Abstract
A large amount of versatile services are emerging as home networks and devices are opened for different manufacturers and service developers.
With this complexity comes a need to make these services more personalized and secure. However, at the same time, the home network should be easy to manage for non-expert users. In this paper, we propose OpenHouse, a TLS based distributed security architecture for use in home networks.
We have adopted a fine-grained role and domain based authorization model and studied how the configuration burden for end users can be minimized by classifying services in a security relevant manner and providing homes with default security policies. We evaluated the feasibility of the proposal by implementing a secured UPnP based platform on Nokia N800 Internet tablet and Gumstix low-end Linux devices.
We report the implications the approach has for developers and for end user experience as well as the challenges it still faces.
With this complexity comes a need to make these services more personalized and secure. However, at the same time, the home network should be easy to manage for non-expert users. In this paper, we propose OpenHouse, a TLS based distributed security architecture for use in home networks.
We have adopted a fine-grained role and domain based authorization model and studied how the configuration burden for end users can be minimized by classifying services in a security relevant manner and providing homes with default security policies. We evaluated the feasibility of the proposal by implementing a secured UPnP based platform on Nokia N800 Internet tablet and Gumstix low-end Linux devices.
We report the implications the approach has for developers and for end user experience as well as the challenges it still faces.
| Original language | English |
|---|---|
| Title of host publication | Proceedings |
| Subtitle of host publication | 6th Annual Conference on Privacy, Security and Trust, PST 2008 |
| Publisher | IEEE Institute of Electrical and Electronic Engineers |
| Pages | 15-23 |
| ISBN (Print) | 978-0-7695-3390-2 |
| DOIs | |
| Publication status | Published - 2008 |
| MoE publication type | A4 Article in a conference publication |
| Event | Sixth Annual Conference on Privacy, Security and Trust, PST 2008 - Fredericton, NB, Canada Duration: 1 Oct 2008 → 3 Oct 2008 |
Conference
| Conference | Sixth Annual Conference on Privacy, Security and Trust, PST 2008 |
|---|---|
| Abbreviated title | PST 2008 |
| Country/Territory | Canada |
| City | Fredericton, NB |
| Period | 1/10/08 → 3/10/08 |
Keywords
- security architecture
- home networks
- role-based access control
- ease of use
- TLS
- UPnP