Enabling new mobile applications with location proofs

ABSTRACT

Location is rapidly becoming the next "killer application" as location-enabled mobile handheld devices proliferate. One class of applications that has yet-to-emerge are those in which users have an incentive to lie about their location. These applications cannot rely solely on the users' devices to discover and transmit location information because users have an incentive to cheat. Instead, such applications require their users to prove their locations. Unfortunately, today's mobile users lack a mechanism to prove their current or past locations. Consequently, these applications have yet to take off despite their potential.

This paper presents location proofs - a simple mechanism that enables the emergence of mobile applications that require "proof" of a user's location. A location proof is a piece of data that certifies a receiver to a geographical location. Location proofs are handed out by the wireless infrastructure (e.g., a Wi-Fi access point or a cell tower) to mobile devices. The relatively short range of the wireless radios ensures that these devices are in physical proximity to the wireless transmitter. As a result, these devices are capable of proving their current or past locations to mobile applications. In this paper, we start by describing a mechanism to implement location proofs. We then present a set of six future applications that require location proofs to enable their core functionality.

REFERENCES

• 1: S. Capkun and J.-P. Hubaux. Secure positioning of wireless devices with application to sensor networks. In Proc. of IEEE INFOCOM, 2005.
• 2: D. E. Denning and P. F. MacDoran. Location-Based Authentication: Grounding Cyberspace for Better Security, Feb. 1996. Computer Fraud & Security.
• 3: Bryan Ford , Jacob Strauss, An offline foundation for online accountable pseudonyms, Proceedings of the 1st workshop on Social network systems, p.31-36, April 01-01, 2008, Glasgow, Scotland [doi>10.1145/1435497.1435503]
• 4: G. Monroe and C. Howells and J. Rain. OpenID Service Key Discovery. http://openid.net/specs/openid-service-key-discovery-1_0-01. html.
• 5: Google Accounts. http://google.com/accounts.
• 6: Marco Gruteser , Dirk Grunwald, Anonymous Usage of Location-Based Services Through Spatial and Temporal Cloaking, Proceedings of the 1st international conference on Mobile systems, applications and services, p.31-42, May 05-08, 2003, San Francisco, California [doi>10.1145/1066116.1189037]
• 7: J. L. Heskett, T. O. Jones, G. W. Loveman, W. E. Sasser Jr, and L. A. Schlesinger. Putting the service-profit chain to work. Harvard Business Review, pages 164--174, March-April 1994.
• 8: T. Jiang, H. J. Wang, and Y.-C. Hu. Location privacy in wireless networks. In Proc. of the 5th International Conference on Mobile Systems, Applications, and Services (MobiSys), 2007.
• 9: Vincent Lenders , Emmanouil Koukoumidis , Pei Zhang , Margaret Martonosi, Location-based trust for mobile user-generated content: applications, challenges and implementations, Proceedings of the 9th workshop on Mobile computing systems and applications, February 25-26, 2008, Napa Valley, California [doi>10.1145/1411759.1411775]
• 10: MaxMind GeoIP Database. http://www.maxmind.com/app/ip-location.
• 11: Microsoft. Windows Live ID. http://accountservices.passport.net.
• 12: OpenID. http://openid.net/.
• 13: Jeffrey Pang , Ben Greenstein , Ramakrishna Gummadi , Srinivasan Seshan , David Wetherall, 802.11 user fingerprinting, Proceedings of the 13th annual ACM international conference on Mobile computing and networking, September 09-14, 2007, Montréal, Québec, Canada [doi>10.1145/1287853.1287866]
• 14: Bruce Schneier, Applied cryptography (2nd ed.): protocols, algorithms, and source code in C, John Wiley & Sons, Inc., New York, NY, 1995
• 15: Amin Tootoonchian , Kiran Kumar Gollu , Stefan Saroiu , Yashar Ganjali , Alec Wolman, Lockr: social access control for web 2.0, Proceedings of the first workshop on Online social networks, August 18-18, 2008, Seattle, WA, USA [doi>10.1145/1397735.1397746]
• 16: ZDNet. Inside India's CAPTCHA solving economy, 2008. http://blogs.zdnet.com/security/?p=1835.
• 17: Y. Zhang, Z. Li, and W. Trappe. Power-Modulated Challenge-Response Schemes for Verifying Location Claims. In Proc. of IEEE Globecom, Nov. 2007.