A User Centric Security Model for Tamper-Resistant Devices

Chapter 7
Application Sharing Mechanisms
Contents
7.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158
7.2 Application Sharing Mechanism . . . . . . . . . . . . . . . . . . . 159
7.3 UCTD Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
7.4 Application Binding Protocol Local . . . . . . . . . . . . . . 174
7.5 Platform Binding Protocol . . . . . . . . . . . . . . . . . . . . . . 176
7.6 Application Binding Protocol Distributed . . . . . . . . . . . 178
7.7 Analysis of the Proposed Protocols . . . . . . . . . . . . . . . . . 181
7.8 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
In this chapter, we describe two contrasting frameworks for application sharing, namely
those deployed by Java Card and Multos; followed by an explanation of our reasoning for
deciding that we need to extend the existing techniques for UCTDs. We then discuss the
rationale behind our proposal for the application sharing mechanism in the UCTD environment.
This sharing mechanism requires entity authentication, trust validation, and key
generation to securely share resources between applications. To do so, we propose protocols
that achieve the listed goals of the UCTD application sharing mechanism. Furthermore, we
provide an informal analysis of the protocol along with a comparison with existing protocols.
Subsequently, we present a mechanical formal analysis the based on the CasperFDR, and
we report on our experience from developing and experimenting with a prototype implementation.
157