Digital CERTIfication service for LOCation information
The location based services are attracting attention from all the scopes recently. Next years they are supposed to be one of the more important market niches in the mobile communications scope, and one of the most significant promoters of m-commerce. Security is one of the most important features required in the provision of these services; that is why great efforts are being made in order to integrate these services with the security models and mechanisms that are necessary to provide authentication, integrity, confidentiality, access control and non repudiation. Moreover, some security models for location certification have been recently proposed by several researchers. In these models, a trusted third party issues irrefutable electronic evidences about the location of a mobile device or entity by means of creating a signature for this information. The evolution of positioning systems and location services have caused new necessities like the flexibility in the definition of the location policies, the respect to the privacy rights, the independence of the different location technologies, the integration with the current legislation and the use of standard protocols and interfaces of recent development.
The objective of this project is to face these necessities by means of:
- Proposing a new security model for location certification that takes into account the mentioned features. In order to achieve that, we want to integrate in the model the possibility of defining and managing policies of location certification (for example, certification of itineraries) and privacy policies. One of the tasks to be developed during the project is the research of the techniques and mechanisms that allow this policy management. The model will have to be compliant with the existing legislation in electronic signature and personal data protection, as well as the European directives related to privacy and e-commerce. It will be taken into account the use of standard protocols and interfaces developed for location based services.
- Demonstrating the validity and viability of the model by implementing a location certification service which will be integrated with the three selected representative location systems.
de Fuentes, José María; González-Tablas, Ana Isabel; Ribagorda, Arturo. CERTILOC: Implementation of a Spatial-Temporal Certification Service Compatible with Several Localization Technologies. 2008 Third International Conference on Availability, Reliability and Security.
González-Tablas, Ana Isabel; Wouters, Karel. Integrating XML linked time-stamps in OASIS digital signature services. Lecture notes in computer science. Springer-Verlag.
González-Tablas, Ana Isabel. Arquitectura y mecanismos para la provision de servicios de acreditacion y sellado espacio temporal.