Anchor of trust: towards collusion-resistant trusted indoor location for enterprise and industrial use

  • PDF / 934,907 Bytes
  • 19 Pages / 595.276 x 790.866 pts Page_size
  • 20 Downloads / 213 Views

DOWNLOAD

REPORT


ORIGINAL ARTICLE

Anchor of trust: towards collusion-resistant trusted indoor location for enterprise and industrial use Jacob T. Biehl 1

&

Adam J. Lee 2 & Gerry Filby 1

Received: 24 October 2017 / Accepted: 3 April 2019 # Springer-Verlag London Ltd., part of Springer Nature 2019

Abstract Reliable location estimation has been a key enabler of many applications in the UbiComp space. Much progress has been made on the development of accurate of indoor location systems, which form the foundation of many interesting applications, particularly in consumer scenarios. However, many location-based applications in enterprise settings also require addressing another facet of reliability: assurance. Without having strong guarantees of a location estimate’s legitimacy, stakeholders must explicitly balance the advantages offered with the risks of falsification. In this space, there are two key threats: replay attacks, where signal and sensor information is collected in one location and replayed in another to falsify a location estimation later in time; and wormhole attacks, where signal and sensor information is forwarded to a remote location by a colluding device to falsify location estimation in real-time. In this work, we improve upon the state of the art in wormhole-resistant location estimation techniques. Specifically, we present the Location Anchor, which leverages a combination of technical solutions and social contracts to provide high-assurance proofs of device location that are resistant to wormhole attacks. Unlike existing work, the Location Anchor has minimal hardware costs, supports a rich tapestry of applications, and is compatible with commodity smartphone and tablet platforms. We show that the Location Anchor can extend existing replay-resistant location systems into wormhole-resistant location systems, even in the face of very aggressive attacker assumptions. We describe the protocols underlying the Location Anchor, as well as report on the efficacy of a prototype implementation. Keywords Secure location services . Indoor location . Location-based applications

1 Introduction Location and context have been hallmark topics of investigation and advancement within the UbiComp community for decades. This community, along with the broader technology industry, has advanced both geographic and indoor location techniques to a point where many real-world applications can be fully realized. Indeed, geolocation has ushered in a transformation of services across a multitude of industries. For instance, transportation applications like Uber and Lyft would not be possible (or at the very least, significantly less usable) without robust geographic location estimation and tracking on commodity smartphones. We believe that the indoor location * Jacob T. Biehl [email protected] 1

FX Palo Alto Laboratory, Inc., Palo Alto, CA, USA

2

University of Pittsburgh, Pittsburgh, PA, USA

space will be equally transformative—with foundational technologies like Bluetooth Low Energy and protocols like iBeacon and Eddystone providing an