Keeping data secret under full compromise using porter devices

Christina Pöpper, David Basin, Srdjan Čapkun, Cas Cremers

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

We address the problem of confidentiality in scenarios where the attacker is not only able to observe the communication between principals, but can also fully compromise the communicating parties (their devices, not only their long term secrets) after the confidential data has been exchanged. We formalize this problem and explore solutions that provide confidentiality after the full compromise of devices and user passwords. We propose two new solutions that use explicit key deletion and forward-secret protocols combined with key storage on porter devices. Our solutions provide the users with control over their privacy. We analyze the proposed solutions using an automatic verification tool. We also implement a prototype using a mobile phone as a porter device to illustrate how the solution can be realized on modern platforms.

Original languageEnglish (US)
Title of host publicationProceedings - 26th Annual Computer Security Applications Conference, ACSAC 2010
Pages241-250
Number of pages10
DOIs
StatePublished - 2010
Event26th Annual Computer Security Applications Conference, ACSAC 2010 - Austin, TX, United States
Duration: Dec 6 2010Dec 10 2010

Publication series

NameProceedings - Annual Computer Security Applications Conference, ACSAC
ISSN (Print)1063-9527

Other

Other26th Annual Computer Security Applications Conference, ACSAC 2010
CountryUnited States
CityAustin, TX
Period12/6/1012/10/10

Keywords

  • full compromise
  • security protocol
  • system security

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Software
  • Safety, Risk, Reliability and Quality

Fingerprint Dive into the research topics of 'Keeping data secret under full compromise using porter devices'. Together they form a unique fingerprint.

  • Cite this

    Pöpper, C., Basin, D., Čapkun, S., & Cremers, C. (2010). Keeping data secret under full compromise using porter devices. In Proceedings - 26th Annual Computer Security Applications Conference, ACSAC 2010 (pp. 241-250). (Proceedings - Annual Computer Security Applications Conference, ACSAC). https://doi.org/10.1145/1920261.1920297