Security Protocols for Pervasive Computing Applications

将可穿戴设备和嵌入式设备集成到普适计算环境中需要对安全和隐私问题进行高度关注。研究了安全普适计算的系统体系结构及其相关协议。系统架构是基于每个设备的软件代理的存在。系统中的所有对象（例如，设备、可穿戴设备、软件代理和用户）都有关联的可信软件代理，这些代理可以运行在设备上的嵌入式处理器上，也可以运行在可信计算机上。在设备具有最小计算能力并通过有线或无线网络与其代理通信的情况下，所建议的系统中的通信遵循所建议的设备到代理协议。还提出了代理之间使用基于SPKI/SDSI（简单公钥基础设施/简单分布式安全基础设施）的安全代理到代理协议进行通信。有些设备，例如终端或显示器，可能不可信或其安全性可能受到损害，但用户可能仍然希望使用它们，因为它们提供了大屏幕或大带宽资源。提出了一种基于可视化认证的非可信计算机协议，使用户可以使用非可信计算机并对显示的信息进行认证，并安全地与远程应用程序通信。使用上面描述的体系结构思想，提出了一种普适计算环境的设计和实现，该环境允许安全而有效地访问联网的移动设备。

The integration of wearable and embedded devices into a pervasive computing environment requires significant attention to security and privacy issues. A system architecture with associated protocols for secure pervasive computing is investigated.The system architecture is based on the existence of a software proxy for each device. All objects in the system, e.g., appliances, wearable gadgets, software agents, and users have associated trusted software proxies that either run on an embedded processor on the appliance, or on a trusted computer. In the case where the device has minimal computational power, and communicates to its proxy through a wired or wireless network, the communication in the proposed system adheres to a proposed device-to-proxy protocol. It is also proposed that proxies communicate with each other using a secure proxy-to-proxy protocol based on SPKI/SDSI (Simple Public Key Infrastructure / Simple Distributed Security Infrastructure). Some devices, e.g., terminals or displays, may not be trusted or their security might be compromised, but users may still wish to use them, because they provide a large screen or large bandwidth resources. An untrusted computer protocol based on visual authentication is proposed such that users can use the untrusted computer and authenticate displayed information as well as communicate securely to a remote application.Using the architectural ideas described above, the design and implementation of a pervasive-computing environment which allows for secure, yet efficient, access to networked, mobile devices is proposed.