Home gateway operating model using reference monitor for enhanced user comfort and privacy

Cho, Eunae; Moon, Chang-Joo; Baik, Doo-Kwon

doi:10.1109/tce.2008.4560120

Cited by 5 publications

(4 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Another approach found in the literature is the use of a "Reference Monitor" entity [20], i.e. a home gateway, whose goal is to provide and enforce a collection of access control policies, aiming to help satisfy a user's access, convenience, and privacy requirements.…”

Section: Policy-based Access Controlmentioning

confidence: 99%

XSACd—Cross-domain resource sharing & access control for smart environments

Fysarakis

Soultatos

Manifavas

et al. 2018

Future Generation Computer Systems

View full text Add to dashboard Cite

Computing devices already permeate working and living environments; a trend which affects all aspects of modern everyday lives, and one which is expected to intensify in the coming years. In the residential setting, the enhanced features and services provided by said computing devices constitute what is typically referred to as a "smart home". However, the long-promised improvement in the quality of residential life cannot be realized without overcoming some significant obstacles introduced by these technological advancements. The direct interaction smart devices often have with the physical world, along with the processing, storage and communication of data pertaining to users' lives, i.e. private sensitive in nature, bring security concerns into the limelight. The resource-constraints of the platforms being integrated into a smart home environment, and their heterogeneity in hardware, network and overlaying technologies, only exacerbate the above issues. This paper presents Cross-domain Service Access Control for devices (XSACd), a framework that combines the well-studied fine-grained access control provided by the eXtensible Access Control Markup Language (XACML) with the benefits of Service Oriented Architectures through the use of the Devices Profile for Web Services (DPWS). Based on standardized technologies, it enables seamless interaction and fine-grained policy-based management of the heterogeneous embedded devices that may be found in a smart residential setting, including support for interactions between users and devices residing on different locations and networks. The proposed framework is implemented in full and its performance is evaluated on a test bed featuring relatively resource-constrained smart platforms and embedded devices.

show abstract

Section: Policy-based Access Controlmentioning

confidence: 99%

XSACd—Cross-domain resource sharing & access control for smart environments

Fysarakis

Soultatos

Manifavas

et al. 2018

Future Generation Computer Systems

View full text Add to dashboard Cite

show abstract

“…To the best of our knowledge, there is already some previous work on the studies of access control models for home network environment [4,5,6]. These existing access control mechanisms, however, always preserve all the access control policies in the home gateway or the distributed household appliances, and thus they can be broadly generalized into two types of models, namely, the home gateway model and the distributed household appliances model.…”

Section: Related Workmentioning

confidence: 99%

An effective access control mechanism in home network environment based on SPKI certificates

Song

Son

et al. 2010

2010 IEEE International Conference on Information Theory and Information Security

Self Cite

View full text Add to dashboard Cite

In home network environment, security is one of the most important issues that need to be addressed because the services provided by all kinds of household appliances are likely related with the privacy information of the residents. Although several access control mechanisms have been proposed in the last few years, these existing models always preserve all the access control policies in the home gateway or the distributed household appliances, and all of them have conspicuous defects. In this paper, we divide access control policies into general policies and privacy policies according to different security requirements of the residents. With the help of SPKI certificates theory, we demonstrate that our model is an effective access control mechanism by providing two types of access control policies with different security schemes.

show abstract

“…Security is imperative for many systems, such as the water-based automatic security marking platform [1] , cognitive radios [2][3][4][5] , smart grid [6] , physical layer [7] , and cloud and fog computing [8] . Moreover, in addition to high-performance packet switching [9,10] , commercial home gateways [11] or switches/routers necessitate high-throughput crypto processors. Also, security is of paramount importance for many consumer electronics [12,13] .…”

Section: Introductionmentioning

confidence: 99%

High-Throughput CBC Mode Crypto Circuit

Chang

Teng

Chin

2023

electr. sci. & eng.

View full text Add to dashboard Cite

The objective of this study is to investigate a high-throughput cipher-block chaining (CBC) mode crypto circuit, which can be embedded in commercial home gateways or switches/routers. Concurrently, the area efficiency of block ciphers can be improved as well. However, the CBC mode encounters the problem of data dependency. To solve this issue, a data scheduling mechanism of network packets is proposed to eliminate the data dependency of input data for CBC mode pipelined crypto engines. The proposed CBC mode architecture can be applied to advanced encryption standards (AES), triple data encryption standards (3DES), and other block ciphers. In addition, to increase the throughput, deeply pipelined AES-CBC and 3DES-CBC circuits with balanced paths are proposed. With the proposed scheduling and pipelined circuits, the authors can effectively encrypt the packet data of multiple network channels at the same time. Using the proposed architecture, throughputs of 137.8 and 44.75 Gbps using a copy of pipelined AES-CBC and 3DES-CBC circuits can be achieved in TSMC 45 nm and TSMC 130 nm processes, respectively.

show abstract

Home gateway operating model using reference monitor for enhanced user comfort and privacy

Cited by 5 publications

References 10 publications

XSACd—Cross-domain resource sharing & access control for smart environments

XSACd—Cross-domain resource sharing & access control for smart environments

An effective access control mechanism in home network environment based on SPKI certificates

High-Throughput CBC Mode Crypto Circuit

Contact Info

Product

Resources

About