SMSCrypto: A lightweight cryptographic framework for secure SMS transmission

详细信息    查看全文

• 作者：Geovandro C.C.F. Pereira ; ^{geovandro@larc.usp.br} ; Mateus A.S. Santos ^{mateus@larc.usp.br} ; Bruno T. de Oliveira ^{btrevizan@larc.usp.br} ; Marcos A. Simplicio Jr. ^{mjunior@larc.usp.br} ; Paulo S.L.M. Barreto ^{pbarreto@larc.usp.br} ; Cí ; ntia B. Margi ^{cbmargi@larc.usp.br} ; Wilson V. Ruggiero ^{wilson@larc.usp.br}
• 关键词：11T71 ; 94A60 ; 14G50
• 刊名：Journal of Systems and Software
• 出版年：2013
• 出版时间：March, 2013
• 年：2013
• 卷：86
• 期：3
• 页码：698-706
• 全文大小：692 K

文摘

Despite the continuous growth in the number of smartphones around the globe, Short Message Service (SMS) still remains as one of the most popular, cheap and accessible ways of exchanging text messages using mobile phones. Nevertheless, the lack of security in SMS prevents its wide usage in sensitive contexts such as banking and health-related applications. Aiming to tackle this issue, this paper presents SMSCrypto, a framework for securing SMS-based communications in mobile phones. SMSCrypto encloses a tailored selection of lightweight cryptographic algorithms and protocols, providing encryption, authentication and signature services. The proposed framework is implemented both in Java (target at JVM-enabled platforms) and in C (for constrained SIM Card processors) languages, thus being suitable for a wide range of scenarios. In addition, the signature model adopted does not require an on-line infrastructure and the inherent overhead found in the Public Key Infrastructure (PKI) model, facilitating the development of secure SMS-based applications. We evaluate the proposed framework on a real phone and on SIM Card-comparable microcontroller.