Decades went by since Mark Weiser published his influential work on the computer of the 21st century. Over the years, some of the UbiComp features presented in that paper have been gradually adopted by industry players in the technology market. While this technological evolution resulted in many benefits to our society, it has also posed, along the way, countless challenges that we have yet to surpass. In this paper, we address major challenges from areas that most afflict the UbiComp revolution: We point out directions towards the solutions of those problems and claim that if we get all this right, we will turn the science fiction of UbiComp into science fact.

/pdf/the-computer-for-the-21st-century-present-security-privacy-3uqrnj8jfa.pdf

The computer for the 21st century: present security & privacy challenges

Abstract Single Sign-On (SSO) decreases the complexity and eases the burden of managing many accounts with a single authentication mechanism. Mission critical application such as banking demands highly trusted identity provider to authenticate its users. The existing SSO protocol such as OpenID Connect protocol provides secure SSO but it is applicable only in the consumer-to-social-network scenarios. Owing to stringent security requirements, the SSO for banking service necessitates a highly trusted identity provider and a secured private channel for user access. The banking system depends on a dedicated central banking authority which controls the monetary policy and it must assume the role of the identity provider. This paper proposes an extension of OpenID Connect protocol that establishes a central identity provider for bank users, which facilitates the users to access different accounts using single login information. The proposed Enhanced OpenID Connect (EOIDC) modifies the authorization code flow of OpenID Connect to build a secure channel from a single trusted identity provider that supports multiple banking services. Moreover, the EOIDC tightens the security mechanism with the help of SAT to avoid impersonation attack using replay and redirect. The formal security analysis and validation demonstrate the strength of the EOIDC against possible attacks such as impersonation, eavesdropping, and a brute force login. The experimental results reveal that the proposed EOIDC system is efficient in providing secured SSO protocol for banking services.

/pdf/extending-openid-connect-towards-mission-critical-3zhkl58aga.pdf

Extending OpenID Connect Towards Mission Critical Applications

A conexao intermitente de dispositivos, maquinas e sensores em cenarios com inteligencia computacionais conectados a internet tem se tornado cada vez mais presente. A essa integracao, da-se o nome de Internet das Coisas ( Internet of Things – IoT ). Esse novo paradigma traz desafios de seguranca, principalmente pela heterogeneidade e a quantidade de dispositivos com baixo poder computacional presentes nesse cenario. Propostas de seguranca tradicionais nao sao viaveis nestes cenarios e novas solucoes sao entao necessarias. Surgem entao as solucoes lightweight . Entende-se por lightweight todas as tecnicas, arquiteturas e esquemas de seguranca consideradas “leves” em termos de consumo de recursos e adaptaveis a diferentes dispositivos. Neste trabalho e analisado o atual cenario de seguranca lightweight em redes IoT , por meio de uma revisao e classificacao da Lite ratura. Sao apresentadas propostas de algoritmos de criptografia baseadas em credenciais, uso da nuvem para autenticacao, reducao de latencia, de consumo de energia e de perda de pacotes, entre outras vantagens. E pretendido assim, contribuir com o avanco das pesquisas em seguranca em Internet das Coisas, apresentando as tecnologias de seguranca “leves” em IoT , os desafios, os desenvolvimentos recentes, as questoes em aberto e tambem os pontos futuros de pesquisa.

Segurança em internet das coisas: um survey de soluções lightweight

The Internet of Things has a high heterogeneity of devices, cloud services, communication protocols and comprises different research and development areas. This implies in ease-of-use problems for users who interact with high-density smart environments using common interface solutions, demanding specific applications for each device. There are also situations where things change their locations and networks, bringing even more complexity to this scenery. A great number of recent researches point Augmented Reality(AR) as an interface solution that is capable of providing rich user experiences for high-density IoT environments. W3C's Web of Things standards(WoT) are proving to be a feasible solution for IoT's heterogeneity issues by using well-known web protocols and the Thing Description(TD) formal model. This paper's goal is to propose an architecture called smAR2t that integrates these solutions by managing mobility, heterogeneity and high-density of smart environments, allowing users to browse their surroundings with AR and to interact with things seamlessly according to each of their TDs. This could be done by: representing TDs in a higher level of abstraction with models; transforming these models at runtime to reflect real-time interactions and behaviors; updating an auto-generated AR interface according to these models.

smAR2t: a Models at Runtime Architecture to Interact with the Web Of Things using Augmented Reality

The Service Oriented Architecture (SOA) brings benefits such as loose coupling and interoperability being widely used for integrating applications within a company. This feature makes the SOA architecture is used for the modernization of legacy systems that seeing being analyzed in the Information Technology Centre (CPD) at the University of Brasilia (UNB). However, such characteristic brings security problems. This article presents a systematic mapping about the authentication and authorization mechanisms in SOA and raises research questions, as well as some protocols used.

Solutions analysis of authentication and authorization for service oriented architectures

The Web of Things (WoT) is a new paradigm regarding the integration of the real world objects to the virtual world through the Web. This paradigm enables the development of powerful applications and services. In this context, security of data users and devices, and system reliability are important aspects. OpenId Connect is the identity layer designed to provide access authentication and identification to services by applications. Designed to be an extensible protocol and based on a Web REST architecture, it is able to serve different types of applications. This paper proposes the use of OpenId Connect protocol into the WoT context, in order to provide multiple mechanisms for user authentication. The proposed model is implemented into an infrastructure that provides access to physical devices on the Web through an Enterprise Service Bus (ESB). In this ESB, the MultiAuth-WoT service should perform the authentication by intermediating the communication between the application and the OpenId Connect provider. As a case study, we used a Smart Room application, which controls devices like security cameras, air-conditioning, lightning and sensors. Finally, we analyze the extension of the OpenId Connect protocol into the WoT context as technology capable to fulfill the multimodality authentication requirement.

MultiAuth-WoT: a Multimodal Service for Web of Things Athentication and Identification

Several efforts in research and development of technologies have been spent to publish data in open standard formats. The main project in this regard is the Linked Open Data, which goal is to create an open and semantic Web of Data, enabling processing and understanding the data by software agents. However, not only the machines can take advantage of the explicit semantics of data. People can take advantage from the semantic of the data to explore unknown concepts, new relationships and to obtain personalized access to relevant resources and services. However, it is not trivial for a user without experience with Web of Data, to satisfactorily explore and use these data. This paper presents the jRDFa, an approach to support the web developer interested in presenting to non-technical users, semantic data embedded in HTML pages in RDFa format. This paper also presents two ways of presenting data in RDFa that were created using the jRDFa: tooltips visualization and facets navigation. To evaluate the proposed approach, this paper presents results of experiments on HTML pages with embedded jRDFa.

Tito Gardel do Prado Filho

Papers

MultiAuth-WoT: a Multimodal Service for Web of Things Athentication and Identification

jRDFa: browsing and visualization of linked data on the web