PriSrv : Privacy-enhanced and highly usable service discovery in wireless communications

Publication Type

Conference Proceeding Article

Publication Date

2-2024

Abstract

Service discovery is essential in wireless commu- nications. However, existing service discovery protocols provide no or very limited privacy protection for service providers and clients, and they often leak sensitive information (e.g., service type, client’s identity and mobility pattern), which leads to various network-based attacks (e.g., spoofing, man-in-the-middle, identification and tracking). In this paper, we propose a private service discovery protocol, called PriSrv, which allows a service provider and a client to respectively specify a fine-grained authentication policy that the other party must satisfy before a connection is established. PriSrv consists of a private service broadcast phase and an anonymous mutual authentication phase with bilateral control, where the private information of both parties is hidden beyond the fact that a mutual match to the respective authentication policy occurred. As a core component of PriSrv, we introduce the notion of anonymous credential- based matchmaking encryption (ACME), which exerts dual- layer matching in one step to simultaneously achieve bilateral flexible policy control, selective attribute disclosure and multi- show unlinkability. As a building block of ACME, we design a fast anonymous credential (FAC) scheme to provide constant size credentials and efficient show/verification mechanisms, which is suitable for privacy-enhanced and highly usable service discovery in wireless networks.We present a concrete PriSrv protocol that is interoperable with popular wireless communication protocols, such as Wi- Fi Extensible Authentication Protocol (EAP), mDNS, BLE and Airdrop, to offer privacy-enhanced protection. We present formal security proof of our protocol and evaluate its performance on multiple hardware platforms: desktop, laptop, mobile phone and Raspberry Pi. PriSrv accomplishes private discovery and secure connection in less than 0.973 s on the first three platforms, and in less than 2.712 s on Raspberry Pi 4B. We also implement PriSrv into IEEE 802.1X in the real network to demonstrate its practicality.

Keywords

Service discovery protocols, Privacy protection, Cryptographic protocols, Matchmaking encryption, Anonymous credential

Discipline

Information Security

Research Areas

Cybersecurity

Publication

Proceedings of the Network and Distributed System Security Symposium (NDSS 2024) : San Diego, CA, USA, February 26 - March 1

Identifier

10.14722/ndss.2024.24174

Publisher

NDSS

City or Country

San Diego, California, USA

Additional URL

https://doi.org/10.14722/ndss.2024.24174

This document is currently not available here.

Share

COinS