Private key protection for mobile security and privacy

点击翻译按钮获取中文摘要

Mobile devices and tablets are often used by patients, doctors, and other health care providers to access, update,and manage healthcare data. However, recent reports suggest that the vast majority of the global volume of mobile data is not secured, and the number of known mobile malware programs has grown to over 175K in 2014. Furthermore, because healthcare data is accessed by multiple different parties, a secure system is required to not only enable this access, but also provide granular, auditable access. This project proposes a physical and logical separation of encryption keys and healthcare data, where private keys are not stored on the device with the data but are generated on an as-needed basis, thus removing the requirement for a secure element on the device to store the key. The research challenge is to develop a scheme to generate private keys securely and efficiently on a mobile device any time this is required in order to facilitate efficient end-to-end encryption and access control of the device data.