Abstract
In Ubiquitous Computing Environment (UCE), service provider wants to provide its service to only legitimate users. Some users who belong to same service provider do not want to reveal their identities while using some privacy-related services such as location information, printing, browsing web pages, etc. In addition, we should consider lightweight cryptographic protocols because UCE can be constructed by lots of resource and energy constrained devices. In this paper we propose a lightweight privacy-preserving authentication and access control scheme for UCE. Compared to the previous schemes [13,14], our proposed scheme which was designed to reduce the number of public key operations and to improve non-linkability feature is found to be more secure and requires less memory on the user’s device. Moreover the proposed scheme provides mutual authentication, accountability and differentiated access control.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Easy Living, Microsoft Research, http://research.microsoft.com/easyliving
Weiser, M.: The Computer for the 21st Century. Scientific of American, 265 (September 1991)
Satyanarayanan, M.: Pervasive computing: Vision and Challenges. IEEE Personal Communications 8(4), 10–17 (2001)
Al-Muhtadi, J., Ranganathan, A., Campbell, R., Mickunas, M.: A Flexible, Privacy-Preserving Authentication Framework for Ubiquitous Computing Environments. In: Proc. 22nd International Conference on Distributed Computing Systems (ICDCS), pp. 771–776 (2002)
Al-Muhtadi, J., Campbell, R., Kapadia, A., Mickunas, D., Yi, S.: Routing Through the Mist: Privacy Preserving Communication in Ubiquitous Computing. In: Proc. ICDCS, Vienna, Austria, pp. 65–74 (2002)
Al-Muhtadi, J., Ranganathan, A., Campbell, R., Mickunas, M.: Cerberus: A Context-Aware Security Scheme for Smart Spaces. In: Proc. the First IEEE International Conference on Pervasive Computing and Communications (PerCom), pp. 489–496. IEEE Computer Society Press, Los Alamitos (2003)
Burnside, M., et al.: Proxy-Based Security Protocols in Networked Mobile Devices. In: Proc. ACM SAC, Madrid, Spain, pp. 265–272. ACM Press, New York (2002)
Creese, S., Goldsmith, M., Roscoe, B., Zakiuddin, I.: Authentication for Pervasive Computing. In: Hutter, D., Müller, G., Stephan, W., Ullmann, M. (eds.) Security in Pervasive Computing. LNCS, vol. 2802, pp. 116–129. Springer, Heidelberg (2004)
Langheinrich, M.: A Privacy Awareness System for Ubiquitous Computing Environments. In: Borriello, G., Holmquist, L.E. (eds.) UbiComp 2002. LNCS, vol. 2498, pp. 237–245. Springer, Heidelberg (2002)
Nahanishi, K., Nakazawa, J., Tokuda, H.: LEXP: Preserving User Privacy and Certifying Location Information. In: Proc. 2nd Workshop Security Ubicomp (2003)
Wu, M., Friday, A.: Integrating Privacy Enhancing Services in Ubiquitous Computing Environments. In: Borriello, G., Holmquist, L.E. (eds.) UbiComp 2002. LNCS, vol. 2498, Springer, Heidelberg (2002)
Zugenmaier, A., Hohl, A.: Anonymity for Users of Ubiquitous Computing. In: Proc. Security Workshop in Ubicomp, Seattle, Washington (October 2003)
Ren, K., Lou, W.: Privacy Enhanced Access Control in Ubiquitous computing Environments. In: 2nd International Conference of Broadband Networks 2005, 3-7 October 2005, vol. 1, pp. 356–365 (2005)
Ren, K., Lou, W., Kim, K., Deng, R.: A Novel Privacy Preserving Authentication and Access Control Scheme for Pervasive Computing Environments. IEEE Transactions on Vehicular Technology 55(4), 1373–1384 (2006)
Jendricke, U., Kreutzer, M., Zugenmaier, A.: Pervasive Privacy with Identity Management. In: Proc. 1st Workshop Security, Ubicomp (2002)
He, Q., Wu, D., Khosla, P.: Quest for Personal Control over Mobile Location Privacy. IEEE Commun. Mag. 42(5), 130–136 (2004)
Chaum, D.: Untraceable Electronic Mail, Return Address, and Digital Pseudonyms. Communications of the ACM 24(2), 84–88 (1981)
Gruteser, M., Grunwald, D.: Enhancing Location Privacy in Wireless LAN Through Disposable Interface Identifiers: A Quantitative Analysis. Mobile Networks and Applications 10(3), 315–325 (2003)
Kent, S., Atkinson, R.: Security Architecture for the Internet Protocol, IETF RFC 2401 (1998)
Xu, S., Yung, M.: K-anonymous Secret Handshakes with Reusable Credentials. In: Proc. ACM Conf. CCS, pp. 158–167. ACM Press, New York (2004)
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 2007 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Kim, J., Kim, Z., Kim, K. (2007). A Lightweight Privacy Preserving Authentication and Access Control Scheme for Ubiquitous Computing Environment. In: Nam, KH., Rhee, G. (eds) Information Security and Cryptology - ICISC 2007. ICISC 2007. Lecture Notes in Computer Science, vol 4817. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-76788-6_4
Download citation
DOI: https://doi.org/10.1007/978-3-540-76788-6_4
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-76787-9
Online ISBN: 978-3-540-76788-6
eBook Packages: Computer ScienceComputer Science (R0)