Publication Type

Journal Article

Version

publishedVersion

Publication Date

1-2018

Abstract

Mobile devices are prevalently used to process sensitive data, but traditional encryption may not work when an adversary is able to coerce the device owners to disclose the encryption keys. Plausibly Deniable Encryption (PDE) is thus designed to protect sensitive data against this powerful adversary. In this paper, we present MobiPluto, a user-friendly PDE scheme for denying the existence of sensitive data stored on mobile devices. A salient difference between MobiPluto and the existing PDE systems is that any block-based file systems can be deployed on top of it. To further improve usability and deniability of MobiPluto, we introduce a fast switching mechanism and incorporate the widely-used Near Field Communication (NFC) technology. Users can securely switch from the public mode to the hidden mode within 10 seconds, which is a significant improvement compared to previous solutions. Users can also store strong passwords on NFC cards and tap them to enter the system, which signifi- cantly liberates them from the burden of memorizing and typing strong passwords. Most importantly, the users can deny the existence of the hidden data without the skill to camouflage as long as the NFC cards are used properly.

Keywords

Plausibly deniable encryption, Mobile security, Near field communication, Thin provisioning, Coercive attack

Discipline

Databases and Information Systems | Information Security

Research Areas

Cybersecurity

Publication

Computers and Security

Volume

72

First Page

163

Last Page

174

ISSN

0167-4048

Identifier

10.1016/j.cose.2017.09.005

Publisher

Elsevier

Additional URL

https://doi.org/10.1016/j.cose.2017.09.005

Download

Share

COinS