NDLI: Anonymous attestations made practical

Please wait, while we are loading the content...

User authentication and identification from user interface interactions on touch-enabled devices

Quantifying the reflective DDoS attack capability of household IoT devices

SeED: secure non-interactive attestation for embedded devices

Massive reactive smartphone-based jamming using arbitrary waveforms and adaptive power control

Advancing attacker models of satellite-based localization systems: the case of multi-device attackers

Geosocial query with user-controlled privacy

Trashing IMSI catchers in mobile networks

There are many apps for that: quantifying the availability of privacy-preserving apps

Reliability model for multimedia cloud networks: poster

Using hover to compromise the confidentiality of user input on Android

Power-positive networking using wireless charging: protecting energy against battery exhaustion attacks

SCAPI: a scalable attestation protocol to detect software and physical attacks

HanGuard: SDN-driven protection of smart home WiFi devices from malicious mobile apps

PHY-layer security is no alternative to cryptography

Coresident evil: noisy vibrational pairing in the face of co-located acoustic eavesdropping

ESIoT: enabling secure management of the internet of things

Resilient privacy protection for location-based services through decentralization

Secure infotainment infrastructure of connected car: poster

UiRef: analysis of sensitive user inputs in Android applications

Physical-layer fingerprinting of LoRa devices using supervised and zero-shot learning

Anonymous attestations made practical

Unity is strength!: combining attestation and measurements inspection to handle malicious data injections in WSNs

An autonomic and permissionless Android covert channel

Insecure to the touch: attacking ZigBee 3.0 via touchlink commissioning

Challenges to PHY anonymity for wi-fi

CrowdZen privacy: poster

Towards continuous and passive authentication across mobile devices: an empirical study

HYDRA: hybrid design for remote attestation (using a formally verified microkernel)

Binary hash tree based certificate access management for connected vehicles

YELP: masking sound-based opportunistic attacks in zero-effort deauthentication

Breaking and fixing the HB+DB protocol

Scalable privacy: poster

Bloom filter based certificate validation for VANET: poster

TTPP method for validation of k-anonymity on wi-fi association log data: poster

Highly-accurate rogue access point detection using intentional channel interference: poster

Two-level network monitoring and management in WLAN using software-defined networking: poster

Toward secure and efficient attestation for highly dynamic swarms: poster

A roaming-based denial of service attack on LTE networks: poster

Demonstrating reactive smartphone-based jamming: demo

Railway bridge health monitoring system using smart wireless sensor network: demo

Anonymous attestations made practical

Content Provider	ACM Digital Library
Author	Traoré, Jacques Barki, Amira Gharout, Saïd Desmoulins, Nicolas
Abstract	Direct Anonymous Attestation (DAA) is a privacy preserving authentication protocol initially designed for Trusted Platform Modules (TPMs). This cryptographic protocol, and some of its extensions such as Intel's Enhanced Privacy ID (EPID), have been widely deployed in millions of chips. Usually part of the attestation computation is delegated to the host (in most cases, either a PC or a smartphone) embedding the TPM, which is generally much more powerful. However, in Machine-to-Machine (M2M) and Internet of Things (IoT) use cases, the host may be as resource constrained as the TPM. Furthermore, any malware residing in the host may enable the tracking of the TPM owner. In this paper, we propose an efficient DAA scheme, defined on elliptic curves, that involves bilinear pairings computations only on the verifier's side. Consequently, all computations on the platform side required to verify the validity of a group signing key or to generate a DAA can be, contrarily to previous solutions, entirely carried out by a resource constrained TPM. Our DAA scheme, which is more efficient than all existing DAA schemes, is formally proven secure under a variant of the LRSW assumption and can be extended to support private key and signature based revocations as well as group signing keys with attributes. As it is suitable for resource constrained environments such as SIM cards, our DAA scheme can be of particular interest for M2M applications involving a SIM card. More precisely, we show how to design a privacy-preserving authentication protocol for embedded SIMs (eSIM) so as to cope with a real issue that has arisen at GSM Association (GSMA). By implementing our DAA scheme on a Global Platform compliant SIM card, we show its efficiency and suitability for real-world use cases. Actually, a TPM can be anonymously authenticated in only 169 ms.
Starting Page	87
Ending Page	98
Page Count	12
File Format	PDF
ISBN	9781450350846
DOI	10.1145/3098243.3098258
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-07-18
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Privacy Sim cards Daa Authentication Epid
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in