Rie Shigetomi

New Attestation Based Security Architecture for In-Vehicle Communication

This paper presents a novel security architecture for in-vehicle communication. The ratio of electronics to vehicle equipment is steadily increasing. And novel vehicles will also have connectibility to public networks to provide many kinds of services. Therefore, they are expected to suffer from a wide variety of threats and the electronic control units (ECUs) embedded in them may execute execute malicious programs because of tampering. The remote attestation scheme with the trusted platform module (TPM) has been attracting a great deal of attention to cope with such issues. However, it is not feasible for vehicle systems because the conventional attestation process cannot adapt to in-vehicle communication and TPM cannot adapt to time-constrained vehicle systems. We propose an attestation based security architecture that is suitable for novel vehicles.

A Provably Secure Refreshable Partially Anonymous Token and Its Applications

The first refreshable anonymous token scheme proposed in [l] enables one to provide services in such a way that each of its users is allowed to enjoy only a fixed number of services at the same time. In this paper, we show that the scheme in [l] is insecure and propose a provably secure refreshable partial anonymous token scheme which is a generalization of the previous scheme. The new scheme has an additional ability to control the anonymity level of users. We also propose a formal model and security requirements of the new scheme.

Lightweight Privacy for Ubiquitous Devices

In this paper, we survey the recent research results on privacy-preserving Identification suitable for limited-resource devices such as RFID, contactless smartcards, and introduce our recent results on a light-weight privacy-preserving identification scheme. The proposed scheme only requires (1) random bit generators, (2) simple bit-wise operations and (3) short storage for keys less than 1 Kbits. No cryptographic algorithms such as SHA-1 are required. On the other hand, security of the scheme is reducible to learning parity -with noise problem (LPN problem) which is further reducible to a problem in NP-complete.

An efficient scheme to protect privacy in Probe Vehicle Information system

The Probe Vehicle Information system is as system that collects information from cars equipped with sensors. Usually, various information is collected and transferred to a server, at frequent intervals. The information includes when and where the information was collected, which could lead to privacy problems. One way to solve these problems, is to use cryptographic anonymous authentication protocols. However, although the computational and network resource on cars are limited, anonymous authentication protocols tend to consume both heavily. In this article, we propose a new protocol using the combination cryptographic anonymous authentication and symmetric-key cryptographic authentication. This protocol can protect the users¿ privacy, while is efficient enough to be used for probe vehicle information systems. We also have conducted an experiment on a simulator with 5,000 virtual cars, and showed that this protocol is efficient enough for real use.