Sousa SAM Presentation

Challenges and Architectural Approaches for Authenticating Mobile Users João Pedro Sousa George Mason University Fairfax, VA Workshop on Software Architectures and Mobility

authentication of mobile users what is the problem? what are solutions? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],media library

verification vs. selection two related but distinct problems ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

outline ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],remote personalized service group/public services

UAS U ser A ccess to S ervices ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],remote personalized service personal/local device + connectivity ,[object Object],[object Object]

GAS G roup A ccess to S ervices ,[object Object],[object Object],group/public services ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],k-anonymity

LP L ink P eers ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

credentials play key role many types with pros and cons ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

outline ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

traditional authentication addresses UAS WS server uid ->ACL issuers tickets issuer uid ->pwd Needham-Schroeder protocol tickets protocol access protocol <x> encrypted text uid, URL <tix, uid> <tix, uid> ,[object Object],[object Object]

traditional authentication conceived to protect servers ,[object Object],[object Object],[object Object],WS server uid ->ACL issuers tickets issuer uid ->pwd ,[object Object],[object Object]

LP is increasingly popular for mobile devices ,[object Object],[object Object],[object Object],local connector wide-area connector ownership ,[object Object],[object Object],[object Object],dev dev dev peers dev peers

LP is used in P2P systems to establish a secure link local connector wide-area connector ownership ,[object Object],[object Object],[object Object],[object Object],[object Object],dev peers dev peers selection (trust management) is arguably just as relevant as authentication in P2P systems

LP combined with UAS/GAS for wide-area/paid connectivity ,[object Object],[object Object],[object Object],[object Object],[object Object],dev peers dev peers

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],GAS in shared spaces: users remain k-anonymous ambient services gid ->ACL certificates issuer PDA issuers profiles certificates protocol ambient access identification protocol

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],GAS in shared spaces: users remain k-anonymous ambient services gid ->ACL PDA issuers profiles ambient access

UAS in shared spaces appealing and risky ,[object Object],[object Object],[object Object],[object Object],[object Object],ambient services gid ->ACL PDA issuers profiles server uid ->ACL certificates issuer certificates protocol ambient access identification protocol

UAS in shared spaces PDA may get in the way ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ambient services gid ->ACL PDA issuers profiles server uid ->ACL certificates issuer certificates protocol ambient access identification protocol access protocol

UAS in shared spaces possible without PDA ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ambient services uid ->ACL issuers server uid ->ACL certificates issuer certificates protocol ,[object Object],[object Object],access protocol

UAS in shared spaces broaden perspective on protection ,[object Object],[object Object],[object Object],[object Object],ambient services uid ->ACL issuers server X ->ACL certificates issuer certificates protocol ,[object Object],[object Object],access protocol

UAS in shared spaces tradeoff access and protection ,[object Object],[object Object],[object Object],[object Object],server X ->ACL certificates issuer ambient services uid ->ACL issuers ambient services uid ->ACL issuers ambient services uid ->ACL issuers ambient services uid ->ACL issuers

authentication gets complex even in simple scenarios ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],media library GAS local LP remote LP

discussion ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],remote personalized service group/public services

UAS in shared spaces multilateral authentication & trust ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ambient services uid ->ACL issuers server X ->ACL certificates issuer ,[object Object],[object Object],ambient services gid ->ACL PDA issuers profiles server X ->ACL certificates issuer dev peers dev peers

Sousa SAM Presentation

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Ähnlich wie Sousa SAM Presentation

Ähnlich wie Sousa SAM Presentation (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Sousa SAM Presentation