GAnGS: gather, authenticate 'n group securely

  • Authors:

  • Chia-Hsin Owen Chen;Chung-Wei Chen;Cynthia Kuo;Yan-Hao Lai;Jonathan M. McCune;Ahren Studer;Adrian Perrig;Bo-Yin Yang;Tzong-Chen Wu

  • Affiliations:

  • Academia Sinica, Nankang, Taiwan Roc;National Tsing Hua University, Hsinchu, Taiwan Roc;Carnegie Mellon University, Pittsburgh, PA, USA;National Chung Hsing University, Taichung, Taiwan Roc;Carnegie Mellon University, Pittsburgh, PA, USA;Carnegie Mellon University, Pittsburgh, PA, USA;Carnegie Mellon University, Pittsburgh, PA, USA;Academia Sinica, Nankang, Taiwan Roc;National Taiwan University of Science and Technology, Taipei, Taiwan Roc

  • Venue:
  • Proceedings of the 14th ACM international conference on Mobile computing and networking
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Establishing secure communication among a group of physically collocated people is a challenge. This problem can be reduced to establishing authentic public keys among all the participants - these public keys then serve to establish a shared secret symmetric key for encryption and authentication of messages. Unfortunately, in most real-world settings, public key infrastructures (PKI) are uncommon and distributing a secret in a public space is difficult. Thus, it is a challenge to exchange authentic public keys in a scalable, secure, and easy to use fashion. In this paper, we propose GAnGS, a protocol for the secure exchange of authenticated information among a group of people. In contrast to prior work, GAnGS resists Group-in-the-Middle and Sybil attacks by malicious insiders, as well as infiltration attacks by malicious bystanders. GAnGS is designed to be robust to user errors, such as miscounting the number of participants or incorrectly comparing checksums. We have implemented and evaluated GAnGS on Nokia N70 phones. The GAnGS system is viable and achieves a good balance between scalability, security, and ease of use.