Securing First Response Coordination with Dynamic Attribute-Based Encryption

Weber, Stefan

doi:10.1109/congress.2009.11

Cited by 13 publications

(11 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [15], we show that ABE allows for building a security architecture for secure data sharing, also suitable for emergency management applications, i. e., it can be used to implement an end-to-end encryption allowing operational headquarters to target dynamic groups of first responders. Albeit, the so far proposed concept lacks support for a controlled override of access restrictions in emergency cases.…”

Section: Attribute-based Encryptionmentioning

confidence: 99%

“…Only a few works in the disaster management domain explicitly consider security issues; in [15], we propose an ABE-based security architecture for sharing sensitive data in emergency management applications. Tailored to a different application context, Huang and Verma [8] present an ABE-based framework for establishing secure communications and enforcing access control policies within vehicular ad hoc networks.…”

Section: Related Workmentioning

confidence: 99%

“…Recently introduced, Attribute-based Encryption (ABE) techniques [2,13,14] have drawn attention for realizing decentralized access control in large and dynamic networks and ubiquitous computing environments [8,15,16]. By allowing to implement an efficient targeted broadcast encryption, ABE provides means for designing flexible and scalable access control systems, without the need of administrating large access control policies.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Attribute-Based Encryption with Break-Glass

Brucker¹,

Petritsch²,

Weber

2010

Information Security Theory and Practices. Security and Privacy of Pervasive Systems and Smart Devices

Self Cite

View full text Add to dashboard Cite

Abstract. Attribute-based Encryption (ABE) allows for implementing fine-grained decentralized access control based on properties or attributes a user has. Thus, there is no need for writing detailed, user-based policies in advance. This makes ABE in particular interesting for implementing security mechanisms in dynamic environments such as ubiquitous computing, disaster management, or health-care. For supporting the latter two application areas, common ABE approaches lack one important feature: break-glass, i. e., the controlled overriding of access control restrictions.In this paper we present an integration of break-glass into an approach for end-to-end secure information sharing using ABE techniques.

show abstract

Section: Attribute-based Encryptionmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Attribute-Based Encryption with Break-Glass

Brucker¹,

Petritsch²,

Weber

2010

Information Security Theory and Practices. Security and Privacy of Pervasive Systems and Smart Devices

Self Cite

View full text Add to dashboard Cite

show abstract

“…Their real-time position and tracking information can be displayed on a digital map in an emergency management headquarter, so that the data can by analyzed by a decision maker. While the current tracking information supports the coordination of rescue missions through the decision maker in the headquarter [5], collected historical position information of the first responders also creates some kind of log which documents the rescue missions. This data log is what we call a mission log.…”

Section: A Application Scenario and Settingmentioning

confidence: 99%

Harnessing Pseudonyms with Implicit Attributes for Privacy-Respecting Mission Log Analysis

Weber

2009

2009 International Conference on Intelligent Networking and Collaborative Systems

Self Cite

View full text Add to dashboard Cite

Abstract-Many applications in the area of collaborative work can be enhanced by tracking users regularly. Consider a future emergency management application, in which mobile first responders are continuously tracked in order to support a better coordination of the rescue missions and to create a mission log. However, continuous tracking of individuals and storing the data for later use is often in conflict with individual privacy preferences. Therefore, it is a challenge to deal with conflicting traceability and privacy protection requirements. A common way to implement some kind of privacy protection is to use pseudonyms instead of fixed IDs for each user. However, in order to build a multilateral secure and acceptable solution, a more complex system design w.r.t. to pseudonym linkability is required, that also allows third parties to analyze the logs for organizational and legal reasons.In this paper, we present our approach to deal with this issue: we propose to encode additional information into pseudonyms that are used in location tracking systems and stored in data logs. Our concept comprises both access rights for the user herself and implicit attributes that may be verified by third parties in a privacy-respecting manner. We introduce the cryptographic constructions, which employ cryptographically secure pseudorandom number generators, threshold cryptography and techniques for securely evaluating encrypted data. Moreover, in this paper, we sketch a practical application example in the area of emergency mission log analysis and discuss the main security properties of our concepts.

show abstract

“…Consider the example of a smart emergency management application: once mobile units are continuously tracked, e.g. by sending their GPS positions and further data to a headquarter, a precise coordination of rescue missions is possible [53] and vital signs of first responders can be monitored. Moreover, units can act as mobile sensors to monitor levels of air pollution, also mission auditing can be supported by creating digital mission logs based on the collected GPS traces [52].…”

Section: Perspective: Mission-critical Applicationsmentioning

confidence: 99%

Multilaterally Secure Ubiquitous Auditing

Weber¹,

Mühlhäuser

2010

Intelligent Networking, Collaborative Systems and Applications

Self Cite

View full text Add to dashboard Cite

Tracking information of individuals is a useful input to many Ubiquitous Computing (UbiComp) applications. Consider the example of a smart emergency management application: once mobile first responders are continuously tracked, a precise and safe coordination of rescue missions is possible, and also mission logs can be created for audit purposes. However, continuously tracking users and storing the data for later use is often in conflict with individual privacy preferences. This may ultimately lead to the non-acceptance and rejection of these new technologies by their users. In order to reconcile privacy and accountability requirements in location tracking systems, we introduce and evaluate the approach of using auditing mechanisms on two levels. We illustrate that, by employing carefully designed cryptographic mechanisms for selective pseudonym linkability based on efficient techniques of secure multiparty computation, it is possible to balance the conflicting interests to a certain extent. Our work, motivated by and applied to smart emergency management systems, is a step towards the realization of multilaterally secure and thus multilaterally acceptable UbiComp systems supporting collaborative work.

show abstract

Securing First Response Coordination with Dynamic Attribute-Based Encryption

Cited by 13 publications

References 15 publications

Attribute-Based Encryption with Break-Glass

Attribute-Based Encryption with Break-Glass

Harnessing Pseudonyms with Implicit Attributes for Privacy-Respecting Mission Log Analysis

Multilaterally Secure Ubiquitous Auditing

Contact Info

Product

Resources

About