A Local Broker enabled MobiPass architecture for enhancing trusted interaction efficiency

ABSTRACT

While mobile computing provides a potentially vast business opportunity for many industry participants, it also raises issues such as security and performance. This paper proposes a Local Broker enabled MobiPass architecture based on our previous research outcomes. Our MobiPass architecture can convert the unpredictable and highly dynamic mobile environment into a trusted business platform. By setting customised rules against a MobiPolicy, the Mobipass architecture enables fine grained access control without necessarily having a prior knowledge or interaction with other encountered parties and environments. This paper extends our MobiPass architecture by introducing an additional element -- the Local Broker, to enhance the architecture's performance and efficiency. A detailed case study has been provided to explain the role that the Local Broker takes in the architecture.

REFERENCES

• 1: Robert Steele , Will Tao, MobiPass: a passport for mobile business, Personal and Ubiquitous Computing, v.11 n.3, p.157-169, February 2007 [doi>10.1007/s00779-006-0100-9]
• 2: Will Tao , Robert Steele, Trusted Mobile Interaction via Extended Digital Certificates, Proceedings of the 2nd IEEE International Symposium on Dependable, Autonomic and Secure Computing, p.284-292, September 29-October 01, 2006 [doi>10.1109/DASC.2006.50]
• 3: Satyanarayanan, M. (2001), Pervasive computing: vision and challenges, IEEE Wireless Communications, 8 (4), 10--17
• 4: Kumar Ranganathan, Trustworthy Pervasive Computing: The Hard Security Problems, Proceedings of the Second IEEE Annual Conference on Pervasive Computing and Communications Workshops, p.117, March 14-17, 2004
• 5: Diffie, W. (1998), The first ten years of public-key cryptography, Proc of IEEE, 76 (5), 560--577
• 6: Robert Steele , William Gardner , R. Rajugan , Tharam S. Dillon, A Design Methodology for User Access Control (UAC) Middleware, Proceedings of the 2005 IEEE International Conference on e-Technology, e-Commerce and e-Service (EEE'05) on e-Technology, e-Commerce and e-Service, p.385-390, March 29-April 01, 2005 [doi>10.1109/EEE.2005.4]
• 7: Kagal L, Finin T, Joshi A (2002) A security architecture based on trust management for pervasive computing systems". Grace Hopper Celebration of Women in Computing, October 2002
• 8: Jason I. Hong , James A. Landay, An architecture for privacy-sensitive ubiquitous computing, Proceedings of the 2nd international conference on Mobile systems, applications, and services, June 06-09, 2004, Boston, MA, USA [doi>10.1145/990064.990087]
• 9: Joon S. Park , Ravi Sandhu, RBAC on the Web by smart certificates, Proceedings of the fourth ACM workshop on Role-based access control, p.1-9, October 28-29, 1999, Fairfax, Virginia, United States [doi>10.1145/319171.319172]

INDEX TERMS

Keywords:
mobile computing, trusted interaction, ubiquitous computing