Trust Context Spaces
This presentation is the property of its rightful owner.
Sponsored Links
1 / 17

Philip Robinson & Michael Beigl Telecooperation Office University of Karlsruhe PowerPoint PPT Presentation


  • 50 Views
  • Uploaded on
  • Presentation posted in: General

Trust Context Spaces an Architecture for Security in Pervasive Computing SPC 2003, Boppard Germany, 13.03.2003. Philip Robinson & Michael Beigl Telecooperation Office University of Karlsruhe. Key Terms “just to put things in context”. Context Interactive Context Security Context

Download Presentation

Philip Robinson & Michael Beigl Telecooperation Office University of Karlsruhe

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -

Presentation Transcript


Philip robinson michael beigl telecooperation office university of karlsruhe

Trust Context Spacesan Architecture for Security in Pervasive ComputingSPC 2003, Boppard Germany, 13.03.2003

Philip Robinson & Michael Beigl

Telecooperation Office

University of Karlsruhe


Key terms just to put things in context

Key Terms “just to put things in context”

  • Context

  • Interactive Context

  • Security Context

  • Trust Context


Context

Context

  • … any information that can be used to characterize the situation of an entity, where an entity can be a person, place, or physical or computational object. (Abowd, Dey, 1999)

Application

(Computational)

Context

Physical

Context


Interactive context

Interactive Context

  • any information that characterizes the state of an interaction (more than one entity), including the identites involved, relationships formed (sessions established), accessible data and operations.

Physical

Physical

Application

(Computational)

Application

(Computational)


Security context

Security Context

  • any information that characterizes the policies and mechanisms used to meet the protection requirements, and hence safeguard the current interactive context

Physical

Physical

Application

(Computational)

Application

(Computational)


Trust context

Trust Context

  • any information that can be used to characterize the evidence and assurances that the security context for a particular interactive context is and will be maintained.

Physical

Physical

Application

(Computational)

Application

(Computational)


What has changed in pervasive computing

What has changed in Pervasive Computing?

Greater overlap of physical and virtual environments

  • Networked Sensor technology led to Augmented Reality

  • Physical actions and changes in the environment have more significance in computer applications (Context-Awareness)

  • Virtual events have more real-world significance, without obtrusion (Ambient Technologies)

  • The interactive context has been widened

Application

(Computational)

Context

Physical

Context


What has changed in pervasive computing1

What has changed in Pervasive Computing?

Each sector represents the scope of identities, sessions, accessibility of data and operations

The implicitly shared interactive context has been widened

Personal

Interactive

Context

Implictly Shared Interactive Context

Explictly Shared Interactive Context

Public Interactive Context


But may result in

but may result in...


Security vulnerability windows

termination

interaction

W2

session

(secure channel)

trust decision

W1

discovery

Security Vulnerability Windows

physical

virtual

Value of Context Information

Time (t)


Goals of trust context spaces

Goals of Trust Context Spaces

Minimize occurences of Security Vulnerability Windows

Control the security risks associated with implicitly shared information


Principle 1 equilibrium of physical and virtual security

Principle 1Equilibrium of Physical and Virtual Security

  • Perception: physical cues for security translated into invocation of virtual security mechanisms

  • Actuation: virtual security-related events produce active notification or adaptation of physical environment


Principle 2 trust in the environment

Principle 2:Trust in the Environment

  • Some trust decisions are offloaded to the environment‘s security services (natural behavior)

  • Environment = rooms, offices, buildings etc. A definite space

  • A Trust Context Space therefore has both physical and virtual properties; implying both physical and virtual identities, assets, operations, and relationships


Principle 3 shared unique context as a basis for security

Principle 3Shared Unique Context as a Basis for Security

  • A good secret key must not be repeatable or easily derived

  • Efforts to facilitate yet secure implicit interaction

  • The more parties interact, the more unique their shared context becomes (cumulative trust)


Architecture

Architecture


Scenario

Scenario


Conclusion contributions evaluation

Conclusion – Contributions & Evaluation

  • Incubation of virtual identities/ counterparts within Controlled spaces (meeting rooms, offices...)

  • Public Trust Context Spaces are further challenge

  • Entropy of context information has to be taken into consideration, if being used for implicit key generation


  • Login