Securing peer-to-peer distributions for mobile devices

Authors:
André Osterhues;Ahmad-Reza Sadeghi;Marko Wolf;Christian Stüble;N. Asokan
Affiliations:
Horst Görtz Institute for IT Security, Ruhr-University Bochum, Germany;Horst Görtz Institute for IT Security, Ruhr-University Bochum, Germany;Horst Görtz Institute for IT Security, Ruhr-University Bochum, Germany;Sirrix AG Security Technologies, Bochum, Germany;Nokia Research Center, Helsinki, Finland
Venue:
ISPEC'08 Proceedings of the 4th international conference on Information security practice and experience
Year:
2008

Citing 8
Cited 0

Toward real microkernels

Communications of the ACM
Xen and the art of virtualization

SOSP '03 Proceedings of the nineteenth ACM symposium on Operating systems principles
Peer-to-peer access control architecture using trusted computing technology

Proceedings of the tenth ACM symposium on Access control models and technologies
Enabling DRM-Preserving Digital Content Redistribution

CEC '05 Proceedings of the Seventh IEEE International Conference on E-Commerce Technology
Virtual monotonic counters and count-limited objects using a TPM without a trusted OS

Proceedings of the first ACM workshop on Scalable trusted computing
Beyond secure channels

Proceedings of the 2007 ACM workshop on Scalable trusted computing
OSLO: improving the security of trusted computing

SS'07 Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium
Enabling fairer digital rights management with trusted computing

ISC'07 Proceedings of the 10th international conference on Information Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Peer-to-peer (P2P) architectures offer a flexible and user-friendly way to distribute digital content (e.g., sharing, rental, or superdistribution). However, the parties involved have different interests (e.g., user privacy vs. license enforcement) that should be reflected in the P2P security architecture. We identify characteristic P2P scenarios and demonstrate how these can be realized by applying a few basic licensing operations. We present a security architecture to realize these basic license operations (i) in a generalized fashion and (ii) employing the ARM TrustZone technology, which is popular for embedded systems. Lastly, we extend existing superdistribution schemes for offline application, allowing a mobile peer to access superdistributed content without the need to first contact the actual licensor.