A User Centric Security Model for Tamper-Resistant Devices

2.5 Case Studies
an enrolment process with the Remote Application Enrolment Server (RAES). The RAES
enables the secure element to establish a secure binding for the Remote Application Server
(RAS). The secure binding will be used in future to establish a connection with the RAS
to access the remote application(s).
As a user enters the vicinity of a SAP, the event-triggering software sends an alert to
the behaviour analyser. The behaviour analyser calculates the probability of the user
accessing the service. If the user is predicted to use the service, the behaviour analyser
requests the Smart Card Web Server (SCWS) to establish a connection over the internet
with the corresponding RAS and act as a bridge between the terminal and the remote
application(s).
When the user waves the mobile phone near the SAP to access service(s), the SAP might
challenge the mobile phone to authenticate the user (application). The challenge is sent to
the remote application by the secure element. Once the remote application has authenticated
the user, the terminal will provide the requested service(s).
2.5 Case Studies
In this section, we discuss a non-exhaustive list of case studies where UCTD can provide
exibility, and ubiquity to the existing security and privacy architectures.
2.5.1 One Card - All Services
User ownership enables a user to establish relationships with SPs ubiquitously, which is
referred as dynamism. Consider a scenario in the proposed TSM model in which a user who
travels extensively around the world (for business or pleasure) acquires a smart card from
a TSM in her country of origin. When she travels, she wants to access services that are
specic to the visiting country, but she cannot download them onto her smart card. The
reasons behind this might be that the services in the visiting country are not associated
with (i.e. are not part of) the TSM from which she acquired the smart card. To further
explain the scenario, consider Oyster Card [72], which a user can use in London to access
local transport services but at the time of writing, it cannot be used as an e-purse. In
contrast, the Octopus Card [73], which a user can use in Hong Kong for local transport
services, can also be used at groceries, confectioneries, and restaurants. Our user from
London would still have to queue to get the Octopus Card when she reached Hong Kong.
As we pointed out, she travels extensively around the world and she may not derive a great
deal of benet from the TSM architecture [42, 74].
47