Presentation is loading. Please wait.

Presentation is loading. Please wait.

A Secure and Efficient Application Download Architecture in 3G Mobile Environment Speaker: Kuo-Zhe Chiou Laboratory of Cryptography and Information Security.

Published byEsther Rogers Modified over 8 years ago

Similar presentations

Presentation on theme: "A Secure and Efficient Application Download Architecture in 3G Mobile Environment Speaker: Kuo-Zhe Chiou Laboratory of Cryptography and Information Security."— Presentation transcript:

1 A Secure and Efficient Application Download Architecture in 3G Mobile Environment Speaker: Kuo-Zhe Chiou Laboratory of Cryptography and Information Security Department of Computer Science and Information Engineering National Central University E-Mail: kzchiou@csie.ncu.edu.tw Other authors: Chin-Ta Lin, Jheng-Hong Tu, Hsi-Chung Lin, and Sung-Ming Yen

2 2 密碼與資訊安全實驗室 (LCIS) The Applications of Mobile Phone The most popular device: Mobile Phone M-commerce intrigues many ISPs to provide various mobile services, emome of Chunghwa Telecom i-mode of FarEastone The advantages of 3G mobile phone High-speed transmission capability The 3G and wireless channel Offering unparalleled speed and quality services

3 3 密碼與資訊安全實驗室 (LCIS) Motivation New services are always provided Remote way is convenient approach to download the applications for enjoying the service An secure applications download mechanism is needed Download and install an program in mobile phone Download and install an applet in the USIM card

4 4 密碼與資訊安全實驗室 (LCIS) The Issues When the service is asked frequently  How to efficiently download applications The program executed in the mobile phone may be malicious  The important data (secret key) in phone will be exposed Install an applet into card by OTA protocol  How to get some kinds of rights to install  How to keep the right information secret

5 5 密碼與資訊安全實驗室 (LCIS) Our Contributions Proposed an application download architecture Improved the EKE protocol More secure Enhance the efficiency of application download protocol Proposed an APDU command with SM format To securely load/install applets into USIM card

6 6 密碼與資訊安全實驗室 (LCIS) The Proposed Architecture 1 1 2 2 3 4

7 7 密碼與資訊安全實驗室 (LCIS) The Proposed Architecture (cont.) Register: An account and a password are shared among the subscriber, the ISP, and the server. DA download: To download DA following OTA specification Application download: To get applications (programs or applets) by the improved EKE protocol Applet install: Install an applet by the proposed APDU command

8 8 密碼與資訊安全實驗室 (LCIS) The Improved EKE Protocol The EKE is a password-based protocol for key establishment low computation cost high security Mutual authentication Key confirmation Be vulnerable to the parallel session attack  An improved EKE protocol is proposed

9 9 密碼與資訊安全實驗室 (LCIS) The Improved EKE Protocol (cont.) E PW (PK), ID sub E PW (Enc PK (K, ID server )) SubscriberServer E K (N DA ) E K (N DA, N server ) E K (N server ) Key Confirmation  Mutual Authentication Select a public key pair (SK, PK) Select a session key K Select a random number N DA Select a random Number N server Check N server Check N DA

10 10 密碼與資訊安全實驗室 (LCIS) The Proposed APDU Command APDU command AppletSig ISP (Applet) Download Agent (DA) USIM Verify Sig ISP (Applet)  Install applet The data field is in Secure Messaging format

11 11 密碼與資訊安全實驗室 (LCIS) Conclusion Proposed an efficient application download architecture Secure and efficient application download protocol Employ the improved EKE protocol A new APDU command is proposed To securely load/install applets into USIM card

12 Thank You

Download ppt "A Secure and Efficient Application Download Architecture in 3G Mobile Environment Speaker: Kuo-Zhe Chiou Laboratory of Cryptography and Information Security."

Similar presentations

A Fast Data Protection Technique for Mobile Agents to Avoid Attacks in Malicious Hosts Jesús Arturo Pérez Díaz Darío Álvarez Gutiérrez Department of Informatics.

A Fast Data Protection Technique for Mobile Agents to Avoid Attacks in Malicious Hosts Jesús Arturo Pérez Díaz Darío Álvarez Gutiérrez Department of Informatics.
多媒體網路安全實驗室 An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards 作者 :JongHyup LEE 出處.

多媒體網路安全實驗室 An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards 作者 :JongHyup LEE 出處.
An Improvement on Privacy and Authentication in GSM Young Jae Choi, Soon Ja Kim Computer Networks Lab. School of Electrical Engineering and Computer Science,

An Improvement on Privacy and Authentication in GSM Young Jae Choi, Soon Ja Kim Computer Networks Lab. School of Electrical Engineering and Computer Science,
Kerberos Assisted Authentication in Mobile Ad-hoc Networks Authors: Asad Amir Pirzada and Chris McDonald Sources: Proceedings of the 27th Australasian.

Kerberos Assisted Authentication in Mobile Ad-hoc Networks Authors: Asad Amir Pirzada and Chris McDonald Sources: Proceedings of the 27th Australasian.
Further improvement on the modified authenticated key agreement scheme Authors: N.Y. Lee and M.F. Lee Source: Applied Mathematics and Computation, Vol.157,

Further improvement on the modified authenticated key agreement scheme Authors: N.Y. Lee and M.F. Lee Source: Applied Mathematics and Computation, Vol.157,
Efficient Public Key Infrastructure Implementation in Wireless Sensor Networks Wireless Communication and Sensor Computing, 2010. ICWCSC 2010. International.

Efficient Public Key Infrastructure Implementation in Wireless Sensor Networks Wireless Communication and Sensor Computing, ICWCSC International.
Analysis and Improvements over DoS Attacks against IEEE 802.11i Standard Networks Security, Wireless Communications and Trusted Computing(NSWCTC), 2010.

Analysis and Improvements over DoS Attacks against IEEE i Standard Networks Security, Wireless Communications and Trusted Computing(NSWCTC), 2010.
多媒體網路安全實驗室 Improved Secure Anonymous Authentication Scheme for Roaming Service in Global Mobility Networks Date ： 2012.10.24 Reporter : Hong Ji Wei Authors.

多媒體網路安全實驗室 Improved Secure Anonymous Authentication Scheme for Roaming Service in Global Mobility Networks Date ： Reporter : Hong Ji Wei Authors.
6 The IP Multimedia Subsystem Selected Topics in Information Security – Bazara Barry.

6 The IP Multimedia Subsystem Selected Topics in Information Security – Bazara Barry.
Cross-Realm Password-Based Server Aided Key Exchange Source: WISA 2010, LNCS 6513, pp. 322–336, 2011(0) Author: Kazuki Yoneyama Presenter: Li-Tzu Chang.

Cross-Realm Password-Based Server Aided Key Exchange Source: WISA 2010, LNCS 6513, pp. 322–336, 2011(0) Author: Kazuki Yoneyama Presenter: Li-Tzu Chang.
A Secure Remote User Authentication Scheme with Smart Cards Manoj Kumar 報告者 : 許睿中 日期 :11.23 1.

A Secure Remote User Authentication Scheme with Smart Cards Manoj Kumar 報告者 : 許睿中 日期 :
A Server-aided Signature Scheme Based on Secret Sharing for Mobile Commerce Source: Journal of Computers, Vol.19, No.1, April 2008 Author: Chin-Ling Chen,

A Server-aided Signature Scheme Based on Secret Sharing for Mobile Commerce Source: Journal of Computers, Vol.19, No.1, April 2008 Author: Chin-Ling Chen,
電子商務與數位生活研討會 1 Further Security Enhancement for Optimal Strong-Password Authentication Protocol Tzung-Her Chen, Gwoboa Horng, Wei-Bin Lee,Kuang-Long Lin.

電子商務與數位生活研討會 1 Further Security Enhancement for Optimal Strong-Password Authentication Protocol Tzung-Her Chen, Gwoboa Horng, Wei-Bin Lee,Kuang-Long Lin.
CMSC 414 Computer and Network Security Lecture 16 Jonathan Katz.

CMSC 414 Computer and Network Security Lecture 16 Jonathan Katz.
SSH : The Secure Shell By Rachana Maheswari CS265 Spring 2003.

SSH : The Secure Shell By Rachana Maheswari CS265 Spring 2003.
1 Pertemuan 04 Pengamanan Akses Sistem Matakuliah: H0242 / Keamanan Jaringan Tahun: 2006 Versi: 1.

1 Pertemuan 04 Pengamanan Akses Sistem Matakuliah: H0242 / Keamanan Jaringan Tahun: 2006 Versi: 1.
90321011 孫國偉 Efficient Password authenticated key agreement using smart cards Author : Wen-Shenq Juang* Date : 2003.11.26 in Computers & Security.

孫國偉 Efficient Password authenticated key agreement using smart cards Author : Wen-Shenq Juang* Date : in Computers & Security.
A New Two-Server Approach for Authentication with Short Secrets John Brainard, Ari Juels,Burt Kaliski and Michael Szydlo RSA Laboratories To appear in.

A New Two-Server Approach for Authentication with Short Secrets John Brainard, Ari Juels,Burt Kaliski and Michael Szydlo RSA Laboratories To appear in.
國立清華大學資訊工程系 資訊安全實驗室 孫宏民 Phone: 03-5742968 Network Security --- Network Security --- Key Establishment Protocols.

國立清華大學資訊工程系 資訊安全實驗室 孫宏民 Phone: Network Security --- Network Security --- Key Establishment Protocols.
1 Security Weakness in a Three-Party Password-Based Key Exchange Protocol Using Weil Pairing From ： ePrint (August 2005) Author ： Junghyun Nam, Seungjoo.

1 Security Weakness in a Three-Party Password-Based Key Exchange Protocol Using Weil Pairing From ： ePrint (August 2005) Author ： Junghyun Nam, Seungjoo.

Similar presentations

Ads by Google