Multiple personal security domains

ABSTRACT

Mobility, usability and security are major requirements for any Ad Hoc network systems, and there have been numerous papers in regards to them. However, often these requirements are addressed separately. For a valid solution, these requirements must be considered from an integrated view. In this paper, taking into account mobility and usability, we implement a framework which allows to securely share resources and services between devices in Ad-hoc networks, based on security policies defined by the owners of those devices. In addition, we extend our framework to support inter-domain sharing of services and resources. We detail our design, present the preliminary results of our prototype, and discuss the lessons learned, in particular how user experience led to several re-designs of the initial security solution.

REFERENCES

• 1: James Beck , Alain Gefflaut , Nayeem Islam, MOCA: a service framework for mobile computing devices, Proceedings of the 1st ACM international workshop on Data engineering for wireless and mobile access, p.62-68, August 20-20, 1999, Seattle, Washington, United States [doi>10.1145/313300.313393]
• 2: Bringel Filho , Windson Viana , Reinaldo Braga , Rossana Andrade, FRAMESEC: A Framework for the Application Development with End-to-End Security Provision in the Mobile Computing Environment, Proceedings of the Advanced Industrial Conference on Telecommunications/Service Assurance with Partial and Intermittent Resources Conference/E-Learning on Telecommunications Workshop (AICT/SAPIR/ELETE'05), p.72-77, July 17-22, 2005 [doi>10.1109/AICT.2005.45]
• 3: Sye Loong Keoh , Emil Lupu , Morris Sloman, PEACE: A Policy-Based Establishment of Ad-hoc Communities, Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC'04), p.386-395, December 06-10, 2004 [doi>10.1109/CSAC.2004.26]
• 4: Y. Venturini et al, "Security Enforcement Layer for Security Domain." I2TS2005 - 4th International Information and Telecommunication Technologies Symposium, December 14-16, 2005.
• 5: R.R.M. Sakuragui, T.C.M.B. Carvalho and C.M. Schweitzer, "Lookup Service for Personal Distributed Network Domains." I2TS2005 - 4th International Information and Telecommunication Technologies Symposium, December 14-16, 2005.
• 6: C.M. Schweitzer, T.C.M.B. Carvalho, W. Ruggiero, "A Distributed Mechanism for Trust Propagation and Consolidation in Ad Hoc Networks.", The International Conference on Information Networking, Sendai, JAPAN, 2006.
• 7: P. Chandrasiri et al, "Personal Security Domains." Contribution to the 10th Wireless World Research Forum (WWRF), New York, October 27-28, 2003.
• 8: A. Jøsang, R. Ismail and C. Boyd, "A Survey of Trust and Reputation Systems for Online Service Provision. Decision Support Systems", 2005.
• 9: M. Shimaoka, "Memorandum for multidomain PKI interoperability." Proceedings of the Fifty-Seventh Internet Engineering Task Force, Vienna, Austria, 2003.
• 10: L.A. Martucci, T.C.M.B. Carvalho and W.V. Ruggiero, "A Lightweight Distributed Group Authentication Mechanism." INC2004 - Fourth International Network Conference, July 6 - 9, 2004.
• 11: C. English, S. Terzis and P. Nixon, "Towards Self-Protecting Ubiquitous Systems: Monitoring Trust-based Interactions." System Support for Ubiquitous Computing Workshop (UbiComp), Journal, Nottingham, England, Set. 2004.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Design, Management, Measurement, Security

Keywords:
ad hoc, domains composition, personal networks, security domains, security enforcement layer, wireless networks