Enhancing secure access to sensor data with user privacy support

详细信息    查看全文

• 作者：Jasone Astorga ; ^{jasone.astorga@ehu.es" class="auth_mail}Author Vitae ; Eduardo Jacob ^{eduardo.jacob@ehu.es" class="auth_mail}Author Vitae ; Nerea Toledo ^{nerea.toledo@ehu.es" class="auth_mail}Author Vitae ; Juanjo Unzilla ^{juanjo.unzilla@ehu.es" class="auth_mail}Author Vitae
• 关键词：Ladon ; Performance ; Privacy ; PrivaKERB ; Security ; Sensors
• 刊名：Computer Networks
• 出版年：8 May, 2014
• 年：2014
• 卷：64
• 期：Complete
• 页码：159-179
• 全文大小：2909 K

文摘

With the development of solutions like 6LoWPAN, the implementation of IP technology in sensor devices is already a reality. Therefore, sensors can be natively integrated in the Internet, becoming globally addressable by any other Internet-connected party. Despite the huge potential of this approach, it also gives place to new threats, being one of the most critical ones the effective protection of the information gathered by sensors from unauthorised remote access attempts. A suitable solution to address this issue is the Ladon security protocol, which provides resource-deprived devices with end-to-end authentication, authorisation and key establishment mechanisms. Once the critical security issue has been solved, additional concerns arise. Specially remarkable is the protection of user privacy in order to prevent potential eavesdroppers from tracking users鈥?access trends and obtaining behavioural patterns. In this regard, authentication and authorisation processes deserve an special consideration, since they imply conveying user identity-related information to the targeted services. In this paper, we present a privacy-enhanced Ladon protocol by integrating the original protocol with the PrivaKERB user privacy framework for Kerberos. Due to the severe resource limitations that characterise the targeted environments, a performance evaluation of the proposed solution is carried out in order to prove that it meets the performance requirements of the considered environments in terms of energy cost and additional delay for each secure session establishment. The obtained results show that privacy-enhanced Ladon is a secure and efficient solution to implement privacy-supporting authentication and authorisation processes in resource-deprived environments.