A Comprehensive Approach to Secure Group Communication in Wireless Networks

A Comprehensive Approach to Secure Group Communication in Wireless Networks David González Romero Chicago, August 2009

Agenda Chapter 1: Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- - Secure Device Pairing Secure Group Communication Initial key exchange Secure communication Our goal

Wireless technologies - - Complexity (transmission rate, network topology, protocol stack…) Distance range Security needs

Bluetooth technology ,[object Object],[object Object],[object Object],[object Object],[object Object],- -

Bluetooth security ,[object Object],[object Object],[object Object],[object Object],[object Object],- - ,[object Object],[object Object],123456 ? OOB channel

Secure Device Pairing ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Public key cryptography ,[object Object],[object Object],[object Object],- - Alice Message Bob Communication channel Encrypted message Encryption Bob’s public key Encrypted message Encrypted message Decryption Bob’s private key Message

Diffie-Hellman Key Exchange ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- - a, g, p A = g a mod p K = B a mod p Alice b B = g a mod p K= A b mod p Bob g, p, A B

Digital signatures - - Alice Message Hash function Alice’s private key Digital Signature Algorithm – sign operation Digital Signature Digitally signed message (message + digital signature) Hash function Digital signature Digital Signature Algorithm – verify operation Bob Digitally signed message Digital signature verified / signature verification failed Alice’s public key

Public key schemes ,[object Object],- -

Human-Assisted solutions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Seeing is Believing ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- - visual channel Public key B A

Secure Group Communication - - ,[object Object],[object Object],[object Object],[object Object]

Resurrecting Duckling - - ,[object Object],[object Object],[object Object],[object Object],Imprintable device Master device Trusted channel Key exchange Imprinted device Master device ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Attacker? Master device Imprinted device Imprintable device Master device Trusted channel Key exchange Message

Identity Based Encryption ,[object Object],[object Object],[object Object],[object Object],- - PKG Bob Alice Authentication Private key Message encrypted with Bob’s public key

Entity recognition ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Conclusion WIRELESS SECURITY - - User-managed Technological needs Transparent to the user SSP Ad hoc Certification-authority-dependent DH ECC Digital signature Public Key ? TtS SiB L&C HAPADEP Human-Assisted Resurrecting Duckling policy Entity Recognition IBE Secure Group Communication

Annex 1: other wireless technologies studied David González Romero Chicago, August 2009

WLAN: Wireless Local Area Networking ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

ZigBee ,[object Object],[object Object],[object Object],[object Object],- - Applications and Profiles Application Support (ASP) Layer IEEE 802.15.4 Medium Access Control (MAC) Layer IEEE 802.15.4 Physical (PHY) Layer Network Layer Defined by IEEE 802.15.4 Defined by ZigBee specification Defined by application developer

Wireless USB ,[object Object],[object Object],[object Object],- -

Near Field Communication (NFC) ,[object Object],[object Object],[object Object],[object Object],[object Object],- -

Annex 2: other human-assisted device pairing solutions David González Romero Chicago, August 2009

Talking to Strangers ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- - infrared channel (invisible) Attacker

[object Object],[object Object],[object Object],Loud and Clear ,[object Object],[object Object],[object Object],[object Object],- - Public key exchange Public key exchange Public key exchange Public key exchange

Annex 3: other discarded slides David González Romero Chicago, August 2009

Bluetooth basics ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- - Applications and Profiles L2CAP (Logical Link Control and Adaptation ) HCI (Host Controller Interface) Link Manager Protocol (LMP) Baseband [Link controller (LC)] Bluetooth Radio SDP (Service Discovery) Radio Frequency Communication (RFCOMM) OBEX PPP TCP Host stack Controller stack TCS BIN UDP IP

Bluetooth network topology - - P2 P1 P3 M1 S1 S1 S1/S2 M2 S2 M3/S2 S3

Bluetooth security ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Man-in-the-Middle Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Elliptic Curve Cryptography ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Key agreement in peer-to-peer wireless networks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Proposed device pairing solutions - -

Group authentication ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Identity Based Encryption (II) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

Annex 4: selected references David González Romero Chicago, August 2009

Selected references ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],- -

A Comprehensive Approach to Secure Group Communication in Wireless Networks

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

En vedette

En vedette (20)

Similaire à A Comprehensive Approach to Secure Group Communication in Wireless Networks

Similaire à A Comprehensive Approach to Secure Group Communication in Wireless Networks (20)

Dernier

Dernier (20)

A Comprehensive Approach to Secure Group Communication in Wireless Networks