Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain

Yukun NIU; Lingbo WEI; Chi ZHANG; Xia ZHANG; Vejarano Gustavo

doi:10.11959/j.issn.2096-109x.2020022

您当前的位置：

首页 >

文章列表页 >

Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain

Special Column:Blockchain Technology | 更新时间：2024-06-03

- Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain
- Chinese Journal of Network and Information Security Vol. 6, Issue 2, Pages: 56-66(2020)
- 作者机构：
  
  1. 中国科学技术大学信息科学技术学院，安徽合肥 230026
  2. 武汉理工大学计算机科学与技术学院，湖北武汉 430047
  3. Department of Electrical Engineering and Computer Science,Loyola Marymount University,Los Angeles,CA 90045
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020022
  CLC： TP302
- Online First：2020-04，
  
  Published：15 April 2020
- 稿件说明：
移动端阅览
Yukun NIU, Lingbo WEI, Chi ZHANG, et al. Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 56-66.
DOI：

Yukun NIU, Lingbo WEI, Chi ZHANG, et al. Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 56-66. DOI： 10.11959/j.issn.2096-109x.2020022.

摘要

在公共无线局域网的访问控制中，用户隐私保护和用户可问责性是一对相互冲突的目标。针对该问题，提出了一种基于比特币区块链和Intel SGX的匿名且可问责用户管理与访问控制方案。在不修改已有的比特币协议的前提下，实现了对公共无线局域网访问凭证的安全管理，而无须依赖可信第三方；采用基于Intel SGX的混合技术，通过较小的开销提供了用户可控的访问凭证匿名性保护；设计的区块链验证路径规则在保持用户隐私的同时实现了对恶意用户的问责。理论分析和实验结果验证了该方案的安全性和可行性。

Abstract

In designing an access control scheme for public wireless LAN (WLAN)

user privacy protection and user accountability are two conflict goals.A novel user management and access control scheme was proposed to solve this problem by utilizing the bitcoin blockchain and Intel SGX.It utilized unmodified bitcoin blockchain to manage the ownership of access credentials for users without relying on any trusted third party.It adopted Intel SGX-based mixing technology to enhance anonymity of users’ access credentials.It designed verification path rule to resolve the conflicts between the privacy-preserving and accountability objectives.The effectiveness and feasibility of the proposed scheme are also demonstrated by security analysis and performance evaluation.

关键词

Keywords

references

PISA C , CAPONI A , DARGAHI T , et al . WI-FAB:attribute-based WLAN access control,without pre-shared keys and backend infra-structures [C ] // Proceedings of the 8th ACM International Work shop on Hot Topics in Planet-Scale Mobile Computing and Online Social Networking . 2016 : 31 - 36 .

CASSOLA A , BLASS E O , NOUBIR G . Authenticating privately over public Wi-Fi hotspots [C ] // Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security . 2015 : 1346 - 1357 .

LOU W , REN K . Security,privacy,and accountability in wireless access networks [J ] . IEEE Wireless Communications , 2009 , 16 ( 4 ): 80 - 87 .

TSANG P P , AU M H , KAPADIA A , et al . Blacklistable anonymous credentials:blocking misbehaving users without TTPS [C ] // Proceedings of the 14th ACM Conference on Computer and Communications Security . 2007 : 72 - 81 .

TSANG P P , AU M H , KAPADIA A , et al . PEREA:Towards practical TTP-free revocation in anonymous authentication [C ] // Proceedings of the 15th ACM Conference on Computer and Communications Security . 2008 : 333 - 344 .

NIU Y , WEI L , ZHANG C , et al . An anonymous and accountable authentication scheme for Wi-Fi hotspot access with the bitcoin blockchain [C ] // 2017 IEEE/CIC International Conference on Communications in China (ICCC) . 2017 : 1 - 6 .

RUFFING T , MORENO-SANCHEZ P , KATE A . CoinShuffle:practical decentralized coin mixing for bitcoin [C ] // European Symposium on Research in Computer Security . 2014 : 345 - 364 .

MARTIN J , MAYBERRY T , DONAHUE C , et al . A study of MAC address randomization in mobile devices and when it fails [J ] . Proceedings on Privacy Enhancing Technologies , 2017 , 2017 ( 4 ): 365 - 383 .

DINGLEDINE R , MATHEWSON N , SYVERSON P . Tor:the second-generation onion router [R ] . Naval Research Lab Washington DC , 2004 .

BRASSER F , MÜLLER U , DMITRIENKO A ， et al . Software grand exposure:SGX cache attacks are practical [C ] // 11th USENIX Workshop on Offensive Technologies (WOOT 17) . 2017 .

HÄHNEL M , CUI W , PEINADO M . High-resolution side channels for untrusted operating systems [C ] // 2017 USENIX Annual Technical Conference (USENIX ATC 17) . 2017 : 299 - 312 .

GÖTZFRIED J , ECKERT M , SCHINZEL S , et al . Cache attacks on Intel SGX [C ] // Proceedings of the 10th European Workshop on Systems Security . 2017 :2.

MOGHIMI A , IRAZOQUI G , EISENBARTH T . Cachezoom:how SGX amplifies the power of cache attacks [C ] // International Conference on Cryptographic Hardware and Embedded Systems . 2017 : 69 - 90 .

SCHWARZ M , WEISER S , GRUSS D , et al . Malware guard extens sion:using SGX to conceal cache attacks [C ] // International Conference on Detection of Intrusions and Malware,and Vulnerability Assessment . 2017 : 3 - 24 .

WANG W , CHEN G , PAN X , et al . Leaky cauldron on the dark land:understanding memory side-channel hazards in SGX [C ] // Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security . 2017 : 2421 - 2434 .

STRACKX R , PIESSENS F . Ariadne:a minimal approach to state continuity [C ] // 25th USENIX Security Symposium (USENIX Security 16) . 2016 : 875 - 892 .

CHEN S , ZHANG X , REITER M K , et al . Detecting privileged side-channel attacks in shielded execution with Déjá Vu [C ] // Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security . 2017 : 7 - 18 .

COSTAN V , LEBEDEV I , DEVADAS S . Sanctum:minimal hardware extensions for strong software isolation [C ] // 25th USENIX Security Symposium (USENIX Security 16) . 2016 : 857 - 874 .

GRUSS D , LETTNER J , SCHUSTER F , et al . Strong and efficient cache side-channel protection using hardware transactional memory [C ] // 26th USENIX Security Symposium (USENIX Security 17) . 2017 : 217 - 233 .

SHIH M W , LEE S , KIM T , et al . T-SGX:eradicating controlled-channel attacks against enclave programs [C ] // NDSS . 2017 .

SHINDE S , CHUA Z L , NARAYANAN V , et al . Preventing page faults from telling your secrets [C ] // Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security . 2016 : 317 - 328 .

MISHRA P , PODDAR R , CHEN J , et al . Oblix:an efficient oblivious search index [C ] // 2018 IEEE Symposium on Security and Privacy (S＆P) . IEEE , 2018 : 279 - 296 .

Crypto++ [EB ] .

Views

387

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Proven secure blind adaptor signature scheme based on the SM2

Anonymous group key distribution scheme for the internet of vehicles

Fusion of satellite-ground and inter-satellite AKA protocols for double-layer satellite networks

Analysis on anonymity and regulation of digital currency transactions based on game theory

Lightweight mobile Ad Hoc network authentication scheme based on blockchain

Related Author

CHEN Haichan

HU Xiaoming

Huaqun WANG

Zhiwang HE

Hui LI

Ruhui MA

Xiaoping SHI

Jin CAO

Related Institution

School of Computer and Information Engineering, Institute for Artificial Intelligence, Shanghai Polytechnic University

School of Cyberspace Security, Beijing University of Posts and Telecommunications

National Engineering Lab for Mobile Network Security

School of Network Education,Beijing University of Posts and Telecommunications

School of Computer Science and Engineering, Hunan University of Science and Technology

⁰