Smart Keys for Cyber-Cars: Secure Smartphone-Based NFC-Enabled Car Immobilizer
E. Bertino, R. Sandhu, L. Bauer, and J. Park (Eds.) ACM Conference on Data and Application Security and Privacy (CODASPY), ACM, (February 2013)
Abstract
Smartphones have become very popular and versatile de-vices. An emerging trend is the integration of smartphones into automotive systems and applications, particularly access control systems to unlock cars (doors and immobilizers). Smartphone-based automotive solutions promise to greatly enhance the user’s experience by providing advanced features far beyond the conventional dedicated tokens/tranponders. We present the first opensecurity framework for secure smartphone-based immobilizers. Our generic security architecture protects the electronic access tokens on the smart-phone and provides advanced features such as context-aware access policies, remote issuing and revocation of access rights and their delegation to other users. We discuss various approaches to instantiate our security architecture based on different hardware-based trusted execution environments, and elaborate on their security properties. We implemented our immobilizer system based on the latest Android-based smartphone and a microSD smartcard. Further, we support the algorithmic proofs of the security of the underlying protocols with automated formal verification tools.
%0 Conference Paper
%1 conf/codaspy/BusoldTWDSSS13
%B ACM Conference on Data and Application Security and Privacy (CODASPY)
%D 2013
%E Bertino, Elisa
%E Sandhu, Ravi S.
%E Bauer, Lujo
%E Park, Jaehong
%I ACM
%K International-Conference-Workshop-Papers-Book-Chapters myown
%T Smart Keys for Cyber-Cars: Secure Smartphone-Based NFC-Enabled Car Immobilizer
%U http://dblp.uni-trier.de/db/conf/codaspy/codaspy2013.html#BusoldTWDSSS13
%X Smartphones have become very popular and versatile de-vices. An emerging trend is the integration of smartphones into automotive systems and applications, particularly access control systems to unlock cars (doors and immobilizers). Smartphone-based automotive solutions promise to greatly enhance the user’s experience by providing advanced features far beyond the conventional dedicated tokens/tranponders. We present the first opensecurity framework for secure smartphone-based immobilizers. Our generic security architecture protects the electronic access tokens on the smart-phone and provides advanced features such as context-aware access policies, remote issuing and revocation of access rights and their delegation to other users. We discuss various approaches to instantiate our security architecture based on different hardware-based trusted execution environments, and elaborate on their security properties. We implemented our immobilizer system based on the latest Android-based smartphone and a microSD smartcard. Further, we support the algorithmic proofs of the security of the underlying protocols with automated formal verification tools.
%@ 978-1-4503-1890-7
@inproceedings{conf/codaspy/BusoldTWDSSS13,
abstract = {Smartphones have become very popular and versatile de-vices. An emerging trend is the integration of smartphones into automotive systems and applications, particularly access control systems to unlock cars (doors and immobilizers). Smartphone-based automotive solutions promise to greatly enhance the user’s experience by providing advanced features far beyond the conventional dedicated tokens/tranponders. We present the first opensecurity framework for secure smartphone-based immobilizers. Our generic security architecture protects the electronic access tokens on the smart-phone and provides advanced features such as context-aware access policies, remote issuing and revocation of access rights and their delegation to other users. We discuss various approaches to instantiate our security architecture based on different hardware-based trusted execution environments, and elaborate on their security properties. We implemented our immobilizer system based on the latest Android-based smartphone and a microSD smartcard. Further, we support the algorithmic proofs of the security of the underlying protocols with automated formal verification tools.},
added-at = {2020-05-26T20:42:24.000+0200},
biburl = {https://www.bibsonomy.org/bibtex/29478b45d32e2820567968aebec09e0db/sssgroup},
booktitle = {ACM Conference on Data and Application Security and Privacy (CODASPY)},
editor = {Bertino, Elisa and Sandhu, Ravi S. and Bauer, Lujo and Park, Jaehong},
ee = {https://doi.org/10.1145/2435349.2435382},
interhash = {9021f1eb6b4be87354198e97b2d40718},
intrahash = {9478b45d32e2820567968aebec09e0db},
isbn = {978-1-4503-1890-7},
keywords = {International-Conference-Workshop-Papers-Book-Chapters myown},
month = feb,
publisher = {ACM},
timestamp = {2022-12-20T00:09:18.000+0100},
title = {Smart Keys for Cyber-Cars: Secure Smartphone-Based NFC-Enabled Car Immobilizer},
url = {http://dblp.uni-trier.de/db/conf/codaspy/codaspy2013.html#BusoldTWDSSS13},
year = 2013
}