research-article

Free access

Tangible security for mobile devices

Authors:

Mobiquitous '08: Proceedings of the 5th Annual International Conference on Mobile and Ubiquitous Systems: Computing, Networking, and Services

Article No.: 19, Pages 1 - 4

https://doi.org/10.4108/ICST.MOBIQUITOUS2008.3936

Published: 21 July 2008 Publication History

PDF eReader

Abstract

Existing measures to secure the internal data on mobile devices can generally fall into two categories: passwords and biometrics. Neither is satisfactory, for different reasons. We propose a new scheme, analogous to using physical keys to unlock doors or a plug-in security dongle to unlock software. The user wears one or more security tokens whose presence in the close proximity of the user's cell phone allows the secrets on the phone to be unlocked. As long as the thief is unable to steal both the token and the cell phone, security is mostly guaranteed. We call this approach tangible security. This preliminary paper describes how such a system could be built and used.

References

[1]

Spoofing and Anti-Spoofing Measures. Schuckers, S. A. C. 4, 2002, Information Security Technical Report, Vol. 7, pp. 56--62.

Crossref

Google Scholar

[2]

Electronic Frontier Foundation (EFF). Biometrics: Who's Watching You? {Online} September 2003. http://www.eff.org/wp/biometrics-whos-watching-you.

Google Scholar

[3]

Zero-Interaction Authentication. Corner, Mark D. and Noble, Brian D. Atlanta, Georgia, USA: ACM Press, 2002. MobiCom '02: Proceedings of the 8th Annual International Coference on Mobile Computing and Networking. pp. 1--11.

Digital Library

Google Scholar

[4]

Personal Area Networks: Near-field Intrabody communication. Zimmerman, T. G. 3&4, 1996, IBM Systems Journal, Vol. 35, pp. 606--617.

Digital Library

Google Scholar

[5]

Security in Near Field Communication (NFC), Strengths and Weaknesses,". Haselsteiner, E. and Breitfu&#223;, K. Graz: s.n., July 12--14, 2006. Workshop on RFID Security 2006.

Google Scholar

[6]

NIST. Announcing the Advanced Encryption Standard (AES). Federal Information Processing Standards Publication 197. s.l.: National Institute of Standards and Technology, November 26, 2001.

Google Scholar

[7]

Flor&#234;ncio, D. and Herley, C. One-Time Password Access without Changing the Server. Microsoft Research. s.l.: Microsoft Research, 2007. Technical Report. 65.

Google Scholar

[8]

Jansen, Wayne, Gavrrila, Serban and Korolev, Vlad. Proximity Beacons and Mobile Device Authentication: An Overview and Implementation. NIST. 2005.

Google Scholar

[9]

Kent, J. Malaysia car thieves steal finger. Kuala Lumpur, Malaysia: BBC News, March 31, 2005.

Google Scholar

[10]

iButton Overview. {Online} Maxim Integrated Products. http://www.maxim-ic.com/products/ibutton/ibuttons/.

Google Scholar

[11]

Karygiannis, T et al. Guidelines for Securing Radio Frequency Identification (RFID) Systems. NIST. Gaithersburg, MD 20899-8930: s.n., 2007. 800--98.

Google Scholar

Cited By

View all

Marky KSchmitz MZimmermann VHerbers MKunze KMühlhäuser MBernhaupt RMueller FVerweij DAndres JMcGrenere JCockburn AAvellino IGoguey ABjørn PZhao SSamson BKocielnik R(2020)3D-Auth: Two-Factor Authentication with Personalized 3D-Printed ItemsProceedings of the 2020 CHI Conference on Human Factors in Computing Systems10.1145/3313831.3376189(1-12)Online publication date: 21-Apr-2020
https://dl.acm.org/doi/10.1145/3313831.3376189
Findling RMuaaz MHintze DMayrhofer R(2017)ShakeUnlockIEEE Transactions on Mobile Computing10.1109/TMC.2016.258248916:4(1163-1175)Online publication date: 1-Apr-2017
https://dl.acm.org/doi/10.1109/TMC.2016.2582489

Index Terms

Tangible security for mobile devices
1. Computer systems organization
  1. Embedded and cyber-physical systems
  2. Real-time systems

Recommendations

Mobile device security
InfoSecCD '04: Proceedings of the 1st annual conference on Information security curriculum development

Because of their small size, memory capability, and the case with which information can be downloaded and removed from a facility, mobile devices pose a risk to organizations when used and transported outside physical boundaries. Mobile devices, ...
Secure asynchronous communication for mobile devices
WUP '09: Proceedings of the Warm Up Workshop for ACM/IEEE ICSE 2010

Mobile devices are now used not only for communication but also as working units. As more sensitive information is stored on and transmitted through these devices, security is becoming a growing concern. This is especially true for SMS messages which do ...
Management of security policies for mobile devices
InfoSecCD '07: Proceedings of the 4th annual conference on Information security curriculum development

This paper discusses management of security policies for mobile devices. The increasing use of mobile devices in the workplace is covered, as well as new software applications that allow employees to use their mobile devices to increase their ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

Mobiquitous '08: Proceedings of the 5th Annual International Conference on Mobile and Ubiquitous Systems: Computing, Networking, and Services

July 2008

437 pages

ISBN:9789639799271

General Chair:
Vinny Cahill
Trinity College Dublin, Ireland

Publisher

ICST (Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering)

Brussels, Belgium

Publication History

Published: 21 July 2008

Author Tags

Qualifiers

Research-article

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
194
Total Downloads

Downloads (Last 12 months)24
Downloads (Last 6 weeks)4

Reflects downloads up to 19 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Marky KSchmitz MZimmermann VHerbers MKunze KMühlhäuser MBernhaupt RMueller FVerweij DAndres JMcGrenere JCockburn AAvellino IGoguey ABjørn PZhao SSamson BKocielnik R(2020)3D-Auth: Two-Factor Authentication with Personalized 3D-Printed ItemsProceedings of the 2020 CHI Conference on Human Factors in Computing Systems10.1145/3313831.3376189(1-12)Online publication date: 21-Apr-2020
https://dl.acm.org/doi/10.1145/3313831.3376189
Findling RMuaaz MHintze DMayrhofer R(2017)ShakeUnlockIEEE Transactions on Mobile Computing10.1109/TMC.2016.258248916:4(1163-1175)Online publication date: 1-Apr-2017
https://dl.acm.org/doi/10.1109/TMC.2016.2582489

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

Mobile device security

Secure asynchronous communication for mobile devices

Management of security policies for mobile devices