A context-sensitive security model for privacy protection on mobile phones

Abstract

In this paper we present a context-sensitive security model for privacy protection on mobile phones. We describe the system TreasurePhone which implements this security model. The Privacy Protection is realized by spheres, which represent the user's context specific need for privacy. That is, users can create any number of spheres and define which services and data are accessible in each sphere. TreasurePhone integrates context information for supporting authentication and activation of spheres by locations and actions. A basic hierarchy is used for determining which location should be activated based on the associated sensor value.

Degrees of sharing

“…Smartphone use has become mainstream among middle class adults, encouraging media display and sharing and requiring more nuanced models of privacy [11]. Features such as rapid access to 'guest' profiles or sensoractivated spheres have been suggested to support privacy or data security [20], [11]. File-sharing or media 'trafficking' practices support various social interactions [8].…”

Mobile context-awareness

“…To establish relative location, the application uses data on the relative spatial relationships between proximate peers through short range radio sensors. Privacy applications are also being developed; including the TreasurePhone application [12] that uses a context-sensitive security model for privacy protection on mobile devices.…”