Security and Privacy in Pervasive/Ubiquitous Computing Systems Chair Professor Chin-Chen Chang Feng Chia University National Chung Cheng University National Tsing Hua University http://msn.iecs.fcu.edu.tw/~ccc
Outline Mobile services Radio Frequency Identification (RFID) Roaming between cellular network and WLAN MSN lab
Mobile services (1/4) MSN lab
Mobile services (2/4) MSN lab
Mobile services (3/4) MSN lab
Treats ? (4/4) User perspective Network perspective Spoofing Framing Denial-of-service Network perspective Passive Active 1. Eavesdropping 2. Traffic analysis 1. Masquerading 2. Replay 3. Message modification MSN lab
Spoofing MSN lab
Framing Legitimate? Bogus? MSN lab
Denial-of-service MSN lab
RFID (1/4) Tag Reader Database Antenna MSN lab
RFID (2/4) Shopping Library Transportation Household appliance … MSN lab
Risk? (3/4) Eavesdropping Traffic analysis Replay attack Position detection Physical attack MSN lab
Issue? (4/4) Anonymity -> Privacy Synchronization Authentication Efficiency MSN lab
Roaming (1/3) Access to the Internet anywhere & anytime Mobile device Base station AP AS ISP WLAN Cellular network AS: Authentication server AP: Access point MSN lab
Roaming (2/3) Cellular networks : wide service areas and continuous pervasive access WLAN : high-speed pervasive communications How to integrate? MSN lab
Issues? (3/3) Mutual authentication Anonymous service Charging MSN lab
Conclusions The biggest risk: eavesdropping The limitation: power & computing capability MSN lab
Security and Privacy in Pervasive/Ubiquitous Computing Systems MSN lab