xShare: supporting impromptu sharing of mobile phones

ABSTRACT

Loaded with personal data, e.g. photos, contacts, and call history, mobile phones are truly personal devices. Yet it is often necessary or desirable to share our phones with others. This is especially true as mobile phones are integrating features conventionally provided by other dedicated devices, from MP3 players to games consoles. Unfortunately, when we lend our phones to others, we give away complete access because existing phones assume a single user and provide little protection for private data and applications. In this work, we present xShare, a protection solution to address this problem. xShare allows phone owners to rapidly specify what they want to share and place the phone into a restricted mode where only the data and applications intended for sharing can be accessed.

We first present findings from two motivational user studies based on which we provide the design requirements of xShare. We then present the design of xShare based on file-level access control. We describe the implementation of xShare on Windows Mobile and report a comprehensive usability evaluation of the implementation, including mea-surements and user studies. The evaluation demonstrates that our xShare implementation has negligible overhead for interactive phone usage, is extremely favored by mobile users, and provides robust protection against attacks by experienced Windows Mobile users and developers.

REFERENCES

• 1: A. Brush and K. Inkpen, "Yours, Mine and Ours? Sharing and Use of Technology in Domestic Environments," in Proc. of Ubiquitous Computing 2007, pp. 109--126, 2007.
• 2: Apala Lahiri Chavan , Douglas Gorney, FEATURE; The dilemma of the shared mobile phone---culture strain and product design in emerging economies, interactions, v.15 n.4, July + August 2008 [doi>10.1145/1374489.1374497]
• 3: M. Hall, "Create a Windows CE Image That Boots to Kiosk Mode", http://msdn.microsoft.com/en-us/libraryaa446914.aspx.
• 4: R. Hull, B. Kumar, D. Lieuwen, P. Patel-Schneider, A. Sahuguet, S. Varadarajan, and A. Vyas, "Enabling Context-aware and Privacy-Conscious User Data Sharing," in Proc. of IEEE Int. Conf. Mobile Data Management, 2004.
• 5: Galen Hunt , Doug Brubacher, Detours: binary interception of Win32 functions, Proceedings of the 3rd conference on USENIX Windows NT Symposium, p.14-14, July 12-15, 1999, Seattle, Washington
• 6: Shvetank Jain , Fareha Shafique , Vladan Djeric , Ashvin Goel, Application-level isolation and recovery with solitude, Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008, April 01-04, 2008, Glasgow, Scotland UK
• 7: P. H. Kamp and R. N. M. Watson, "Jails: Confining the Omnipotent Root," in Proc. of the 2nd International SANE Conf., 2000.
• 8: Zhenkai Liang , V. N. Venkatakrishnan , R. Sekar, Isolated Program Execution: An Application Transparent Approach for Executing Untrusted Programs, Proceedings of the 19th Annual Computer Security Applications Conference, p.182, December 08-12, 2003
• 9: Benoit des Ligneris, Virtualization of Linux Based Computers: The Linux-VServer Project, Proceedings of the 19th International Symposium on High Performance Computing Systems and Applications, p.340-346, May 15-18, 2005 [doi>10.1109/HPCS.2005.59]
• 10: Judith S. Olson , Jonathan Grudin , Eric Horvitz, A study of preferences for sharing and privacy, CHI '05 extended abstracts on Human factors in computing systems, April 02-07, 2005, Portland, OR, USA [doi>10.1145/1056808.1057073]
• 11: Trevor Pering , David H. Nguyen , John Light , Roy Want, Face-to-Face Media Sharing Using Wireless Mobile Devices, Proceedings of the Seventh IEEE International Symposium on Multimedia, p.269-276, December 12-14, 2005 [doi>10.1109/ISM.2005.57]
• 12: Daniel Price , Andrew Tucker, Solaris Zones: Operating System Support for Consolidating Commercial Workloads, Proceedings of the 18th USENIX conference on System administration, November 14-19, 2004, Atlanta, GA
• 13: Stephen Soltesz , Herbert Pötzl , Marc E. Fiuczynski , Andy Bavier , Larry Peterson, Container-based operating system virtualization: a scalable, high-performance alternative to hypervisors, ACM SIGOPS Operating Systems Review, v.41 n.3, June 2007
• 14: Amy Voida , Rebecca E. Grinter , Nicolas Ducheneaut , W. Keith Edwards , Mark W. Newman, Listening in: practices surrounding iTunes music sharing, Proceedings of the SIGCHI conference on Human factors in computing systems, April 02-07, 2005, Portland, Oregon, USA [doi>10.1145/1054972.1054999]
• 15: Yang Yu , Fanglu Guo , Susanta Nanda , Lap-chung Lam , Tzi-cker Chiueh, A feather-weight virtual machine for windows applications, Proceedings of the 2nd international conference on Virtual execution environments, June 14-16, 2006, Ottawa, Ontario, Canada [doi>10.1145/1134760.1134766]
• 16: Spb Software House, "Spb Kiosk Engine," http://www.spbsoftwarehouse.com/products/kioskengine.
• 17: VMware Corporation, "VMware Mobile Virtualization Platform", http://www.vmware.com/technology/mobile/.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.3 File Systems Management

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

General Terms:
Design, Management, Performance

Keywords:
mobile phone, privacy, sharing, virtualization