Communication publiée dans un ouvrage (Colloques, congrès, conférences scientifiques et actes)
Towards Privacy Preserving Data Centric Super App
CARVALHO OTA, Fernando Kaway; MEIRA, Jorge Augusto; FRANK, Raphaëlet al.
2020 • In CARVALHO OTA, Fernando Kaway; MEIRA, Jorge Augusto; FRANK, Raphaëlet al. (Eds.) 2020 Mediterranean Communication and Computer Networking Conference, Arona 17-19 June 2020
network security; data security; data privacy; access protocols
Résumé :
[en] The number of smartphone users recently surpassed
the numbers of desktop users on Internet, and opened
up countless development challenges and business opportunities.
Not only the fact that the majority of users are connected
using their smartphones, but the number of Internet users
in general has popularized the massive use of data-driven
applications. In this context, the concept of super apps seems
to be the next game-changer for the mobile apps industry,
and the challenges related to security and privacy are key
aspects for keeping user data safe. Thus, by combining different
components for provisioning, authentication, membership and
others, we propose a novel framework that enables the creation
of a super app using privacy by design principles.
Centre de recherche :
Interdisciplinary Centre for Security, Reliability and Trust (SnT) > Services and Data management research group (SEDAN)
Disciplines :
Sciences informatiques
Auteur, co-auteur :
CARVALHO OTA, Fernando Kaway ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
MEIRA, Jorge Augusto ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
FRANK, Raphaël ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
STATE, Radu ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
Co-auteurs externes :
no
Langue du document :
Anglais
Titre :
Towards Privacy Preserving Data Centric Super App
Date de publication/diffusion :
10 septembre 2020
Nom de la manifestation :
2020 Mediterranean Communication and Computer Networking Conference (MedComNet)
Lieu de la manifestation :
Arona, Italie
Date de la manifestation :
17-19 June 2020
Manifestation à portée :
International
Titre de l'ouvrage principal :
2020 Mediterranean Communication and Computer Networking Conference, Arona 17-19 June 2020
F. Ota, J. Meira, C. Cassagnes, R. State, "Mobile App to SGX Enclave Secure Channel", The 4th International Workshop on Reliability and Security Data Analysis, in press, 2019.
Liang, Xueping, et al. "Man in the cloud (mitc) defender: Sgx-based user credential protection for synchronization applications in cloud computing platform. " 2017 IEEE 10th International Conference on Cloud Computing (CLOUD). IEEE, 2017.
R. Lindermann, J. Hill, D. Biggs. FIDO Authenticator Security Requirements. 2018. URL: https://fidoalliance. org/specs/fido-securityrequirements/fido-authenticator-allowed-cryptography-list-v1. 2-fd-20180629. html
Valadares, Dalton Cézane Gomes, et al. "Achieving data dissemination with security using FIWARE and Intel software guard extensions (SGX). " 2018 IEEE Symposium on Computers and Communications (ISCC). IEEE, 2018.
Marlinspike, Moxie, and Trevor Perrin. "The x3dh key agreement protocol. " Open Whisper Systems (2016).
Contiu, Stefan, et al. "Ibbe-sgx: Cryptographic group access control using trusted execution environments. " 2018 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN). IEEE, 2018.
Severinsen, Kristoffer, Christian Johansen, and Sergiu Bursuc. "Securing the End-points of the Signal Protocol using Intel SGX based Containers. " Security Principles and Trust Hotspot 2017 (2017): 1.
Birrell, Eleanor, et al. "SGX enforcement of use-based privacy. " Proceedings of the 2018 Workshop on Privacy in the Electronic Society. 2018.
Küçük, Kubilay Ahmet, et al. "Exploring the use of Intel SGX for secure many-party applications. " Proceedings of the 1st Workshop on System Software for Trusted Execution. 2016.
Dilmaghani, Saharnaz, et al. "Privacy and Security of Big Data in AI Systems: A Research and Standards Perspective. " 2019 IEEE International Conference on Big Data (Big Data). IEEE, 2019.
Area, Solution Focus. "FIDO Support on Intel® Platforms. "
Cohn-Gordon, Katriel, et al. "A formal security analysis of the signal messaging protocol. " 2017 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE, 2017.
Hintze, Daniel, et al. "CORMORANT: On Implementing Risk-Aware Multi-Modal Biometric Cross-Device Authentication For Android. " (2019).
