Florian Kohlmayer

GSABA: a generic service authorization architecture

Bootstrapping refers to the process of creating state (typically security associations, configuration and authorization information) between two or more entities based on a trust relationship between a trusted third party and two or more entities. The term bootstrapping has been recently introduced to denote solutions to configuration problems, such as those present in Mobile IP. This paper describes a novel service authorization and bootstrapping architecture in order to distribute keying material, to perform authorization and to make configuration information available.

Public key based authentication for secure integration of sensor data and RFID

The incorporation of sensor readings into RFID tags creates a significant potential for applications which require environment monitoring as well as asset management and tracking, such as blood storage and management, and on-board aircraft part maintenance. On one hand, the environment history is essential in evaluating health and integrity of objects to be protected, such as blood and aircraft part. On the other hand, the periodic sensing information stored in RFID enables identifying the events of displacing and removal of the objects. However, the benefits of integrating RFID with sensor data are achieved only when the authenticity and integrity of data written to and stored at RFID are ensured. In this paper, we present challenges on secure integration of sensor readings and RFID, and compare security solutions of data integrity and authenticity for resource-constrained RFID tags. For mutual authentication between RFID tags and sensors (or readers), the public key based approaches proves efficient and feasible. We further evaluate different public key based approaches in terms of storage and communication efficiency.

High-Assurance Avionics Multi-Domain RFID Processing System

Distributed processing of RFID information enables new RFID applications where tags, readers and processing systems belong to different administrative domains and where multiple RFDD applications are realized using a common reader and processing infrastructure. A novel distributed RFID processing architecture supporting various future eEnabled airplane applications based on RFID technology is described. In a particularly challenging application environment, RFID readers are installed on-board airplanes and connected dynamically by wireless communication with various ground system at airports and during maintenance. The airplane RFDD reader infrastructure has to be dynamically integrated with different ground systems. The security requirements caused by this temporal integration within different administrative domains and corresponding solution approaches are described.