A User Centric Security Model for Tamper-Resistant Devices

7.2 Application Sharing Mechanism
Table 7.1: Comparison between dierent rewall mechanisms
FiR Multos Java Card UCTD
1. No O-card Security Assumption No No Yes
2. Application Authentication Yes* Yes* Yes
3. Application State Validation No No Yes
4. Access Control No No Yes
5. Application Binding No No Yes
6. Application-Platform Communication No No Yes
7. Sharing Revocation Yes* Yes* Yes
8. User's Privacy No No Yes
Note. Yes means that it totally supports the given requirement, Yes* stands for limited support, and
No means that it does not support the given requirement.
1. A mobile handset may have multiple UCTDs, which under the CDAM architecture
behave as a single virtual device. Removing the need for a user to install applications
that share each other's resources on the same UCTD makes the management of the
multiple UCTDs exible and user-friendly.
2. The CDAM can facilitate the installation of an internet identity application [193] on
a UCTD that can be accessible to other UCTDs and the host platform. For example,
if a user installs an internet identity application (i.e. which may act as a single sign
on) on a UCTD then it may be used to authenticate the user when visiting online
services (e.g. online gaming, social and network sites, etc.) or by applications (e.g.
network access, online banking, and online ticketing, etc.) on (other) UCTDs.
3. An accounting application on a UCTD may opt for automated receipt collections and
updates to the user's accounting software. For example, a user might have a nancial
system on her Personal Computer (PC) that she uses to track her expenditure.
To enhance the mobile payment scheme, the mobile payment SP may collaborate
with an accounting software developer in a way that means the payment application
might record the transaction details that are later synchronised with the accounting
software. The user would have the accounting software installed on her PC, with an
associated application installed on the UCTD. Afterwards, the user synchronises the
transaction details to her nancial software. The synchronisation would be carried
out by means of the UCTD of the mobile phone and the UCTD of the PC. Thereby,
the CDAM provides security, reliability, and privacy to this system.
4. Internet of Things [37, 160] is an internet-like structure comprising a set of smart
physical devices (e.g. toys, healthcare products, thermostats, and environment sensors,
etc.) that communicate with each other. As an individual device may not have
enough computational and storage resources, they would not have a complex or large
set of services. However, the CDAM can enable comparatively complex and rich featured
systems in an Internet of Things. Individual devices may either have a unique
service in the set or even a subset of a particular service. Each connected device then
164