A dynamic trust based context -aware authentication framework with privacy preserving
Résumé
As ubiquitous technologies ingrain themselves further into our lives, rapid progress has been made in context-aware computing. Context-aware environments are set to become a reality. However, major challenges remain to be addressed including privacy, authentication, access control, and trust. These security challenges have to be non-intrusive, intelligent, and able to adapt to the rapidly changing contexts of users. Context-aware environments are expected to make these challenges more accurate and to consider them in place from the start, so that a mutual trust relationship can be formed between entities. It is therefore, a key challenge in a ubiquitous network society to design an effective privacy preserving authentication and access control framework that adequately meet security requirements posed by the context-aware service paradigm in pervasive computing environment. In this paper, we propose a security framework that integrates context-awareness to perform authentication and access control approach in a very flexible and scalable model that is both context-aware and privacy preserving. Moreover, we show how our framework can be integrated with trust management. In this paper, we focus on introducing an anonymous authentication and access control scheme to secure interactions between users and services in ubiquitous environments. The architecture focuses on the authentication of users who request access to the resources of smart environment system through static devices (i.e. smart card, RFID, etc.), or dynamic devices (i.e. PDA, mobile phones, etc.).