Securing the drop-box architecture for assisted living

Authors:
Michael J. May;Wook Shin;Carl A. Gunter;Insup Lee
Affiliations:
University of Pennsylvania;University of Illinois at Urbana-Champaign;University of Illinois at Urbana-Champaign;University of Pennsylvania
Venue:
Proceedings of the fourth ACM workshop on Formal methods in security
Year:
2006

Citing 13
Cited 2

Certified email with a light on-line trusted third party: design and implementation

Proceedings of the 11th international conference on World Wide Web
Telemedicine system over the internet

VIP '00 Selected papers from the Pan-Sydney workshop on Visualisation - Volume 2
Robustness Principles for Public Key Protocols

CRYPTO '95 Proceedings of the 15th Annual International Cryptology Conference on Advances in Cryptology
Defective Sign & Encrypt in S/MIME, PKCS#7, MOSS, PEM, PGP, and XML

Proceedings of the General Track: 2002 USENIX Annual Technical Conference
Formal Development of Secure Email

HICSS '99 Proceedings of the Thirty-Second Annual Hawaii International Conference on System Sciences-Volume 3 - Volume 3
A semantics for web services authentication

Proceedings of the 31st ACM SIGPLAN-SIGACT symposium on Principles of programming languages
From absence of certain vulnerabilities towards security proofs: pushing the limits of formal verification

Proceedings of the 2003 workshop on New security paradigms
Formal prototyping in early stages of protocol design

WITS '05 Proceedings of the 2005 workshop on Issues in the theory of security
WSEmail: Secure Internet Messaging Based on Web Services

ICWS '05 Proceedings of the IEEE International Conference on Web Services
Secure sessions for web services

SWS '04 Proceedings of the 2004 workshop on Secure web service
A Computationally Sound Mechanized Prover for Security Protocols

SP '06 Proceedings of the 2006 IEEE Symposium on Security and Privacy
Verified Interoperable Implementations of Security Protocols

CSFW '06 Proceedings of the 19th IEEE workshop on Computer Security Foundations
Reconciling Two Views of Cryptography (The Computational Soundness of Formal Encryption)

Journal of Cryptology

Defeasible security policy composition for web services

Proceedings of the fourth ACM workshop on Formal methods in security
Security policy implementation strategies for common carrier monitoring service providers

POLICY'09 Proceedings of the 10th IEEE international conference on Policies for distributed systems and networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

Home medical devices enable individuals to monitor some of their own health information without the need for visits by nurses or trips to medical facilities. This enables more continuous information to be provided at lower cost and will lead to better healthcare outcomes. The technology depends on network communication of sensitive health data. Requirements for reliability and ease-of-use provide challenges for securing these communications. In this paper we look at protocols for the drop-box architecture, an approach to assisted living that relies on a partially-trusted Assisted Living Service Provider (ALSP). We sketch the requirements and architecture for assisted living based on this architecture and describe its communication protocols. In particular, we give a detailed description of its report and alarm transmission protocols and give an automated proof of correspondence theorems for them. Our formulation shows how to characterize the partial trust vested in the ALSP and use the existing tools to verify this partial trust.