user identification via adaptive behavior fingerprinting

Compac: enforce component-level access control in android

PhishSafe: leveraging modern JavaScript API's for transparent and robust protection

RiskMon: continuous and automated risk assessment of mobile applications

Detecting man-in-the-middle attacks on non-mobile systems

DIVILAR: diversifying intermediate language for anti-repackaging on android platform

Inference attack against encrypted range queries on outsourced databases

RopSteg: program steganography with return oriented programming

Relationship-based information sharing in cloud-based decentralized social networks

Wiretap-proof: what they hear is not what you speak, and what you speak they do not hear

Situational awareness through reasoning on network incidents

A modular multi-location anonymized traffic monitoring tool for a WiFi network

SobTrA: a software-based trust anchor for ARM cortex application processors

WebWinnow: leveraging exploit kit workflows to detect malicious urls

Consistency checking in access control

Privacy-preserving audit for broker-based health information exchange

POSTER: a pairing-free certificateless hybrid sign-cryption scheme for advanced metering infrastructures

Spoilt for choice: graph-based assessment of key management protocols to share encrypted data

Trust ranking of medical websites

A cloud architecture for protecting guest's information from malicious operators with memory management

Privacy-preserving publication of provenance workflows

Large-scale machine learning-based malware detection: confronting the "10-fold cross validation" scheme with reality

Securing OAuth implementations in smart phones

Minimizing lifetime of sensitive data in concurrent programs

TrustID: trustworthy identities for untrusted mobile devices

Content Provider	ACM Digital Library
Author	Weiß, Michael Stumpf, Frederic Horsch, Julian Böttinger, Konstantin Wessel, Sascha
Abstract	Identity theft has deep impacts in today's mobile ubiquitous environments. At the same time, digital identities are usually still protected by simple passwords or other insufficient security mechanisms. In this paper, we present the TrustID architecture and protocols to improve this situation. Our architecture utilizes a Secure Element (SE) to store multiple context-specific identities securely in a mobile device, e.g., a smartphone. We introduce protocols for securely deriving identities from a strong root identity into the SE inside the smartphone as well as for using the newly derived IDs. Both protocols do not require a trustworthy smartphone operating system or a Trusted Execution Environment. In order to achieve this, our concept includes a secure combined PIN entry mechanism for user authentication, which prevents attacks even on a malicious device. To show the feasibility of our approach, we implemented a prototype running on a Samsung Galaxy SIII smartphone utilizing a microSD card SE. The German identity card nPA is used as root identity to derive context-specific identities.
Starting Page	281
Ending Page	288
Page Count	8
File Format	PDF
ISBN	9781450322782
DOI	10.1145/2557547.2557593
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-03-03
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Identity derivation Combined pin entry Mobile security Secure element Smartphone Identity provider Npa Android
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Lightweight Encryption and Secure Protocol for Smartphone Cloud

The phone lock: audio and haptic shoulder-surfing resistant PIN entry methods for mobile devices

My phone is my keypad: privacy-enhanced PIN-entry on public terminals

Secure and usable authentication on mobile devices

SwiPIN: Fast and Secure PIN-Entry on Smartphones

Pvault: a client server system providing mobile access to personal data

Identity verification through face recognition, Android smartphones and NFC

Secure and user friendly PIN entry method

Promoting mobile computing and security learning using mobile devices

TrustID: trustworthy identities for untrusted mobile devices

Similar Documents

A Lightweight Encryption and Secure Protocol for Smartphone Cloud

The phone lock: audio and haptic shoulder-surfing resistant PIN entry methods for mobile devices

My phone is my keypad: privacy-enhanced PIN-entry on public terminals

Secure and usable authentication on mobile devices

SwiPIN: Fast and Secure PIN-Entry on Smartphones

Pvault: a client server system providing mobile access to personal data

Identity verification through face recognition, Android smartphones and NFC

Secure and user friendly PIN entry method

Promoting mobile computing and security learning using mobile devices

TrustID: trustworthy identities for untrusted mobile devices