Abstract
Rich, context-aware applications are emerging for mobile computing environments that provide new and innovative services to consumers. Security is critical for the successful realization of this vision. We propose a new method for authentication that utilizes contextual information to overcome the limitations inherent in traditional approaches. We have defined a model that uses contextual attributes to achieve an approach to authentication that is better suited for dynamic, mobile computing environments. We examine the use of trusted platforms to provide assurances for these contextual attributes. Our model promotes the adoption of many revolutionary mobile applications by providing a seamless and flexible user experience that can protect privacy and reduce administrative overhead.
Copyright ©2006 Intel Corporation
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Sastry, M.R., Covington, M.J.: Attribute-based authentication using trusted platforms. In: Proceedings of the 8th International Symposium on Wireless Personal Multimedia Communications (WPMC 2005), Aalborg, Denmark (2005); Special Session on Platform Security
Trusted Computing Group: TCG specifications. TCG Website (2005), Available from: http://www.trustedcomputinggroup.org/home/
World Wide Web Consortium (W3C): Platform for Privacy Preferences (P3P) Project (2005), Available from: http://www.w3.org/P3P/
Corner, M.D., Noble, B.D.: Protecting applications with transient authentication. In: Proceedings of the 1st international conference on Mobile systems, applications and services, pp. 57–70 (2003)
Covington, M.J., Ahamad, M., Essa, I., Venkateswaran, H.: Parameterized authentication. In: Samarati, P., Ryan, P.Y.A., Gollmann, D., Molva, R. (eds.) ESORICS 2004. LNCS, vol. 3193, Springer, Heidelberg (2004)
Kindberg, T., Zhang, K., Shankar, N.: Context authentication using constrained channels. In: Proceedings of the Fourth IEEE Workshop on Mobile Computing Systems and Applications (2002)
Creese, S.J., Goldsmith, M.H., Zakiuddin, B.R.,, I.: Authentication in pervasive computing. In: 1st International Conference on Security in Pervasive Computing (SPC) (2003)
Liberty Alliance Project: Liberty alliance project specifications. Liberty Alliance Website (2006), Available from: http://www.projectliberty.org/
Giuri, L., Iglio, P.: Role templates for content-based access control. In: Proceedings of the Second ACM Workshop on Role Based Access Control, Fairfax, Virginia, USA, pp. 153–159 (1997)
Covington, M.J., Long, W., Srinivasan, S., Dey, A., Ahamad, M., Abowd, G.: Securing context-aware applications using environment roles. In: Proceedings of the 6th ACM Symposium on Access Control Models and Technologies (SACMAT), Chantilly, Virginia, USA, pp. 10–20 (2001)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2006 Intel Corporation
About this paper
Cite this paper
Covington, M.J., Sastry, M.R., Manohar, D.J. (2006). Attribute-Based Authentication Model for Dynamic Mobile Environments. In: Clark, J.A., Paige, R.F., Polack, F.A.C., Brooke, P.J. (eds) Security in Pervasive Computing. SPC 2006. Lecture Notes in Computer Science, vol 3934. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11734666_17
Download citation
DOI: https://doi.org/10.1007/11734666_17
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-33376-0
Online ISBN: 978-3-540-33377-7
eBook Packages: Computer ScienceComputer Science (R0)