SPATE: Small-Group PKI-Less Authenticated Trust Establishment

  • Authors:
  • Yue-Hsun Lin;Ahren Studer;Yao-Hsin Chen;Hsu-Chun Hsiao;Li-Hsiang Kuo;Jonathan M. McCune;King-Hang Wang;Maxwell Krohn;Adrian Perrig;Bo-Yin Yang;Hung-Min Sun;Phen-Lan Lin;Jason Lee

  • Affiliations:
  • National Tsing Hua University, Taiwan;Carnegie Mellon University, Pittsburgh;National Tsing Hua University, Taiwan;Carnegie Mellon University, Pittsburgh;Academia Sinica, Taiwan;Carnegie Mellon University, Pittsburgh;Carnegie Mellon University, Pittsburgh;National Tsing Hua University, Taiwan;Carnegie Mellon University, Pittsburgh;Providence University, Taiwan;Carnegie Mellon University, Pittsburgh;National Tsing Hua University, Taiwan;Academia Sinica, Taiwan

  • Venue:
  • IEEE Transactions on Mobile Computing
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Establishing trust between a group of individuals remains a difficult problem. Prior works assume trusted infrastructure, require an individual to trust unknown entities, or provide relatively low probabilistic guarantees of authenticity (95 percent for realistic settings). This work presents SPATE, a primitive that allows users to establish trust via mobile devices and physical interaction. Once the SPATE protocol runs to completion, its participants' mobile devices have authentic data that their applications can use to interact securely (i.e., the probability of a successful attack is 2^{-24}). For this work, we leverage SPATE as part of a larger system to facilitate efficient, secure, and user-friendly collaboration via e-mail, file-sharing, and text messaging services. Our implementation of SPATE on Nokia N70 smartphones allows users to establish trust in small groups of up to eight users in less than one minute. The example SPATE applications provide increased security with little overhead noticeable to users once keys are established.