Zero-interaction authentication

ABSTRACT

Laptops are vulnerable to theft, greatly increasing the likelihood of exposing sensitive files. Unfortunately, storing data in a cryptographic file system does not fully address this problem. Such systems ask the user to imbue them with long-term authority for decryption, but that authority can be used by anyone who physically possesses the machine. Forcing the user to frequently reestablish his identity is intrusive, encouraging him to disable encryption.Our solution to this problem is Zero-Interaction Authentication, or ZIA. In ZIA, a user wears a small authentication token that communicates with a laptop over a short-range, wireless link. Whenever the laptop needs decryption authority, it acquires it from the token; authority is retained only as long as necessary. With careful key management, ZIA imposes an overhead of only 9.3% for representative workloads. The largest file cache on our hardware can be re-encrypted within five seconds of the user's departure, and restored in just over six seconds after detecting the user's return. This secures the machine before an attacker can gain physical access, but recovers full performance before a returning user resumes work.

REFERENCES

• 1: Matt Blaze, A cryptographic file system for UNIX, Proceedings of the 1st ACM conference on Computer and communications security, p.9-16, November 03-05, 1993, Fairfax, Virginia, United States [doi>10.1145/168588.168590]
• 2: M. Blaze. Key management in an encrypting file system. In Proceedings of the Summer 1994 USENIX Conference, pages 27--35, Boston, MA, June 1994.
• 3: Matt Blaze, Oblevious Key Escrow, Proceedings of the First International Workshop on Information Hiding, p.335-343, May 30-June 01, 1996
• 4: Stefan Brands , David Chaum, Distance-bounding protocols, Workshop on the theory and application of cryptographic techniques on Advances in cryptology, p.344-359, January 1994, Lofthus, Norway
• 5: Michael Burrows , Martin Abadi , Roger Needham, A logic of authentication, ACM Transactions on Computer Systems (TOCS), v.8 n.1, p.18-36, Feb. 1990 [doi>10.1145/77648.77649]
• 6: Paul C. Clark , Lance J. Hoffman, BITS: a smartcard protected operating system, Communications of the ACM, v.37 n.11, p.66-70, Nov. 1994 [doi>10.1145/188280.188371]
• 7: J. Daemen. Cipher and hash function design: strategies based on linear and differential cryptanalysis. PhD thesis, Katholieke Universiteit Leuven, March 1995.
• 8: J. Daemen and V. Rijmen. AES proposal: Rijndael. Advanced Encryption Standard Submission, 2nd version, March 1999.
• 9: W. Diffie, P. van Oorschot, and M. Wiener. Design Codes and Cryptograhpy. Kluwer Academic Publishers, 1992.
• 10: Ensure Technologies. http://www.ensuretech.com/.
• 11: John S. Heidemann , Gerald J. Popek, File-system development with stackable layers, ACM Transactions on Computer Systems (TOCS), v.12 n.1, p.58-89, Feb. 1994 [doi>10.1145/174613.174616]
• 12: John H. Howard , Michael L. Kazar , Sherri G. Menees , David A. Nichols , M. Satyanarayanan , Robert N. Sidebotham , Michael J. West, Scale and performance in a distributed file system, ACM Transactions on Computer Systems (TOCS), v.6 n.1, p.51-81, Feb. 1988 [doi>10.1145/35037.35059]
• 13: Y. Hu, A. Perrig, and D. B. Johnson. Wormhole detection in wireless ad hoc networks. Technical report, Rice University Department of Computer Science, June 2002.
• 14: Naomaru Itoi , William A. Arbaugh , Samuela J. Pollack , Daniel M. Reeves, Personal Secure Booting, Proceedings of the 6th Australasian Conference on Information Security and Privacy, p.130-144, July 11-13, 2001
• 15: S. R. Kleiman. Vnodes: An architecture for multiple file system types in Sun UNIX. In USENIX Association Summer Conference Proceedings, pages 238--47, Atlanta, GA, June 1986.
• 16: C. E. Landwehr, Protecting unattended computers without software, Proceedings of the 13th Annual Computer Security Applications Conference, p.274, December 08-12, 1997
• 17: Philip MacKenzie , Michael K. Reiter, Networked Cryptographic Devices Resilient to Capture, Proceedings of the 2001 IEEE Symposium on Security and Privacy, p.12, May 14-16, 2001
• 18: Marshall K. McKusick , William N. Joy , Samuel J. Leffler , Robert S. Fabry, A fast file system for UNIX, ACM Transactions on Computer Systems (TOCS), v.2 n.3, p.181-197, Aug. 1984 [doi>10.1145/989.990]
• 19: Microsoft Corporation. Encrypting File System for Windows 2000. http://www.microsoft.com/windows2000/techinfo/howitworks/security/encrypt.asp.
• 20: Chandra Narayanaswami , M. T. Raghunath, Application Design for a Smart Watch with a High Resolution Display, Proceedings of the 4th IEEE International Symposium on Wearable Computers, p.7, October 18-21, 2000
• 21: National Institute of Standards and Technology. Computer data authentication. FIPS Publication #113, May 1985.
• 22: Roger M. Needham , Michael D. Schroeder, Using encryption for authentication in large networks of computers, Communications of the ACM, v.21 n.12, p.993-999, Dec. 1978 [doi>10.1145/359657.359659]
• 23: Michael Negin , Thomas A. Chmielewski , Marcos Salganicoff , Theodore A. Camus , Ulf M. Cahn von Seelen , Péter L. Venetianer , Guanghua G. Zhang, An Iris Biometric System for Public and Personal Use, Computer, v.33 n.2, p.70-75, February 2000 [doi>10.1109/2.820042]
• 24: B. D. Noble and M. D. Corner. The case for transient authentication. In Proceedings of the 10th ACM SIGOPS European Workshop, Saint-Emillion, France, September 2002.
• 25: P. Jonathon Phillips , Alvin Martin , C. l. Wilson , Mark Przybocki, An Introduction to Evaluating Biometric Systems, Computer, v.33 n.2, p.56-63, February 2000 [doi>10.1109/2.820040]
• 26: N. Provos. Encrypting virtual memory. In Proceedings of the Ninth USENIX Security Symposium, pages 35--44, Denver, CO, August 2000.
• 27: D. Rosenthal. Evolving the vnode interface. In USENIX Association Conference Proceedings, pages 107--118, June 1990.
• 28: M. Satyanarayanan, Integrating security in a large distributed system, ACM Transactions on Computer Systems (TOCS), v.7 n.3, p.247-280, Aug. 1989 [doi>10.1145/65000.65002]
• 29: Bruce Schneier, Description of a New Variable-Length Key, 64-bit Block Cipher (Blowfish), Fast Software Encryption, Cambridge Security Workshop, p.191-204, December 09-11, 1993
• 30: Keith A. Smith , Margo I. Seltzer, File system aging—increasing the relevance of file system benchmarks, Proceedings of the 1997 ACM SIGMETRICS international conference on Measurement and modeling of computer systems, p.203-213, June 15-18, 1997, Seattle, Washington, United States
• 31: B. Yee and J. D. Tygar. Secure coprocessors in electronic commerce applications. In Proceedings of the First USENIX Workship of Electronic Commerce, pages 155--70, New York, NY, July 1995.
• 32: E. Zadok, I. Badulescu, and A. Shender. Cryptfs: A stackable vnode level encryption file system. Technical Report CUCS-021-98, Computer Science Department, Columbia University, 1998.
• 33: E. Zadok and J. Nieh. FiST: a language for stackable file systems. In Proceedings of the 2000 USENIX Annual Technical Conference, pages 55--70, San Diego, CA, June 2000.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Authentication

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.3 File Systems Management

General Terms:
Human Factors, Performance, Security

Keywords:
cryptographic file systems, mobile computing, stackable file systems, transient authentication