Seeing-Is-Believing: using camera phones for human-verifiable authentication

McCune, Jonathan M.; Perrig, Adrian; Reiter, Michael K.

doi:10.1504/ijsn.2009.023425

Cited by 111 publications

(114 citation statements)

References 24 publications

Supporting

Mentioning

113

Contrasting

Order By: Relevance

“…Wireless communication is no ideal choice because it is difficult to ensure that the response actually comes from the intended camera. Therefore, we rely on an approach similar to secure device pairing techniques proposed for mobile phones [26]. An in-depth discussion of our system, including the involved protocols, is provided in Sect.…”

Section: Design Of a Direct User Feedback Systemmentioning

confidence: 99%

See 1 more Smart Citation

User-centric privacy awareness in video surveillance

Winkler

Rinner

2011

Multimedia Systems

View full text Add to dashboard Cite

Especially in urban environments, video cameras have become omnipresent. Supporters of video surveillance argue that it is an excellent tool for many applications including crime prevention and law enforcement. While this is certainly true, it must be questioned if sufficient efforts are made to protect the privacy of monitored people. Privacy concerns are often set aside when compared to public safety and security. One reaction to this situation is emerging: community-based efforts where citizens register and map surveillance cameras in their environment. Our study is inspired by this idea and proposes a user-specific and location-aware privacy awareness system. Using conventional smartphones, users not only can contribute to the camera maps, but also use community-collected data to be alerted of potential privacy violations. In our model, we define different levels of privacy awareness. For the highest level, we present a mechanism that allows users to directly interact with specially designed, trustworthy cameras. These cameras provide direct feedback about the tasks that are executed by the camera and how privacy-sensitive data is handled. A hardware security chip that is integrated into the camera is used to ensure authenticity, integrity and freshness of the provided camera status information.

show abstract

Section: Design Of a Direct User Feedback Systemmentioning

confidence: 99%

“…With Seeing-Is-Believing (SIB) [26], McCune et al take a different approach using visual communication to establish an authentic communication channel between mobile phones. Visual communication has the advantages that it is intuitive for users and that attacks on the communication are easily spotted.…”

Section: Related Work On User-based Attestationmentioning

confidence: 99%

User-centric privacy awareness in video surveillance

Winkler

Rinner

2011

Multimedia Systems

View full text Add to dashboard Cite

show abstract

“…In a first combination with the TCG architecture, [25] demonstrate a mobile phone application which uses 2-D barcodes on stickers to identify a public key of devices like printers or IEEE 802.11 access points. The authors also consider integration in TPM-based attestation protocols.…”

Section: Related Workmentioning

confidence: 99%

“…We illustrate a successful attestation similar to when carried out with the scheme that has been demonstrated by [14,25]. Note that the individual kiosks are identified by barcode tags attached to them.…”

mentioning

confidence: 94%

An approach to introducing locality in remote attestation using near field communications

Toegl

Hutter

2010

J Supercomput

View full text Add to dashboard Cite

Remote Attestation, as devised by the Trusted Computing Group, is based on a secure hardware component-the Trusted Platform Module (TPM). It allows to reach trust decisions between different network hosts. However, attestation cannot be applied in an important field of application-the identification of physically encountered, public computer platforms. Unfortunately, such computer terminals are especially exposed and the software running on them cannot be assumed unaltered and secure.Three challenges arise. The cryptographic protocols that actually perform the attestation do not provide for human-intelligible trust status analysis, easily graspable conveyance of results, nor the intuitive identification of the computer platform involved. Therefore, the user needs a small portable device, a token, to interact with local computer platforms. It can perform an attestation protocol, report the result to the user, even if the display the user faces cannot be trusted and may be connected to the platform under scrutiny. In addition, the token must establish that the particular machine faced actually contains the TPM that performs the attestation.In this paper, we demonstrate an attestation token architecture which is based on a commodity smart phone and which is more efficient and flexible than previous proposals. Furthermore, we introduce an autonomic and low-cost Near Field Communication (NFC) compatible interface to the TPM that provides a direct channel for proof of the TPM's identity and local proximity to the attestation token.

show abstract

“…Seeing-is-Believing methods use a public-key encoded as a 2D-barcode to set up the key (McCune et al 2005). Unlike the Talking-to-Strangers protocol, Seeing-is-Believing requires only a single specialized set-up hardware equipped with a camera or barcode reader.…”

Section: Related Work On Secure Key Deployment For Sensor Nodesmentioning

confidence: 99%

Anti-counterfeiting, key distribution, and key storage in an ambient world via physical unclonable functions

et al. 2008

View full text Add to dashboard Cite

Virtually all applications which provide or require a security service need a secret key. In an ambient world, where (potentially) sensitive information is continually being gathered about us, it is critical that those keys be both securely deployed and safeguarded from compromise. In this paper, we provide solutions for secure key deployment and storage of keys in sensor networks and radio frequency identification systems based on the use of Physical Unclonable Functions (PUFs). In addition, to providing an overview of different existing PUF realizations, we introduce a PUF realization aimed at ultra-low cost applications. We then show how the properties of Fuzzy Extractors or Helper Data algorithms can be used to securely deploy secret keys to a low cost wireless node. Our protocols are more efficient (round complexity) and allow for lower costs compared to previously proposed ones. We also provide an overview of PUF applications aimed at solving the counterfeiting of goods and devices.

show abstract

Seeing-Is-Believing: using camera phones for human-verifiable authentication

Abstract: Abstract

Cited by 111 publications

References 24 publications

User-centric privacy awareness in video surveillance

User-centric privacy awareness in video surveillance

An approach to introducing locality in remote attestation using near field communications

Anti-counterfeiting, key distribution, and key storage in an ambient world via physical unclonable functions

Contact Info

Product

Resources

About