A Prover-Anonymous and Terrorist-Fraud Resistant Distance-Bounding Protocol - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2016

A Prover-Anonymous and Terrorist-Fraud Resistant Distance-Bounding Protocol

Résumé

Contactless communications have become omnipresent in our daily lives, from simple access cards to electronic passports. Such systems are particularly vulnerable to relay attacks, in which an adversary relays the messages from a prover to a verifier. Distance-bounding protocols were introduced to counter such attacks. Lately, there has been a very active research trend on improving the security of these protocols, but also on ensuring strong privacy properties with respect to active adversaries and malicious verifiers. In particular, a difficult threat to address is the terrorist fraud, in which a far-away prover cooperates with a nearby accomplice to fool a verifier. The usual defence against this attack is to make it impossible for the accomplice to succeed unless the prover provides him with enough information to recover his secret key and impersonate him later on. However, the mere existence of a long-term secret key is problematic with respect to privacy. In this paper, we propose a novel approach in which the prover does not leak his secret key but a reusable session key along with a group signature on it. This allows the adversary to impersonate him even without knowing his signature key. Based on this approach, we give the first distance-bounding protocol, called SPADE, integrating anonymity, revocability and provable resistance to standard threat models.
Fichier principal
Vignette du fichier
Wisec16.pdf (448.71 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01510800 , version 1 (13-12-2017)

Identifiants

Citer

Xavier Bultel, Sébastien Gambs, David Gérault, Pascal Lafourcade, Cristina Onete, et al.. A Prover-Anonymous and Terrorist-Fraud Resistant Distance-Bounding Protocol. 9th ACM Conference on Security & Privacy in Wireless and Mobile Networks (WiSec), Jul 2016, Darmstadt, Germany. pp.121-133, ⟨10.1145/2939918.2939919⟩. ⟨hal-01510800⟩
100 Consultations
173 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More