1. 1 My Dream of Jini Fabio Kon Jalal Al-Muhtadi Roy Campbell M. Dennis Mickunas f-kon@cs.uiuc.edu Department of Computer Science University of Illinois at Urbana-Champaign http://choices.cs.uiuc.edu/2K

2. 2 Java, Jini, and Active Spaces l Active Spaces project at U. of Illinois l 6 professors, ~25 grads, 3-5 years l Based on l 2K Network-Centric OS (middleware level) l CORBA l Java and C++ l Instantiating Jini patterns using CORBA l Bridges to link our system to real Jini l Byproduct: study strengths and limitations of Jini

3. 3 Security and Privacy l Jini and other Jini-like technologies are going to enter our lives and homes. l Concerns l Protecting from home viruses l Denial of Service attacks l Privacy l Supermarket scenario: l want to get info about products using palmtops l don’t want the supermarket to track us

4. 4 Java is a Good Start l We can protect ourselves using: l bytecode verification l type safety l sandboxes l code signing l But we also need l authentication of users and services l access control l communication integrity and privacy l delegation

5. 5 Jini and TinySESAME Prototype l SESAME (an European security standard) l Jalal Al-Muhtadi (U. of Illinois) l Tiny SESAME: dynamically configurable, component-based subset of SESAME l Authentication through different methods l Different strengths of encryption l Supports Role-Based Access Control l Limited-time certificates

6. 6 Secure Smart Home l Software simulation of a Smart Home l Uses Jini plug-and-play facilities l Uses Tiny SESAME for l mutual authentication l encryption l role-based access control

7. 7 Scaling Up l How to support multiple hierarchical domains? l How to integrate small Jini domains into wide-area and large-scale distributed systems? l Federation of Lookup Servers l Current research at U. of Illinois: l Federation of CORBA Name Servers and Traders l MIT’s “intentional naming system”

8. 8 Hierarchical Organization of Physical Spaces and Traders

9. 9 Scaling Down l Difficult to run JVM in small devices like PalmPilots. l It’s not just a matter of saying “memory and CPU is getting cheaper”. Wearable wrist watches 16-bit CPU, 4 MHz, 2 MB flash memory Wearable wrist watches 16-bit CPU, 4 MHz, 2 MB flash memory Light bulb / paperclip 8-bit CPU, 1 MHz, 8 KB RAM? Light bulb / paperclip 8-bit CPU, 1 MHz, 8 KB RAM?

10. 10 Scaling Down - Possible Solutions 1. Proxies l Run native code objects in the small devices. l Use sockets to talk to Java proxies on the local network. 2. CORBA  Jini bridges l Run small CORBA ORBs in the small devices. l Use bridges to integrate the CORBA clients with the Java/Jini world. 3. CORBA  CORBA

11. 11 Java-related Problems l Dynamic loading is great. But dynamic unloading is also important: l replacing class implementations on the fly l maintaining minimal memory footprint l use different versions of the same class l Hiding platform-specific details is good. l But, access to system resource information is important for adaptable applications.

12. 12 Conclusion l Jini is great but a few desirable features are still missing. l Not everything should be added to the Jini System (simplicity is a great feature). l We should extend the Jini pattern language with patterns related to Security, Proxies, Bridges, Federations,...

13. 13 How to contact us e-mail: {f-kon,almuhtad}@cs.uiuc.edu 2K Web site: http://choices.cs.uiuc.edu/2K