PRIVACY, SECURITY, AND TRUST IN PERVASIVE COMPUTING
CONTENTS SOME RESEARCH CHALLENGES IN PERVASIVE COMPUTING PART I THE INFLUENCE OF CONTEXT ON PRIVACY TRUST AND SECURITY OVERVIEW SURVEY ON LOCATION PRIVACY IN PERVASIVE COMPUTING EXPLORING THE RELATIONSHIP BETWEEN CONTEXT AND PRIVACY PRIVACY SECURITY AND TRUST ISSUES RAISED BY THE PERSONAL SERVER CONCEPT PART II SECURE TRUST MODELS AND MANAGEMENT IN PERVASIVE COMPUTING OVERVIEW THE ROLE OF IDENTITY IN PERVASIVE COMPUTATIONAL TRUST TOWARDS A NEXT GENERATION TRUST MANAGEMENT INFRASTRUCTURE FOR OPEN COMPUTING SYSTEMS RESEARCH DIRECTIONS FOR TRUST AND SECURITY IN HUMAN CENTRIC COMPUTING 1 19 23 35 49 63 65 77 83 PART III EVIDENCE AUTHENTICATION AND IDENTITY OVERVIEW USER CENTRIC IDENTITY MANAGEMENT IN OPEN MOBILE ENVIRONMENTS PRE AUTHENTICATION USING INFRARED ARCHITECTURE AND PROTOCOL FOR AUTHORIZED TRANSIENT CONTROL PART IV SOCIAL AND TECHNICAL APPROACHES TO PRIVACY PROTECTION OVERVIEW MAINTAINING PRIVACY IN RFID ENABLED ENVIRONMENTS SAFEGUARDING PERSONAL DATA USING TRUSTED COMPUTING IN PERVASIVE COM PUTING A SOCIAL APPROACH TO PRIVACY IN LOCATION ENHANCED COMPUTING 95 99 105 113 133 137 147 157 SOME RESEARCH CHALLENGES IN PERVASIVE COMPUTING ABSTRACT THE TOPICS OF PRIVACY SECURITY AND TRUST HAVE BECOME HIGH PRIORITY TOPICS IN THE RESEARCH AGENDA OF PERVASIVE COMPUTING RECENT PUBLICATIONS HAVE SUGGESTED THAT THERE IS OR AT LEAST NEEDS TO BE A RELATIONSHIP OF RESEARCH IN THESE AREAS WITH ACTIVITIES IN CONTEXT AWARENESS THE APPROACH OF THE WORKSHOP ON WHICH THIS PROCEEDINGS REPORTS WAS TO INVESTIGATE THE POSSIBLE INTERFACES BETWEEN THESE DIFFERENT RESEARCH STRANDS IN PERVASIVE COMPUTING AND TO DEFINE HOW THEIR CONCEPTS MAY INTEROPERATE THIS FIRST ARTICLE IS THEREFORE THE INTRODUCTION AND OVERVIEW OF THE WORKSHOP PROVIDING SOME BACKGROUND ON PERVASIVE COMPUTING AND ITS CHALLENGES 1 INTRODUCTION WE ARE CURRENTLY EXPERIENCING A BRIDGING OF HUMAN CENTERED SOCIALLY ORIENTED SECURITY CONCERNS WITH THE TECHNICAL PROTECTION MECHANISMS DE VELOPED FOR COMPUTER DEVICES DATA AND NETWORKS THE FOUNDATIONS OF THIS BRIDGE STARTED WITH THE INTERNET AS PEOPLE BOTH PURPOSELY AND AC CIDENTALLY PROVIDED GATEWAYS TO THEIR PERSONAL COMPUTERS AND HENCE IN FORMATION WITH ENTERPRISE SCALE AND EVEN PERSONAL FIREWALLS PROVIDING A RULE CONTROLLED ENTRY POINT INTO NETWORK DOMAINS AS WELL AS CRYPTO GRAPHIC MEANS OF ENSURING SECRECY MANY ATTACKS ON COMPUTER APPLICA TIONS AND DATA WERE CIRCUMVENTED GIVEN THAT PEOPLE BEHIND THE VIRTUAL 1 WALLS ADHERED TO POLICY PERVASIVE COMPUTING HOWEVER MOVES THESE RE SOURCES FROM BEHIND THESE CENTRALLY CONFIGURED VIRTUAL WALLS ALLOWING MOBILITY DISTRIBUTION AND DYNAMIC INTERCONNECTION IN ORDER TO SUPPORT MORE ADVANCED SERVICES AND MODES OF USAGE LIVING IN A WORLD WHERE THE WALLS CARS STORES CLOTHING AND CAF S ARE AUTOMATICALLY AWARE OF THE CONTEXT AND HENCE NEEDS OF OWNERS USERS AND POTENTIAL PATRONS DUE TO EMBEDDED COMPUTERS SENSORS AND ADVANCED NETWORKING CAN BE SOME TIMES INTRIGUING YET ON OTHER OCCASIONS SOCIETY QUESTIONS THE STATE OF THEIR PRIVACY BECOMING INSECURE AND UNTRUSTING WITH RESPECT TO TECHNOL OGY ON APRIL 20TH 2004 AS PART OF THE PERVASIVE CONFERENCE IN VIENNA AUSTRIA ABOUT 21 INTERNATIONAL RESEARCHERS AND TECHNOLOGISTS CAME TO GETHER TO DISCUSS THIS MATTER RATHER THAN LOOKING AT SPECIFIC PERVASIVE COMPUTING TECHNOLOGY OR SECURITY MECHANISMS THE GOAL WAS TO GAIN AN UNDERSTANDING OF THE RELATIONSHIPS BETWEEN CONTEXT AWARENESS PRIVACY SECURITY AND TRUST AS THESE ARE THE NUTS AND BOLTS THAT HOLD THE SOCIETY TECHNOLOGY BRIDGE IN PLACE BY WAY OF INTRODUCTION THE PUBLICATION BEGINS WITH A BRIEF OVERVIEW OF THE STATE OF THE ART IN PERVASIVE COMPUT ING IN ORDER THAT THE MOTIVATIONS OF THE WORKSHOP ARE BETTER UNDERSTOOD THE WORKSHOP S THEMES AND MOTIVATIONS ARE DISCUSSED IN SECTION 3 WHILE SECTION 4 PROVIDES AN OUTLINE OF THE RESULTS OF THIS WORKSHOP 2 THE STATE OF THE ART IN PERVASIVE COMPUTING THE TERM PERVASIVE COMPUTING EMERGED FROM RESEARCH AT IBM DUR ING 1996 97 EMBRACING THE VISION OF COMPUTING SERVICES AVAILABLE ANY TIME ANYWHERE AND ON DEMAND 10 ADVANCES IN GLOBAL AND MOBILE WIRELESS TECHNOLOGIES GIVING NEW MEANING TO ELECTRONIC BUSINESS REMOTE WORKERS AND COLLABORATIVE ENTERPRISES MOTIVATED THIS THIS IS REFLECTED IN THE CURRENT WAVE OF STANDARDIZATION ACTIVITIES SURROUNDING WEB SERVICES WHERE ENTERPRISES OPEN UP THEIR COMPUTING INFRASTRUCTURE AT THE SERVICE LEVEL AND PROVIDE REMOTE INTERFACES FIVE YEARS EARLIER MARK WEISER AT XEROX PARC WAS LEADING RESEARCH LABELED AS UBIQUITOUS COMPUTING UBICOMP AND EXPRESSED ITS CONCEPTS IN HIS 1991 PAPER THE COM PUTER FOR THE 21ST CENTURY 13 UBICOMP S INITIAL FOCUS WAS NOT ON MAKING INFRASTRUCTURE AVAILABLE EVERYWHERE BUT PREACHED UBIQUITY AS A NOTION SIMILAR TO THE AVAILABILITY OF NATURAL RESOURCES AND UTILITIES SUCH AS ELECTRICITY WATER AND AIR TODAY WE ARE NOTICING A CONVERGENCE OF THEMES SUCH THAT THE TECHNICAL INFRASTRUCTURE ADVANCEMENT PRINCIPLES OF PERVA SIVE COMPUTING COMPLEMENT THE USER CENTRIC OPINIONS OF THE UBICOMP COMMUNITY THE MAJOR DIFFERENCE IN PHILOSOPHIES HAS BEEN THAT PERVASIVE COMPUTING WAS STARTED WITH THE INITIATIVE TO EXPLOIT THE EXISTING WIDE 2 PRIVACY SECURITY AND TRUST WITHIN THE CONTEXT OF PERVASIVE COMPUTING SCALE DEPLOYMENT OF COMPUTING TECHNOLOGY WHILE UBICOMP S INITIATIVES WERE TO EFFECTIVELY MAKE THIS COMPLEX MASS OF TECHNOLOGY TRANSPARENT TO THE HUMAN USER S ESPECIALLY THOSE WITH LIMITED TECHNICAL KNOW HOW FOR THE PURPOSES OF THE WORKSHOP THEMES AND THIS PUBLICATION WE CONSIDER PERVASIVE COMPUTING TO BE COMPRISED OF FIVE RESEARCH AREAS MOBILE COMPUTING WIRELESS NETWORKING EMBEDDED COMPUTING CON TEXT AWARENESS WITH SENSOR TECHNOLOGY AND HUMAN COMPUTER INTERACTION HCI AN OVERVIEW OF THESE IS GIVEN BELOW INCLUDING THE CONTEXT WITHIN WHICH THEY WERE DISCUSSED DURING THE WORKSHOP THERE ARE ADDITIONAL TERMS THAT MAY CONTRIBUTE TO THE VISION OF PERVASIVE COMPUTING BUT WE HAVE SELECTED THE ONES WITH WHICH WE HAVE MOST OFTEN ENCOUNTERED DURING WORKSHOPS CONFERENCES SEMINARS OR DISCUSSIONS WITH OTHER RE SEARCHERS IN THE FIELD IN ADDITION OTHER TERMS TEND TO BE AN OVERLAP OF THESE FIVE THEMES E G WEARABLE COMPUTING IS AN OVERLAP OF MOBILE COMPUTING EMBEDDED COMPUTING AND HCI NOMADIC COMPUTING IS AN OVERLAP OF MOBILE COMPUTING AND WIRELESS NETWORKING FIGURE 1 ADVANCES IN BOTH PERVASIVE AND UBIQUITOUS COMPUTING UBICOMP SHOW A CONVERGENCE OF THE COMMUNITIES UBICOMP WAS INITIATED WITH A USER CENTRIC METHOD OLOGY WHILE PERVASIVE WAS BASED ON A BOTTOM UP STRATEGY FOR EXPLOITING TECHNOLOGY WE THEREFORE CONSIDER PERVASIVE COMPUTING TO EMBRACE THE FIVE AREAS OF RESEARCH STATED IN FIGURE 1 ABOVE THERE ARE ADDITIONAL TERMS THAT MAY CONTRIBUTE TO THIS VISION BUT WE HAVE SELECTED THE ONES WITH WHICH WE HAVE MOST OFTEN ENCOUNTERED DURING WORKSHOPS CONFERENCES SEMINARS OR DISCUSSIONS WITH OTHER RESEARCHERS IN THE FIELD 3 PRIVACY SECURITY AND TRUST WITHIN THE CONTEXT OF PERVASIVE COMPUTING